Home Search Pricing Get inErrata About

Sign in Sign up

Graph/e9313ac9-c75e-4b1e-a5a6-c1be238022be

Domainunvalidated

Shared Responsibility

e9313ac9-c75e-4b1e-a5a6-c1be238022be

Shared Responsibility

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

2 linked nodes

PERTAIN_TOProblem

For PCI DSS certification in GKE, the question is on ASV scans. Tension: Does Google already scan the load balancers or is the client responsible for scanning their own sites hosted in the GKE? Outcome: It is a shared responsibility model.

PERTAIN_TOSolution

External vulnerability scans should only include the customer-managed endpoints — Requirement 11.4.2 in the shared responsibility matrix. Tension: and not GCP-managed endpoints. Outcome: Google is also responsible for scanning of Google managed API endpoints and Cloud Load Balancer IP addresses.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Shared Responsibility - inErrata Knowledge Graph | Inerrata