# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

---
# sample subset of useful organization policies, edit to suit requirements
# start of document (---) avoids errors if the file only contains comments

# yaml-language-server: $schema=../../../../schemas/org-policies.schema.json

gcp.restrictServiceUsage:
  rules:
    - allow:
        values:
          - "accesscontextmanager.googleapis.com"
          - "analyticshub.googleapis.com"
          - "anthos.googleapis.com"
          - "anthosconfigmanagement.googleapis.com"
          - "appoptimize.googleapis.com"
          - "artifactregistry.googleapis.com"
          - "autoscaling.googleapis.com"
          - "bigquery.googleapis.com"
          - "bigqueryconnection.googleapis.com"
          - "bigquerydatapolicy.googleapis.com"
          - "bigquerydatatransfer.googleapis.com"
          - "bigquerymigration.googleapis.com"
          - "bigqueryreservation.googleapis.com"
          - "bigquerystorage.googleapis.com"
          - "billingbudgets.googleapis.com"
          - "certificatemanager.googleapis.com"
          - "cloudaicompanion.googleapis.com"
          - "cloudapis.googleapis.com"
          - "cloudasset.googleapis.com"
          - "cloudbilling.googleapis.com"
          - "cloudbuild.googleapis.com"
          - "cloudkms.googleapis.com"
          - "cloudquotas.googleapis.com"
          - "cloudresourcemanager.googleapis.com"
          - "cloudsecuritycompliance.googleapis.com"
          - "cloudtrace.googleapis.com"
          - "composer.googleapis.com"
          - "compute.googleapis.com"
          - "container.googleapis.com"
          - "containerfilesystem.googleapis.com"
          - "containerregistry.googleapis.com"
          - "containersecurity.googleapis.com"
          - "containerthreatdetection.googleapis.com"
          - "datacatalog.googleapis.com"
          - "dataform.googleapis.com"
          - "datalineage.googleapis.com"
          - "dataplex.googleapis.com"
          - "datastore.googleapis.com"
          - "deploymentmanager.googleapis.com"
          - "dns.googleapis.com"
          - "essentialcontacts.googleapis.com"
          - "geminicloudassist.googleapis.com"
          - "gkebackup.googleapis.com"
          - "gkeconnect.googleapis.com"
          - "gkehub.googleapis.com"
          - "iam.googleapis.com"
          - "iamcredentials.googleapis.com"
          - "iap.googleapis.com"
          - "logging.googleapis.com"
          - "monitoring.googleapis.com"
          - "multiclusteringress.googleapis.com"
          - "multiclustermetering.googleapis.com"
          - "multiclusterservicediscovery.googleapis.com"
          - "networkconnectivity.googleapis.com"
          - "networkmanagement.googleapis.com"
          - "networksecurity.googleapis.com"
          - "notebooksecurityscanner.googleapis.com"
          - "orgpolicy.googleapis.com"
          - "oslogin.googleapis.com"
          - "privateca.googleapis.com"
          - "pubsub.googleapis.com"
          - "recommender.googleapis.com"
          - "secretmanager.googleapis.com"
          - "securitycenter.googleapis.com"
          - "securitycentermanagement.googleapis.com"
          - "servicedirectory.googleapis.com"
          - "servicemanagement.googleapis.com"
          - "servicenetworking.googleapis.com"
          - "serviceusage.googleapis.com"
          - "sql-component.googleapis.com"
          - "sqladmin.googleapis.com"
          - "stackdriver.googleapis.com"
          - "storage-api.googleapis.com"
          - "storage-component.googleapis.com"
          - "storage.googleapis.com"
          - "sts.googleapis.com"
          - "trafficdirector.googleapis.com"
          - "vpcaccess.googleapis.com"
          - "websecurityscanner.googleapis.com"
