Automated lifecycle management of analytics assets

[jldupont_sora]

Hi,

I would like to enforce immutability on assets that have been declared as "production ready".

E.g. once a team member finishes work on a BigQuery dataset (tables, routines), said team would signal in some way that said dataset is "ready for production" and some automated process would kick off and remove mutation related permissions to all team members on said dataset.

Is there something "out-of-box" in GCP that would do this ?  I was about to start coding stuff around Audit Logs (e.g. looking at some labels) and Cloud Run to automate this sort of process.

Thanks !