GoogleCloudPlatform / policy-library

A library of constraint templates and sample constraints for Constraint Framework tools
Apache License 2.0
223 stars 129 forks source link

Add Firewall sample for Forseti bundle #316

Closed gkowalski-google closed 4 years ago

gkowalski-google commented 4 years ago

Forseti checks for firewall rules that are open to every source IP, and expose TCP/UDP protocols to every port; they do not lock down the rule to a specific port range. Add a sample that will check for this. It will be similar to this, but will include the protocol/port configuration (e.g. tcp:all).