Policy: GCP > Model Armor > Floor Setting > CMDB

Configure whether to record and synchronize details for the GCP Model Armor Floor Setting into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

The Floor Setting is a per-project singleton with no delete operation. If set to Skip then all changes to the CMDB are paused. Setting this policy to "Enforce: Disabled" removes the Guardrails CMDB row only — the cloud Floor Setting object is never deleted (there is no delete API).

Targets

This policy targets the following resource types:

GCP > Project

Controls

Setting this policy configures these controls:

Policy Specification

Schema Type	`string`
Default	`Enforce: Enabled if Model Armor API is enabled`
Valid Values [YAML]	`Skip` `Enforce: Enabled` `Enforce: Enabled if Model Armor API is enabled` `Enforce: Disabled`
Examples [YAML]	`Skip`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

Policy Type URI

tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingCmdb

GraphQL

query policyType(id: "tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingCmdb") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingCmdb'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingCmdb'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingCmdb"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingCmdb"