Determine if “Define Trusted Image Projects” constraint policy is enforces at the GCP organization level.
Enforcing the “Define Trusted Image Projects” allows you to restrict disk image access and ensure that your project members can only create boot disks from trusted images.
Ensure that “Define Trusted Image Projects” constraint is enforced at the organization level.