Update remaining org policies

This commit is contained in:
Julio Castillo
2023-02-21 14:28:23 +01:00
parent 62834ca83a
commit a5e905cb80
21 changed files with 126 additions and 126 deletions

View File

@@ -40,7 +40,7 @@ module "org" {
"compute.disableGuestAttributesAccess" = {
rules = [{ enforce = true }]
}
"constraints/compute.skipDefaultNetworkCreation" = {
"compute.skipDefaultNetworkCreation" = {
rules = [{ enforce = true }]
}
"iam.disableServiceAccountKeyCreation" = {
@@ -62,7 +62,7 @@ module "org" {
}
]
}
"constraints/iam.allowedPolicyMemberDomains" = {
"iam.allowedPolicyMemberDomains" = {
rules = [
{
allow = { all = true }
@@ -83,14 +83,14 @@ module "org" {
]
}
"constraints/compute.trustedImageProjects" = {
"compute.trustedImageProjects" = {
rules = [{
allow = {
values = ["projects/my-project"]
}
}]
}
"constraints/compute.vmExternalIpAccess" = {
"compute.vmExternalIpAccess" = {
rules = [{ deny = { all = true } }]
}
}