Control: GCP > Project > Organization Policy > Disable Guest Attributes of Compute Engine metadata

Manage the GCP Organization Policy "Disable Guest Attributes of Compute Engine metadata" for the project.

This boolean constraint disables Compute Engine API access to the Guest Attributes of Compute Engine VMs belonging to the organization, project, or folder where this constraint is set to True.

By default, the Compute Engine API can be used to access Compute Engine VM guest attributes.

Resource Types

This control targets the following resource types:

GCP > Project

Primary Policies

The following policies can be used to configure this control:

Disable Guest Attributes of Compute Engine metadata

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableGuestAttributesAccess

Category URI

tmod:@turbot/turbot#/control/categories/policy

GraphQL

query controlType(id: "tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableGuestAttributesAccess") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableGuestAttributesAccess'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableGuestAttributesAccess"