google-cloud-platformgoogle-cloud-armor

Why some rule actions are disabled in google cloud armor?


I'm trying to select "Rate based ban" rule action when creating a new policy but it's disabled and when I click on the option nothing happens. I tried creating new rule (instead of default rule), targeting different backends, enabling Adaptive Protection but non off these helped Also I'm using "Standard Tier" and have "Compute Load Balancer Admin" permission role as well

Screenshot of the problem

EDITED:

I tried cmd to create the policy but seems like "Rate based ban" is not available:

gcloud compute --project=[PROJECT_NAME] security-policies rules create 3 --action=rate-based-ban --security-policy=temp-policy --src-ip-ranges=\*

Gives Error:

ERROR: (gcloud.compute.security-policies.rules.create) argument --action: Invalid choice: 'rate-based-ban'.

Valid choices are [allow, deny-403, deny-404, deny-502, redirect-to-recaptcha].

Solution

  • To use Adaptive Protection you must enroll your account in Managed Protection Plus.

    Using Google Cloud Armor Managed Protection

    Right now some services/options are in beta/preview. Some customers can access these features and some cannot. If you have opted into Standard, then you can not access features enabled in Managed. If you have not opted into either (the time is ending soon) then you can access features not available in Standard. If you need clarification on your account status and which features you can access, contact Google Cloud Billing support (free) in the Google Cloud Console.

    Given that Managed is not free, double-check what you have enrolled in. If you have not enrolled in either Standard or Managed, select one before you default to Standard, and the features you enabled stop working.