Access Context Manager

gcp Policy enginegoogle-access-context-manager

Attribute-based access levels for VPC Service Controls and Identity-Aware Proxy.

Provider: gcp
Kind: Policy engine
Category: Operations
Official docs: https://cloud.google.com/access-context-manager/docs/overview

Properties · 3 set by this component

property	type	values	required	kind default	this component
accessLevelType · component property	enum	basic \| custom	no	basic	inherited
combiningFunction · component property	enum	and \| or	no	—	inherited
devicePolicy · component property	boolean	—	no	false	inherited
effect	enum	audit \| deny \| modify \| deploy-if-not-exists	no	—	inherited
enforcedBy · component property	enum	vpc-service-controls \| identity-aware-proxy \| context-aware-access	no	—	inherited
enforcementMode	enum	enforced \| disabled	no	—	inherited
managed	boolean	—	no	false	▸ true
policyCount	integer	—	no	—	inherited
remediation	boolean	—	no	false	▸ false
scope	enum	resource \| group \| account \| organization	no	—	▸ organization

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "access-context-manager", component: "google-access-context-manager" }

Other Policy engine products · 56

Cloud Configalibaba-cloud-configalibabacloudpolicy-engine Data Security Centeralibaba-data-security-centeralibabacloudpolicy-engine Amazon CodeGuru Revieweraws-codeguru-reviewerawspolicy-engine AWS Configaws-configawspolicy-engine AWS Control Toweraws-control-towerawspolicy-engine IAM Access Analyzeraws-iam-access-analyzerawspolicy-engine AWS Lake Formationaws-lake-formationawspolicy-engine AWS License Manageraws-license-managerawspolicy-engine AWS Organizationsaws-organizationsawspolicy-engine AWS Resource Access Manageraws-ramawspolicy-engine Amazon Verified Permissionsaws-verified-permissionsawspolicy-engine Microsoft Entra Conditional Accessazure-conditional-accessazurepolicy-engine Azure Policyazure-policyazurepolicy-engine Microsoft Entra Privileged Identity Managementazure-privileged-identity-managementazurepolicy-engine Cloudflare Data Loss Preventioncloudflare-dlpcloudflarepolicy-engine CalypsoAIcalypsoaipolicy-engine Cerboscerbospolicy-engine OPA Gatekeepergatekeeperpolicy-engine Guardrails AIguardrails-aipolicy-engine HiddenLayer AI Security Platformhiddenlayerpolicy-engine KubeArmorkubearmorpolicy-engine Kubewardenkubewardenpolicy-engine Kyvernokyvernopolicy-engine Lakera Guardlakera-guardpolicy-engine LLM Guardllm-guardpolicy-engine NeMo Guardrailsnemo-guardrailspolicy-engine Open Policy Agentopapolicy-engine Permit.iopermit-iopolicy-engine Generic policy enginepolicy-enginepolicy-engine Prompt Securityprompt-securitypolicy-engine Protect AIprotect-aipolicy-engine Rebuffrebuffpolicy-engine Robust Intelligencerobust-intelligencepolicy-engine SonarQube Serversonarqubepolicy-engine DigitalOcean CSPMdigitalocean-cspmdigitaloceanpolicy-engine Assured Workloadsgoogle-assured-workloadsgcppolicy-engine Binary Authorizationgoogle-binary-authorizationgcppolicy-engine Identity and Access Managementgoogle-cloud-iamgcppolicy-engine Firebase App Checkgoogle-firebase-app-checkgcppolicy-engine Model Armorgoogle-model-armorgcppolicy-engine

and 16 more → Policy engine page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Access Context Manager: access levels of attributes (IP range, device policy, user identity, region)
3# held in an organization-wide access policy. Per "Access Context Manager overview" it defines
4# attribute-based rules but does not enforce them; VPC Service Controls and Identity-Aware Proxy do.
5# Device-type conditions need an enterprise subscription and Endpoint Verification.
6schemaVersion: "1"
7type: "component"
8id: "google-access-context-manager"
9kind: "policy-engine"
10provider: "gcp"
11docs: "https://cloud.google.com/access-context-manager/docs/overview"
12defaults:
13  scope: "organization"
14  remediation: false
15  managed: true
16properties:
17  accessLevelType:
18    type: "enum"
19    values: ["basic", "custom"]
20    default: "basic"
21  combiningFunction:
22    type: "enum"
23    values: ["and", "or"]
24  devicePolicy:
25    type: "boolean"
26    default: false
27  enforcedBy:
28    type: "enum"
29    values: ["vpc-service-controls", "identity-aware-proxy", "context-aware-access"]

The same page as markdown, for an agent: /catalogue/components/google-access-context-manager.md