Policy Packs

guardrails-samples

Encourage the creation of tailored VPC networks with specific configurations and security controls, reducing the risk of misconfigurations and enhancing overall network security.

Enforce Default VPC Network Is Not Used in GCP Projects

main

gcp_network_network_approved

Determine the action to take when a GCP Network network is not approved based on `GCP &gt; Network &gt; Network &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

networkApproved

GCP > Network > Network > Approved

gcp_network_network_approved_custom

Determine whether the GCP Network network is allowed to exist.&#92;nThis policy will be evaluated by the Approved control. If a GCP Network network is not approved, it will be subject to the action specified in the `GCP &gt; Network &gt; Network &gt; Approved` policy.&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note**: The policy value must be a string with a value of `Approved`, `Not approved` or `Skip`, or in the form of YAML objects. The object(s) must contain the key `result` with its value as `Approved` or `Not approved`. A custom title and message can also be added using the keys `title` and `message` respectively.&#92;n

networkApprovedCustom

GCP > Network > Network > Approved > Custom

turbot_policy_setting.gcp_network_network_approved

turbot_policy_setting.gcp_network_network_approved_custom

Policy	Setting	Note
GCP > Network > Network > Approved	Check: Approved
GCP > Network > Network > Approved > Custom	Calculated

Policy Settings