Policy: GCP > Model Armor > Floor Setting > Settings > Enforce > Template Create and Update

Whether Model Armor must REJECT templates.create and templates.patch calls whose filter config is weaker than this floor.

Maps to the enableFloorSettingEnforcement bool on the live Floor Setting. When Enabled, the Settings control alarms unless the live field is true, and the Set Floor Setting action flips it to true on Enforce: Enabled per .... When Disabled, the field is not checked — templates can be created or updated below the floor.

Targets

This policy targets the following resource types:

GCP > Model Armor > Floor Setting

Primary Policy

This policy is used with the following primary policy:

GCP > Model Armor > Floor Setting > Settings > Enforce

Controls

Setting this policy configures this control:

GCP > Model Armor > Floor Setting > Settings

Policy Specification

Schema Type	`string`
Default	`Enabled`
Valid Values [YAML]	`Enabled` `Disabled`
Examples [YAML]	Enabled

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceTemplateCreateAndUpdate

GraphQL

query policyType(id: "tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceTemplateCreateAndUpdate") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceTemplateCreateAndUpdate'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceTemplateCreateAndUpdate'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceTemplateCreateAndUpdate"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceTemplateCreateAndUpdate"