For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/default_rules/def-000-rzw.md. A documentation index is available at /llms.txt.

Cluster should have Private Endpoint enabled and public access disabled

Description

A cluster should have private endpoint enabled and public access disabled. These settings will ensure the cluster is properly isolated from public access.

Remediation

Note: A cluster created without private endpoint cannot be modified to enable private endpoint. A new cluster must be created.

Follow the Customize Network Isolation guide from Google Cloud to enable private endpoint and disable public access to your cluster.

References