UNPKG

@pulumi/google-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

799 lines (798 loc) 42 kB
"use strict"; // Copyright 2016-2024, Pulumi Corporation. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // ------------------------------- WARNING ------------------------------------- // This file was programmatically generated. Do not edit unless you know what // you're doing. // ------------------------------- WARNING ------------------------------------- Object.defineProperty(exports, "__esModule", { value: true }); exports.WorkflowTemplateIamPolicy = exports.WorkflowTemplateIamMember = exports.WorkflowTemplateIamBinding = exports.WorkflowTemplate = exports.RegionWorkflowTemplateIamPolicy = exports.RegionWorkflowTemplateIamMember = exports.RegionWorkflowTemplateIamBinding = exports.RegionOperationIamPolicy = exports.RegionOperationIamMember = exports.RegionOperationIamBinding = exports.RegionJobIamPolicy = exports.RegionJobIamMember = exports.RegionJobIamBinding = exports.RegionClusterIamPolicy = exports.RegionClusterIamMember = exports.RegionClusterIamBinding = exports.RegionAutoscalingPolicyIamPolicy = exports.RegionAutoscalingPolicyIamMember = exports.RegionAutoscalingPolicyIamBinding = exports.Job = exports.Cluster = exports.AutoscalingPolicyIamPolicy = exports.AutoscalingPolicyIamMember = exports.AutoscalingPolicyIamBinding = exports.AutoscalingPolicy = void 0; const policy_1 = require("@pulumi/policy"); const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager"); const v1beta2_1 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_2 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_3 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_4 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_5 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_6 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_7 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_8 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_9 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_10 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_11 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_12 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_13 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_14 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_15 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_16 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_17 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_18 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_19 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_20 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_21 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_22 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_23 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_24 = require("@pulumi/google-native/dataproc/v1beta2"); const v1beta2_25 = require("@pulumi/google-native/dataproc/v1beta2"); var AutoscalingPolicy; (function (AutoscalingPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ AutoscalingPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-autoscalingpolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_1.AutoscalingPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc AutoscalingPolicy shouldn't use an unstable API (dataproc.v1beta2.AutoscalingPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(AutoscalingPolicy || (AutoscalingPolicy = {})); exports.AutoscalingPolicy = AutoscalingPolicy; var AutoscalingPolicyIamBinding; (function (AutoscalingPolicyIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicyIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ AutoscalingPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-autoscalingpolicyiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicyIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_2.AutoscalingPolicyIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc AutoscalingPolicyIamBinding shouldn't use an unstable API (dataproc.v1beta2.AutoscalingPolicyIamBinding)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(AutoscalingPolicyIamBinding || (AutoscalingPolicyIamBinding = {})); exports.AutoscalingPolicyIamBinding = AutoscalingPolicyIamBinding; var AutoscalingPolicyIamMember; (function (AutoscalingPolicyIamMember) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicyIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ AutoscalingPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-autoscalingpolicyiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicyIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_3.AutoscalingPolicyIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc AutoscalingPolicyIamMember shouldn't use an unstable API (dataproc.v1beta2.AutoscalingPolicyIamMember)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(AutoscalingPolicyIamMember || (AutoscalingPolicyIamMember = {})); exports.AutoscalingPolicyIamMember = AutoscalingPolicyIamMember; var AutoscalingPolicyIamPolicy; (function (AutoscalingPolicyIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicyIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ AutoscalingPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-autoscalingpolicyiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.AutoscalingPolicyIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_4.AutoscalingPolicyIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc AutoscalingPolicyIamPolicy shouldn't use an unstable API (dataproc.v1beta2.AutoscalingPolicyIamPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(AutoscalingPolicyIamPolicy || (AutoscalingPolicyIamPolicy = {})); exports.AutoscalingPolicyIamPolicy = AutoscalingPolicyIamPolicy; var Cluster; (function (Cluster) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.Cluster). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Cluster.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-cluster-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.Cluster).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_5.Cluster, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc Cluster shouldn't use an unstable API (dataproc.v1beta2.Cluster)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Cluster || (Cluster = {})); exports.Cluster = Cluster; var Job; (function (Job) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.Job). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ Job.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-job-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.Job).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_6.Job, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc Job shouldn't use an unstable API (dataproc.v1beta2.Job)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(Job || (Job = {})); exports.Job = Job; var RegionAutoscalingPolicyIamBinding; (function (RegionAutoscalingPolicyIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionAutoscalingPolicyIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionAutoscalingPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionautoscalingpolicyiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionAutoscalingPolicyIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_7.RegionAutoscalingPolicyIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionAutoscalingPolicyIamBinding shouldn't use an unstable API (dataproc.v1beta2.RegionAutoscalingPolicyIamBinding)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionAutoscalingPolicyIamBinding || (RegionAutoscalingPolicyIamBinding = {})); exports.RegionAutoscalingPolicyIamBinding = RegionAutoscalingPolicyIamBinding; var RegionAutoscalingPolicyIamMember; (function (RegionAutoscalingPolicyIamMember) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionAutoscalingPolicyIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionAutoscalingPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionautoscalingpolicyiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionAutoscalingPolicyIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_8.RegionAutoscalingPolicyIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionAutoscalingPolicyIamMember shouldn't use an unstable API (dataproc.v1beta2.RegionAutoscalingPolicyIamMember)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionAutoscalingPolicyIamMember || (RegionAutoscalingPolicyIamMember = {})); exports.RegionAutoscalingPolicyIamMember = RegionAutoscalingPolicyIamMember; var RegionAutoscalingPolicyIamPolicy; (function (RegionAutoscalingPolicyIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionAutoscalingPolicyIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionAutoscalingPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionautoscalingpolicyiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionAutoscalingPolicyIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_9.RegionAutoscalingPolicyIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionAutoscalingPolicyIamPolicy shouldn't use an unstable API (dataproc.v1beta2.RegionAutoscalingPolicyIamPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionAutoscalingPolicyIamPolicy || (RegionAutoscalingPolicyIamPolicy = {})); exports.RegionAutoscalingPolicyIamPolicy = RegionAutoscalingPolicyIamPolicy; var RegionClusterIamBinding; (function (RegionClusterIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionClusterIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionClusterIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionclusteriambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionClusterIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_10.RegionClusterIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionClusterIamBinding shouldn't use an unstable API (dataproc.v1beta2.RegionClusterIamBinding)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionClusterIamBinding || (RegionClusterIamBinding = {})); exports.RegionClusterIamBinding = RegionClusterIamBinding; var RegionClusterIamMember; (function (RegionClusterIamMember) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionClusterIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionClusterIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionclusteriammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionClusterIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_11.RegionClusterIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionClusterIamMember shouldn't use an unstable API (dataproc.v1beta2.RegionClusterIamMember)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionClusterIamMember || (RegionClusterIamMember = {})); exports.RegionClusterIamMember = RegionClusterIamMember; var RegionClusterIamPolicy; (function (RegionClusterIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionClusterIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionClusterIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionclusteriampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionClusterIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_12.RegionClusterIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionClusterIamPolicy shouldn't use an unstable API (dataproc.v1beta2.RegionClusterIamPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionClusterIamPolicy || (RegionClusterIamPolicy = {})); exports.RegionClusterIamPolicy = RegionClusterIamPolicy; var RegionJobIamBinding; (function (RegionJobIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionJobIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionJobIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionjobiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionJobIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_13.RegionJobIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionJobIamBinding shouldn't use an unstable API (dataproc.v1beta2.RegionJobIamBinding)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionJobIamBinding || (RegionJobIamBinding = {})); exports.RegionJobIamBinding = RegionJobIamBinding; var RegionJobIamMember; (function (RegionJobIamMember) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionJobIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionJobIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionjobiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionJobIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_14.RegionJobIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionJobIamMember shouldn't use an unstable API (dataproc.v1beta2.RegionJobIamMember)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionJobIamMember || (RegionJobIamMember = {})); exports.RegionJobIamMember = RegionJobIamMember; var RegionJobIamPolicy; (function (RegionJobIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionJobIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionJobIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionjobiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionJobIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_15.RegionJobIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionJobIamPolicy shouldn't use an unstable API (dataproc.v1beta2.RegionJobIamPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionJobIamPolicy || (RegionJobIamPolicy = {})); exports.RegionJobIamPolicy = RegionJobIamPolicy; var RegionOperationIamBinding; (function (RegionOperationIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionOperationIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionOperationIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionoperationiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionOperationIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_16.RegionOperationIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionOperationIamBinding shouldn't use an unstable API (dataproc.v1beta2.RegionOperationIamBinding)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionOperationIamBinding || (RegionOperationIamBinding = {})); exports.RegionOperationIamBinding = RegionOperationIamBinding; var RegionOperationIamMember; (function (RegionOperationIamMember) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionOperationIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionOperationIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionoperationiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionOperationIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_17.RegionOperationIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionOperationIamMember shouldn't use an unstable API (dataproc.v1beta2.RegionOperationIamMember)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionOperationIamMember || (RegionOperationIamMember = {})); exports.RegionOperationIamMember = RegionOperationIamMember; var RegionOperationIamPolicy; (function (RegionOperationIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionOperationIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionOperationIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionoperationiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionOperationIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_18.RegionOperationIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionOperationIamPolicy shouldn't use an unstable API (dataproc.v1beta2.RegionOperationIamPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionOperationIamPolicy || (RegionOperationIamPolicy = {})); exports.RegionOperationIamPolicy = RegionOperationIamPolicy; var RegionWorkflowTemplateIamBinding; (function (RegionWorkflowTemplateIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionWorkflowTemplateIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionWorkflowTemplateIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionworkflowtemplateiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionWorkflowTemplateIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_19.RegionWorkflowTemplateIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionWorkflowTemplateIamBinding shouldn't use an unstable API (dataproc.v1beta2.RegionWorkflowTemplateIamBinding)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionWorkflowTemplateIamBinding || (RegionWorkflowTemplateIamBinding = {})); exports.RegionWorkflowTemplateIamBinding = RegionWorkflowTemplateIamBinding; var RegionWorkflowTemplateIamMember; (function (RegionWorkflowTemplateIamMember) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionWorkflowTemplateIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionWorkflowTemplateIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionworkflowtemplateiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionWorkflowTemplateIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_20.RegionWorkflowTemplateIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionWorkflowTemplateIamMember shouldn't use an unstable API (dataproc.v1beta2.RegionWorkflowTemplateIamMember)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionWorkflowTemplateIamMember || (RegionWorkflowTemplateIamMember = {})); exports.RegionWorkflowTemplateIamMember = RegionWorkflowTemplateIamMember; var RegionWorkflowTemplateIamPolicy; (function (RegionWorkflowTemplateIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionWorkflowTemplateIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ RegionWorkflowTemplateIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-regionworkflowtemplateiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.RegionWorkflowTemplateIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_21.RegionWorkflowTemplateIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc RegionWorkflowTemplateIamPolicy shouldn't use an unstable API (dataproc.v1beta2.RegionWorkflowTemplateIamPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(RegionWorkflowTemplateIamPolicy || (RegionWorkflowTemplateIamPolicy = {})); exports.RegionWorkflowTemplateIamPolicy = RegionWorkflowTemplateIamPolicy; var WorkflowTemplate; (function (WorkflowTemplate) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplate). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ WorkflowTemplate.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-workflowtemplate-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplate).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_22.WorkflowTemplate, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc WorkflowTemplate shouldn't use an unstable API (dataproc.v1beta2.WorkflowTemplate)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(WorkflowTemplate || (WorkflowTemplate = {})); exports.WorkflowTemplate = WorkflowTemplate; var WorkflowTemplateIamBinding; (function (WorkflowTemplateIamBinding) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplateIamBinding). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ WorkflowTemplateIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-workflowtemplateiambinding-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplateIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_23.WorkflowTemplateIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc WorkflowTemplateIamBinding shouldn't use an unstable API (dataproc.v1beta2.WorkflowTemplateIamBinding)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(WorkflowTemplateIamBinding || (WorkflowTemplateIamBinding = {})); exports.WorkflowTemplateIamBinding = WorkflowTemplateIamBinding; var WorkflowTemplateIamMember; (function (WorkflowTemplateIamMember) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplateIamMember). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ WorkflowTemplateIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-workflowtemplateiammember-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplateIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_24.WorkflowTemplateIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc WorkflowTemplateIamMember shouldn't use an unstable API (dataproc.v1beta2.WorkflowTemplateIamMember)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(WorkflowTemplateIamMember || (WorkflowTemplateIamMember = {})); exports.WorkflowTemplateIamMember = WorkflowTemplateIamMember; var WorkflowTemplateIamPolicy; (function (WorkflowTemplateIamPolicy) { /** * Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplateIamPolicy). * * @severity medium * @frameworks none * @topics api, beta, unstable * @link https://cloud.google.com/apis/design/versioning */ WorkflowTemplateIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-dataproc-v1beta2-workflowtemplateiampolicy-disallow-beta-resource", description: "Disallow the use of non-stable (Beta) resouces (dataproc.v1beta2.WorkflowTemplateIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(v1beta2_25.WorkflowTemplateIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Dataproc WorkflowTemplateIamPolicy shouldn't use an unstable API (dataproc.v1beta2.WorkflowTemplateIamPolicy)."); }), }, vendors: ["google"], services: ["dataproc"], severity: "medium", topics: ["api", "unstable", "beta"], }); })(WorkflowTemplateIamPolicy || (WorkflowTemplateIamPolicy = {})); exports.WorkflowTemplateIamPolicy = WorkflowTemplateIamPolicy;