Policy: GCP > SQL > Instance > Public IP

Configure whether a GCP > SQL > Instance may have a public IP address.

If set to Enforce: Disabled, the public IP address is turned off, but only when the instance already has a private connection, either a private network or Private Service Connect. An instance with neither stays in alarm, because turning off its only address would leave it unreachable.

Note: Clients that connect to the public IP address, including the Cloud SQL Auth Proxy without private IP, lose access once the public IP is turned off.

Targets

This policy targets the following resource types:

GCP > SQL > Instance

Controls

Setting this policy configures this control:

GCP > SQL > Instance > Public IP

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Disabled` `Enforce: Disabled`
Examples [YAML]	`Skip`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/gcp-sql#/policy/types/instancePublicIp

GraphQL

query policyType(id: "tmod:@turbot/gcp-sql#/policy/types/instancePublicIp") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-sql#/policy/types/instancePublicIp'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-sql#/policy/types/instancePublicIp'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-sql#/policy/types/instancePublicIp"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-sql#/policy/types/instancePublicIp"