ServiceNow CMDB CI relationship sync: faster, more complete →
Turbot Guardrails Hub 
Hub
Mods
GCP
36
Mods
142
Resource Types
2,068
Policies
939
Controls
118
Quick Actions
85
IAM

Policy: GCP > Project > Organization Policy > Restrict Shared VPC Subnetworks

Manage the GCP Organization Policy "Restrict Shared VPC Subnetworks" for the project.

This list constraint defines the set of shared VPC subnetworks that eligible resources can use. This constraint does not apply to resources within the same project. By default, eligible resources can use any shared VPC subnetwork.

The allowed/denied list of subnetworks must be specified in the form: under:organizations/ORGANIZATION_ID, under:folders/FOLDER_ID, under:projects/PROJECT_ID, or projects/PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK-NAME.

Resource Types

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip

  • Check: Inherited

  • Check: Google-managed default

  • Check: Per Custom Values, effective value

  • Check: Per Custom Values, inherited

  • Check: Per Custom Values, set on project
Examples [YAML]
  • Skip

Category

In Your Workspace

Developers