gcp-computeengine v5.25.0 - Govern network tags on instances
Jul 07, 2026•GuardrailsMods
What's new?
- Added a Network Tags control family on GCP > Compute Engine > Instance to govern the network tags that decide which firewall rules apply to an instance. Network Tags > Approved removes any tag that is not on your wildcard-enabled Approved > Tags list, and Network Tags > Required adds any tag missing from your Required > Items list — both enforced in place via the new Set Network Tags action, leaving every other tag untouched so the instance keeps running.
Control Types
Added
- GCP > Compute Engine > Instance > Network Tags
- GCP > Compute Engine > Instance > Network Tags > Approved
- GCP > Compute Engine > Instance > Network Tags > Required
Policy Types
Added
- GCP > Compute Engine > Instance > Network Tags
- GCP > Compute Engine > Instance > Network Tags > Approved
- GCP > Compute Engine > Instance > Network Tags > Approved > Tags
- GCP > Compute Engine > Instance > Network Tags > Required
- GCP > Compute Engine > Instance > Network Tags > Required > Items
Action Types
Added
- GCP > Compute Engine > Instance > Set Network Tags