@pulumi/google-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
613 lines (612 loc) • 31.2 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.ServiceIamPolicy = exports.ServiceIamMember = exports.ServiceIamBinding = exports.ServiceDatabaseTableIamPolicy = exports.ServiceDatabaseTableIamMember = exports.ServiceDatabaseTableIamBinding = exports.ServiceDatabaseIamPolicy = exports.ServiceDatabaseIamMember = exports.ServiceDatabaseIamBinding = exports.ServiceBackupIamPolicy = exports.ServiceBackupIamMember = exports.ServiceBackupIamBinding = exports.Service = exports.MetadataImport = exports.FederationIamPolicy = exports.FederationIamMember = exports.FederationIamBinding = exports.Federation = exports.Backup = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const v1beta_1 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_2 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_3 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_4 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_5 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_6 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_7 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_8 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_9 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_10 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_11 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_12 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_13 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_14 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_15 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_16 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_17 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_18 = require("@pulumi/google-native/metastore/v1beta");
const v1beta_19 = require("@pulumi/google-native/metastore/v1beta");
var Backup;
(function (Backup) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.Backup).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Backup.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-backup-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.Backup).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_1.Backup, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore Backup shouldn't use an unstable API (metastore.v1beta.Backup).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Backup || (Backup = {}));
exports.Backup = Backup;
var Federation;
(function (Federation) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.Federation).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Federation.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-federation-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.Federation).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_2.Federation, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore Federation shouldn't use an unstable API (metastore.v1beta.Federation).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Federation || (Federation = {}));
exports.Federation = Federation;
var FederationIamBinding;
(function (FederationIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.FederationIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FederationIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-federationiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.FederationIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_3.FederationIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore FederationIamBinding shouldn't use an unstable API (metastore.v1beta.FederationIamBinding).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FederationIamBinding || (FederationIamBinding = {}));
exports.FederationIamBinding = FederationIamBinding;
var FederationIamMember;
(function (FederationIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.FederationIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FederationIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-federationiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.FederationIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_4.FederationIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore FederationIamMember shouldn't use an unstable API (metastore.v1beta.FederationIamMember).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FederationIamMember || (FederationIamMember = {}));
exports.FederationIamMember = FederationIamMember;
var FederationIamPolicy;
(function (FederationIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.FederationIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FederationIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-federationiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.FederationIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_5.FederationIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore FederationIamPolicy shouldn't use an unstable API (metastore.v1beta.FederationIamPolicy).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FederationIamPolicy || (FederationIamPolicy = {}));
exports.FederationIamPolicy = FederationIamPolicy;
var MetadataImport;
(function (MetadataImport) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.MetadataImport).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
MetadataImport.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-metadataimport-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.MetadataImport).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_6.MetadataImport, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore MetadataImport shouldn't use an unstable API (metastore.v1beta.MetadataImport).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(MetadataImport || (MetadataImport = {}));
exports.MetadataImport = MetadataImport;
var Service;
(function (Service) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.Service).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Service.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-service-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.Service).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_7.Service, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore Service shouldn't use an unstable API (metastore.v1beta.Service).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Service || (Service = {}));
exports.Service = Service;
var ServiceBackupIamBinding;
(function (ServiceBackupIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceBackupIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceBackupIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicebackupiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceBackupIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_8.ServiceBackupIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceBackupIamBinding shouldn't use an unstable API (metastore.v1beta.ServiceBackupIamBinding).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceBackupIamBinding || (ServiceBackupIamBinding = {}));
exports.ServiceBackupIamBinding = ServiceBackupIamBinding;
var ServiceBackupIamMember;
(function (ServiceBackupIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceBackupIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceBackupIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicebackupiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceBackupIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_9.ServiceBackupIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceBackupIamMember shouldn't use an unstable API (metastore.v1beta.ServiceBackupIamMember).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceBackupIamMember || (ServiceBackupIamMember = {}));
exports.ServiceBackupIamMember = ServiceBackupIamMember;
var ServiceBackupIamPolicy;
(function (ServiceBackupIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceBackupIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceBackupIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicebackupiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceBackupIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_10.ServiceBackupIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceBackupIamPolicy shouldn't use an unstable API (metastore.v1beta.ServiceBackupIamPolicy).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceBackupIamPolicy || (ServiceBackupIamPolicy = {}));
exports.ServiceBackupIamPolicy = ServiceBackupIamPolicy;
var ServiceDatabaseIamBinding;
(function (ServiceDatabaseIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceDatabaseIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicedatabaseiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_11.ServiceDatabaseIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceDatabaseIamBinding shouldn't use an unstable API (metastore.v1beta.ServiceDatabaseIamBinding).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceDatabaseIamBinding || (ServiceDatabaseIamBinding = {}));
exports.ServiceDatabaseIamBinding = ServiceDatabaseIamBinding;
var ServiceDatabaseIamMember;
(function (ServiceDatabaseIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceDatabaseIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicedatabaseiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_12.ServiceDatabaseIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceDatabaseIamMember shouldn't use an unstable API (metastore.v1beta.ServiceDatabaseIamMember).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceDatabaseIamMember || (ServiceDatabaseIamMember = {}));
exports.ServiceDatabaseIamMember = ServiceDatabaseIamMember;
var ServiceDatabaseIamPolicy;
(function (ServiceDatabaseIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceDatabaseIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicedatabaseiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_13.ServiceDatabaseIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceDatabaseIamPolicy shouldn't use an unstable API (metastore.v1beta.ServiceDatabaseIamPolicy).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceDatabaseIamPolicy || (ServiceDatabaseIamPolicy = {}));
exports.ServiceDatabaseIamPolicy = ServiceDatabaseIamPolicy;
var ServiceDatabaseTableIamBinding;
(function (ServiceDatabaseTableIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseTableIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceDatabaseTableIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicedatabasetableiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseTableIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_14.ServiceDatabaseTableIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceDatabaseTableIamBinding shouldn't use an unstable API (metastore.v1beta.ServiceDatabaseTableIamBinding).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceDatabaseTableIamBinding || (ServiceDatabaseTableIamBinding = {}));
exports.ServiceDatabaseTableIamBinding = ServiceDatabaseTableIamBinding;
var ServiceDatabaseTableIamMember;
(function (ServiceDatabaseTableIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseTableIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceDatabaseTableIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicedatabasetableiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseTableIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_15.ServiceDatabaseTableIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceDatabaseTableIamMember shouldn't use an unstable API (metastore.v1beta.ServiceDatabaseTableIamMember).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceDatabaseTableIamMember || (ServiceDatabaseTableIamMember = {}));
exports.ServiceDatabaseTableIamMember = ServiceDatabaseTableIamMember;
var ServiceDatabaseTableIamPolicy;
(function (ServiceDatabaseTableIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseTableIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceDatabaseTableIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-servicedatabasetableiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceDatabaseTableIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_16.ServiceDatabaseTableIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceDatabaseTableIamPolicy shouldn't use an unstable API (metastore.v1beta.ServiceDatabaseTableIamPolicy).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceDatabaseTableIamPolicy || (ServiceDatabaseTableIamPolicy = {}));
exports.ServiceDatabaseTableIamPolicy = ServiceDatabaseTableIamPolicy;
var ServiceIamBinding;
(function (ServiceIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-serviceiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_17.ServiceIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceIamBinding shouldn't use an unstable API (metastore.v1beta.ServiceIamBinding).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceIamBinding || (ServiceIamBinding = {}));
exports.ServiceIamBinding = ServiceIamBinding;
var ServiceIamMember;
(function (ServiceIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-serviceiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_18.ServiceIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceIamMember shouldn't use an unstable API (metastore.v1beta.ServiceIamMember).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceIamMember || (ServiceIamMember = {}));
exports.ServiceIamMember = ServiceIamMember;
var ServiceIamPolicy;
(function (ServiceIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServiceIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-metastore-v1beta-serviceiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (metastore.v1beta.ServiceIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta_19.ServiceIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Metastore ServiceIamPolicy shouldn't use an unstable API (metastore.v1beta.ServiceIamPolicy).");
}),
},
vendors: ["google"],
services: ["metastore"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServiceIamPolicy || (ServiceIamPolicy = {}));
exports.ServiceIamPolicy = ServiceIamPolicy;