Control: GCP > Project > Organization Policy > Restrict VM IP Forwarding

Manage the GCP Organization Policy "Restrict VM IP Forwarding" for the project.

This list constraint defines the set of VM instances that can enable IP forwarding. By default, any VM can enable IP forwarding in any virtual network.

VM instances must be specified in the form: under:organizations/ORGANIZATION_ID, under:folders/FOLDER_ID, under:projects/PROJECT_ID, or projects/PROJECT_ID/zones/ZONE/instances/INSTANCE-NAME.

Resource Types

This control targets the following resource types:

GCP > Project

Policies

The following policies can be used to configure this control:

GCP > Project > Organization Policy > Restrict VM IP Forwarding

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-orgpolicy#/control/types/computeVmCanIpForward

Category URI

tmod:@turbot/turbot#/control/categories/policy

GraphQL

query controlType(id: "tmod:@turbot/gcp-orgpolicy#/control/types/computeVmCanIpForward") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-orgpolicy#/control/types/computeVmCanIpForward'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-orgpolicy#/control/types/computeVmCanIpForward"