Step 1 - Create a separate project - and store all hardened images in it.
Step 2 - Enforce the Org Policy - Define trusted image project.
This will ensure that ALL projects ONL Y use images from a pre-defined trusted image project.
anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist. <a href="https://calendly.com/anujvarma/google-cloud-architect-initial-consultation">Initial Consultation</a>