Compute Engine target HTTPS proxies should use the latest TLS version
Checks that Compute Engine target HTTPS proxies use the latest TLS version. The control ensures that HTTP target configurations are set to use the latest TLS version, and it evaluates the `target_https_proxy` resources for that setting.
What this control checks
Compute Engine target HTTPS proxies must use the latest TLS version
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control gcp_compliance.control.compute_target_https_uses_latest_tls_version.
Framework-specific interpretation
NIST Cybersecurity Framework v2.0: Mapped to PR.AA-04 (Identity assertions are protected, conveyed, and verified.) and PR.DS-02 (The confidentiality, integrity, and availability of data-in-transit are protected.).
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- PR.AA-04
- PR.DS-02
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_target_https_uses_latest_tls_version - Powerpipe Control:
gcp_compliance.control.compute_target_https_uses_latest_tls_version
Last reviewed: 2026-10-09