To restrict the available solutions to only GC-approved solutions you need to create a private catalog and add solutions to the private catalog. Private Catalogs are where administrators have control over what solutions are available i.e whitelist. Please follow this quickstart guide
These links also provide more details on private catalog:
- Overview of Private Catalog
- Creating a solution from Cloud Marketplace
- Access Controls
- Sharing the catalog
Google Cloud also provides Public Marketplace which requires permissions to deploy solutions. Departments do not control what is available in the public marketplace. But by default without the right permissions users cannot deploy solutions from the public marketplace. We suggest that you assign the Billing Administrator (roles/billing.admin) IAM role if you want users to purchase services from Public Cloud Marketplace. For details on access controls for Public Marketplace please see Access Controls.
The validation Guardrail will identify users who should not have the permissions required.