Control: GCP > Project > Organization Policy > Restrict Authorized Networks on Cloud SQL instances

Manage the GCP Organization Policy "Restrict Authorized Networks on Cloud SQL instances" for the project.

This boolean constraint restricts adding Authorized Networks for unproxied database access to Cloud SQL instances where this constraint is set to True.

This constraint is not retroactive, Cloud SQL instances with existing Authorized Networks will still work even after this constraint is enforced.

By default, Authorized Networks can be added to Cloud SQL instances.

Resource Types

This control targets the following resource types:

GCP > Project

Primary Policies

The following policies can be used to configure this control:

Restrict Authorized Networks on Cloud SQL instances

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-orgpolicy#/control/types/sqlRestrictAuthorizedNetworks

Category URI

tmod:@turbot/turbot#/control/categories/policy

GraphQL

query controlType(id: "tmod:@turbot/gcp-orgpolicy#/control/types/sqlRestrictAuthorizedNetworks") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-orgpolicy#/control/types/sqlRestrictAuthorizedNetworks'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-orgpolicy#/control/types/sqlRestrictAuthorizedNetworks"