Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for new organization policies #863

Conversation

daniel-cit
Copy link
Contributor

@daniel-cit daniel-cit commented Oct 26, 2022

This pull request add support for the following organization policies:

  • Enforce Public Access Prevention

    Secure your Cloud Storage data from public exposure by enforcing public access prevention.
    This governance policy prevents existing and future resources from being accessed via the public internet by disabling and blocking ACLs and IAM permissions that grant access to allUsers and allAuthenticatedUsers.
    Enforce this policy on the entire organization (recommended), specific projects, or specific folders to ensure no data is publicly exposed.
    This policy overrides existing public permissions.
    Public access will be revoked for existing buckets and objects after this policy is enabled.

  • Restrict Authorized Networks on Cloud SQL instances

    This boolean constraint restricts adding Authorized Networks for unproxied database access to Cloud SQL instances where this constraint is set to True.
    This constraint is not retroactive, Cloud SQL instances with existing Authorized Networks will still work even after this constraint is enforced.
    By default, Authorized Networks can be added to Cloud SQL instances.

@daniel-cit daniel-cit changed the title Add support for Public Access Prevention organization policy Add support for new organization policies Oct 27, 2022
Copy link
Member

@bharathkkb bharathkkb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @daniel-cit Can we update the tests too

for _, booleanConstraint := range []string{

@daniel-cit
Copy link
Contributor Author

Thanks @daniel-cit Can we update the tests too

for _, booleanConstraint := range []string{

good catch!

New org policies added to the test too

@bharathkkb bharathkkb merged commit 9c17c13 into terraform-google-modules:master Nov 3, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants