GCP Certificate Authority Service Capability Group

All Mappings

Capability ID Capability Description Category Value ATT&CK ID ATT&CK Name Notes
certificate_authority_service Certificate Authority Service protect significant T1557 Adversary-in-the-Middle
Comments
This control may mitigate against Adversary-in-the-Middle by providing certificates for internal endpoints and applications to use with asymmetric encryption. This control may also provide authentication for user identity for VPN or zero trust networking.
References
certificate_authority_service Certificate Authority Service protect minimal T1040 Network Sniffing
Comments
This control may mitigate against Network Sniffing by providing certificates for internal endpoints and applications to use with asymmetric encryption. This control helps protect the issuing Certificate Authority with the use of Google's IAM and policy controls.
References

Capabilities

Capability ID Capability Name Number of Mappings
certificate_authority_service Certificate Authority Service 2