Asset and Configuration Governance

Tagging is an essential way to accurately group assets in their appropriate business groups. Set notifications to identify assets that do not conform with the internal tagging standards defined by your organization.

Examples:

• If any asset is missing the tag Environment, send notification.
• If any asset is untagged, alert its owner.
• If an asset's tag does not match a regular expression or pattern.

Sample Best Practice Policy: This Policy sends an email alert reporting any new GCP assets that are provisioned without being tagged.

In any organization, there are asset types and configurations that are not-preferred, or are outright not allowed. It’s critical that you can quickly identify these and take action to correct them.

Examples:

• When an instance has more than 64 cores.
• When an instance is launched with more than 300 GB of memory.

Sample Best Practice Policy: This policy identifies any running compute instances that have more than 64 cores.