How do I ensure that all the VM instances created in my organisation are shielded VM s

Question

I want to make sure that all the VM instances created on GCP in my organization are all shielded. How do I ensure it happens?

Answer 1

You can set the constraints/compute.requireShieldedVm organization policy constraint to True to require that Compute Engine VM instances created in your organization be Shielded VM instances.

Learn how to set the constraints/compute.requireShieldedVm constraint in Using boolean constraints in organization policy. You must be an organization policy administrator to set a constraint.

This should do!