Control types for @turbot/gcp-network

Category

Resource > API Enabled

Targets

GCP > Network > Address > Active

Take an action when an GCP Network address is not active based on the
GCP > Network > Address > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Address > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/addressActive

Parent

Category

Targets

GCP > Network > Address > Approved

Take an action when a GCP Network address is not approved based on GCP > Network > Address > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/addressApproved

Parent

Category

Targets

GCP > Network > Address > CMDB

Record and synchronize details for the GCP Network address into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

CMDB controls also use the Regions policy associated with the resource. If
region is not in GCP > Network > Address > Regions policy, the CMDB control will delete the
resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/addressCmdb

Parent

Category

Targets

GCP > Network > Address > Configured

Maintain network address configuration

URI

tmod:@turbot/gcp-network#/control/types/addressConfigured

Parent

Category

Targets

GCP > Network > Address > Discovery

Discover GCP Network address resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

Note that Discovery and CMDB controls also use the Regions policy
associated with the resource. If the region is not in GCP > Network > Address > Regions policy, the CMDB
control will delete the resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/addressDiscovery

Parent

Category

Targets

GCP > Network > Address > Usage

The Usage control determines whether the number of GCP Network address resources exceeds the configured usage limit for this region.

You can configure the behavior of this control with the GCP > Network > Address > Usage policy, and set the limit with the GCP > Network > Address > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/addressUsage

Parent

Category

Targets

GCP > Network > Backend Bucket > Active

Take an action when an GCP Network backend bucket is not active based on the
GCP > Network > Backend Bucket > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Backend Bucket > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/backendBucketActive

Parent

Category

Targets

GCP > Network > Backend Bucket > Approved

Take an action when a GCP Network backend bucket is not approved based on GCP > Network > Backend Bucket > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/backendBucketApproved

Parent

Category

Targets

GCP > Network > Backend Bucket > CMDB

Record and synchronize details for the GCP Network backend bucket into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

URI

tmod:@turbot/gcp-network#/control/types/backendBucketCmdb

Parent

Category

Targets

GCP > Network > Backend Bucket > Configured

Maintain network backendBucket configuration

URI

tmod:@turbot/gcp-network#/control/types/backendBucketConfigured

Parent

Category

Targets

GCP > Network > Backend Bucket > Discovery

Discover GCP Network backend bucket resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

URI

tmod:@turbot/gcp-network#/control/types/backendBucketDiscovery

Parent

Category

Targets

GCP > Network > Backend Bucket > Usage

The Usage control determines whether the number of GCP Network backend bucket resources exceeds the configured usage limit for this project.

You can configure the behavior of this control with the GCP > Network > Backend Bucket > Usage policy, and set the limit with the GCP > Network > Backend Bucket > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/backendBucketUsage

Parent

Category

Targets

GCP > Network > Backend Service > Active

Take an action when an GCP Network backend service is not active based on the
GCP > Network > Backend Service > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Backend Service > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/backendServiceActive

Parent

Category

Targets

GCP > Network > Backend Service > Approved

Take an action when a GCP Network backend service is not approved based on GCP > Network > Backend Service > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/backendServiceApproved

Parent

Category

Targets

GCP > Network > Backend Service > CMDB

Record and synchronize details for the GCP Network backend service into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

URI

tmod:@turbot/gcp-network#/control/types/backendServiceCmdb

Parent

Category

Targets

GCP > Network > Backend Service > Configured

Maintain network backendService configuration

URI

tmod:@turbot/gcp-network#/control/types/backendServiceConfigured

Parent

Category

Targets

GCP > Network > Backend Service > Discovery

Discover GCP Network backend service resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

URI

tmod:@turbot/gcp-network#/control/types/backendServiceDiscovery

Parent

Category

Targets

GCP > Network > Backend Service > Logging

Define the Logging settings required for GCP > Network > Backend Service > Logging.

Backend Service Logging allows you to audit, verify, and analyze the effects of your Backend Service.

URI

tmod:@turbot/gcp-network#/control/types/backendServiceLogging

Parent

Category

Resource > Logging

Targets

GCP > Network > Backend Service > Usage

The Usage control determines whether the number of GCP Network backend service resources exceeds the configured usage limit for this project.

You can configure the behavior of this control with the GCP > Network > Backend Service > Usage policy, and set the limit with the GCP > Network > Backend Service > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/backendServiceUsage

Parent

Category

Targets

GCP > Network > CMDB

Record and synchronize details for the GCP Network into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

URI

tmod:@turbot/gcp-network#/control/types/networkServiceCmdb

Parent

Category

Targets

GCP > Network > Discovery

Discover GCP Network resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

URI

tmod:@turbot/gcp-network#/control/types/networkServiceDiscovery

Parent

Category

Targets

GCP > Network > Firewall > Active

Take an action when an GCP Network firewall is not active based on the
GCP > Network > Firewall > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Firewall > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/firewallActive

Parent

Category

Targets

GCP > Network > Firewall > Approved

Take an action when a GCP Network firewall is not approved based on GCP > Network > Firewall > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/firewallApproved

Parent

Category

Targets

GCP > Network > Firewall > CMDB

Record and synchronize details for the GCP Network firewall into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

URI

tmod:@turbot/gcp-network#/control/types/firewallCmdb

Parent

Category

Targets

GCP > Network > Firewall > Configured

Maintain network firewall configuration

URI

tmod:@turbot/gcp-network#/control/types/firewallConfigured

Parent

Category

Targets

GCP > Network > Firewall > Discovery

Discover GCP Network firewall resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

URI

tmod:@turbot/gcp-network#/control/types/firewallDiscovery

Parent

Category

GCP > Network > Subnetwork

URI

tmod:@turbot/gcp-network#/control/types/subnetworkPolicy

Parent

Category

Security > Trusted Access

GCP > Network > Subnetwork > Policy > Trusted Access

Take an action when GCP Network Subnetwork policy is not trusted based on the
GCP > Network > Subnetwork > Trusted Access > * policies.

The Trusted Access control evaluates the IAM policy against the list of allowed
members in each of the Trusted Access sub-policies (Trusted Access > Domains,
Trusted Access > Groups, etc)., this control raises an alarm and takes the
defined enforcement action.

If set to "Enforce: Trusted Access > *", access to non-trusted
members will be removed.

URI

tmod:@turbot/gcp-network#/control/types/subnetworkPolicyTrustedAccess

Parent

GCP > Network > Subnetwork > Policy

Category

Security > Trusted Access

Targets

GCP > Network > Subnetwork

GCP > Network > Subnetwork > Usage

The Usage control determines whether the number of GCP Network subnetwork resources exceeds the configured usage limit for this region.

You can configure the behavior of this control with the GCP > Network > Subnetwork > Usage policy, and set the limit with the GCP > Network > Subnetwork > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/subnetworkUsage

Parent

GCP > Network > Subnetwork

Category

Targets

GCP > Network > Target HTTPS Proxy > Active

Take an action when an GCP Network target https proxy is not active based on the
GCP > Network > Target HTTPS Proxy > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Target HTTPS Proxy > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetHttpsProxyActive

Parent

Category

Targets

GCP > Network > Target HTTPS Proxy > Approved

Take an action when a GCP Network target https proxy is not approved based on GCP > Network > Target HTTPS Proxy > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetHttpsProxyApproved

Parent

Category

Targets

GCP > Network > Target HTTPS Proxy > CMDB

Record and synchronize details for the GCP Network target https proxy into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

URI

tmod:@turbot/gcp-network#/control/types/targetHttpsProxyCmdb

Parent

Category

Targets

GCP > Network > Target HTTPS Proxy > Discovery

Discover GCP Network target https proxy resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

URI

tmod:@turbot/gcp-network#/control/types/targetHttpsProxyDiscovery

Parent

Category

Targets

GCP > Network > Target HTTPS Proxy > SSL Policy

Determine the action to take when an GCP Network target HTTPS proxy is not using an
allowed SSL policy.

If a target HTTPS proxy is not using an allowed SSL policy and this policy is set to
Enforce: Set to default if SSL policy not in allowed list, the target HTTPS proxy will be updated to use
the SSL policy selected in the GCP > Network > Target HTTPS Proxy > SSL Policy > Default policy.

If the SSL policy in the GCP > Network > Target HTTPS Proxy > SSL Policy > Default policy is not allowed
in the GCP > Network > Target HTTPS Proxy > SSL Policy > Allowed policy, Guardrails will not attempt to set
the SSL policy to prevent continuous updates.

URI

tmod:@turbot/gcp-network#/control/types/targetHttpsProxySslPolicy

Parent

Category

Other

Targets

GCP > Network > Target HTTPS Proxy > Usage

The Usage control determines whether the number of GCP Network target https proxy resources exceeds the configured usage limit for this project.

You can configure the behavior of this control with the GCP > Network > Target HTTPS Proxy > Usage policy, and set the limit with the GCP > Network > Target HTTPS Proxy > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/targetHttpsProxyUsage

Parent

Category

Targets

GCP > Network > Target Pool > Active

Take an action when an GCP Network target pool is not active based on the
GCP > Network > Target Pool > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Target Pool > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetPoolActive

Parent

Category

Targets

GCP > Network > Target Pool > Approved

Take an action when a GCP Network target pool is not approved based on GCP > Network > Target Pool > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetPoolApproved

Parent

Category

Targets

GCP > Network > Target Pool > CMDB

Record and synchronize details for the GCP Network target pool into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

CMDB controls also use the Regions policy associated with the resource. If
region is not in GCP > Network > Target Pool > Regions policy, the CMDB control will delete the
resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/targetPoolCmdb

Parent

Category

Targets

GCP > Network > Target Pool > Discovery

Discover GCP Network target pool resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

Note that Discovery and CMDB controls also use the Regions policy
associated with the resource. If the region is not in GCP > Network > Target Pool > Regions policy, the CMDB
control will delete the resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/targetPoolDiscovery

Parent

Category

Targets

GCP > Network > Target Pool > Usage

The Usage control determines whether the number of GCP Network target pool resources exceeds the configured usage limit for this project.

You can configure the behavior of this control with the GCP > Network > Target Pool > Usage policy, and set the limit with the GCP > Network > Target Pool > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/targetPoolUsage

Parent

Category

Targets

GCP > Network > Target SSL Proxy > Active

Take an action when an GCP Network target ssl proxy is not active based on the
GCP > Network > Target SSL Proxy > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Target SSL Proxy > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetSslProxyActive

Parent

Category

Targets

GCP > Network > Target SSL Proxy > Approved

Take an action when a GCP Network target ssl proxy is not approved based on GCP > Network > Target SSL Proxy > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetSslProxyApproved

Parent

Category

Targets

GCP > Network > Target SSL Proxy > CMDB

Record and synchronize details for the GCP Network target ssl proxy into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

URI

tmod:@turbot/gcp-network#/control/types/targetSslProxyCmdb

Parent

Category

Targets

GCP > Network > Target SSL Proxy > Discovery

Discover GCP Network target ssl proxy resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

URI

tmod:@turbot/gcp-network#/control/types/targetSslProxyDiscovery

Parent

Category

Targets

GCP > Network > Target SSL Proxy > SSL Policy

Determine the action to take when an GCP Network target SSL proxy is not using
an allowed SSL policy.

If a target SSL proxy is not using an allowed SSL policy and this policy is set to
Enforce: Set to default if SSL policy not in allowed list, the target SSL proxy will be updated
to use the SSL policy selected in the GCP > Network > Target SSL Proxy > SSL Policy > Default policy.

If the SSL policy in the GCP > Network > Target SSL Proxy > SSL Policy > Default policy is
not allowed in the GCP > Network > Target SSL Proxy > SSL Policy > Allowed policy, Guardrails will
not attempt to set the SSL policy to prevent continuous updates.

URI

tmod:@turbot/gcp-network#/control/types/targetSslProxySslPolicy

Parent

Category

Other

Targets

GCP > Network > Target SSL Proxy > Usage

The Usage control determines whether the number of GCP Network target ssl proxy resources exceeds the configured usage limit for this project.

You can configure the behavior of this control with the GCP > Network > Target SSL Proxy > Usage policy, and set the limit with the GCP > Network > Target SSL Proxy > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/targetSslProxyUsage

Parent

Category

Targets

GCP > Network > Target TCP Proxy > Active

Take an action when an GCP Network target tcp proxy is not active based on the
GCP > Network > Target TCP Proxy > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Target TCP Proxy > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetTcpProxyActive

Parent

Category

Targets

GCP > Network > Target TCP Proxy > Approved

Take an action when a GCP Network target tcp proxy is not approved based on GCP > Network > Target TCP Proxy > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetTcpProxyApproved

Parent

Category

Targets

GCP > Network > Target TCP Proxy > CMDB

Record and synchronize details for the GCP Network target tcp proxy into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

This control will automatically re-run every 24 hours because GCP does not currently support real-time events for this resource type.

URI

tmod:@turbot/gcp-network#/control/types/targetTcpProxyCmdb

Parent

Category

Targets

GCP > Network > Target TCP Proxy > Discovery

Discover GCP Network target tcp proxy resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

This control will automatically re-run every 24 hours because GCP does not currently support real-time events for this resource type.

URI

tmod:@turbot/gcp-network#/control/types/targetTcpProxyDiscovery

Parent

Category

Targets

GCP > Network > Target TCP Proxy > Usage

The Usage control determines whether the number of GCP Network target tcp proxy resources exceeds the configured usage limit for this project.

You can configure the behavior of this control with the GCP > Network > Target TCP Proxy > Usage policy, and set the limit with the GCP > Network > Target TCP Proxy > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/targetTcpProxyUsage

Parent

Category

Targets

GCP > Network > Target VPN Gateway > Active

Take an action when an GCP Network target vpn gateway is not active based on the
GCP > Network > Target VPN Gateway > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > Target VPN Gateway > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetVpnGatewayActive

Parent

Category

Targets

GCP > Network > Target VPN Gateway > Approved

Take an action when a GCP Network target vpn gateway is not approved based on GCP > Network > Target VPN Gateway > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/targetVpnGatewayApproved

Parent

Category

Targets

GCP > Network > Target VPN Gateway > CMDB

Record and synchronize details for the GCP Network target vpn gateway into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

CMDB controls also use the Regions policy associated with the resource. If
region is not in GCP > Network > Target VPN Gateway > Regions policy, the CMDB control will delete the
resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/targetVpnGatewayCmdb

Parent

Category

Targets

GCP > Network > Target VPN Gateway > Configured

Maintain network Target VPN Gateway configuration

URI

tmod:@turbot/gcp-network#/control/types/targetVpnGatewayConfigured

Parent

Category

Targets

GCP > Network > Target VPN Gateway > Discovery

Discover GCP Network target vpn gateway resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

Note that Discovery and CMDB controls also use the Regions policy
associated with the resource. If the region is not in GCP > Network > Target VPN Gateway > Regions policy, the CMDB
control will delete the resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/targetVpnGatewayDiscovery

Parent

Category

Targets

GCP > Network > Target VPN Gateway > Usage

The Usage control determines whether the number of GCP Network target vpn gateway resources exceeds the configured usage limit for this region.

You can configure the behavior of this control with the GCP > Network > Target VPN Gateway > Usage policy, and set the limit with the GCP > Network > Target VPN Gateway > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/targetVpnGatewayUsage

Parent

Category

Targets

GCP > Network > URL Map > Active

Take an action when an GCP Network url map is not active based on the
GCP > Network > URL Map > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > URL Map > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/urlMapActive

Parent

Category

Targets

GCP > Network > URL Map > Approved

Take an action when a GCP Network url map is not approved based on GCP > Network > URL Map > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/urlMapApproved

Parent

Category

Targets

GCP > Network > URL Map > CMDB

Record and synchronize details for the GCP Network url map into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

URI

tmod:@turbot/gcp-network#/control/types/urlMapCmdb

Parent

Category

Targets

GCP > Network > URL Map > Discovery

Discover GCP Network url map resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

URI

tmod:@turbot/gcp-network#/control/types/urlMapDiscovery

Parent

Category

Targets

GCP > Network > URL Map > Usage

The Usage control determines whether the number of GCP Network url map resources exceeds the configured usage limit for this project.

You can configure the behavior of this control with the GCP > Network > URL Map > Usage policy, and set the limit with the GCP > Network > URL Map > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/urlMapUsage

Parent

Category

Targets

GCP > Network > VPN Tunnel > Active

Take an action when an GCP Network vpn tunnel is not active based on the
GCP > Network > VPN Tunnel > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (GCP > Network > VPN Tunnel > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/gcp-network#/control/types/vpnTunnelActive

Parent

Category

Targets

GCP > Network > VPN Tunnel > Approved

Take an action when a GCP Network vpn tunnel is not approved based on GCP > Network > VPN Tunnel > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/gcp-network#/control/types/vpnTunnelApproved

Parent

Category

Targets

GCP > Network > VPN Tunnel > CMDB

Record and synchronize details for the GCP Network vpn tunnel into the CMDB.

The CMDB control is
responsible for populating and updating all the attributes for that
resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added
to the CMDB, and no controls that target it will run.

CMDB controls also use the Regions policy associated with the resource. If
region is not in GCP > Network > VPN Tunnel > Regions policy, the CMDB control will delete the
resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/vpnTunnelCmdb

Parent

Category

Targets

GCP > Network > VPN Tunnel > Configured

Maintain network vpnTunnel configuration

URI

tmod:@turbot/gcp-network#/control/types/vpnTunnelConfigured

Parent

Category

Targets

GCP > Network > VPN Tunnel > Discovery

Discover GCP Network vpn tunnel resources and add them to the CMDB.

The Discovery
control is tasked with identifying instances for a particular resource.
The Discovery control will periodically search for new target resources and
save them to the Guardrails CMDB. Once discovered, resources are then
responsible for tracking changes to themselves through the
CMDB control.

Note that Discovery and CMDB controls also use the Regions policy
associated with the resource. If the region is not in GCP > Network > VPN Tunnel > Regions policy, the CMDB
control will delete the resource from the CMDB.

URI

tmod:@turbot/gcp-network#/control/types/vpnTunnelDiscovery

Parent

Category

Targets

GCP > Network > VPN Tunnel > Labels

Take an action when an GCP Network vpn tunnel labels is not updated based on the GCP > Network > VPN Tunnel > Labels > * policies.

If the resource is not updated with the labels defined in GCP > Network > VPN Tunnel > Labels > Template, this control raises an alarm and takes the defined enforcement action.

See Labels for more information.

URI

tmod:@turbot/gcp-network#/control/types/vpnTunnelLabels

Parent

Category

Resource > Tags

Targets

GCP > Network > VPN Tunnel > Usage

The Usage control determines whether the number of GCP Network vpn tunnel resources exceeds the configured usage limit for this region.

You can configure the behavior of this control with the GCP > Network > VPN Tunnel > Usage policy, and set the limit with the GCP > Network > VPN Tunnel > Usage > Limit policy.

URI

tmod:@turbot/gcp-network#/control/types/vpnTunnelUsage

Parent

Category

Targets