Google Cloud Compliance ControlsGoogle Cloud VPC
Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP port 8888
Checks GCP VPC firewall rules for any ingress `ALLOW` rule whose source range includes `0.0.0.0/0` and whose allowed protocols and ports cover `tcp` port `8888`. Rules that expose this port to any address are flagged as non-compliant.
What this control checks
Firewall rules that block ingress from 0.0.0.0/0 to TCP port 8888
Framework mappings
The clauses this control is mapped to in each framework.
- Restrict inbound and outbound traffic to that which is necessary for the cardholder data environment, and specifically deny all other traffic
Related controls
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP port 7199
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP ports 27017-27019
- Firewall rules for IAP-protected instances should allow only Google Cloud Load Balancer health check and proxy traffic
- Projects should have log metric filters and alerts configured for VPC Network Firewall rule changes
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_firewall_rule_ingress_access_restricted_to_tcp_port_8888 - Powerpipe Control:
gcp_compliance.control.compute_firewall_rule_ingress_access_restricted_to_tcp_port_8888
Last reviewed: 2026-10-09