Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Cannot delete Cloud Armor policy

I'm having a strange issue when trying to delete a Cloud Armor edge security policy. I have one set up that has a backend bucket target. The backend bucket is in use by a Classic Application Load Balancer. When I look at the CA policy details in the GCP console, the "delete policy" button is greyed out because it has the backend bucket target.

If I remove the target, the "delete policy" button enables. If I click the button to delete the policy, I get an error message that states "The security_policy resource '<resource>' is already being used by '<backendBucket resource>'".

I have tried deleting the backend bucket resource first, verified it has been deleted via both gcloud and the GCP console, and every time I try to delete the policy I get the same error message.

Is this something I can fix on my end, or will this require opening a ticket with GCP support?

0 2 142
2 REPLIES 2

Hello @BradCavanagh ,

After deleting the backend bucket resource, try describing the security policy via gcloud and check if it has any references or targets.

gcloud compute security-policies describe <policy-name>

Please can not delete