Custom organization policies allow administrators to define their own restrictions on Cloud de Confiance by S3NS services. For more information about custom constraints, see the Custom constraints overview.
Each service defines the set of custom constraint fields that can be used to enforce organization policies on their service resources. See the list of supported service resources to learn which Cloud de Confiance services support custom constraints. To learn how to create custom constraints, see Create custom constraints.
For a list of sample custom constraints, see the custom organization policy library on GitHub.
Supported service resources
Resources associated with the following services can be subjected to custom constraints. Not all resource attributes are available for these resources. See the service-specific documentation to find the resources and attributes that are available for use.
| Cloud de Confiance service | Resource type | Launch status |
|---|---|---|
| GKE |
container.googleapis.com/Cluster
|
GA |