IssueTracker

Hi Google team,

I'm raising this request for a new feature in the Security Command Center (SCC) that would greatly enhance our security operations. Currently, we lack a reliable way to filter findings associated with managed services. To address this, I propose the following:

Tagging Findings: Implement a feature that tags findings tied to resources created by managed services. This tag can then be used to filter these findings, allowing us to easily identify and address relevant security vulnerabilities.

Investigate Tagging Propagation: Investigate if tagging a managed service can also automatically tag the deployed resources tied to that managed service. This would ensure comprehensive coverage and accurate filtering of all related findings.

Benefits of this feature if its implemented:

Streamlines the process to identify and address relevant security vulnerabilities.
Helps us to quickly determine which vulnerabilities they are responsible for.
Improved Security Posture: Ensures that managed services vulnerabilities are not overlooked, enhancing overall security.
Implementing this feature would significantly improve our vulnerability management process and enhance our overall security posture.



Thanks,
Manoj