Policy: GCP > App Engine > Firewall Rule > CMDB

Configure whether to record and synchronize details for the GCP App Engine firewall rule into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB. If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

Resource Types

This policy targets the following resource types:

GCP > App Engine > Application

Controls

GCP > App Engine > Firewall Rule > CMDB

Policy Specification

Schema Type	`string`
Default	`Enforce: Enabled if App Engine API is enabled`
Valid Values [YAML]	`Skip` `Enforce: Enabled` `Enforce: Enabled if App Engine API is enabled` `Enforce: Disabled`
Examples [YAML]	`Skip`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

Policy Type URI

tmod:@turbot/gcp-appengine#/policy/types/firewallRuleCmdb

GraphQL

query policyType(id: "tmod:@turbot/gcp-appengine#/policy/types/firewallRuleCmdb") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-appengine#/policy/types/firewallRuleCmdb'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-appengine#/policy/types/firewallRuleCmdb'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-appengine#/policy/types/firewallRuleCmdb"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-appengine#/policy/types/firewallRuleCmdb"