Central guardrails for Google Cloud resources: constraints set at organisation, folder or project level that block non-compliant configurations at creation time, with predefined constraints and custom constraints over resource fields
FluffyStack toolsJurisdictional exposure
Sub-services (2)
Predefined Constraints
Google-maintained constraints such as allowed regions and disabled service accounts
Custom Constraints
CEL-based constraints over individual resource fields
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (1)
- T-Systems Sovereign Cloud · FrankfurtT-Systems Sovereign Cloud powered by Google Cloud
Commercial regions (43)
Europe (13)
- Belgium
- Finland
- Paris
- Berlin
- Frankfurt
- Milan
- Turin
- Netherlands
- Warsaw
- Madrid
- Stockholm
- Zurich
- London
North America (12)
- Montréal
- Toronto
- Querétaro
- Northern Virginia
- Columbus
- Iowa
- Dallas
- Las Vegas
- Los Angeles
- South Carolina
- Salt Lake City
- Oregon
South America (2)
- São Paulo
- Santiago
Asia (10)
- Hong Kong
- Delhi
- Mumbai
- Jakarta
- Osaka
- Tokyo
- Singapore
- Seoul
- Taiwan
- Bangkok
Oceania (2)
- Melbourne
- Sydney
Middle East (3)
- Tel Aviv
- Doha
- Dammam
Africa (1)
- Johannesburg
Tags
Equivalent services on other platforms
Enforce organisational standards and assess compliance at scale with built-in and custom policy definitions, initiative groupings, remediation tasks, and exemption workflows
Compartments that enforce a security-policy recipe at resource creation. Blocks creation of resources that would violate the recipe (e.g. unencrypted volumes, public buckets in a private compartment).