Managing Guardrails

The guardrails that automatically apply policy violation detection and prevention (detect/prevent) rules, as well as security and compliance standards, are as follows.

Preventive Guardrail

By applying preventive guardrails, you can proactively block policy violations before they occur.

Apply Preventive Guardrails

It can be applied to preventive guardrails at the organizational level. To apply preventive guardrails at the organizational level, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Go to the Preventive Guardrail List page.

3. From the Prevention Guardrail List, select the preventive guardrails to apply to the organization unit, then click the Apply to Organization Unit button. 3. Go to the Apply to organization unit page.

   • Multiple preventive guardrails can be selected and applied simultaneously.

4. After selecting the organizational unit to which you want to apply the preventive guardrails, click the Complete button.

   Category	Required	Detailed description
   Preventive guardrails to apply	-	Preventive guardrails list to apply to organizational units
   Organizational unit name	Required	Select the organizational unit to which the preventive guardrail will be applied Only organizational units with Registered or Registration Failed status can be selected Click the organizational unit name or parent organizational unit name to view detailed information

   Table. Preventive Guardrail Application Items

5. When the pop-up notifying the application of the preventive guardrail opens, click the Confirm button.

Check detailed information of preventive guardrail

You can view detailed information about preventive guardrails, the organizational units to which they are applied, and the list of Accounts. To disable the preventive guardrail, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Navigate to the Preventive Guardrail List page.
3. Click the preventive guardrail name in the Preventive Guardrail List to view detailed information. 3. Preventive Guardrail Details page
   • Preventive Guardrail Details page consists of the Basic Information, Applicable Organizational Unit, and Account tabs.

Basic Information

You can view basic and detailed information about preventive guardrails.

Applicable organization unit

You can view the list of organizational units where preventive guardrails are applied.

Account

You can view the list of sub‑accounts of the organizational unit where preventive guardrails are directly applied.

Disable Preventive Guardrail

You can disable the preventive guardrails applied at the organizational level. To disable the preventive guardrail, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.

2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Go to the Preventive Guardrail List page.

3. From the Preventive Guardrail List, select the preventive guardrail whose organization unit assignment you want to remove, then click the More > Remove Organization Unit Assignment button. 3. Go to the Remove organization unit application page.

   • Multiple preventive guardrails can be selected simultaneously to disable them.

4. After selecting the organizational unit to remove the preventive guardrail, click the Complete button.

   Category	Required	Detailed description
   Preventive guardrails to apply	-	List of preventive guardrails to be disabled
   Organizational unit name	required	Select the organizational unit to disable preventive guardrails Registered, Registration Failed status organizational units only can be selected Click the organizational unit name or parent organizational unit name to view detailed information

   Table. Preventive guardrail deactivation items

5. When the popup that notifies the removal of the preventive guardrail opens, click the Confirm button.

Detection Guardrail

When detection guardrails are enabled, for accounts within the default organizational unit, Config Inspection diagnostics are automatically run and checks are performed daily.

Applying Detection Guardrails

You can apply detection guardrails on the Landing Zone Settings page.

To apply detection guardrails, follow the steps below.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Go to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Edit button of the Detection Guardrail item. 3. Detection Guardrail Settings popup opens.
4. Detection Guardrail Settings in the popup window, after checking Enable Cloud Control Detection Guardrail, click the Confirm button.
   • When you enable it, Plan, Checklist, Diagnostic Cycle, and Start Time are displayed.
5. When the popup indicating detection guardrail activation opens, click the Confirm button.

Check detection guardrail diagnostic results

You can view the Config Inspection diagnostic results via detection guardrails. To view the diagnostic results, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Guardrail > Detection Guardrail menu. 2. Go to the Detection Guardrail List page.
3. Click the diagnostic name of the Account whose diagnostic results you want to view from the Detection Guardrail List. 3. Go to the Diagnostic Results List page.
   • Diagnosis Result List page’s search area allows you to enter a diagnosis name or click the Advanced Search button to search.
4. On the Diagnosis Result List page, click the diagnostic result of the diagnosis name whose detailed diagnostic items you want to view. 4. Go to the Diagnostic Result Details page.
   • Completed: The diagnostic request is in a normally completed state, and when Completed is clicked, it navigates to the detail page
   • Error: The diagnostic request was not completed successfully, and detailed information for the error status item cannot be viewed.
5. Detailed Diagnosis Result page

Managing Detection Guardrail Diagnostic Results

You can view the results of the Config Inspection diagnostic request via detection guardrails.

To check the diagnostic request results, follow these steps.

1. All Services > Management > Cloud Control menu, click. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Guardrail > Detection Guardrail menu. 2. Go to the Detection Guardrail List page.
3. In the Detection Guardrail List, click the diagnosis name of the Account that will manage the diagnostic results. 3. Navigate to the Diagnostic Results List page.
   • You can search by entering the diagnosis name in the search area of the Diagnosis Result List page or by clicking the Advanced Search button.
4. On the Diagnostic Results List page, click the Manage Diagnostic Results button. 4. Diagnosis Result Management Navigate to the detailed page.
5. Diagnosis Result Management View the diagnosis results on the detailed page.

Disable Detective Guardrail

You can disable the detection guardrail on the Landing Zone Settings page. To disable the detection guardrail, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Go to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Edit button for the Detection Guardrail item. 3. Detection Guardrail Settings popup window opens.
4. In the Detection Guardrail Settings popup, clear the check for Cloud Control detection guardrail active.
5. When the popup notifying the removal of detection guardrails opens, click the Confirm button.