Skip to content


Projects Attributes

ID Uniqueness Chosen By Mutability
Project ID Globally unique You Immutable
Project name Need not be unique You Mutable
Project number Globally unique GCP Immutable


Resource Manager

Resource Manager allows to programmatically manage Organizations, Folders, and Projects

  • If you have a GSuite domain, GCP projects will automatically belong to your organization node
  • Otherwise, you can use Google Cloud Identity to create one
Resource hierarchy levels
  • Define trust boundaries

Organization Policy Service

  • Allows to set constraints that apply to all resources in the hierarchy
  • All descendants inherit the policy constraints
  • 2 main constraint types:
    • List: allows or disallows values within a list
      • Example: compute.vmExternalIpAccess
      • This list constraint defines the set of Compute Engine VM instances that are allowed to use external IP addresses
    • Boolean: turn policies on or off