ServiceNow CMDB CI relationship sync: faster, more complete →
Turbot Guardrails Hub 
Hub
Mods
GCP
36
Mods
142
Resource Types
2,068
Policies
939
Controls
118
Quick Actions
85
IAM

Policy: GCP > Project > Organization Policy > Restrict default Google-managed encryption on Cloud SQL instances [Deprecated]

Manage the GCP Organization Policy "Restrict default Google-managed encryption on Cloud SQL instances" for the project. This boolean constraint, when set to True, requires all newly created, restarted, or updated Cloud SQL instances to use customer-managed encryption keys (CMEK). It is not retroactive (meaning existing instances with Google-managed encryption are not impacted unless they are updated or refreshed).

By default, this constraint is set to False and Google-managed encryption is allowed for Cloud SQL instances. Note: This policy has been deprecated in v5.1.0 and will be removed in the next major version.

Resource Types

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip

  • Check: Inherited

  • Check: Google-managed default

  • Check: On, effective value

  • Check: Off, effective value

  • Check: On, inherited

  • Check: Off, inherited

  • Check: On, set on project

  • Check: Off, set on project
Examples [YAML]
  • Skip

Category

In Your Workspace

Developers