Guardrails can now govern the outbound (egress) rules on GCP firewalls, not just inbound. The new GCP > Network > Firewall > Egress Rules > Approved control evaluates a firewall's egress rules against an Object Control List (OCL) you define in the Egress Rules > Approved > Rules policy, and can revoke rules you have not approved when set to Enforce: Delete unapproved.

Control Types

Added

• GCP > Network > Firewall > Egress Rules
• GCP > Network > Firewall > Egress Rules > Approved

Policy Types

Added

• GCP > Network > Firewall > Egress Rules
• GCP > Network > Firewall > Egress Rules > Approved
• GCP > Network > Firewall > Egress Rules > Approved > Rules