cis_extensions.confidential_computing — version 1.3

Source: presets/cis/confidential-computing.satz

Purpose

CIS 4.11 — Confidential Computing.

Opt-in because Confidential VMs are limited to particular machine families and cost more; enforcing this org-wide stops most ordinary workloads from starting. CIS rates it Level 2 for the same reason.

The constraint name and its shape were verified against a live organisation's OrgPolicy ListConstraints, not transcribed.

Use it

params {
  cis_confidential_computing = true
}

use "presets/cis/confidential-computing.satz" when cis_confidential_computing

cis_confidential_computing is the gate: while it is falsy the pack contributes nothing — no resources, no params, no claims. It is declared by CIS_GCP_Foundation_4_0, and the estate's own binding wins.

Needs from outside the pack:

Params

None — the pack takes everything from the estate's params.

Notices

What to run once this pack is switched on. satz shows each notice when the pack goes on and until the estate binds its param true; every command that writes to the organisation refuses while one whose severity is error is open.

param run severity what and why
cis_confidential_computing_adopted satz adopt <estate> --execute --import error Google may already hold a policy this pack declares on the organisation, set by an administrator or by default, and an apply that creates a policy that exists stops on 409 POLICY_ALREADY_EXISTS. Run satz adopt once the pack is on, so every live policy is in the state before the apply; with --import it binds this param itself when it has run.

Contributes

resource type labels
google_org_policy_policy compute-managed-restrictNonConfidentialComputing

Claims

framework control title kind witnesses interpretation
cis-gcp 4.0 4.11 Compute instances have Confidential Computing enabled implements google_org_policy_policy.compute_managed_restrictNonConfidentialComputing Instances must run as Confidential VMs, so memory stays encrypted in use.
cis-gcp 5.0 4.11 Compute instances have Confidential Computing enabled implements google_org_policy_policy.compute_managed_restrictNonConfidentialComputing As for 4.0 §4.11 (5.0 §4.11, unchanged).

What the controls ask (this project's paraphrase from the catalog — never the framework's own text):

Every resource this pack contributes is a witness of a claim above.

History

version date change
1.3 2026-09-30 every claim states its measure without satz: gcloud (the commands that meet the control the way the claim's resources do), gcloud_check (the commands that show whether it is met) and risk (what goes wrong without it); require and report-compliance carry them in each control's measures. Nothing emitted changes
1.2 2026-09-20 the notice's before = apply becomes severity = error: the same refusal, stated once by the pack instead of inside the two commands that read it — every command that writes to the organisation refuses while it is open. Nothing emitted changes, and the param that acknowledges it is unchanged
1.1 2026-09-19 a notice: once the pack is switched on, satz adopt <estate> --execute --import is to run before the apply, because a policy it declares may already be live and creating it stops on 409 POLICY_ALREADY_EXISTS. The estate acknowledges it with cis_confidential_computing_adopted = true, which adopt --execute --import binds itself when it has run; transpile --apply and bootstrap refuse while it is open. The param is never emitted, so the plan does not move
1.0 2026-09-04 CIS 4.11, opt-in: Confidential VMs are machine-family limited, so enforcing it org-wide stops ordinary workloads

The whole library's history: the changelog in presets/CHANGELOG.md.

Notes

Confidential VMs run on particular machine families and cost more. Enforced organisation-wide this stops most ordinary workloads from starting, so it belongs on an organisation whose machine shapes are already confidential-capable.