Auf dieser Seite wird beschrieben, wie Sie Empfehlungen zum Entfernen autorisierter Netzwerke für Instanzen aufrufen und implementieren, die gegen die vom Administrator erzwungene constraints/sql.restrictAuthorizedNetworks-Organisationsrichtlinie verstoßen. Dieser Richtlinienverstoß tritt auf, wenn autorisierte Netzwerke zum Zeitpunkt der Erzwingung der Einschränkung bereits für eine Instanz vorhanden sind. Dieser Recommender heißt Autorisierte Netzwerke entfernen.
Dieser Recommender erkennt proaktiv Instanzen, die gegen die Organisationsrichtlinie constraints/sql.restrictAuthorizedNetworks verstoßen, und bietet Statistiken und Empfehlungen zur Verbesserung der Instanzsicherheit. Mit der Google Cloud Console, der gcloud CLI oder der Recommender API können Sie Informationen und detaillierte Empfehlungen zu diesen Instanzen aufrufen.
Prüfen Sie, ob Sie die erforderlichen IAM-Rollen (Identity and Access Management) haben, um die Berechtigungen zum Aufrufen und Verwenden von Informationen und Empfehlungen zu erhalten.
GET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/recommenders/google.cloudsql.instance.SecurityRecommender/recommendations?filter=recommenderSubtype=REMOVE_AUTHORIZED_NETWORKS_TO_MEET_ORG_POLICY
Ersetzen Sie Folgendes:
PROJECT_ID: Ihre Projekt-ID.
LOCATION: Eine Region, in der sich Ihre Instanzen befinden, z. B. us-central1.
Informationen und detaillierte Empfehlungen anzeigen
So rufen Sie Statistiken und detaillierte Empfehlungen auf:
Console
Klicken Sie nach der Auflistung der Empfehlungen auf eine Empfehlung.
Der Bereich "Empfehlung" wird angezeigt. Dieser enthält Informationen und detaillierte Empfehlungen.
GET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/insightTypes/google.cloudsql.instance.SecurityInsight/insights?filter=insightSubtype=ORG_POLICY_TO_RESTRICT_AUTHORIZED_NETWORKS_VIOLATED
Ersetzen Sie Folgendes:
PROJECT_ID: Ihre Projekt-ID.
LOCATION: Eine Region, in der sich Ihre Instanzen befinden, z. B. us-central1.
[[["Leicht verständlich","easyToUnderstand","thumb-up"],["Mein Problem wurde gelöst","solvedMyProblem","thumb-up"],["Sonstiges","otherUp","thumb-up"]],[["Schwer verständlich","hardToUnderstand","thumb-down"],["Informationen oder Beispielcode falsch","incorrectInformationOrSampleCode","thumb-down"],["Benötigte Informationen/Beispiele nicht gefunden","missingTheInformationSamplesINeed","thumb-down"],["Problem mit der Übersetzung","translationIssue","thumb-down"],["Sonstiges","otherDown","thumb-down"]],["Zuletzt aktualisiert: 2025-09-04 (UTC)."],[],[],null,["# Improve instance security by removing authorized networks\n\n\u003cbr /\u003e\n\n[MySQL](/sql/docs/mysql/recommender-remove-authorized-networks \"View this page for the MySQL database engine\") \\| [PostgreSQL](/sql/docs/postgres/recommender-remove-authorized-networks \"View this page for the PostgreSQL database engine\") \\| SQL Server\n\n\u003cbr /\u003e\n\nThis page describes how to view and implement recommendations about\nremoving authorized networks for instances that violate the\n[`constraints/sql.restrictAuthorizedNetworks` organization policy](/sql/docs/mysql/org-policy/org-policy#connection-constraints) enforced by your\nadministrator. This policy violation occurs when authorized networks already exist for an instance at the time of enforcement of the constraint. This [recommender](/recommender/docs/overview) is called **Remove authorized networks**.\n\nEvery day, this recommender\nproactively detects instances that violate the\n`constraints/sql.restrictAuthorizedNetworks` organization policy and provides insights and recommendations to improve\nyour instance security. You can view insights and detailed recommendations about these instances by using the Google Cloud console,\n[gcloud CLI](/sdk/gcloud), or the [Recommender API](/recommender/docs/using-api).\n\nFor more information about organization policies, see [Cloud SQL organization policies](/sql/docs/sqlserver/org-policy/org-policy).\n\nBefore you begin\n----------------\n\nEnsure that you [enable the Recommender API](/recommender/docs/enabling).\n\n### Required roles and permissions\n\nTo get the permissions to view and work with insights and recommendations,\nensure that you have the required [Identity and Access Management (IAM) roles](/sql/docs/sqlserver/project-access-control#roles).\n\nFor more information about IAM roles, see [IAM basic and predefined roles reference](/iam/docs/understanding-roles) and [Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access).\n\n\u003cbr /\u003e\n\nList the recommendations\n------------------------\n\nTo list the recommendations, follow these steps: \n\n### Console\n\nTo list recommendations about instance security, follow these steps:\n\n1. Go to the **Cloud SQL Instances** page.\n\n [Go to Cloud SQL Instances](https://console.cloud.google.com/sql/instances)\n2. View the **Issues** column in the instance table.\n\nAlternatively, follow these steps:\n\n1. Go to the **Recommendation Hub**.\n\n [Go to the Recommendation Hub](https://console.cloud.google.com/home/recommendations/)\n\n For more information, see [Exploring recommendations](/recommender/docs/recommendation-hub/identify-configuration-problems).\n2. In the **All recommendations** card, click **Security**.\n\n### gcloud\n\nRun the [`gcloud recommender recommendations list`](/sdk/gcloud/reference/recommender/recommendations/list) command as follows: \n\n```\ngcloud recommender recommendations list \\\n--project=PROJECT_ID \\\n--location=LOCATION \\\n--recommender=google.cloudsql.instance.SecurityRecommender \\\n--filter=recommenderSubtype=REMOVE_AUTHORIZED_NETWORKS_TO_MEET_ORG_POLICY\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: A region where your instances are located, such as us-central1.\n\n### API\n\nCall the [`recommendations.list`](/recommender/docs/reference/rest/v1beta1/projects.locations.recommenders.recommendations/list) method as follows: \n\n```\nGET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/recommenders/google.cloudsql.instance.SecurityRecommender/recommendations?filter=recommenderSubtype=REMOVE_AUTHORIZED_NETWORKS_TO_MEET_ORG_POLICY\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: A region where your instances are located, such as `us-central1`.\n\nView insights and detailed recommendations\n------------------------------------------\n\nTo view insights and detailed recommendations, follow these steps: \n\n### Console\n\nAfter listing the recommendations, click a recommendation.\nThe recommendation panel appears, which contains insights and detailed recommendations.\n\n### gcloud\n\nRun the [`gcloud recommender insights list`](/sdk/gcloud/reference/recommender/insights/list) command as follows: \n\n```\n\ngcloud recommender insights list \\\n--project=PROJECT_ID \\\n--location=LOCATION \\\n--insight-type=google.cloudsql.instance.SecurityInsight \\\n--filter=insightSubtype=ORG_POLICY_TO_RESTRICT_AUTHORIZED_NETWORKS_VIOLATED\n\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e : A region where your instances are located, such as `us-central1`.\n\n### API\n\nCall the [`insights.list`](/recommender/docs/reference/rest/v1beta1/projects.locations.insightTypes.insights/list) method as follows: \n\n```\n\nGET https://recommender.googleapis.com/v1beta1/projects/PROJECT_ID/locations/LOCATION/insightTypes/google.cloudsql.instance.SecurityInsight/insights?filter=insightSubtype=ORG_POLICY_TO_RESTRICT_AUTHORIZED_NETWORKS_VIOLATED\n\n```\n\nReplace the following:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: Your project ID.\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: A region where your instances are located, such as `us-central1`.\n\nApply the recommendation\n------------------------\n\n### Console\n\nTo implement the recommendation, do the following:\n\n1. Click **Manage authorized networks**.\n\n2. Configure your clients to use [Cloud SQL Auth Proxy](/sql/docs/sqlserver/sql-proxy) and [Cloud SQL Language Connectors](/sql/docs/sqlserver/language-connectors).\n\n3. Remove the\n [authorized networks](/sql/docs/sqlserver/authorize-networks#authorized-networks)\n on your instance.\n\n### gcloud\n\nTo implement the recommendation, do the following:\n\n1. Configure your clients to use [Cloud SQL Auth Proxy](/sql/docs/sqlserver/sql-proxy) and [Cloud SQL Language Connectors](/sql/docs/sqlserver/language-connectors).\n\n2. Remove the\n [authorized networks](/sql/docs/sqlserver/authorize-networks#authorized-networks)\n on your instance.\n\n### API\n\nTo implement the recommendation, do the following:\n\n1. Configure your clients to use [Cloud SQL Auth Proxy](/sql/docs/sqlserver/sql-proxy) and [Cloud SQL Language Connectors](/sql/docs/sqlserver/language-connectors).\n\n2. Remove the\n [authorized networks](/sql/docs/sqlserver/authorize-networks#authorized-networks)\n on your instance.\n\nWhat's next\n-----------\n\n- [Authorized networks](/sql/docs/sqlserver/authorize-networks#authorized-networks)\n- [Cloud SQL Auth Proxy](/sql/docs/sqlserver/sql-proxy)\n- [Cloud SQL Language Connectors](/sql/docs/sqlserver/language-connectors)\n- [Google Cloud recommenders](/recommender/docs/recommenders)\n- [Blog: Maximize your Cloud ROI](https://cloud.google.com/blog/products/management-tools/active-assist-comes-to-google-cloud)"]]
