It seems like no one knows anything. We have started our own policy for GCP, and you are welcome to use, share and add rules: https://github.com/Global-Slice/pulumi-gcp-policy-pack We are trying to mimic the AWSGuard for now.