@pulumi/google-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
799 lines (798 loc) • 42.2 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.UrlList = exports.TlsInspectionPolicy = exports.ServerTlsPolicyIamPolicy = exports.ServerTlsPolicyIamMember = exports.ServerTlsPolicyIamBinding = exports.ServerTlsPolicy = exports.SecurityProfileGroup = exports.SecurityProfile = exports.Rule = exports.OrganizationAddressGroup = exports.GatewaySecurityPolicy = exports.FirewallEndpointAssociation = exports.FirewallEndpoint = exports.ClientTlsPolicyIamPolicy = exports.ClientTlsPolicyIamMember = exports.ClientTlsPolicyIamBinding = exports.ClientTlsPolicy = exports.AuthorizationPolicyIamPolicy = exports.AuthorizationPolicyIamMember = exports.AuthorizationPolicyIamBinding = exports.AuthorizationPolicy = exports.AddressGroupIamPolicy = exports.AddressGroupIamMember = exports.AddressGroupIamBinding = exports.AddressGroup = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const v1beta1_1 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_2 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_3 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_4 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_5 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_6 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_7 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_8 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_9 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_10 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_11 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_12 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_13 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_14 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_15 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_16 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_17 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_18 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_19 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_20 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_21 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_22 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_23 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_24 = require("@pulumi/google-native/networksecurity/v1beta1");
const v1beta1_25 = require("@pulumi/google-native/networksecurity/v1beta1");
var AddressGroup;
(function (AddressGroup) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroup).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AddressGroup.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-addressgroup-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroup).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_1.AddressGroup, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AddressGroup shouldn't use an unstable API (networksecurity.v1beta1.AddressGroup).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AddressGroup || (AddressGroup = {}));
exports.AddressGroup = AddressGroup;
var AddressGroupIamBinding;
(function (AddressGroupIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroupIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AddressGroupIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-addressgroupiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroupIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_2.AddressGroupIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AddressGroupIamBinding shouldn't use an unstable API (networksecurity.v1beta1.AddressGroupIamBinding).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AddressGroupIamBinding || (AddressGroupIamBinding = {}));
exports.AddressGroupIamBinding = AddressGroupIamBinding;
var AddressGroupIamMember;
(function (AddressGroupIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroupIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AddressGroupIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-addressgroupiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroupIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_3.AddressGroupIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AddressGroupIamMember shouldn't use an unstable API (networksecurity.v1beta1.AddressGroupIamMember).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AddressGroupIamMember || (AddressGroupIamMember = {}));
exports.AddressGroupIamMember = AddressGroupIamMember;
var AddressGroupIamPolicy;
(function (AddressGroupIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroupIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AddressGroupIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-addressgroupiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AddressGroupIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_4.AddressGroupIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AddressGroupIamPolicy shouldn't use an unstable API (networksecurity.v1beta1.AddressGroupIamPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AddressGroupIamPolicy || (AddressGroupIamPolicy = {}));
exports.AddressGroupIamPolicy = AddressGroupIamPolicy;
var AuthorizationPolicy;
(function (AuthorizationPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AuthorizationPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-authorizationpolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_5.AuthorizationPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AuthorizationPolicy shouldn't use an unstable API (networksecurity.v1beta1.AuthorizationPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AuthorizationPolicy || (AuthorizationPolicy = {}));
exports.AuthorizationPolicy = AuthorizationPolicy;
var AuthorizationPolicyIamBinding;
(function (AuthorizationPolicyIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicyIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AuthorizationPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-authorizationpolicyiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicyIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_6.AuthorizationPolicyIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AuthorizationPolicyIamBinding shouldn't use an unstable API (networksecurity.v1beta1.AuthorizationPolicyIamBinding).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AuthorizationPolicyIamBinding || (AuthorizationPolicyIamBinding = {}));
exports.AuthorizationPolicyIamBinding = AuthorizationPolicyIamBinding;
var AuthorizationPolicyIamMember;
(function (AuthorizationPolicyIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicyIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AuthorizationPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-authorizationpolicyiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicyIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_7.AuthorizationPolicyIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AuthorizationPolicyIamMember shouldn't use an unstable API (networksecurity.v1beta1.AuthorizationPolicyIamMember).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AuthorizationPolicyIamMember || (AuthorizationPolicyIamMember = {}));
exports.AuthorizationPolicyIamMember = AuthorizationPolicyIamMember;
var AuthorizationPolicyIamPolicy;
(function (AuthorizationPolicyIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicyIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
AuthorizationPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-authorizationpolicyiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.AuthorizationPolicyIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_8.AuthorizationPolicyIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity AuthorizationPolicyIamPolicy shouldn't use an unstable API (networksecurity.v1beta1.AuthorizationPolicyIamPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(AuthorizationPolicyIamPolicy || (AuthorizationPolicyIamPolicy = {}));
exports.AuthorizationPolicyIamPolicy = AuthorizationPolicyIamPolicy;
var ClientTlsPolicy;
(function (ClientTlsPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ClientTlsPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-clienttlspolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_9.ClientTlsPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ClientTlsPolicy shouldn't use an unstable API (networksecurity.v1beta1.ClientTlsPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ClientTlsPolicy || (ClientTlsPolicy = {}));
exports.ClientTlsPolicy = ClientTlsPolicy;
var ClientTlsPolicyIamBinding;
(function (ClientTlsPolicyIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicyIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ClientTlsPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-clienttlspolicyiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicyIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_10.ClientTlsPolicyIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ClientTlsPolicyIamBinding shouldn't use an unstable API (networksecurity.v1beta1.ClientTlsPolicyIamBinding).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ClientTlsPolicyIamBinding || (ClientTlsPolicyIamBinding = {}));
exports.ClientTlsPolicyIamBinding = ClientTlsPolicyIamBinding;
var ClientTlsPolicyIamMember;
(function (ClientTlsPolicyIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicyIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ClientTlsPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-clienttlspolicyiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicyIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_11.ClientTlsPolicyIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ClientTlsPolicyIamMember shouldn't use an unstable API (networksecurity.v1beta1.ClientTlsPolicyIamMember).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ClientTlsPolicyIamMember || (ClientTlsPolicyIamMember = {}));
exports.ClientTlsPolicyIamMember = ClientTlsPolicyIamMember;
var ClientTlsPolicyIamPolicy;
(function (ClientTlsPolicyIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicyIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ClientTlsPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-clienttlspolicyiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ClientTlsPolicyIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_12.ClientTlsPolicyIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ClientTlsPolicyIamPolicy shouldn't use an unstable API (networksecurity.v1beta1.ClientTlsPolicyIamPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ClientTlsPolicyIamPolicy || (ClientTlsPolicyIamPolicy = {}));
exports.ClientTlsPolicyIamPolicy = ClientTlsPolicyIamPolicy;
var FirewallEndpoint;
(function (FirewallEndpoint) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.FirewallEndpoint).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FirewallEndpoint.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-firewallendpoint-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.FirewallEndpoint).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_13.FirewallEndpoint, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity FirewallEndpoint shouldn't use an unstable API (networksecurity.v1beta1.FirewallEndpoint).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FirewallEndpoint || (FirewallEndpoint = {}));
exports.FirewallEndpoint = FirewallEndpoint;
var FirewallEndpointAssociation;
(function (FirewallEndpointAssociation) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.FirewallEndpointAssociation).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
FirewallEndpointAssociation.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-firewallendpointassociation-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.FirewallEndpointAssociation).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_14.FirewallEndpointAssociation, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity FirewallEndpointAssociation shouldn't use an unstable API (networksecurity.v1beta1.FirewallEndpointAssociation).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(FirewallEndpointAssociation || (FirewallEndpointAssociation = {}));
exports.FirewallEndpointAssociation = FirewallEndpointAssociation;
var GatewaySecurityPolicy;
(function (GatewaySecurityPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.GatewaySecurityPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
GatewaySecurityPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-gatewaysecuritypolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.GatewaySecurityPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_15.GatewaySecurityPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity GatewaySecurityPolicy shouldn't use an unstable API (networksecurity.v1beta1.GatewaySecurityPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(GatewaySecurityPolicy || (GatewaySecurityPolicy = {}));
exports.GatewaySecurityPolicy = GatewaySecurityPolicy;
var OrganizationAddressGroup;
(function (OrganizationAddressGroup) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.OrganizationAddressGroup).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
OrganizationAddressGroup.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-organizationaddressgroup-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.OrganizationAddressGroup).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_16.OrganizationAddressGroup, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity OrganizationAddressGroup shouldn't use an unstable API (networksecurity.v1beta1.OrganizationAddressGroup).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(OrganizationAddressGroup || (OrganizationAddressGroup = {}));
exports.OrganizationAddressGroup = OrganizationAddressGroup;
var Rule;
(function (Rule) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.Rule).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Rule.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-rule-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.Rule).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_17.Rule, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity Rule shouldn't use an unstable API (networksecurity.v1beta1.Rule).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Rule || (Rule = {}));
exports.Rule = Rule;
var SecurityProfile;
(function (SecurityProfile) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.SecurityProfile).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
SecurityProfile.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-securityprofile-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.SecurityProfile).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_18.SecurityProfile, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity SecurityProfile shouldn't use an unstable API (networksecurity.v1beta1.SecurityProfile).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(SecurityProfile || (SecurityProfile = {}));
exports.SecurityProfile = SecurityProfile;
var SecurityProfileGroup;
(function (SecurityProfileGroup) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.SecurityProfileGroup).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
SecurityProfileGroup.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-securityprofilegroup-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.SecurityProfileGroup).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_19.SecurityProfileGroup, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity SecurityProfileGroup shouldn't use an unstable API (networksecurity.v1beta1.SecurityProfileGroup).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(SecurityProfileGroup || (SecurityProfileGroup = {}));
exports.SecurityProfileGroup = SecurityProfileGroup;
var ServerTlsPolicy;
(function (ServerTlsPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServerTlsPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-servertlspolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_20.ServerTlsPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ServerTlsPolicy shouldn't use an unstable API (networksecurity.v1beta1.ServerTlsPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServerTlsPolicy || (ServerTlsPolicy = {}));
exports.ServerTlsPolicy = ServerTlsPolicy;
var ServerTlsPolicyIamBinding;
(function (ServerTlsPolicyIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicyIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServerTlsPolicyIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-servertlspolicyiambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicyIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_21.ServerTlsPolicyIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ServerTlsPolicyIamBinding shouldn't use an unstable API (networksecurity.v1beta1.ServerTlsPolicyIamBinding).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServerTlsPolicyIamBinding || (ServerTlsPolicyIamBinding = {}));
exports.ServerTlsPolicyIamBinding = ServerTlsPolicyIamBinding;
var ServerTlsPolicyIamMember;
(function (ServerTlsPolicyIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicyIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServerTlsPolicyIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-servertlspolicyiammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicyIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_22.ServerTlsPolicyIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ServerTlsPolicyIamMember shouldn't use an unstable API (networksecurity.v1beta1.ServerTlsPolicyIamMember).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServerTlsPolicyIamMember || (ServerTlsPolicyIamMember = {}));
exports.ServerTlsPolicyIamMember = ServerTlsPolicyIamMember;
var ServerTlsPolicyIamPolicy;
(function (ServerTlsPolicyIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicyIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
ServerTlsPolicyIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-servertlspolicyiampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.ServerTlsPolicyIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_23.ServerTlsPolicyIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity ServerTlsPolicyIamPolicy shouldn't use an unstable API (networksecurity.v1beta1.ServerTlsPolicyIamPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(ServerTlsPolicyIamPolicy || (ServerTlsPolicyIamPolicy = {}));
exports.ServerTlsPolicyIamPolicy = ServerTlsPolicyIamPolicy;
var TlsInspectionPolicy;
(function (TlsInspectionPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.TlsInspectionPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
TlsInspectionPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-tlsinspectionpolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.TlsInspectionPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_24.TlsInspectionPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity TlsInspectionPolicy shouldn't use an unstable API (networksecurity.v1beta1.TlsInspectionPolicy).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(TlsInspectionPolicy || (TlsInspectionPolicy = {}));
exports.TlsInspectionPolicy = TlsInspectionPolicy;
var UrlList;
(function (UrlList) {
/**
* Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.UrlList).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
UrlList.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-networksecurity-v1beta1-urllist-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (networksecurity.v1beta1.UrlList).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta1_25.UrlList, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Networksecurity UrlList shouldn't use an unstable API (networksecurity.v1beta1.UrlList).");
}),
},
vendors: ["google"],
services: ["networksecurity"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(UrlList || (UrlList = {}));
exports.UrlList = UrlList;