Enable additional recommended org policies

Fixes #2047 Fixes #2048 Fixes #2049
GoogleCloudPlatform · Feb 5, 2024 · 13cc2d5 · 13cc2d5
1 parent 5448ab6
commit 13cc2d5
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 6 deletions.
diff --git a/fast/stages/0-bootstrap/data/org-policies/compute.yaml b/fast/stages/0-bootstrap/data/org-policies/compute.yaml
@@ -55,13 +55,13 @@ compute.trustedImageProjects:
 #   rules:
 #   - enforce: true
 
-# compute.disableNestedVirtualization:
-#   rules:
-#   - enforce: true
+compute.disableNestedVirtualization:
+  rules:
+  - enforce: true
 
-# compute.disableSerialPortAccess:
-#   rules:
-#   - enforce: true
+compute.disableSerialPortAccess:
+  rules:
+  - enforce: true
 
 # compute.restrictCloudNATUsage:
 #   rules:

diff --git a/fast/stages/0-bootstrap/data/org-policies/storage.yaml b/fast/stages/0-bootstrap/data/org-policies/storage.yaml
@@ -9,3 +9,7 @@
 storage.uniformBucketLevelAccess:
   rules:
     - enforce: true
+
+storage.publicAccessPrevention:
+  rules:
+    - enforce: true