[AWN-194878] Remediation guide for plugin: Disable Guest Attributes

en/google/resourcemanager/disable-guest-attributes.md

@@ -0,0 +1,25 @@
+[![CloudSploit](https://cloudsploit.com/img/logo-new-big-text-100.png "CloudSploit")](https://cloudsploit.com)
+
+# GOOGLE / Resource Manager / Disable Guest Attributes
+
+## Quick Info
+
+| | |
+|-|-|
+| **Plugin Title** | Disable Guest Attributes |
+| **Cloud** | GOOGLE |
+| **Category** | Resource Manager |
+| **Description** | Determine if "Disable Guest Attributes of Compute Engine Metadata" constraint policy is enabled at the GCP organization level. |
+| **More Info** | Guest attributes are used for VM instance configuration. For security reasons, ensure that users cannot configure guest attributes for your VM instances. |
+| **GOOGLE Link** | https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints |
+| **Recommended Action** | Ensure that \"Disable Guest Attributes of Compute Engine Metadata\" constraint is enforced at the organization level. |
+
+## Detailed Remediation Steps
+1. Sign in to Google Cloud Management Console with the organizational unit credentials.
+2. Click the deployment selector in the upper navigation bar, select ALL to view a summary of all current deployments, and then pick the Google Cloud organisation you want to look at.
+3. Navigate to Cloud Identity and Access Management (IAM) [dashboard](#https://console.cloud.google.com/iam-admin/iam).
+4. In the navigation panel, select Organization Policies to view the list of the constraint policies available for your GCP organization.</br> <img src="/resources/google/resourcemanager/disable-guest-attributes/step4.png"/></br>
+5. Click inside Filter box, select **Name**. </br> <img src="/resources/google/resourcemanager/disable-guest-attributes/step5.png"/></br>
+6. Type in **Disable Guest Attributes of Compute Engine Metadata** to return the \"Disable Guest Attributes of Compute Engine Metadata\" policy.</br> <img src="/resources/google/resourcemanager/disable-guest-attributes/step6.png"/></br>
+7. Click on the policy returned at step 6. </br> <img src="/resources/google/resourcemanager/disable-guest-attributes/step7.png"/></br>
+8. On the Policy details page, check the **Status** configuration attribute value. If the **Status** attribute value is set to **Not enforced**, then click on Manage Policy to edit the policy.</br> <img src="/resources/google/resourcemanager/disable-guest-attributes/step8.png"/></br>