Table: gcp_compute_disks
This table shows data for GCP Compute Disks.
https://cloud.google.com/compute/docs/reference/rest/v1/disks#Disk (opens in a new tab)
The primary key for this table is self_link.
Columns
| Name | Type |
|---|---|
| _cq_id | uuid |
| _cq_parent_id | uuid |
| project_id | utf8 |
| architecture | utf8 |
| async_primary_disk | json |
| async_secondary_disks | json |
| creation_timestamp | utf8 |
| description | utf8 |
| disk_encryption_key | json |
| guest_os_features | json |
| id | int64 |
| kind | utf8 |
| label_fingerprint | utf8 |
| labels | json |
| last_attach_timestamp | utf8 |
| last_detach_timestamp | utf8 |
| license_codes | list<item: int64, nullable> |
| licenses | list<item: utf8, nullable> |
| location_hint | utf8 |
| name | utf8 |
| options | utf8 |
| params | json |
| physical_block_size_bytes | int64 |
| provisioned_iops | int64 |
| provisioned_throughput | int64 |
| region | utf8 |
| replica_zones | list<item: utf8, nullable> |
| resource_policies | list<item: utf8, nullable> |
| resource_status | json |
| satisfies_pzs | bool |
| self_link (PK) | utf8 |
| size_gb | int64 |
| source_consistency_group_policy | utf8 |
| source_consistency_group_policy_id | utf8 |
| source_disk | utf8 |
| source_disk_id | utf8 |
| source_image | utf8 |
| source_image_encryption_key | json |
| source_image_id | utf8 |
| source_snapshot | utf8 |
| source_snapshot_encryption_key | json |
| source_snapshot_id | utf8 |
| source_storage_object | utf8 |
| status | utf8 |
| type | utf8 |
| users | list<item: utf8, nullable> |
| zone | utf8 |
Example Queries
These SQL queries are sampled from CloudQuery policies and are compatible with PostgreSQL.
Ensure VM disks for critical VMs are encrypted with Customer-Supplied Encryption Keys (CSEK) (Automated)
SELECT
name AS resource_id,
'Ensure VM disks for critical VMs are encrypted with Customer-Supplied Encryption Keys (CSEK) (Automated)'
AS title,
project_id AS project_id,
CASE
WHEN (disk_encryption_key->>'sha256') IS NULL
OR disk_encryption_key->>'sha256' = ''
OR (source_image_encryption_key->>'kms_key_name') IS NULL
OR source_image_encryption_key->>'kms_key_name' = ''
THEN 'fail'
ELSE 'pass'
END
AS status
FROM
gcp_compute_disks;