Changelog

Bug fixes

• Fixed an issue where GCP > Storage > Bucket > Labels enforcement could fail with an Invalid argument error on some buckets.

What's new?

• We've updated the default value of the GCP > Network > Security Policy > CMDB and GCP > Network > Region Security Policy > CMDB policies to Skip. To track these resources in CMDB, set the policy to Enforce: Enabled or Enforce: Enabled if Compute Engine API is enabled.

What's new?

• Added new quick actions for GCP > Network resources: Set Target Tags and Enable/Disable Logging for firewall rules, and Enable/Disable Private Google Access and Enable/Disable Flow Log for subnetworks — so you can remediate a control alarm in one click from its notification or run the fix directly from the resource page.

Action Types

Added

• GCP > Network > Firewall > Disable Logging
• GCP > Network > Firewall > Enable Logging
• GCP > Network > Firewall > Set Target Tags
• GCP > Network > Subnetwork > Disable Flow Log
• GCP > Network > Subnetwork > Disable Private Google Access
• GCP > Network > Subnetwork > Enable Flow Log
• GCP > Network > Subnetwork > Enable Private Google Access

What's new?

• Added new quick actions for GCP > Compute Engine > Instance: Set Network Tags, Enable/Disable Block Project Wide SSH Keys, Enable/Disable Serial Port Access, and Delete External IP Addresses — so you can remediate a control alarm in one click from its notification or run the fix directly from the instance page.

Action Types

Added

• GCP > Compute Engine > Instance > Delete External IP Addresses
• GCP > Compute Engine > Instance > Disable Block Project Wide SSH Keys
• GCP > Compute Engine > Instance > Disable Serial Port Access
• GCP > Compute Engine > Instance > Enable Block Project Wide SSH Keys
• GCP > Compute Engine > Instance > Enable Serial Port Access
• GCP > Compute Engine > Instance > Set Network Tags

What's new?

• Added the GCP > API Gateway mod, providing Guardrails coverage for Google Cloud API Gateway — the managed service that fronts Cloud Run, Cloud Functions, App Engine, and HTTP backends behind an internet-facing endpoint. Adds the GCP > API Gateway service node (API Enabled, CMDB, Discovery, and a Set API Enabled action); the global GCP > API Gateway > API and GCP > API Gateway > API Config resources, each with the Allowed family (Allowed, Allowed > Custom), Active, Labels, CMDB, Discovery, and a Delete action; and the regional GCP > API Gateway > Gateway resource, which adds Allowed > Region and whose CMDB data exposes defaultHostname, state, apiConfig, and labels so a calculated Allowed > Custom policy can govern the internet-facing serving endpoint. All three resource types are refreshed by real-time router events.

Resource Types

Added

• GCP > API Gateway
• GCP > API Gateway > API
• GCP > API Gateway > API Config
• GCP > API Gateway > Gateway

Control Types

Added

• GCP > API Gateway > API > Active
• GCP > API Gateway > API > Allowed
• GCP > API Gateway > API > Allowed > Custom
• GCP > API Gateway > API > CMDB
• GCP > API Gateway > API > Discovery
• GCP > API Gateway > API > Labels
• GCP > API Gateway > API Config > Active
• GCP > API Gateway > API Config > Allowed
• GCP > API Gateway > API Config > Allowed > Custom
• GCP > API Gateway > API Config > CMDB
• GCP > API Gateway > API Config > Discovery
• GCP > API Gateway > API Config > Labels
• GCP > API Gateway > API Enabled
• GCP > API Gateway > CMDB
• GCP > API Gateway > Discovery
• GCP > API Gateway > Gateway > Active
• GCP > API Gateway > Gateway > Allowed
• GCP > API Gateway > Gateway > Allowed > Custom
• GCP > API Gateway > Gateway > Allowed > Region
• GCP > API Gateway > Gateway > CMDB
• GCP > API Gateway > Gateway > Discovery
• GCP > API Gateway > Gateway > Labels

Policy Types

Added

• GCP > API Gateway > API > Active
• GCP > API Gateway > API > Active > Age
• GCP > API Gateway > API > Active > Last Modified
• GCP > API Gateway > API > Allowed
• GCP > API Gateway > API > Allowed > Custom
• GCP > API Gateway > API > Allowed > Custom > Rules
• GCP > API Gateway > API > CMDB
• GCP > API Gateway > API > Labels
• GCP > API Gateway > API > Labels > Template
• GCP > API Gateway > API Config > Active
• GCP > API Gateway > API Config > Active > Age
• GCP > API Gateway > API Config > Active > Last Modified
• GCP > API Gateway > API Config > Allowed
• GCP > API Gateway > API Config > Allowed > Custom
• GCP > API Gateway > API Config > Allowed > Custom > Rules
• GCP > API Gateway > API Config > CMDB
• GCP > API Gateway > API Config > Labels
• GCP > API Gateway > API Config > Labels > Template
• GCP > API Gateway > API Enabled
• GCP > API Gateway > Allowed Regions [Default]
• GCP > API Gateway > CMDB
• GCP > API Gateway > Enabled
• GCP > API Gateway > Gateway > Active
• GCP > API Gateway > Gateway > Active > Age
• GCP > API Gateway > Gateway > Active > Last Modified
• GCP > API Gateway > Gateway > Allowed
• GCP > API Gateway > Gateway > Allowed > Custom
• GCP > API Gateway > Gateway > Allowed > Custom > Rules
• GCP > API Gateway > Gateway > Allowed > Region
• GCP > API Gateway > Gateway > Allowed > Region > Regions
• GCP > API Gateway > Gateway > CMDB
• GCP > API Gateway > Gateway > Labels
• GCP > API Gateway > Gateway > Labels > Template
• GCP > API Gateway > Gateway > Regions
• GCP > API Gateway > Labels Template [Default]
• GCP > API Gateway > Permissions
• GCP > API Gateway > Permissions > Levels
• GCP > API Gateway > Permissions > Levels > Modifiers
• GCP > API Gateway > Regions
• GCP > Turbot > Event Handlers > Logging > Sink > Compiled Filter > @turbot/gcp-apigateway
• GCP > Turbot > Permissions > Compiled > Levels > @turbot/gcp-apigateway
• GCP > Turbot > Permissions > Compiled > Service Permissions > @turbot/gcp-apigateway

Action Types

Added

• GCP > API Gateway > API > Delete
• GCP > API Gateway > API > Router
• GCP > API Gateway > API > Set Labels
• GCP > API Gateway > API Config > Delete
• GCP > API Gateway > API Config > Router
• GCP > API Gateway > API Config > Set Labels
• GCP > API Gateway > Gateway > Delete
• GCP > API Gateway > Gateway > Router
• GCP > API Gateway > Gateway > Set Labels
• GCP > API Gateway > Set API Enabled

Bug fixes

• The GCP > Organization Policy > CMDB policy now applies at the folder and project levels in addition to the organization level. Previously it targeted only the organization, so setting it to Skip or Enforce: Disabled had no effect on organization policies discovered at folder or project scope — the Discovery control could not resolve the policy there and always discovered. The policy's targets now match the Discovery control's targets, restoring correct enable/disable behavior at every scope.

What's new?

• Guardrails now discovers and manages Google Cloud Armor security policies through two new resource types, GCP > Network > Security Policy (global) and GCP > Network > Region Security Policy (regional). Each comes with the standard Discovery, CMDB, Active, Allowed and Labels (global only) controls, and global security policies stay current in real time as they change in Google Cloud.
• Added Backend Service > Security Policy and Region Backend Service > Security Policy controls that check whether your load balancer backends are protected by a Cloud Armor security policy from your approved list, and can enforce that protection by automatically remediating any unprotected backend — keeping your load balancers secure without disrupting live traffic.
• Added Security Policy > Rules > Approved and Region Security Policy > Rules > Approved controls to keep Cloud Armor rules within policy — for example, flagging any rule that allows traffic from the entire internet. When enforcing, only the unapproved rules are removed and the default rule is set to deny, so the security policy itself stays in place.
• Added a Firewall > Target Tags > Approved control to govern the target tags that decide which instances a firewall rule applies to. It checks each rule's tags against your wildcard-enabled approved list and, when enforcing, removes only the unapproved tags in place — leaving the rule and its other settings untouched, and never stripping a rule's last tag (which would silently widen it to every instance in the network).
• GCP > Network > Region Backend Service now updates in real time: creation, updates, deletion, and security policy attachment changes refresh the CMDB as they happen instead of waiting for the next scheduled discovery.

Resource Types

Added

• GCP > Network > Region Security Policy
• GCP > Network > Security Policy

Control Types

Added

• GCP > Network > Backend Service > Security Policy
• GCP > Network > Firewall > Target Tags
• GCP > Network > Firewall > Target Tags > Approved
• GCP > Network > Region Backend Service > Security Policy
• GCP > Network > Region Security Policy > Active
• GCP > Network > Region Security Policy > Allowed
• GCP > Network > Region Security Policy > Allowed > Custom
• GCP > Network > Region Security Policy > Allowed > Region
• GCP > Network > Region Security Policy > CMDB
• GCP > Network > Region Security Policy > Discovery
• GCP > Network > Region Security Policy > Rules
• GCP > Network > Region Security Policy > Rules > Approved
• GCP > Network > Security Policy > Active
• GCP > Network > Security Policy > Allowed
• GCP > Network > Security Policy > Allowed > Custom
• GCP > Network > Security Policy > CMDB
• GCP > Network > Security Policy > Discovery
• GCP > Network > Security Policy > Labels
• GCP > Network > Security Policy > Rules
• GCP > Network > Security Policy > Rules > Approved

Policy Types

Added

• GCP > Network > Backend Service > Security Policy
• GCP > Network > Backend Service > Security Policy > Allowed
• GCP > Network > Backend Service > Security Policy > Default
• GCP > Network > Firewall > Target Tags
• GCP > Network > Firewall > Target Tags > Approved
• GCP > Network > Firewall > Target Tags > Approved > Tags
• GCP > Network > Region Backend Service > Security Policy
• GCP > Network > Region Backend Service > Security Policy > Allowed
• GCP > Network > Region Backend Service > Security Policy > Default
• GCP > Network > Region Security Policy > Active
• GCP > Network > Region Security Policy > Active > Age
• GCP > Network > Region Security Policy > Active > Last Modified
• GCP > Network > Region Security Policy > Allowed
• GCP > Network > Region Security Policy > Allowed > Custom
• GCP > Network > Region Security Policy > Allowed > Custom > Rules
• GCP > Network > Region Security Policy > Allowed > Region
• GCP > Network > Region Security Policy > Allowed > Region > Regions
• GCP > Network > Region Security Policy > CMDB
• GCP > Network > Region Security Policy > Regions
• GCP > Network > Region Security Policy > Rules
• GCP > Network > Region Security Policy > Rules > Approved
• GCP > Network > Region Security Policy > Rules > Approved > Rules
• GCP > Network > Security Policy > Active
• GCP > Network > Security Policy > Active > Age
• GCP > Network > Security Policy > Active > Last Modified
• GCP > Network > Security Policy > Allowed
• GCP > Network > Security Policy > Allowed > Custom
• GCP > Network > Security Policy > Allowed > Custom > Rules
• GCP > Network > Security Policy > CMDB
• GCP > Network > Security Policy > Labels
• GCP > Network > Security Policy > Labels > Template
• GCP > Network > Security Policy > Rules
• GCP > Network > Security Policy > Rules > Approved
• GCP > Network > Security Policy > Rules > Approved > Rules

Action Types

Added

• GCP > Network > Backend Service > Set Security Policy
• GCP > Network > Firewall > Set Target Tags
• GCP > Network > Region Backend Service > Router
• GCP > Network > Region Backend Service > Set Security Policy
• GCP > Network > Region Security Policy > Delete
• GCP > Network > Region Security Policy > Router
• GCP > Network > Region Security Policy > Update Or Delete Rules
• GCP > Network > Security Policy > Delete
• GCP > Network > Security Policy > Router
• GCP > Network > Security Policy > Set Labels
• GCP > Network > Security Policy > Update Or Delete Rules

What's new?

• Added a Network Tags control family on GCP > Compute Engine > Instance to govern the network tags that decide which firewall rules apply to an instance. Network Tags > Approved removes any tag that is not on your wildcard-enabled Approved > Tags list, and Network Tags > Required adds any tag missing from your Required > Items list — both enforced in place via the new Set Network Tags action, leaving every other tag untouched so the instance keeps running.

Control Types

Added

• GCP > Compute Engine > Instance > Network Tags
• GCP > Compute Engine > Instance > Network Tags > Approved
• GCP > Compute Engine > Instance > Network Tags > Required

Policy Types

Added

• GCP > Compute Engine > Instance > Network Tags
• GCP > Compute Engine > Instance > Network Tags > Approved
• GCP > Compute Engine > Instance > Network Tags > Approved > Tags
• GCP > Compute Engine > Instance > Network Tags > Required
• GCP > Compute Engine > Instance > Network Tags > Required > Items

Action Types

Added

• GCP > Compute Engine > Instance > Set Network Tags

What's new?

• The Usage controls and their Usage and Usage > Limit policies have been retired from all GCP Pub/Sub resource types (Snapshot, Subscription, and Topic).

Control Types

Removed

• GCP > Pub/Sub > Snapshot > Usage
• GCP > Pub/Sub > Subscription > Usage
• GCP > Pub/Sub > Topic > Usage

Policy Types

Removed

• GCP > Pub/Sub > Snapshot > Usage
• GCP > Pub/Sub > Snapshot > Usage > Limit
• GCP > Pub/Sub > Subscription > Usage
• GCP > Pub/Sub > Subscription > Usage > Limit
• GCP > Pub/Sub > Topic > Usage
• GCP > Pub/Sub > Topic > Usage > Limit

What's new?

• The Usage controls and their Usage and Usage > Limit policies have been retired from all GCP Logging resource types (Exclusion, Metric, and Sink).

Control Types

Removed

• GCP > Logging > Exclusion > Usage
• GCP > Logging > Metric > Usage
• GCP > Logging > Sink > Usage

Policy Types

Removed

• GCP > Logging > Exclusion > Usage
• GCP > Logging > Exclusion > Usage > Limit
• GCP > Logging > Metric > Usage
• GCP > Logging > Metric > Usage > Limit
• GCP > Logging > Sink > Usage
• GCP > Logging > Sink > Usage > Limit

What's new?

• The Usage controls and their Usage and Usage > Limit policies have been retired from the GCP IAM API Key, Service Account, and Service Account Key resource types.

Control Types

Removed

• GCP > IAM > API Key > Usage
• GCP > IAM > Service Account > Usage
• GCP > IAM > Service Account Key > Usage

Policy Types

Removed

• GCP > IAM > API Key > Usage
• GCP > IAM > API Key > Usage > Limit
• GCP > IAM > Service Account > Usage
• GCP > IAM > Service Account > Usage > Limit
• GCP > IAM > Service Account Key > Usage
• GCP > IAM > Service Account Key > Usage > Limit

Bug fixes

• When the GCP > Compute Engine > Instance > Block Project Wide SSH Keys control enforced your policy, it updated the instance correctly but left no notification on the instance's activity feed — making it hard to see that Guardrails had taken the action. Enforcement now posts a notification on the activity feed both when it succeeds (Block Project Wide SSH Keys set to Enabled/Disabled) and when it fails, so you always have a clear audit trail.

What's new?

• The Usage controls and their Usage and Usage > Limit policies have been retired from all GCP BigQuery resource types (Dataset and Table).

Control Types

Removed

• GCP > BigQuery > Dataset > Usage
• GCP > BigQuery > Table > Usage

Policy Types

Removed

• GCP > BigQuery > Dataset > Usage
• GCP > BigQuery > Dataset > Usage > Limit
• GCP > BigQuery > Table > Usage
• GCP > BigQuery > Table > Usage > Limit

What's new?

• Guardrails services can now run on AWS Fargate. A new launch type option lets you deploy the API, events, maintenance, and factory services as serverless Fargate tasks, with configurable traffic flow, CPU architecture, and per-service CPU and memory sizing. The existing EC2 launch type remains the default and is unchanged.
• Added Workload Identity Federation support for GCP. A dedicated transit role lets worker Lambdas and API containers federate to GCP without long-lived credentials.
• Added outbound Workload Identity Federation support for Azure, enabling keyless federation for Azure connections in the AWS commercial partition.

What's new?

This release adds AWS Fargate as a launch type for Guardrails services, significantly expands AI provider configuration, and introduces keyless Workload Identity Federation for GCP and Azure.

Key capabilities include:

• AWS Fargate support for the API, Events, Maintenance, and Factory services, with a phased EC2-to-Fargate rollout model and zero-downtime traffic cutover. Requires TEF 1.71.0.
• Flexible AI providers — Configure any provider model by name (including models newer than the release), route AI traffic through custom or private endpoints, connect Anthropic and OpenAI natively, and validate a configuration with a new Test Connection action.
• Workload identity federation for GCP and Azure, enabling keyless cloud credentials.
• Embedded docs and Hub are now included in the workspace and can be accessed under the Help menu item.

Requirements

• Upgrade to 5.59.0 requires your workspace to be on 5.54.x
• PostgreSQL (RDS engine): >= 15
• TEF: 1.71.0
• TED: 1.37.0
• Mods:
  • @turbot/turbot: 5.57.0

Base images

• Alpine: 3.17.5
• Ubuntu: 22.04.3

What's new?

• The Usage control and its Usage and Usage > Limit policies have been retired from the GCP Storage Bucket resource type.

Control Types

Removed

• GCP > Storage > Bucket > Usage

Policy Types

Removed

• GCP > Storage > Bucket > Usage
• GCP > Storage > Bucket > Usage > Limit

What's new?

• The Usage controls and their Usage and Usage > Limit policies have been retired from all GCP Network resource types.

Control Types

Removed

• GCP > Network > Address > Usage
• GCP > Network > Backend Bucket > Usage
• GCP > Network > Backend Service > Usage
• GCP > Network > Firewall > Usage
• GCP > Network > Forwarding Rule > Usage
• GCP > Network > Global Address > Usage
• GCP > Network > Global Forwarding Rule > Usage
• GCP > Network > Interconnect > Usage
• GCP > Network > Network > Usage
• GCP > Network > Packet Mirroring > Usage
• GCP > Network > Region Backend Service > Usage
• GCP > Network > Region SSL Certificate > Usage
• GCP > Network > Region Target HTTPS Proxy > Usage
• GCP > Network > Region URL Map > Usage
• GCP > Network > Route > Usage
• GCP > Network > Router > Usage
• GCP > Network > SSL Certificate > Usage
• GCP > Network > SSL Policy > Usage
• GCP > Network > Subnetwork > Usage
• GCP > Network > Target HTTPS Proxy > Usage
• GCP > Network > Target Pool > Usage
• GCP > Network > Target SSL Proxy > Usage
• GCP > Network > Target TCP Proxy > Usage
• GCP > Network > Target VPN Gateway > Usage
• GCP > Network > URL Map > Usage
• GCP > Network > VPN Tunnel > Usage

Policy Types

Removed

• GCP > Network > Address > Usage
• GCP > Network > Address > Usage > Limit
• GCP > Network > Backend Bucket > Usage
• GCP > Network > Backend Bucket > Usage > Limit
• GCP > Network > Backend Service > Usage
• GCP > Network > Backend Service > Usage > Limit
• GCP > Network > Firewall > Usage
• GCP > Network > Firewall > Usage > Limit
• GCP > Network > Forwarding Rule > Usage
• GCP > Network > Forwarding Rule > Usage > Limit
• GCP > Network > Global Address > Usage
• GCP > Network > Global Address > Usage > Limit
• GCP > Network > Global Forwarding Rule > Usage
• GCP > Network > Global Forwarding Rule > Usage > Limit
• GCP > Network > Interconnect > Usage
• GCP > Network > Interconnect > Usage > Limit
• GCP > Network > Network > Usage
• GCP > Network > Network > Usage > Limit
• GCP > Network > Packet Mirroring > Usage
• GCP > Network > Packet Mirroring > Usage > Limit
• GCP > Network > Region Backend Service > Usage
• GCP > Network > Region Backend Service > Usage > Limit
• GCP > Network > Region SSL Certificate > Usage
• GCP > Network > Region SSL Certificate > Usage > Limit
• GCP > Network > Region Target HTTPS Proxy > Usage
• GCP > Network > Region Target HTTPS Proxy > Usage > Limit
• GCP > Network > Region URL Map > Usage
• GCP > Network > Region URL Map > Usage > Limit
• GCP > Network > Route > Usage
• GCP > Network > Route > Usage > Limit
• GCP > Network > Router > Usage
• GCP > Network > Router > Usage > Limit
• GCP > Network > SSL Certificate > Usage
• GCP > Network > SSL Certificate > Usage > Limit
• GCP > Network > SSL Policy > Usage
• GCP > Network > SSL Policy > Usage > Limit
• GCP > Network > Subnetwork > Usage
• GCP > Network > Subnetwork > Usage > Limit
• GCP > Network > Target HTTPS Proxy > Usage
• GCP > Network > Target HTTPS Proxy > Usage > Limit
• GCP > Network > Target Pool > Usage
• GCP > Network > Target Pool > Usage > Limit
• GCP > Network > Target SSL Proxy > Usage
• GCP > Network > Target SSL Proxy > Usage > Limit
• GCP > Network > Target TCP Proxy > Usage
• GCP > Network > Target TCP Proxy > Usage > Limit
• GCP > Network > Target VPN Gateway > Usage
• GCP > Network > Target VPN Gateway > Usage > Limit
• GCP > Network > URL Map > Usage
• GCP > Network > URL Map > Usage > Limit
• GCP > Network > VPN Tunnel > Usage
• GCP > Network > VPN Tunnel > Usage > Limit

What's new?

• The Usage controls and their Usage and Usage > Limit policies have been retired from all GCP Kubernetes Engine resource types.

Control Types

Removed

• GCP > Kubernetes Engine > Region Cluster > Usage
• GCP > Kubernetes Engine > Region Node Pool > Usage
• GCP > Kubernetes Engine > Zone Cluster > Usage
• GCP > Kubernetes Engine > Zone Node Pool > Usage

Policy Types

Removed

• GCP > Kubernetes Engine > Region Cluster > Usage
• GCP > Kubernetes Engine > Region Cluster > Usage > Limit
• GCP > Kubernetes Engine > Region Node Pool > Usage
• GCP > Kubernetes Engine > Region Node Pool > Usage > Limit
• GCP > Kubernetes Engine > Zone Cluster > Usage
• GCP > Kubernetes Engine > Zone Cluster > Usage > Limit
• GCP > Kubernetes Engine > Zone Node Pool > Usage
• GCP > Kubernetes Engine > Zone Node Pool > Usage > Limit

What's changed?

• The Usage controls and their Usage and Usage > Limit policies have been retired from all GCP Compute Engine resource types (Disk, Health Check, HTTP Health Check, HTTPS Health Check, Image, Instance, Instance Group, Instance Template, Node Group, Node Template, Region Disk, Region Health Check, and Snapshot).

Control Types

Removed

• GCP > Compute Engine > Disk > Usage
• GCP > Compute Engine > HTTP Health Check > Usage
• GCP > Compute Engine > HTTPS Health Check > Usage
• GCP > Compute Engine > Health Check > Usage
• GCP > Compute Engine > Image > Usage
• GCP > Compute Engine > Instance > Usage
• GCP > Compute Engine > Instance Template > Usage
• GCP > Compute Engine > Node Group > Usage
• GCP > Compute Engine > Node template > Usage
• GCP > Compute Engine > Region Disk > Usage
• GCP > Compute Engine > Region Health Check > Usage
• GCP > Compute Engine > Snapshot > Usage

Policy Types

Removed

• GCP > Compute Engine > Disk > Usage
• GCP > Compute Engine > Disk > Usage > Limit
• GCP > Compute Engine > HTTP Health Check > Usage
• GCP > Compute Engine > HTTP Health Check > Usage > Limit
• GCP > Compute Engine > HTTPS Health Check > Usage
• GCP > Compute Engine > HTTPS Health Check > Usage > Limit
• GCP > Compute Engine > Health Check > Usage
• GCP > Compute Engine > Health Check > Usage > Limit
• GCP > Compute Engine > Image > Usage
• GCP > Compute Engine > Image > Usage > Limit
• GCP > Compute Engine > Instance > Usage
• GCP > Compute Engine > Instance > Usage > Limit
• GCP > Compute Engine > Instance Template > Usage
• GCP > Compute Engine > Instance Template > Usage > Limit
• GCP > Compute Engine > Node Group > Usage
• GCP > Compute Engine > Node Group > Usage > Limit
• GCP > Compute Engine > Node template > Usage
• GCP > Compute Engine > Node template > Usage > Limit
• GCP > Compute Engine > Region Disk > Usage
• GCP > Compute Engine > Region Disk > Usage > Limit
• GCP > Compute Engine > Region Health Check > Usage
• GCP > Compute Engine > Region Health Check > Usage > Limit
• GCP > Compute Engine > Snapshot > Usage
• GCP > Compute Engine > Snapshot > Usage > Limit

What's new?

• Real-time event handling across 20 AWS mods now respects each resource's CMDB policy. These mods previously forwarded every CloudWatch event for their service through a static, catch-all event source, so events kept arriving and being processed even when the resource's CMDB policy was set to Enforce: Disabled. The Event Sources policy is now calculated from the resource's CMDB policy: it forwards the service's source while CMDB is Enforce: Enabled, and forwards nothing when CMDB is Enforce: Disabled or Skip.

Released versions:

• aws-acm v5.13.0
• aws-amplify v5.8.0
• aws-appmesh v5.8.0
• aws-cloudsearch v5.5.0
• aws-cloudwatch v5.13.0
• aws-datapipeline v5.5.0
• aws-datasync v5.3.0
• aws-dax v5.8.0
• aws-directoryservice v5.8.0
• aws-elasticsearch v5.10.0
• aws-glacier v5.9.0
• aws-mskconnect v5.1.0
• aws-qldb v5.6.0
• aws-ram v5.6.0
• aws-securityhub v5.7.0
• aws-ses v5.8.0
• aws-swf v5.9.0
• aws-wafregional v5.8.0
• aws-workspaces v5.7.0
• aws-xray v5.8.0