thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Organization Policy Service

Google Cloud service that applies constraints across the resource hierarchy to restrict how resources can be configured.

Definition

Organization policies use list or boolean constraints such as gcp.resourceLocations (allowed regions), iam.disableServiceAccountKeyCreation, compute.vmExternalIpAccess and iam.allowedPolicyMemberDomains (domain restricted sharing). Policies are inherited and can be overridden at lower levels if allowed. Custom constraints are also supported.

Example

An organization policy blocks external IP addresses on all VMs except in a designated DMZ project.

Exam tip

IAM decides who can act; organization policies decide what configurations are allowed, similar to Azure Policy or AWS SCPs.

Related terms