Policy Packs

guardrails-samples

Enforcing the use of Creator and Creation Time labels provide critical metadata that helps in identifying the origin and creation time of storage buckets.

Enforce Creator and Creation Time Labels for GCP Storage Buckets

main

gcp_storage_bucket_labels

Determine the action to take when an GCP Storage bucket labels are not updated based on the `GCP &gt; Storage &gt; Bucket &gt; Labels &gt; *` policies.&#92;n&#92;nThe control ensure GCP Storage bucket labels include labels defined in `GCP &gt; Storage &gt; Bucket &gt; Labels &gt; Template`.&#92;n&#92;nLabels not defined in Bucket Labels Template will not be modified or deleted. Setting a label value to `undefined` will result in the label being deleted.&#92;n&#92;nSee [Labels](https://turbot.com/guardrails/docs/concepts/guardrails/tagging) for more information.&#92;n

bucketLabels

GCP > Storage > Bucket > Labels

gcp_storage_bucket_labels_template

The template is used to generate the keys and values for GCP Storage bucket.&#92;n&#92;nLabels not defined in Bucket Labels Template will not be modified or deleted. Setting a label value to `undefined` will result in the label being deleted.&#92;n&#92;nSee [Labels](https://turbot.com/guardrails/docs/concepts/guardrails/tagging) for more information.&#92;n

bucketLabelsTemplate

GCP > Storage > Bucket > Labels > Template

turbot_policy_setting.gcp_storage_bucket_labels

turbot_policy_setting.gcp_storage_bucket_labels_template

Policy	Setting	Note
GCP > Storage > Bucket > Labels	Check: Labels are correct
GCP > Storage > Bucket > Labels > Template	Calculated

Policy Settings