⭐ Repository → 📁 Compliance Engine → 📁 CloudAware → 📁 Google → 📁 Cloud SQL → 🛡️ Instance External Authorized Networks whitelists all public IP addresses🟢

🧠 Google Cloud SQL Instance External Authorized Networks whitelists all public IP addresses - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/google/sql/instance-public-ip-whitelist/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 Google Cloud SQL Instance
• 🔌 Google Cloud SQL Instance - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2025-10-01T12:50:57.736236928Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	111	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	112	✔️ 199	✔️ extract('CA10__ipv4Enabled__c') != true	✔️ null
🟢	113	✔️ 300	✔️ otherwise	✔️ null
🟢	114	✔️ 299	✔️ extract('caJsonText__authorizedNetworksJsonValue__c').contains('0.0.0.0/0')	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/google/sql/instance-public-ip-whitelist/policy.yaml	0B21B8A076E33C9AA80D01E686207D7A
Open	/ce/ca/google/sql/instance-public-ip-whitelist/prod.logic.yaml	9DEF1B12AE04C40147562052B53EF0EC
Open	/ce/ca/google/sql/instance-public-ip-whitelist/test-data.json	70C77A039AF9143E7FE431EB359E8103
Open	/types/CA10__CaGoogleSqlInstance__c/object.extracts.yaml	8DD86EFB2FFA06BD1E9BC0452FF2EC8A

Available Commands

repo-manager policies generate FULL /ce/ca/google/sql/instance-public-ip-whitelist/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/google/sql/instance-public-ip-whitelist/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/google/sql/instance-public-ip-whitelist/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/google/sql/instance-public-ip-whitelist/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/google/sql/instance-public-ip-whitelist/prod.logic.yaml

Content

Open File

---

inputType: "CA10__CaGoogleSqlInstance__c"
testData:
  - file: test-data.json
importExtracts:
  - file: /types/CA10__CaGoogleSqlInstance__c/object.extracts.yaml
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "Authorized networks apply only to instances with public IPs"
    check:
      NOT_EQUAL:
        left:
          EXTRACT: "CA10__ipv4Enabled__c"
        right:
          BOOLEAN: true
  - status: "INCOMPLIANT"
    currentStateMessage: "Cloud SQL Database Instance implicitly whitelists all public IP addresses."
    remediationMessage: "Update the authorized network list."
    check:
      CONTAINS:
        arg:
          EXTRACT: "caJsonText__authorizedNetworksJsonValue__c"
        search:
          TEXT: "0.0.0.0/0"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "The Cloud SQL Instance is not open to the public internet."