diff --git a/en/google/vpcnetwork/open-postgresql.md b/en/google/vpcnetwork/open-postgresql.md index 604d22688..e275959be 100644 --- a/en/google/vpcnetwork/open-postgresql.md +++ b/en/google/vpcnetwork/open-postgresql.md @@ -15,4 +15,12 @@ | **Recommended Action** | Restrict TCP port 5432 to known IP addresses | ## Detailed Remediation Steps - +1. Log into the Google Cloud Platform Console. +2. Scroll down the left navigation panel and choose the "Networking" to select the "Firewall rules" option under the "VPC network."
+3. On the "Firewall rules" page, select the "Firewall rule" which needs to be verified.
+4. On the selected "Firewall rules", if TCP port 5432 for "PostgreSQL" is open to the public then the selected "Firewall rule" is not as per the best standards.
+5. Repeat steps number 2 - 4 to verify another "Firewall rule" in the network.
+6. Navigate to "VPC network" and choose the "Firewall rules" option under the "Networking" and select the "Firewall rule" which needs to be restricted to known IP addresses.
+7. On the "Firewall rules" page, click on the "Edit" button at the top and under the "Source IP ranges" enter the IP addresses as per the requirements.
+8. Click on the "Save" button at the bottom to make the changes.
+9. Repeat steps number 6 - 8 to restrict TCP port 5432 to known IP addresses.
diff --git a/resources/google/vpcnetwork/open-postgresql/README.md b/resources/google/vpcnetwork/open-postgresql/README.md new file mode 100644 index 000000000..8b1378917 --- /dev/null +++ b/resources/google/vpcnetwork/open-postgresql/README.md @@ -0,0 +1 @@ + diff --git a/resources/google/vpcnetwork/open-postgresql/step2.png b/resources/google/vpcnetwork/open-postgresql/step2.png new file mode 100644 index 000000000..cab251b79 Binary files /dev/null and b/resources/google/vpcnetwork/open-postgresql/step2.png differ diff --git a/resources/google/vpcnetwork/open-postgresql/step3.png b/resources/google/vpcnetwork/open-postgresql/step3.png new file mode 100644 index 000000000..0c655e7e4 Binary files /dev/null and b/resources/google/vpcnetwork/open-postgresql/step3.png differ diff --git a/resources/google/vpcnetwork/open-postgresql/step4.png b/resources/google/vpcnetwork/open-postgresql/step4.png new file mode 100644 index 000000000..ddb6f8ad7 Binary files /dev/null and b/resources/google/vpcnetwork/open-postgresql/step4.png differ diff --git a/resources/google/vpcnetwork/open-postgresql/step6.png b/resources/google/vpcnetwork/open-postgresql/step6.png new file mode 100644 index 000000000..97fb8b217 Binary files /dev/null and b/resources/google/vpcnetwork/open-postgresql/step6.png differ diff --git a/resources/google/vpcnetwork/open-postgresql/step7.png b/resources/google/vpcnetwork/open-postgresql/step7.png new file mode 100644 index 000000000..a1eb5eedd Binary files /dev/null and b/resources/google/vpcnetwork/open-postgresql/step7.png differ diff --git a/resources/google/vpcnetwork/open-postgresql/step8.png b/resources/google/vpcnetwork/open-postgresql/step8.png new file mode 100644 index 000000000..576e30cde Binary files /dev/null and b/resources/google/vpcnetwork/open-postgresql/step8.png differ