Control: GCP > Model Armor > Floor Setting > CMDB

Record and synchronize details for the GCP Model Armor Floor Setting into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

The Floor Setting is a per-project singleton with no delete operation. When the Model Armor API is disabled for the project, the CMDB row is removed from Guardrails (the cloud object itself is never deleted — there is no delete API).

Note: If CMDB is set to Skip for a resource, then it will not be added to the CMDB, and no controls that target it will run.

Resource Types

This control targets the following resource types:

GCP > Model Armor > Floor Setting

Policies

The following policies can be used to configure this control:

GCP > Model Armor > Floor Setting > CMDB

This control type relies on these other policies when running actions:

GCP > Model Armor > API Enabled

Permissions

Cloud permissions used by this control and its actions:

modelarmor.floorSettings.get

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-modelarmor#/control/types/floorSettingCmdb

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

GraphQL

query controlType(id: "tmod:@turbot/gcp-modelarmor#/control/types/floorSettingCmdb") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-modelarmor#/control/types/floorSettingCmdb'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-modelarmor#/control/types/floorSettingCmdb"