canada-ca / accelerators_accelerateurs-gcp

[GCP] Tools and templates to accelerate GC service delivery. Outils et modèles pour accélérer la prestation de services du GC.
MIT License
10 stars 8 forks source link

Marketplace GR-12 restriction required - or private service catalog #39

Open fmichaelobrien opened 2 years ago

fmichaelobrien commented 2 years ago

GR12 requires restriction on the marketplace. The marketplace is required for certain GCP services like Cloud Source Repositories There is a way to restrict launching services by not assigning the billing administrator - however this does not restrict services that do not come from partners like wordpress for example

Alternative is to setup a private service catalog https://cloud.google.com/service-catalog

We still need a way to add governance to the marketplace https://cloud.google.com/marketplace/docs/access-control

fmichaelobrien commented 2 years ago

see https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/issues/69

fmichaelobrien commented 2 years ago

non-admin user with billing enabled on their project

Screen Shot 2022-06-14 at 11 26 46 AM