search

GoogleCloudPlatform / pubsec-declarative-toolkit

The GCP PubSec Declarative Toolkit is a collection of declarative solutions to help you on your Journey to Google Cloud. Solutions are designed using Config Connector and deployed using Config Controller.
Apache License 2.0
31 stars 28 forks source link

GR12 - add disable public marketplace resource policy constraints/commerceorggovernance.disablePublicMarketplace for compliance #170

Open fmichaelobrien opened 1 year ago

fmichaelobrien commented 1 year ago

Set the following to enforced to implement Guardrail 12 constraints/commerceorggovernance.disablePublicMarketplace

Chris, Excellent! - right there on page 1 - didnt see that - but time for an exhaustive run through the 87 controls This should fix GR 12 - will test installing elasticsearch. will go in both LZ's thanks for that

shadow https://github.com/canada-ca/accelerators_accelerateurs-gcp/issues/52 b/main/deployment-templates/Terraform/guardrails/1-guardrails/org-policy.tf#L30 https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/issues/205

add to https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/tree/main/solutions/org-policies/organization

fmichaelobrien commented 1 year ago

Edit: when I last tested this in Nov - free services still came through but paid services can be blocked with the usual billing non-access