Add Organization Number/ID in Egress Rules in VPC SC [299522071]

Assigned

Feature Request

Status Update

No update yet.

Description

ha...@google.com

created issue #1

Sep 7, 2023 10:05PM

Problem you have encountered:

The customer has a cloud function which needs to create an Org level asset feed but it is failing due to VPC service controls with an error message [1].

[1]
"targetResource": "organizations/ORG_ID

"source": "projects/*********",

"sourceType": "Resource",

"servicePerimeter":
"accessPolicies/*******/servicePerimeters/******

In order to solve this issue the customer needs to add the Org ID to the destination in the egress rule of the VPC SC, currently this option is not available.

The only available solution is to set the resource target " * " to be able to solve the issue as mentioned in this documentation google documentation [1]

[1]

https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules?_ga=2.73966418.-1905011739.1692893712#egress-rules-reference:~:text=You%20can%20set%20this%20field%20to%20%5C%22*%5C%22%20to%20allow%20egress%20access%20to%20any%20Google%20Cloud%20resource

What you expected to happen:

Be able to add the Org ID to the resource target in an egress rule

Comments

ha...@google.com <ha...@google.com> Sep 7, 2023 10:09PM

Assigned to gc...@google.com.

ba...@google.com <ba...@google.com> Sep 8, 2023 02:55AM

Reassigned to ba...@google.com.

ba...@google.com <ba...@google.com> #2Sep 8, 2023 12:20PM

Reassigned to gc...@google.com.

Hello,

Thank you for reaching out to us with your request.

We have duly noted your feedback and will thoroughly validate it. While we cannot provide an estimated time of implementation or guarantee the fulfillment of the issue, please be assured that your input is highly valued. Your feedback enables us to enhance our products and services.

We appreciate your continued trust and support in improving our Google Cloud Platform products. In case you want to report a new issue, Please do not hesitate to create a new issue on the Issue Tracker providing a detailed description of your issue.

Once again, we sincerely appreciate your valuable feedback. Thank you for your understanding and collaboration.

Thanks & Regards,
Ashalatha
Google Cloud Support

vo...@tangerine.ca <vo...@tangerine.ca> #3Jul 9, 2024 02:23PM

same issue - any ETA? the workaround (whitelist all resources for specific services) is too broad and diminishes greatly the value of the controls.

on...@google.com <on...@google.com> Jul 25, 2024 09:15AM

Reassigned to on...@google.com.

on...@google.com <on...@google.com> #4Jul 25, 2024 12:09PM

Reassigned to gc...@google.com.

Hello, According to the Public Issue Tracker Process, we wait for a bug to gain a handful of stars, and hopefully, comments from several users before the engineering team works on the issue. Though we can't provide an ETA on this issue nor guarantee their implementation, rest assured that your feedback is always taken very seriously.

Please note that the Issue Tracker is primarily meant for reporting bugs and requesting new features. If you have any additional issues or concerns, please don’t hesitate to create a new thread on the Issue Tracker. We appreciate your cooperation!

Issue 299522071