Policy Packs

guardrails-samples

Enforce instances to not use specific machine types helps prevent the use of machine types that may be unsuitable for certain workloads, excessively costly, or lacking necessary security features, thereby optimizing resource utilization and maintaining a secure environment.

Enforce GCP Compute Engine Instances Do Not Use Specific Machine Types

main

gcp_computeengine_instance_approved

Determine the action to take when a GCP Compute Engine instance is not approved based on `GCP &gt; Compute Engine &gt; Instance &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

instanceApproved

GCP > Compute Engine > Instance > Approved

gcp_computeengine_instance_approved_custom

Determine whether the GCP Compute Engine instance is allowed to exist.&#92;nThis policy will be evaluated by the Approved control. If a GCP Compute Engine instance is not approved, it will be subject to the action specified in the `GCP &gt; Compute Engine &gt; Instance &gt; Approved` policy.&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note**: The policy value must be a string with a value of `Approved`, `Not approved` or `Skip`, or in the form of YAML objects. The object(s) must contain the key `result` with its value as `Approved` or `Not approved`. A custom title and message can also be added using the keys `title` and `message` respectively.&#92;n

Developers