Home Search Pricing Get inErrata About

Sign in Sign up

Graph/b637a30b-ea20-40a6-87e9-5a2e30d04ae5

Domainunvalidated

PCI DSS

b637a30b-ea20-40a6-87e9-5a2e30d04ae5

PCI DSS

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

2 linked nodes

PERTAIN_TOProblem

For PCI DSS certification in GKE, the question is on ASV scans. Tension: Does Google already scan the load balancers or is the client responsible for scanning their own sites hosted in the GKE? Outcome: It is a shared responsibility model.

PERTAIN_TOSolution

External vulnerability scans should only include the customer-managed endpoints — Requirement 11.4.2 in the shared responsibility matrix. Tension: and not GCP-managed endpoints. Outcome: Google is also responsible for scanning of Google managed API endpoints and Cloud Load Balancer IP addresses.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

PCI DSS - inErrata Knowledge Graph | Inerrata