@pulumi/google-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
910 lines • 230 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.InterconnectAttachment = exports.Interconnect = exports.InstantSnapshotIamPolicy = exports.InstantSnapshotIamMember = exports.InstantSnapshotIamBinding = exports.InstantSnapshot = exports.InstanceTemplateIamPolicy = exports.InstanceTemplateIamMember = exports.InstanceTemplateIamBinding = exports.InstanceTemplate = exports.InstanceIamPolicy = exports.InstanceIamMember = exports.InstanceIamBinding = exports.InstanceGroupManagerResizeRequest = exports.InstanceGroupManager = exports.InstanceGroup = exports.Instance = exports.ImageIamPolicy = exports.ImageIamMember = exports.ImageIamBinding = exports.Image = exports.HttpsHealthCheck = exports.HttpHealthCheck = exports.HealthCheck = exports.GlobalPublicDelegatedPrefix = exports.GlobalNetworkEndpointGroup = exports.GlobalForwardingRule = exports.GlobalAddress = exports.FutureReservation = exports.ForwardingRule = exports.FirewallPolicyIamPolicy = exports.FirewallPolicyIamMember = exports.FirewallPolicyIamBinding = exports.FirewallPolicy = exports.Firewall = exports.ExternalVpnGateway = exports.DiskIamPolicy = exports.DiskIamMember = exports.DiskIamBinding = exports.Disk = exports.BackendServiceIamPolicy = exports.BackendServiceIamMember = exports.BackendServiceIamBinding = exports.BackendService = exports.BackendBucketIamPolicy = exports.BackendBucketIamMember = exports.BackendBucketIamBinding = exports.BackendBucket = exports.Autoscaler = exports.Address = void 0;
exports.RegionNetworkEndpointGroup = exports.RegionInstantSnapshotIamPolicy = exports.RegionInstantSnapshotIamMember = exports.RegionInstantSnapshotIamBinding = exports.RegionInstantSnapshot = exports.RegionInstanceTemplate = exports.RegionInstanceGroupManager = exports.RegionHealthCheckService = exports.RegionHealthCheck = exports.RegionDiskIamPolicy = exports.RegionDiskIamMember = exports.RegionDiskIamBinding = exports.RegionDisk = exports.RegionCommitment = exports.RegionBackendServiceIamPolicy = exports.RegionBackendServiceIamMember = exports.RegionBackendServiceIamBinding = exports.RegionBackendService = exports.RegionAutoscaler = exports.PublicDelegatedPrefix = exports.PublicAdvertisedPrefix = exports.PacketMirroring = exports.OrganizationSecurityPolicy = exports.NodeTemplateIamPolicy = exports.NodeTemplateIamMember = exports.NodeTemplateIamBinding = exports.NodeTemplate = exports.NodeGroupIamPolicy = exports.NodeGroupIamMember = exports.NodeGroupIamBinding = exports.NodeGroup = exports.NetworkFirewallPolicyIamPolicy = exports.NetworkFirewallPolicyIamMember = exports.NetworkFirewallPolicyIamBinding = exports.NetworkFirewallPolicy = exports.NetworkEndpointGroup = exports.NetworkEdgeSecurityService = exports.NetworkAttachmentIamPolicy = exports.NetworkAttachmentIamMember = exports.NetworkAttachmentIamBinding = exports.NetworkAttachment = exports.Network = exports.MachineImageIamPolicy = exports.MachineImageIamMember = exports.MachineImageIamBinding = exports.MachineImage = exports.LicenseIamPolicy = exports.LicenseIamMember = exports.LicenseIamBinding = exports.License = void 0;
exports.VpnTunnel = exports.VpnGateway = exports.UrlMap = exports.TargetVpnGateway = exports.TargetTcpProxy = exports.TargetSslProxy = exports.TargetPool = exports.TargetInstance = exports.TargetHttpsProxy = exports.TargetHttpProxy = exports.TargetGrpcProxy = exports.SubnetworkIamPolicy = exports.SubnetworkIamMember = exports.SubnetworkIamBinding = exports.Subnetwork = exports.SslPolicy = exports.SslCertificate = exports.SnapshotIamPolicy = exports.SnapshotIamMember = exports.SnapshotIamBinding = exports.Snapshot = exports.ServiceAttachmentIamPolicy = exports.ServiceAttachmentIamMember = exports.ServiceAttachmentIamBinding = exports.ServiceAttachment = exports.SecurityPolicy = exports.Router = exports.Route = exports.ResourcePolicyIamPolicy = exports.ResourcePolicyIamMember = exports.ResourcePolicyIamBinding = exports.ResourcePolicy = exports.ReservationIamPolicy = exports.ReservationIamMember = exports.ReservationIamBinding = exports.Reservation = exports.RegionUrlMap = exports.RegionTargetTcpProxy = exports.RegionTargetHttpsProxy = exports.RegionTargetHttpProxy = exports.RegionSslPolicy = exports.RegionSslCertificate = exports.RegionSecurityPolicy = exports.RegionNotificationEndpoint = exports.RegionNetworkFirewallPolicyIamPolicy = exports.RegionNetworkFirewallPolicyIamMember = exports.RegionNetworkFirewallPolicyIamBinding = exports.RegionNetworkFirewallPolicy = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const beta_1 = require("@pulumi/google-native/compute/beta");
const beta_2 = require("@pulumi/google-native/compute/beta");
const beta_3 = require("@pulumi/google-native/compute/beta");
const beta_4 = require("@pulumi/google-native/compute/beta");
const beta_5 = require("@pulumi/google-native/compute/beta");
const beta_6 = require("@pulumi/google-native/compute/beta");
const beta_7 = require("@pulumi/google-native/compute/beta");
const beta_8 = require("@pulumi/google-native/compute/beta");
const beta_9 = require("@pulumi/google-native/compute/beta");
const beta_10 = require("@pulumi/google-native/compute/beta");
const beta_11 = require("@pulumi/google-native/compute/beta");
const beta_12 = require("@pulumi/google-native/compute/beta");
const beta_13 = require("@pulumi/google-native/compute/beta");
const beta_14 = require("@pulumi/google-native/compute/beta");
const beta_15 = require("@pulumi/google-native/compute/beta");
const beta_16 = require("@pulumi/google-native/compute/beta");
const beta_17 = require("@pulumi/google-native/compute/beta");
const beta_18 = require("@pulumi/google-native/compute/beta");
const beta_19 = require("@pulumi/google-native/compute/beta");
const beta_20 = require("@pulumi/google-native/compute/beta");
const beta_21 = require("@pulumi/google-native/compute/beta");
const beta_22 = require("@pulumi/google-native/compute/beta");
const beta_23 = require("@pulumi/google-native/compute/beta");
const beta_24 = require("@pulumi/google-native/compute/beta");
const beta_25 = require("@pulumi/google-native/compute/beta");
const beta_26 = require("@pulumi/google-native/compute/beta");
const beta_27 = require("@pulumi/google-native/compute/beta");
const beta_28 = require("@pulumi/google-native/compute/beta");
const beta_29 = require("@pulumi/google-native/compute/beta");
const beta_30 = require("@pulumi/google-native/compute/beta");
const beta_31 = require("@pulumi/google-native/compute/beta");
const beta_32 = require("@pulumi/google-native/compute/beta");
const beta_33 = require("@pulumi/google-native/compute/beta");
const beta_34 = require("@pulumi/google-native/compute/beta");
const beta_35 = require("@pulumi/google-native/compute/beta");
const beta_36 = require("@pulumi/google-native/compute/beta");
const beta_37 = require("@pulumi/google-native/compute/beta");
const beta_38 = require("@pulumi/google-native/compute/beta");
const beta_39 = require("@pulumi/google-native/compute/beta");
const beta_40 = require("@pulumi/google-native/compute/beta");
const beta_41 = require("@pulumi/google-native/compute/beta");
const beta_42 = require("@pulumi/google-native/compute/beta");
const beta_43 = require("@pulumi/google-native/compute/beta");
const beta_44 = require("@pulumi/google-native/compute/beta");
const beta_45 = require("@pulumi/google-native/compute/beta");
const beta_46 = require("@pulumi/google-native/compute/beta");
const beta_47 = require("@pulumi/google-native/compute/beta");
const beta_48 = require("@pulumi/google-native/compute/beta");
const beta_49 = require("@pulumi/google-native/compute/beta");
const beta_50 = require("@pulumi/google-native/compute/beta");
const beta_51 = require("@pulumi/google-native/compute/beta");
const beta_52 = require("@pulumi/google-native/compute/beta");
const beta_53 = require("@pulumi/google-native/compute/beta");
const beta_54 = require("@pulumi/google-native/compute/beta");
const beta_55 = require("@pulumi/google-native/compute/beta");
const beta_56 = require("@pulumi/google-native/compute/beta");
const beta_57 = require("@pulumi/google-native/compute/beta");
const beta_58 = require("@pulumi/google-native/compute/beta");
const beta_59 = require("@pulumi/google-native/compute/beta");
const beta_60 = require("@pulumi/google-native/compute/beta");
const beta_61 = require("@pulumi/google-native/compute/beta");
const beta_62 = require("@pulumi/google-native/compute/beta");
const beta_63 = require("@pulumi/google-native/compute/beta");
const beta_64 = require("@pulumi/google-native/compute/beta");
const beta_65 = require("@pulumi/google-native/compute/beta");
const beta_66 = require("@pulumi/google-native/compute/beta");
const beta_67 = require("@pulumi/google-native/compute/beta");
const beta_68 = require("@pulumi/google-native/compute/beta");
const beta_69 = require("@pulumi/google-native/compute/beta");
const beta_70 = require("@pulumi/google-native/compute/beta");
const beta_71 = require("@pulumi/google-native/compute/beta");
const beta_72 = require("@pulumi/google-native/compute/beta");
const beta_73 = require("@pulumi/google-native/compute/beta");
const beta_74 = require("@pulumi/google-native/compute/beta");
const beta_75 = require("@pulumi/google-native/compute/beta");
const beta_76 = require("@pulumi/google-native/compute/beta");
const beta_77 = require("@pulumi/google-native/compute/beta");
const beta_78 = require("@pulumi/google-native/compute/beta");
const beta_79 = require("@pulumi/google-native/compute/beta");
const beta_80 = require("@pulumi/google-native/compute/beta");
const beta_81 = require("@pulumi/google-native/compute/beta");
const beta_82 = require("@pulumi/google-native/compute/beta");
const beta_83 = require("@pulumi/google-native/compute/beta");
const beta_84 = require("@pulumi/google-native/compute/beta");
const beta_85 = require("@pulumi/google-native/compute/beta");
const beta_86 = require("@pulumi/google-native/compute/beta");
const beta_87 = require("@pulumi/google-native/compute/beta");
const beta_88 = require("@pulumi/google-native/compute/beta");
const beta_89 = require("@pulumi/google-native/compute/beta");
const beta_90 = require("@pulumi/google-native/compute/beta");
const beta_91 = require("@pulumi/google-native/compute/beta");
const beta_92 = require("@pulumi/google-native/compute/beta");
const beta_93 = require("@pulumi/google-native/compute/beta");
const beta_94 = require("@pulumi/google-native/compute/beta");
const beta_95 = require("@pulumi/google-native/compute/beta");
const beta_96 = require("@pulumi/google-native/compute/beta");
const beta_97 = require("@pulumi/google-native/compute/beta");
const beta_98 = require("@pulumi/google-native/compute/beta");
const beta_99 = require("@pulumi/google-native/compute/beta");
const beta_100 = require("@pulumi/google-native/compute/beta");
const beta_101 = require("@pulumi/google-native/compute/beta");
const beta_102 = require("@pulumi/google-native/compute/beta");
const beta_103 = require("@pulumi/google-native/compute/beta");
const beta_104 = require("@pulumi/google-native/compute/beta");
const beta_105 = require("@pulumi/google-native/compute/beta");
const beta_106 = require("@pulumi/google-native/compute/beta");
const beta_107 = require("@pulumi/google-native/compute/beta");
const beta_108 = require("@pulumi/google-native/compute/beta");
const beta_109 = require("@pulumi/google-native/compute/beta");
const beta_110 = require("@pulumi/google-native/compute/beta");
const beta_111 = require("@pulumi/google-native/compute/beta");
const beta_112 = require("@pulumi/google-native/compute/beta");
const beta_113 = require("@pulumi/google-native/compute/beta");
const beta_114 = require("@pulumi/google-native/compute/beta");
const beta_115 = require("@pulumi/google-native/compute/beta");
const beta_116 = require("@pulumi/google-native/compute/beta");
const beta_117 = require("@pulumi/google-native/compute/beta");
const beta_118 = require("@pulumi/google-native/compute/beta");
const beta_119 = require("@pulumi/google-native/compute/beta");
const beta_120 = require("@pulumi/google-native/compute/beta");
const beta_121 = require("@pulumi/google-native/compute/beta");
const beta_122 = require("@pulumi/google-native/compute/beta");
const beta_123 = require("@pulumi/google-native/compute/beta");
const beta_124 = require("@pulumi/google-native/compute/beta");
const beta_125 = require("@pulumi/google-native/compute/beta");
const beta_126 = require("@pulumi/google-native/compute/beta");
const beta_127 = require("@pulumi/google-native/compute/beta");
const beta_128 = require("@pulumi/google-native/compute/beta");
const beta_129 = require("@pulumi/google-native/compute/beta");
const beta_130 = require("@pulumi/google-native/compute/beta");
const beta_131 = require("@pulumi/google-native/compute/beta");
const beta_132 = require("@pulumi/google-native/compute/beta");
const beta_133 = require("@pulumi/google-native/compute/beta");
const beta_134 = require("@pulumi/google-native/compute/beta");
const beta_135 = require("@pulumi/google-native/compute/beta");
const beta_136 = require("@pulumi/google-native/compute/beta");
const beta_137 = require("@pulumi/google-native/compute/beta");
const beta_138 = require("@pulumi/google-native/compute/beta");
const beta_139 = require("@pulumi/google-native/compute/beta");
const beta_140 = require("@pulumi/google-native/compute/beta");
const beta_141 = require("@pulumi/google-native/compute/beta");
const beta_142 = require("@pulumi/google-native/compute/beta");
const beta_143 = require("@pulumi/google-native/compute/beta");
const beta_144 = require("@pulumi/google-native/compute/beta");
const beta_145 = require("@pulumi/google-native/compute/beta");
const beta_146 = require("@pulumi/google-native/compute/beta");
const beta_147 = require("@pulumi/google-native/compute/beta");
const beta_148 = require("@pulumi/google-native/compute/beta");
var Address;
(function (Address) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.Address).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Address.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-address-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.Address).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_1.Address, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute Address shouldn't use an unstable API (compute.beta.Address).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Address || (Address = {}));
exports.Address = Address;
var Autoscaler;
(function (Autoscaler) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.Autoscaler).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Autoscaler.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-autoscaler-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.Autoscaler).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_2.Autoscaler, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute Autoscaler shouldn't use an unstable API (compute.beta.Autoscaler).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Autoscaler || (Autoscaler = {}));
exports.Autoscaler = Autoscaler;
var BackendBucket;
(function (BackendBucket) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucket).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendBucket.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendbucket-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucket).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_3.BackendBucket, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendBucket shouldn't use an unstable API (compute.beta.BackendBucket).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendBucket || (BackendBucket = {}));
exports.BackendBucket = BackendBucket;
var BackendBucketIamBinding;
(function (BackendBucketIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucketIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendBucketIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendbucketiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucketIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_4.BackendBucketIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendBucketIamBinding shouldn't use an unstable API (compute.beta.BackendBucketIamBinding).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendBucketIamBinding || (BackendBucketIamBinding = {}));
exports.BackendBucketIamBinding = BackendBucketIamBinding;
var BackendBucketIamMember;
(function (BackendBucketIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucketIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendBucketIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendbucketiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucketIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_5.BackendBucketIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendBucketIamMember shouldn't use an unstable API (compute.beta.BackendBucketIamMember).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendBucketIamMember || (BackendBucketIamMember = {}));
exports.BackendBucketIamMember = BackendBucketIamMember;
var BackendBucketIamPolicy;
(function (BackendBucketIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucketIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendBucketIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendbucketiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendBucketIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_6.BackendBucketIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendBucketIamPolicy shouldn't use an unstable API (compute.beta.BackendBucketIamPolicy).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendBucketIamPolicy || (BackendBucketIamPolicy = {}));
exports.BackendBucketIamPolicy = BackendBucketIamPolicy;
var BackendService;
(function (BackendService) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendService).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendService.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendservice-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendService).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_7.BackendService, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendService shouldn't use an unstable API (compute.beta.BackendService).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendService || (BackendService = {}));
exports.BackendService = BackendService;
var BackendServiceIamBinding;
(function (BackendServiceIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendServiceIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendServiceIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendserviceiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendServiceIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_8.BackendServiceIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendServiceIamBinding shouldn't use an unstable API (compute.beta.BackendServiceIamBinding).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendServiceIamBinding || (BackendServiceIamBinding = {}));
exports.BackendServiceIamBinding = BackendServiceIamBinding;
var BackendServiceIamMember;
(function (BackendServiceIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendServiceIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendServiceIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendserviceiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendServiceIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_9.BackendServiceIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendServiceIamMember shouldn't use an unstable API (compute.beta.BackendServiceIamMember).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendServiceIamMember || (BackendServiceIamMember = {}));
exports.BackendServiceIamMember = BackendServiceIamMember;
var BackendServiceIamPolicy;
(function (BackendServiceIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.BackendServiceIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
BackendServiceIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-backendserviceiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.BackendServiceIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_10.BackendServiceIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute BackendServiceIamPolicy shouldn't use an unstable API (compute.beta.BackendServiceIamPolicy).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(BackendServiceIamPolicy || (BackendServiceIamPolicy = {}));
exports.BackendServiceIamPolicy = BackendServiceIamPolicy;
var Disk;
(function (Disk) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.Disk).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Disk.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-disk-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.Disk).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_11.Disk, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute Disk shouldn't use an unstable API (compute.beta.Disk).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Disk || (Disk = {}));
exports.Disk = Disk;
var DiskIamBinding;
(function (DiskIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.DiskIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
DiskIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-diskiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.DiskIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_12.DiskIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute DiskIamBinding shouldn't use an unstable API (compute.beta.DiskIamBinding).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(DiskIamBinding || (DiskIamBinding = {}));
exports.DiskIamBinding = DiskIamBinding;
var DiskIamMember;
(function (DiskIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.DiskIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
DiskIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-diskiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.DiskIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_13.DiskIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute DiskIamMember shouldn't use an unstable API (compute.beta.DiskIamMember).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(DiskIamMember || (DiskIamMember = {}));
exports.DiskIamMember = DiskIamMember;
var DiskIamPolicy;
(function (DiskIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.DiskIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
DiskIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-diskiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.DiskIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_14.DiskIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute DiskIamPolicy shouldn't use an unstable API (compute.beta.DiskIamPolicy).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(DiskIamPolicy || (DiskIamPolicy = {}));
exports.DiskIamPolicy = DiskIamPolicy;
var ExternalVpnGateway;
(function (ExternalVpnGateway) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.ExternalVpnGateway).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ExternalVpnGateway.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-externalvpngateway-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.ExternalVpnGateway).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_15.ExternalVpnGateway, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute ExternalVpnGateway shouldn't use an unstable API (compute.beta.ExternalVpnGateway).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ExternalVpnGateway || (ExternalVpnGateway = {}));
exports.ExternalVpnGateway = ExternalVpnGateway;
var Firewall;
(function (Firewall) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.Firewall).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Firewall.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-firewall-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.Firewall).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_16.Firewall, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute Firewall shouldn't use an unstable API (compute.beta.Firewall).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Firewall || (Firewall = {}));
exports.Firewall = Firewall;
var FirewallPolicy;
(function (FirewallPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FirewallPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-firewallpolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_17.FirewallPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute FirewallPolicy shouldn't use an unstable API (compute.beta.FirewallPolicy).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FirewallPolicy || (FirewallPolicy = {}));
exports.FirewallPolicy = FirewallPolicy;
var FirewallPolicyIamBinding;
(function (FirewallPolicyIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicyIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FirewallPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-firewallpolicyiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicyIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_18.FirewallPolicyIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute FirewallPolicyIamBinding shouldn't use an unstable API (compute.beta.FirewallPolicyIamBinding).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FirewallPolicyIamBinding || (FirewallPolicyIamBinding = {}));
exports.FirewallPolicyIamBinding = FirewallPolicyIamBinding;
var FirewallPolicyIamMember;
(function (FirewallPolicyIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicyIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FirewallPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-firewallpolicyiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicyIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_19.FirewallPolicyIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute FirewallPolicyIamMember shouldn't use an unstable API (compute.beta.FirewallPolicyIamMember).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FirewallPolicyIamMember || (FirewallPolicyIamMember = {}));
exports.FirewallPolicyIamMember = FirewallPolicyIamMember;
var FirewallPolicyIamPolicy;
(function (FirewallPolicyIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicyIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FirewallPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-firewallpolicyiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.FirewallPolicyIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_20.FirewallPolicyIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute FirewallPolicyIamPolicy shouldn't use an unstable API (compute.beta.FirewallPolicyIamPolicy).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FirewallPolicyIamPolicy || (FirewallPolicyIamPolicy = {}));
exports.FirewallPolicyIamPolicy = FirewallPolicyIamPolicy;
var ForwardingRule;
(function (ForwardingRule) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.ForwardingRule).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ForwardingRule.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-forwardingrule-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.ForwardingRule).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_21.ForwardingRule, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute ForwardingRule shouldn't use an unstable API (compute.beta.ForwardingRule).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ForwardingRule || (ForwardingRule = {}));
exports.ForwardingRule = ForwardingRule;
var FutureReservation;
(function (FutureReservation) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.FutureReservation).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FutureReservation.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-futurereservation-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.FutureReservation).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_22.FutureReservation, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute FutureReservation shouldn't use an unstable API (compute.beta.FutureReservation).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FutureReservation || (FutureReservation = {}));
exports.FutureReservation = FutureReservation;
var GlobalAddress;
(function (GlobalAddress) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.GlobalAddress).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
GlobalAddress.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-globaladdress-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.GlobalAddress).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_23.GlobalAddress, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute GlobalAddress shouldn't use an unstable API (compute.beta.GlobalAddress).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(GlobalAddress || (GlobalAddress = {}));
exports.GlobalAddress = GlobalAddress;
var GlobalForwardingRule;
(function (GlobalForwardingRule) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.GlobalForwardingRule).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
GlobalForwardingRule.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-globalforwardingrule-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.GlobalForwardingRule).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_24.GlobalForwardingRule, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Compute GlobalForwardingRule shouldn't use an unstable API (compute.beta.GlobalForwardingRule).");
}),
},
vendors: ["google"],
services: ["compute"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(GlobalForwardingRule || (GlobalForwardingRule = {}));
exports.GlobalForwardingRule = GlobalForwardingRule;
var GlobalNetworkEndpointGroup;
(function (GlobalNetworkEndpointGroup) {
/**
* Disallow the use of non-stable (Beta) resouces (compute.beta.GlobalNetworkEndpointGroup).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
GlobalNetworkEndpointGroup.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-compute-beta-globalnetworkendpointgroup-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (compute.beta.GlobalNetworkEndpointGroup).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(beta_25.GlobalNetworkEndpointGroup