Turbot Guardrails Hub 
Hub
Mods
GCP
35
Mods
138
Resource Types
2,012
Policies
917
Controls
118
Quick Actions
83
IAM

Policy: GCP > Network > Target SSL Proxy > SSL Policy

Determine the action to take when an GCP Network target SSL proxy is not using an allowed SSL policy.

If a target SSL proxy is not using an allowed SSL policy and this policy is set to Enforce: Set to default if SSL policy not in allowed list, the target SSL proxy will be updated to use the SSL policy selected in the GCP > Network > Target SSL Proxy > SSL Policy > Default policy.

If the SSL policy in the GCP > Network > Target SSL Proxy > SSL Policy > Default policy is not allowed in the GCP > Network > Target SSL Proxy > SSL Policy > Allowed policy, Guardrails will not attempt to set the SSL policy to prevent continuous updates.

Resource Types

This policy targets the following resource types:

Controls

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip

  • Check: SSL policy in allowed list

  • Enforce: Set to default if SSL policy not in allowed list
Examples [YAML]
  • Check: SSL policy in allowed list

Category

In Your Workspace

Developers