An [Object Control List (OCL)](https://turbot.com/guardrails/docs/reference/ocl) with a list of filter rules to approve or reject firewall rules.<br /><br />Examples:   ```   Allow HTTP and HTTPS rules for RFC1918 private space   APPROVE $.turbot.fromPort:=80 $.turbot.toPort:=80 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16   APPROVE $.turbot.fromPort:=443 $.turbot.toPort:=443 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16<br /><br />  Reject any rule from 0.0.0.0/0   REJECT $.turbot.cidr:0.0.0.0/0   ``` 

GCP > Network > Firewall > Ingress Rules

GCP > Network > Firewall > Ingress Rules > Approved

An [Object Control List (OCL)](https://turbot.com/guardrails/docs/reference/ocl)&#92;nwith a list of filter rules to approve or reject firewall rules.&#92;n&#92;nExamples:&#92;n  ```&#92;n  Allow HTTP and HTTPS rules for RFC1918 private space&#92;n  APPROVE $.turbot.fromPort:=80 $.turbot.toPort:=80 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16&#92;n  APPROVE $.turbot.fromPort:=443 $.turbot.toPort:=443 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16&#92;n&#92;n  Reject any rule from 0.0.0.0/0&#92;n  REJECT $.turbot.cidr:0.0.0.0/0&#92;n  ```&#92;n

Schema Type	`string`
Default	`# Approve unmatched rules APPROVE *`

Policy: GCP > Network > Firewall > Ingress Rules > Approved > Rules

Resource Types

Primary Policy

Controls

Policy Packs

Policy Specification

Category

In Your Workspace

Developers