fix: add VPC Flow logs exceptions for REGIONAL_MANAGED_PROXY and INTE…

…RNAL_HTTPS_LOAD_BALANCER
terraform-google-modules · Jun 20, 2023 · 2e48907 · 2e48907
1 parent 7205518
commit 2e48907
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/policy-library/policies/templates/gcp_network_enable_flow_logs_v1.yaml b/policy-library/policies/templates/gcp_network_enable_flow_logs_v1.yaml
@@ -62,9 +62,12 @@ spec:
         	legacy_enable_flow_logs := lib.get_default(network, "enableFlowLogs", false)
         	log_config := lib.get_default(network, "logConfig", {})
         	log_config_enable_flow_logs := lib.get_default(log_config, "enable", false)
+        	purpose := lib.get_default(network, "purpose", "PRIVATE")
 
         	log_config_enable_flow_logs != true
         	legacy_enable_flow_logs != true
+        	purpose != "REGIONAL_MANAGED_PROXY"
+        	purpose != "INTERNAL_HTTPS_LOAD_BALANCER"
 
         	message := sprintf("Flow logs are disabled in subnetwork %v.", [asset.name])
         	metadata := {"resource": asset.name}