Policy: GCP > Project > Organization Policy > Disable VM serial port access

Manage the GCP Organization Policy "Disable VM serial port access" for the project.

This boolean constraint disables serial port access to Compute Engine VMs belonging to the organization, project, or folder where this constraint is set to True.

By default, customers can enable serial port access for Compute Engine VMs on a per-VM or per-project basis using metadata attributes.

Enforcing this constraint will disable serial port access for Compute Engine VMs, regardless of the metadata attributes.

Targets

This policy targets the following resource types:

GCP > Project

Primary Policy

This policy is used with the following primary policy:

GCP > Project > Organization Policy

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Inherited` `Check: Google-managed default` `Check: On, effective value` `Check: Off, effective value` `Check: On, inherited` `Check: Off, inherited` `Check: On, set on project` `Check: Off, set on project`
Examples [YAML]	`Skip`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/policy

Policy Type URI

tmod:@turbot/gcp-orgpolicy#/policy/types/computeDisableSerialPortAccess

GraphQL

query policyType(id: "tmod:@turbot/gcp-orgpolicy#/policy/types/computeDisableSerialPortAccess") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-orgpolicy#/policy/types/computeDisableSerialPortAccess'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-orgpolicy#/policy/types/computeDisableSerialPortAccess'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-orgpolicy#/policy/types/computeDisableSerialPortAccess"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-orgpolicy#/policy/types/computeDisableSerialPortAccess"