UNPKG

@pulumi/google-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

210 lines (209 loc) 10.6 kB
"use strict"; // Copyright 2016-2024, Pulumi Corporation. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // ------------------------------- WARNING ------------------------------------- // This file was programmatically generated. Do not edit unless you know what // you're doing. // ------------------------------- WARNING ------------------------------------- Object.defineProperty(exports, "__esModule", { value: true }); exports.TypeProvider = exports.DeploymentIamPolicy = exports.DeploymentIamMember = exports.DeploymentIamBinding = exports.Deployment = exports.CompositeType = void 0; const policy_1 = require("@pulumi/policy"); const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager"); const alpha_1 = require("@pulumi/google-native/deploymentmanager/alpha"); const alpha_2 = require("@pulumi/google-native/deploymentmanager/alpha"); const alpha_3 = require("@pulumi/google-native/deploymentmanager/alpha"); const alpha_4 = require("@pulumi/google-native/deploymentmanager/alpha"); const alpha_5 = require("@pulumi/google-native/deploymentmanager/alpha"); const alpha_6 = require("@pulumi/google-native/deploymentmanager/alpha"); var CompositeType; (function (CompositeType) { /** * Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.CompositeType). * * @severity medium * @frameworks none * @topics alpha, api, unstable * @link https://cloud.google.com/apis/design/versioning */ CompositeType.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-deploymentmanager-alpha-compositetype-disallow-alpha-resource", description: "Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.CompositeType).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(alpha_1.CompositeType, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Deploymentmanager CompositeType shouldn't use an unstable API (deploymentmanager.alpha.CompositeType)."); }), }, vendors: ["google"], services: ["deploymentmanager"], severity: "medium", topics: ["api", "unstable", "alpha"], }); })(CompositeType || (CompositeType = {})); exports.CompositeType = CompositeType; var Deployment; (function (Deployment) { /** * Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.Deployment). * * @severity medium * @frameworks none * @topics alpha, api, unstable * @link https://cloud.google.com/apis/design/versioning */ Deployment.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-deploymentmanager-alpha-deployment-disallow-alpha-resource", description: "Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.Deployment).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(alpha_2.Deployment, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Deploymentmanager Deployment shouldn't use an unstable API (deploymentmanager.alpha.Deployment)."); }), }, vendors: ["google"], services: ["deploymentmanager"], severity: "medium", topics: ["api", "unstable", "alpha"], }); })(Deployment || (Deployment = {})); exports.Deployment = Deployment; var DeploymentIamBinding; (function (DeploymentIamBinding) { /** * Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.DeploymentIamBinding). * * @severity medium * @frameworks none * @topics alpha, api, unstable * @link https://cloud.google.com/apis/design/versioning */ DeploymentIamBinding.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-deploymentmanager-alpha-deploymentiambinding-disallow-alpha-resource", description: "Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.DeploymentIamBinding).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(alpha_3.DeploymentIamBinding, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Deploymentmanager DeploymentIamBinding shouldn't use an unstable API (deploymentmanager.alpha.DeploymentIamBinding)."); }), }, vendors: ["google"], services: ["deploymentmanager"], severity: "medium", topics: ["api", "unstable", "alpha"], }); })(DeploymentIamBinding || (DeploymentIamBinding = {})); exports.DeploymentIamBinding = DeploymentIamBinding; var DeploymentIamMember; (function (DeploymentIamMember) { /** * Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.DeploymentIamMember). * * @severity medium * @frameworks none * @topics alpha, api, unstable * @link https://cloud.google.com/apis/design/versioning */ DeploymentIamMember.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-deploymentmanager-alpha-deploymentiammember-disallow-alpha-resource", description: "Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.DeploymentIamMember).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(alpha_4.DeploymentIamMember, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Deploymentmanager DeploymentIamMember shouldn't use an unstable API (deploymentmanager.alpha.DeploymentIamMember)."); }), }, vendors: ["google"], services: ["deploymentmanager"], severity: "medium", topics: ["api", "unstable", "alpha"], }); })(DeploymentIamMember || (DeploymentIamMember = {})); exports.DeploymentIamMember = DeploymentIamMember; var DeploymentIamPolicy; (function (DeploymentIamPolicy) { /** * Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.DeploymentIamPolicy). * * @severity medium * @frameworks none * @topics alpha, api, unstable * @link https://cloud.google.com/apis/design/versioning */ DeploymentIamPolicy.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-deploymentmanager-alpha-deploymentiampolicy-disallow-alpha-resource", description: "Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.DeploymentIamPolicy).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(alpha_5.DeploymentIamPolicy, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Deploymentmanager DeploymentIamPolicy shouldn't use an unstable API (deploymentmanager.alpha.DeploymentIamPolicy)."); }), }, vendors: ["google"], services: ["deploymentmanager"], severity: "medium", topics: ["api", "unstable", "alpha"], }); })(DeploymentIamPolicy || (DeploymentIamPolicy = {})); exports.DeploymentIamPolicy = DeploymentIamPolicy; var TypeProvider; (function (TypeProvider) { /** * Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.TypeProvider). * * @severity medium * @frameworks none * @topics alpha, api, unstable * @link https://cloud.google.com/apis/design/versioning */ TypeProvider.disallowAlphaResource = compliance_policy_manager_1.policyManager.registerPolicy({ resourceValidationPolicy: { name: "googlenative-deploymentmanager-alpha-typeprovider-disallow-alpha-resource", description: "Disallow the use of non-stable (Alpha) resouces (deploymentmanager.alpha.TypeProvider).", configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema, enforcementLevel: "advisory", validateResource: (0, policy_1.validateResourceOfType)(alpha_6.TypeProvider, (_, args, reportViolation) => { if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) { return; } reportViolation("Deploymentmanager TypeProvider shouldn't use an unstable API (deploymentmanager.alpha.TypeProvider)."); }), }, vendors: ["google"], services: ["deploymentmanager"], severity: "medium", topics: ["api", "unstable", "alpha"], }); })(TypeProvider || (TypeProvider = {})); exports.TypeProvider = TypeProvider;