Control: GCP > Project > Organization Policy > Disable Internet Network Endpoint Groups

Manage the GCP Organization Policy "Disable Internet Network Endpoint Groups" for the project.

This boolean constraint restricts whether a user can create Internet Network Endpoint Groups (NEG) with a type of INTERNET_FQDN_PORT and INTERNET_IP_PORT.

By default, any user with appropriate IAM permissions can create Intenet NEGs in any project.

Resource Types

This control targets the following resource types:

GCP > Project

Primary Policies

The following policies can be used to configure this control:

Disable Internet Network Endpoint Groups

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableInternetNetworkEndpointGroup

Category URI

tmod:@turbot/turbot#/control/categories/policy

GraphQL

query controlType(id: "tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableInternetNetworkEndpointGroup") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableInternetNetworkEndpointGroup'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-orgpolicy#/control/types/computeDisableInternetNetworkEndpointGroup"