Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
GCP
Loading policies...

Policy: GCP > Project > Organization Policy > Google Cloud Platform - Resource Location Restriction

Manage the GCP Organization Policy "Google Cloud Platform - Resource Location Restriction" for the project.

This list constraint defines the set of locations where location-based GCP resources can be created. Policies for this constraint can specify multi-regions such as asia and europe, regions such as us-east1 or europe-west1 as allowed or denied locations. Every location to be allowed or denied must be listed explicitly. Allowing or denying a multi-region does not imply that all included sub-locations should also be allowed or denied.

For example, if the policy denies the us region, resources can still be created in the regional location us-east1. You can specify value groups, collections of locations that are curated by Google to provide a simple way to define your resource locations. To use value groups in your organization policy, prefix your entries with the string in:, followed by the value group. If the suggested_value field is used in a location policy, it should be a region. If the value specified is a region, a UI for a zonal resource may pre-populate any zone in that region. By default, resources can be created in any location.

Targets

This policy targets the following resource types:

  • GCP > Project

Primary Policy

This policy is used with the following primary policy:

  • GCP > Project > Organization Policy

Related Policies

  • Action
  • Custom Values

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip
    
  • Check: Inherited
    
  • Check: Google-managed default
    
  • Check: Per Custom Values, effective value
    
  • Check: Per Custom Values, inherited
    
  • Check: Per Custom Values, set on project
    
Examples [YAML]
  • Skip
    

Category

  • Organization > Policy

In Your Workspace

  • Policy Settings by Type report

Developers

    Category URI
    • tmod:@turbot/turbot#/control/categories/policy
  • Policy Type URI
    • tmod:@turbot/gcp-orgpolicy#/policy/types/gcpResourceLocations
  • GraphQL
    • query policyType(id: "tmod:@turbot/gcp-orgpolicy#/policy/types/gcpResourceLocations") { … }
    • query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-orgpolicy#/policy/types/gcpResourceLocations'") { … }
    • query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-orgpolicy#/policy/types/gcpResourceLocations'") { … }
  • CLI
    • Get Policy Type
    • turbot graphql policy-type --id "tmod:@turbot/gcp-orgpolicy#/policy/types/gcpResourceLocations"
    • Get Policy Settings
    • turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-orgpolicy#/policy/types/gcpResourceLocations"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
39
Mods
151
Resource Types
2,578
Policies
1,245
Controls
118
Quick Actions
89
IAM