Google Cloud Compliance ControlsGoogle Cloud VPC
Firewall rules should prohibit ingress from 0.0.0.0/0 to HTTP port 80
Checks GCP Compute Engine firewall rules for ingress allowing `0.0.0.0/0` to HTTP port `80`. Firewall rules provide stateful filtering of ingress/egress network traffic to GCP resources, and this control flags rules that leave that port open.
What this control checks
Checks compute firewall rules for ingress access on HTTP port 80 from the public internet
Framework mappings
The clauses this control is mapped to in each framework.
- Restrict inbound and outbound traffic to that which is necessary for the cardholder data environment, and specifically deny all other traffic
Related controls
- Default firewall rules should prohibit ingress from 0.0.0.0/0 except HTTP and HTTPS
- Firewall rules for IAP-protected instances should allow only Google Cloud Load Balancer health check and proxy traffic
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP port 6379
- Firewall rules should prohibit ingress from 0.0.0.0/0 to MongoDB port 27017
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP port 9042
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_firewall_rule_ingress_access_restricted_to_http_port_80 - Powerpipe Control:
gcp_compliance.control.compute_firewall_rule_ingress_access_restricted_to_http_port_80
Last reviewed: 2026-10-09