Policy: GCP > Project > Organization Policy > Restrict allowed Google Cloud APIs and services
Manage the GCP Organization Policy "Restrict allowed Google Cloud APIs and services" for the project.
This list constraint restricts the set of services and their APIs that can be enabled on this resource. By default, all services are allowed. The denied list of services must come from the list below. Explicitly enabling APIs via this constraint is not currently supported.
Specifying an API not in this list will result in an error.
compute.googleapis.com
deploymentmanager.googleapis.com
dns.googleapis.com
doubleclicksearch.googleapis.com
replicapool.googleapis.com
replicapoolupdater.googleapis.com
resourceviews.googleapis.com
Enforcement of this constraint is not retroactive. If a service is already enabled on a resource when this constraint is enforced, it will remain enabled.
Resource Types
This policy targets the following resource types:
Primary Policy
This policy is used with the following primary policy:
Related Policies
Controls
- GCP > Project > Organization Policy
- GCP > Project > Organization Policy > Restrict allowed Google Cloud APIs and services
Policy Specification
Schema Type |
|
---|---|
Default |
|
Valid Values [YAML] |
|
Examples [YAML] |
|
Category
In Your Workspace
Developers
- tmod:@turbot/turbot#/control/categories/policy
- tmod:@turbot/gcp-orgpolicy#/policy/types/serviceuserServices
- turbot graphql policy-type --id "tmod:@turbot/gcp-orgpolicy#/policy/types/serviceuserServices"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-orgpolicy#/policy/types/serviceuserServices"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI