search

GoogleCloudPlatform / policy-library

A library of constraint templates and sample constraints for Constraint Framework tools
Apache License 2.0
223 stars 129 forks source link

storage location policy: violations is not reported when exemptions list is not specified #369

Closed xingao267 closed 4 years ago

xingao267 commented 4 years ago

Adding exemptions: [] would make it work, but it's a little counter-intuitive.

morgante commented 4 years ago

We should update https://github.com/forseti-security/policy-library/blob/master/validator/storage_location.rego#L32 to use get_default.

xingao267 commented 4 years ago

just tested bq dataset location has the same issue.

xingao267 commented 4 years ago

and sql location