As políticas personalizadas da organização permitem que os administradores definam as próprias restrições nos serviços do Google Cloud. Para mais informações sobre restrições personalizadas, consulte a Visão geral da política personalizada da organização.
Cada serviço define o conjunto de campos de restrição personalizada que podem ser usados para aplicar políticas da organização aos recursos de serviço. Consulte a lista de recursos de serviço com suporte para saber quais serviços do Google Cloud oferecem suporte a restrições personalizadas. Para saber como criar restrições personalizadas, consulte Criar e gerenciar restrições personalizadas.
Recursos de serviço com suporte
Os recursos associados aos serviços a seguir podem estar sujeitos a restrições personalizadas. Nem todos os atributos de recursos estão disponíveis para esses recursos. Consulte a documentação específica do serviço para encontrar os recursos e atributos disponíveis para uso.
| Serviço do Google Cloud | Tipo de recurso | Status do lançamento |
|---|---|---|
| Artifact Registry | artifactregistry.googleapis.com/Repository
| GA |
| Gerenciador de certificados | certificatemanager.googleapis.com/CertificateMap
| GA |
certificatemanager.googleapis.com/CertificateMapEntry
| GA |
|
certificatemanager.googleapis.com/Certificate
| GA |
|
certificatemanager.googleapis.com/CertificateIssuanceConfig
| GA |
|
certificatemanager.googleapis.com/DnsAuthorization
| GA |
|
certificatemanager.googleapis.com/TrustConfig
| GA |
|
| Cloud Key Management Service | cloudkms.googleapis.com/KeyHandle
| GA |
cloudkms.googleapis.com/AutokeyConfig
| GA |
|
cloudkms.googleapis.com/CryptoKey
| GA |
|
cloudkms.googleapis.com/CryptoKeyVersion
| GA |
|
cloudkms.googleapis.com/EkmConnection
| GA |
|
cloudkms.googleapis.com/EkmConfig
| GA |
|
cloudkms.googleapis.com/ImportJob
| GA |
|
| GKE | container.googleapis.com/NodePool
| GA |
container.googleapis.com/Cluster
| GA |
|
| Dataproc sem servidor | dataproc.googleapis.com/Batch
| GA |
| Dataproc | dataproc.googleapis.com/Cluster
| GA |
| Compute Engine | compute.googleapis.com/Disk
| GA |
compute.googleapis.com/Image
| GA |
|
compute.googleapis.com/Instance
| GA |
|
| Cloud VPN | compute.googleapis.com/ExternalVpnGateway
| GA |
compute.googleapis.com/TargetVpnGateway
| GA |
|
compute.googleapis.com/VpnGateway
| GA |
|
compute.googleapis.com/VpnTunnel
| GA |
|
| Firewall de Próxima Geração do Cloud | compute.googleapis.com/Firewall
| GA |
compute.googleapis.com/FirewallPolicy
| GA |
|
| Cloud Load Balancing | compute.googleapis.com/HealthCheck
| GA |
compute.googleapis.com/InstanceGroup
| GA |
|
compute.googleapis.com/NetworkEndpointGroup
| GA |
|
compute.googleapis.com/SslPolicy
| GA |
|
compute.googleapis.com/TargetInstance
| GA |
|
compute.googleapis.com/TargetPool
| GA |
|
compute.googleapis.com/BackendService
| GA |
|
compute.googleapis.com/BackendBucket
| GA |
|
compute.googleapis.com/TargetGrpcProxy
| GA |
|
compute.googleapis.com/UrlMap
| GA |
|
compute.googleapis.com/TargetTcpProxy
| GA |
|
compute.googleapis.com/TargetHttpProxy
| GA |
|
compute.googleapis.com/TargetHttpsProxy
| GA |
|
compute.googleapis.com/TargetSslProxy
| GA |
|
compute.googleapis.com/ForwardingRule
| GA |
|
| Cloud Interconnect | compute.googleapis.com/Interconnect
| GA |
compute.googleapis.com/InterconnectAttachment
| GA |
|
| Nuvem privada virtual | compute.googleapis.com/Network
| GA |
compute.googleapis.com/PacketMirroring
| GA |
|
compute.googleapis.com/Route
| GA |
|
compute.googleapis.com/Subnetwork
| GA |
|
| Private Service Connect | compute.googleapis.com/NetworkAttachment
| GA |
compute.googleapis.com/ServiceAttachment
| GA |
|
| Google Cloud Armor | compute.googleapis.com/NetworkEdgeSecurityService
| GA |
compute.googleapis.com/SecurityPolicy
| GA |
|
| Cloud Router, Cloud NAT | compute.googleapis.com/Router
| GA |
| Identity and Access Management | iam.googleapis.com/AllowPolicy
| Visualizar |
iam.googleapis.com/ServiceAccount
| GA |
|
iam.googleapis.com/ServiceAccountKey
| GA |
|
| Cloud Storage | storage.googleapis.com/Bucket
| GA |
| Cloud SQL | sqladmin.googleapis.com/Instance
| GA |
sqladmin.googleapis.com/BackupRun
| GA |
|
| Central de atendimento como serviço do Google Cloud | contactcenteraiplatform.googleapis.com/ContactCenter
| Visualizar |
| Dataflow | dataflow.googleapis.com/Job
| GA |
| Cloud Run | run.googleapis.com/Job
| GA |
run.googleapis.com/Service
| GA |
|
| Funções do Cloud Run | cloudfunctions.googleapis.com/Function
| GA |
| Cloud Build | cloudbuild.googleapis.com/GithubEnterpriseConfig
| GA |
cloudbuild.googleapis.com/BitbucketServerConfig
| GA |
|
cloudbuild.googleapis.com/BuildTrigger
| GA |
|
cloudbuild.googleapis.com/WorkerPool
| GA |
|
| Secure Source Manager | securesourcemanager.googleapis.com/Instance
| GA |
| Memorystore | redis.googleapis.com/Instance
| GA |
| Cluster do Memorystore para Redis | redis.googleapis.com/Cluster
| GA |
| AlloyDB para PostgreSQL | alloydb.googleapis.com/Instance
| Visualizar |
| Identity Platform | identitytoolkit.googleapis.com/Config
| GA |
identitytoolkit.googleapis.com/DefaultSupportedIdpConfig
| GA |
|
identitytoolkit.googleapis.com/InboundSamlConfig
| GA |
|
identitytoolkit.googleapis.com/OauthIdpConfig
| GA |
|
identitytoolkit.googleapis.com/Tenant
| GA |
|
| Hub | gkehub.googleapis.com/Fleet
| GA |
gkehub.googleapis.com/Membership
| GA |
|
gkehub.googleapis.com/Feature
| GA |
|
gkehub.googleapis.com/MembershipBinding
| GA |
|
gkehub.googleapis.com/Scope
| GA |
|
gkehub.googleapis.com/Namespace
| GA |
|
gkehub.googleapis.com/RBACRoleBinding
| GA |
|
| Secret Manager | secretmanager.googleapis.com/Secret
| GA |
| Firestore | firestore.googleapis.com/Database
| GA |
| Serviço de transferência de dados do BigQuery | bigquerydatatransfer.googleapis.com/TransferConfig
| GA |
| Acesso VPC sem servidor | vpcaccess.googleapis.com/Connector
| GA |