# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

---
# sample subset of useful organization policies, edit to suit requirements
# start of document (---) avoids errors if the file only contains comments

# yaml-language-server: $schema=../../../../schemas/org-policies.schema.json

custom.firewallEnforcePolicyRuleLogging:
  rules:
    - enforce: true

custom.firewallEnforceRuleLogging:
  rules:
    - enforce: true

custom.firewallRequireDescription:
  rules:
    - enforce: true

custom.firewallRestrictCacheSearchDatabasesPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictCacheSearchDatabasesRule:
  rules:
    - enforce: true

custom.firewallRestrictDirectoryServicesPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictDirectoryServicesRule:
  rules:
    - enforce: true

custom.firewallRestrictExplicitAllPortsPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictExplicitAllPortsRule:
  rules:
    - enforce: true

custom.firewallRestrictInsecureProtocolsPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictInsecureProtocolsRule:
  rules:
    - enforce: true

custom.firewallRestrictMailProtocolsPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictMailProtocolsRule:
  rules:
    - enforce: true

custom.firewallRestrictManagementPortsPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictManagementPortsRule:
  rules:
    - enforce: true

custom.firewallRestrictNetworkServicesPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictNetworkServicesRule:
  rules:
    - enforce: true

custom.firewallRestrictNoSQLDatabasesPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictNoSQLDatabasesRule:
  rules:
    - enforce: true

custom.firewallRestrictPublicAccessPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictPublicAccessRule:
  rules:
    - enforce: true

custom.firewallRestrictRdpPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictRdpRule:
  rules:
    - enforce: true

custom.firewallRestrictSQLDatabasesPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictSQLDatabasesRule:
  rules:
    - enforce: true

custom.firewallRestrictSshPolicyRule:
  rules:
    - enforce: true

custom.firewallRestrictSshRule:
  rules:
    - enforce: true
