@pulumi/google-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
272 lines (271 loc) • 13.2 kB
JavaScript
"use strict";
// Copyright 2016-2024, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ------------------------------- WARNING -------------------------------------
// This file was programmatically generated. Do not edit unless you know what
// you're doing.
// ------------------------------- WARNING -------------------------------------
Object.defineProperty(exports, "__esModule", { value: true });
exports.TopicIamPolicy = exports.TopicIamMember = exports.TopicIamBinding = exports.Topic = exports.SubscriptionIamPolicy = exports.SubscriptionIamMember = exports.SubscriptionIamBinding = exports.Subscription = void 0;
const policy_1 = require("@pulumi/policy");
const compliance_policy_manager_1 = require("@pulumi/compliance-policy-manager");
const v1beta2_1 = require("@pulumi/google-native/pubsub/v1beta2");
const v1beta2_2 = require("@pulumi/google-native/pubsub/v1beta2");
const v1beta2_3 = require("@pulumi/google-native/pubsub/v1beta2");
const v1beta2_4 = require("@pulumi/google-native/pubsub/v1beta2");
const v1beta2_5 = require("@pulumi/google-native/pubsub/v1beta2");
const v1beta2_6 = require("@pulumi/google-native/pubsub/v1beta2");
const v1beta2_7 = require("@pulumi/google-native/pubsub/v1beta2");
const v1beta2_8 = require("@pulumi/google-native/pubsub/v1beta2");
var Subscription;
(function (Subscription) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.Subscription).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Subscription.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-subscription-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.Subscription).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_1.Subscription, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub Subscription shouldn't use an unstable API (pubsub.v1beta2.Subscription).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Subscription || (Subscription = {}));
exports.Subscription = Subscription;
var SubscriptionIamBinding;
(function (SubscriptionIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.SubscriptionIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
SubscriptionIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-subscriptioniambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.SubscriptionIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_2.SubscriptionIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub SubscriptionIamBinding shouldn't use an unstable API (pubsub.v1beta2.SubscriptionIamBinding).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(SubscriptionIamBinding || (SubscriptionIamBinding = {}));
exports.SubscriptionIamBinding = SubscriptionIamBinding;
var SubscriptionIamMember;
(function (SubscriptionIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.SubscriptionIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
SubscriptionIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-subscriptioniammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.SubscriptionIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_3.SubscriptionIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub SubscriptionIamMember shouldn't use an unstable API (pubsub.v1beta2.SubscriptionIamMember).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(SubscriptionIamMember || (SubscriptionIamMember = {}));
exports.SubscriptionIamMember = SubscriptionIamMember;
var SubscriptionIamPolicy;
(function (SubscriptionIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.SubscriptionIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
SubscriptionIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-subscriptioniampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.SubscriptionIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_4.SubscriptionIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub SubscriptionIamPolicy shouldn't use an unstable API (pubsub.v1beta2.SubscriptionIamPolicy).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(SubscriptionIamPolicy || (SubscriptionIamPolicy = {}));
exports.SubscriptionIamPolicy = SubscriptionIamPolicy;
var Topic;
(function (Topic) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.Topic).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
Topic.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-topic-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.Topic).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_5.Topic, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub Topic shouldn't use an unstable API (pubsub.v1beta2.Topic).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(Topic || (Topic = {}));
exports.Topic = Topic;
var TopicIamBinding;
(function (TopicIamBinding) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.TopicIamBinding).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
TopicIamBinding.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-topiciambinding-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.TopicIamBinding).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_6.TopicIamBinding, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub TopicIamBinding shouldn't use an unstable API (pubsub.v1beta2.TopicIamBinding).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(TopicIamBinding || (TopicIamBinding = {}));
exports.TopicIamBinding = TopicIamBinding;
var TopicIamMember;
(function (TopicIamMember) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.TopicIamMember).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
TopicIamMember.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-topiciammember-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.TopicIamMember).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_7.TopicIamMember, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub TopicIamMember shouldn't use an unstable API (pubsub.v1beta2.TopicIamMember).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(TopicIamMember || (TopicIamMember = {}));
exports.TopicIamMember = TopicIamMember;
var TopicIamPolicy;
(function (TopicIamPolicy) {
/**
* Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.TopicIamPolicy).
*
* @severity medium
* @frameworks none
* @topics api, beta, unstable
* @link https://cloud.google.com/apis/design/versioning
*/
TopicIamPolicy.disallowBetaResource = compliance_policy_manager_1.policyManager.registerPolicy({
resourceValidationPolicy: {
name: "googlenative-pubsub-v1beta2-topiciampolicy-disallow-beta-resource",
description: "Disallow the use of non-stable (Beta) resouces (pubsub.v1beta2.TopicIamPolicy).",
configSchema: compliance_policy_manager_1.policyManager.policyConfigSchema,
enforcementLevel: "advisory",
validateResource: (0, policy_1.validateResourceOfType)(v1beta2_8.TopicIamPolicy, (_, args, reportViolation) => {
if (!compliance_policy_manager_1.policyManager.shouldEvalPolicy(args)) {
return;
}
reportViolation("Pubsub TopicIamPolicy shouldn't use an unstable API (pubsub.v1beta2.TopicIamPolicy).");
}),
},
vendors: ["google"],
services: ["pubsub"],
severity: "medium",
topics: ["api", "unstable", "beta"],
});
})(TopicIamPolicy || (TopicIamPolicy = {}));
exports.TopicIamPolicy = TopicIamPolicy;