Guardrails can now discover the Cloud Resource Manager API (cloudresourcemanager.googleapis.com) as a new GCP > Cloud Resource Manager service resource under each project, and track whether it is enabled. Guardrails relies on this API to read project details, so the API Enabled control lets you alarm on projects where it has been turned off and, with Enforce: Enabled, switch it back on automatically.

Resource Types

Added

• GCP > Cloud Resource Manager

Control Types

Added

• GCP > Cloud Resource Manager > API Enabled
• GCP > Cloud Resource Manager > CMDB
• GCP > Cloud Resource Manager > Discovery

Policy Types

Added

• GCP > Cloud Resource Manager > API Enabled
• GCP > Cloud Resource Manager > CMDB
• GCP > Cloud Resource Manager > Enabled
• GCP > Cloud Resource Manager > Permissions
• GCP > Cloud Resource Manager > Permissions > Levels
• GCP > Cloud Resource Manager > Permissions > Levels > Modifiers
• GCP > Turbot > Permissions > Compiled > Levels > @turbot/gcp-resourcemanager
• GCP > Turbot > Permissions > Compiled > Service Permissions > @turbot/gcp-resourcemanager

Action Types

Added

• GCP > Cloud Resource Manager > Set API Enabled