Organization Policy Service release notes

You can use the vertexai.allowOnlyAllCompliantAPIs legacy managed constraint to restrict Gemini Enterprise Agent Platform requests.

You can use the container.managed.autopilotPrivilegedAdmission to enable allowlist-based admission control for privileged Autopilot workloads when creating or updating GKE clusters.

These constraints are generally available. For more information, see Organization policy constraints.

Custom organization policies are now generally available for Cloud Logging. For more information, see Use custom organization policies.

You can use the iam.managed.allowedPolicyMembers managed organization policy constraint to implement domain restricted sharing. For more information, see Domain restricted sharing.

You can use the iam.managed.preventPrivilegedBasicRolesForDefaultServiceAccounts managed organization policy constraint to prevent default service accounts from being granted the Editor (roles/editor) or Owner (roles/owner) roles. For more information, see Prevent the Owner and Editor role from being granted to default service accounts.

Organization policy managed constraints are a set of constraints built on the custom organization policy platform. You can use managed constraints in place of certain predefined constraints to perform dry-run tests and simulate changes to your policies using Policy Intelligence tools. This feature is now in General Availability.