The Policy API is now generally available with support for auditing more security features

We recently introduced the Policy API in open beta, letting super admins programmatically access information regarding how their Google Workspace environment service level settings and rules are configured. Beginning today, the Policy API is now generally available with more functionality: 

Admins can now use the API to audit more settings, specifically: 

Refer to our developer documentation for a full list of settings that can be audited by the API. 

Super admins 

Simplifying the management of Workspace settings continues to be a priority for us. The Policy API is an important new tool that helps streamline the process by providing a comprehensive view of security settings as needed, eliminating the need to navigate to numerous pages in the Admin console. In forthcoming releases, the Policy API will also include the ability to configure settings. 

Due to the increasing sophistication and scale of cyber threats, the Cybersecurity & Infrastructure Security Agency’s Secure Cloud Business Applications (SCuBA) project provides guidance to help agencies secure their cloud business application environments. The general availability of Google’s Workspace Policy API marks a significant milestone, enabling CISA to expand Scuba Goggles’ capabilities in assessing Google Workspace environments against CISA’s SCuBA secure configuration baselines. This advancement helps organizations better align with industry-leading security practices while maintaining operational efficiency. 

ScuBA has published a new release to leverage the GWS Policy API with ScubaGoggles, an automated assessment tool that compares tenant configurations with CISA’s Google Workspace Secure Configuration Baselines.