gcp-computeengine v5.25.0 - Govern network tags on instances

Jul 07, 2026GuardrailsMods

What's new?

  • Added a Network Tags control family on GCP > Compute Engine > Instance to govern the network tags that decide which firewall rules apply to an instance. Network Tags > Approved removes any tag that is not on your wildcard-enabled Approved > Tags list, and Network Tags > Required adds any tag missing from your Required > Items list — both enforced in place via the new Set Network Tags action, leaving every other tag untouched so the instance keeps running.

Control Types

Added

  • GCP > Compute Engine > Instance > Network Tags
  • GCP > Compute Engine > Instance > Network Tags > Approved
  • GCP > Compute Engine > Instance > Network Tags > Required

Policy Types

Added

  • GCP > Compute Engine > Instance > Network Tags
  • GCP > Compute Engine > Instance > Network Tags > Approved
  • GCP > Compute Engine > Instance > Network Tags > Approved > Tags
  • GCP > Compute Engine > Instance > Network Tags > Required
  • GCP > Compute Engine > Instance > Network Tags > Required > Items

Action Types

Added

  • GCP > Compute Engine > Instance > Set Network Tags