Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.orgpolicy/v2.getPolicy
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Gets a policy on a resource. If no policy is set on the resource, NOT_FOUND
is returned. The etag
value can be used with UpdatePolicy()
to update a policy during read-modify-write.
Using getPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getPolicy(args: GetPolicyArgs, opts?: InvokeOptions): Promise<GetPolicyResult>
function getPolicyOutput(args: GetPolicyOutputArgs, opts?: InvokeOptions): Output<GetPolicyResult>
def get_policy(policy_id: Optional[str] = None,
project: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetPolicyResult
def get_policy_output(policy_id: Optional[pulumi.Input[str]] = None,
project: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetPolicyResult]
func LookupPolicy(ctx *Context, args *LookupPolicyArgs, opts ...InvokeOption) (*LookupPolicyResult, error)
func LookupPolicyOutput(ctx *Context, args *LookupPolicyOutputArgs, opts ...InvokeOption) LookupPolicyResultOutput
> Note: This function is named LookupPolicy
in the Go SDK.
public static class GetPolicy
{
public static Task<GetPolicyResult> InvokeAsync(GetPolicyArgs args, InvokeOptions? opts = null)
public static Output<GetPolicyResult> Invoke(GetPolicyInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)
public static Output<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)
fn::invoke:
function: google-native:orgpolicy/v2:getPolicy
arguments:
# arguments dictionary
The following arguments are supported:
getPolicy Result
The following output properties are available:
- Alternate
Pulumi.
Google Native. Orgpolicy. V2. Outputs. Google Cloud Orgpolicy V2Alternate Policy Spec Response - Deprecated.
- Dry
Run Pulumi.Spec Google Native. Orgpolicy. V2. Outputs. Google Cloud Orgpolicy V2Policy Spec Response - Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
- Name string
- Immutable. The resource name of the policy. Must be one of the following forms, where
constraint_name
is the name of the constraint which this policy configures: *projects/{project_number}/policies/{constraint_name}
*folders/{folder_id}/policies/{constraint_name}
*organizations/{organization_id}/policies/{constraint_name}
For example,projects/123/policies/compute.disableSerialPortAccess
. Note:projects/{project_id}/policies/{constraint_name}
is also an acceptable name for API requests, but responses will return the name using the equivalent project number. - Spec
Pulumi.
Google Native. Orgpolicy. V2. Outputs. Google Cloud Orgpolicy V2Policy Spec Response - Basic information about the Organization Policy.
- Alternate
Google
Cloud Orgpolicy V2Alternate Policy Spec Response - Deprecated.
- Dry
Run GoogleSpec Cloud Orgpolicy V2Policy Spec Response - Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
- Name string
- Immutable. The resource name of the policy. Must be one of the following forms, where
constraint_name
is the name of the constraint which this policy configures: *projects/{project_number}/policies/{constraint_name}
*folders/{folder_id}/policies/{constraint_name}
*organizations/{organization_id}/policies/{constraint_name}
For example,projects/123/policies/compute.disableSerialPortAccess
. Note:projects/{project_id}/policies/{constraint_name}
is also an acceptable name for API requests, but responses will return the name using the equivalent project number. - Spec
Google
Cloud Orgpolicy V2Policy Spec Response - Basic information about the Organization Policy.
- alternate
Google
Cloud Orgpolicy V2Alternate Policy Spec Response - Deprecated.
- dry
Run GoogleSpec Cloud Orgpolicy V2Policy Spec Response - Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
- name String
- Immutable. The resource name of the policy. Must be one of the following forms, where
constraint_name
is the name of the constraint which this policy configures: *projects/{project_number}/policies/{constraint_name}
*folders/{folder_id}/policies/{constraint_name}
*organizations/{organization_id}/policies/{constraint_name}
For example,projects/123/policies/compute.disableSerialPortAccess
. Note:projects/{project_id}/policies/{constraint_name}
is also an acceptable name for API requests, but responses will return the name using the equivalent project number. - spec
Google
Cloud Orgpolicy V2Policy Spec Response - Basic information about the Organization Policy.
- alternate
Google
Cloud Orgpolicy V2Alternate Policy Spec Response - Deprecated.
- dry
Run GoogleSpec Cloud Orgpolicy V2Policy Spec Response - Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
- name string
- Immutable. The resource name of the policy. Must be one of the following forms, where
constraint_name
is the name of the constraint which this policy configures: *projects/{project_number}/policies/{constraint_name}
*folders/{folder_id}/policies/{constraint_name}
*organizations/{organization_id}/policies/{constraint_name}
For example,projects/123/policies/compute.disableSerialPortAccess
. Note:projects/{project_id}/policies/{constraint_name}
is also an acceptable name for API requests, but responses will return the name using the equivalent project number. - spec
Google
Cloud Orgpolicy V2Policy Spec Response - Basic information about the Organization Policy.
- alternate
Google
Cloud Orgpolicy V2Alternate Policy Spec Response - Deprecated.
- dry_
run_ Googlespec Cloud Orgpolicy V2Policy Spec Response - Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
- name str
- Immutable. The resource name of the policy. Must be one of the following forms, where
constraint_name
is the name of the constraint which this policy configures: *projects/{project_number}/policies/{constraint_name}
*folders/{folder_id}/policies/{constraint_name}
*organizations/{organization_id}/policies/{constraint_name}
For example,projects/123/policies/compute.disableSerialPortAccess
. Note:projects/{project_id}/policies/{constraint_name}
is also an acceptable name for API requests, but responses will return the name using the equivalent project number. - spec
Google
Cloud Orgpolicy V2Policy Spec Response - Basic information about the Organization Policy.
- alternate Property Map
- Deprecated.
- dry
Run Property MapSpec - Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
- name String
- Immutable. The resource name of the policy. Must be one of the following forms, where
constraint_name
is the name of the constraint which this policy configures: *projects/{project_number}/policies/{constraint_name}
*folders/{folder_id}/policies/{constraint_name}
*organizations/{organization_id}/policies/{constraint_name}
For example,projects/123/policies/compute.disableSerialPortAccess
. Note:projects/{project_id}/policies/{constraint_name}
is also an acceptable name for API requests, but responses will return the name using the equivalent project number. - spec Property Map
- Basic information about the Organization Policy.
Supporting Types
GoogleCloudOrgpolicyV2AlternatePolicySpecResponse
- Launch
This property is required. string - Reference to the launch that will be used while audit logging and to control the launch. Should be set only in the alternate policy.
- Spec
This property is required. Pulumi.Google Native. Orgpolicy. V2. Inputs. Google Cloud Orgpolicy V2Policy Spec Response - Specify constraint for configurations of Google Cloud resources.
- Launch
This property is required. string - Reference to the launch that will be used while audit logging and to control the launch. Should be set only in the alternate policy.
- Spec
This property is required. GoogleCloud Orgpolicy V2Policy Spec Response - Specify constraint for configurations of Google Cloud resources.
- launch
This property is required. String - Reference to the launch that will be used while audit logging and to control the launch. Should be set only in the alternate policy.
- spec
This property is required. GoogleCloud Orgpolicy V2Policy Spec Response - Specify constraint for configurations of Google Cloud resources.
- launch
This property is required. string - Reference to the launch that will be used while audit logging and to control the launch. Should be set only in the alternate policy.
- spec
This property is required. GoogleCloud Orgpolicy V2Policy Spec Response - Specify constraint for configurations of Google Cloud resources.
- launch
This property is required. str - Reference to the launch that will be used while audit logging and to control the launch. Should be set only in the alternate policy.
- spec
This property is required. GoogleCloud Orgpolicy V2Policy Spec Response - Specify constraint for configurations of Google Cloud resources.
- launch
This property is required. String - Reference to the launch that will be used while audit logging and to control the launch. Should be set only in the alternate policy.
- spec
This property is required. Property Map - Specify constraint for configurations of Google Cloud resources.
GoogleCloudOrgpolicyV2PolicySpecPolicyRuleResponse
- Allow
All This property is required. bool - Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
- Condition
This property is required. Pulumi.Google Native. Orgpolicy. V2. Inputs. Google Type Expr Response - A condition which determines whether this rule is used in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')". - Deny
All This property is required. bool - Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
- Enforce
This property is required. bool - If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints. - Values
This property is required. Pulumi.Google Native. Orgpolicy. V2. Inputs. Google Cloud Orgpolicy V2Policy Spec Policy Rule String Values Response - List of values to be used for this policy rule. This field can be set only in policies for list constraints.
- Allow
All This property is required. bool - Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
- Condition
This property is required. GoogleType Expr Response - A condition which determines whether this rule is used in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')". - Deny
All This property is required. bool - Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
- Enforce
This property is required. bool - If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints. - Values
This property is required. GoogleCloud Orgpolicy V2Policy Spec Policy Rule String Values Response - List of values to be used for this policy rule. This field can be set only in policies for list constraints.
- allow
All This property is required. Boolean - Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
- condition
This property is required. GoogleType Expr Response - A condition which determines whether this rule is used in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')". - deny
All This property is required. Boolean - Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
- enforce
This property is required. Boolean - If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints. - values
This property is required. GoogleCloud Orgpolicy V2Policy Spec Policy Rule String Values Response - List of values to be used for this policy rule. This field can be set only in policies for list constraints.
- allow
All This property is required. boolean - Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
- condition
This property is required. GoogleType Expr Response - A condition which determines whether this rule is used in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')". - deny
All This property is required. boolean - Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
- enforce
This property is required. boolean - If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints. - values
This property is required. GoogleCloud Orgpolicy V2Policy Spec Policy Rule String Values Response - List of values to be used for this policy rule. This field can be set only in policies for list constraints.
- allow_
all This property is required. bool - Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
- condition
This property is required. GoogleType Expr Response - A condition which determines whether this rule is used in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')". - deny_
all This property is required. bool - Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
- enforce
This property is required. bool - If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints. - values
This property is required. GoogleCloud Orgpolicy V2Policy Spec Policy Rule String Values Response - List of values to be used for this policy rule. This field can be set only in policies for list constraints.
- allow
All This property is required. Boolean - Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
- condition
This property is required. Property Map - A condition which determines whether this rule is used in the evaluation of the policy. When set, the
expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')". - deny
All This property is required. Boolean - Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
- enforce
This property is required. Boolean - If
true
, then the policy is enforced. Iffalse
, then any configuration is acceptable. This field can be set only in policies for boolean constraints. - values
This property is required. Property Map - List of values to be used for this policy rule. This field can be set only in policies for list constraints.
GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValuesResponse
- Allowed
Values This property is required. List<string> - List of values allowed at this resource.
- Denied
Values This property is required. List<string> - List of values denied at this resource.
- Allowed
Values This property is required. []string - List of values allowed at this resource.
- Denied
Values This property is required. []string - List of values denied at this resource.
- allowed
Values This property is required. List<String> - List of values allowed at this resource.
- denied
Values This property is required. List<String> - List of values denied at this resource.
- allowed
Values This property is required. string[] - List of values allowed at this resource.
- denied
Values This property is required. string[] - List of values denied at this resource.
- allowed_
values This property is required. Sequence[str] - List of values allowed at this resource.
- denied_
values This property is required. Sequence[str] - List of values denied at this resource.
- allowed
Values This property is required. List<String> - List of values allowed at this resource.
- denied
Values This property is required. List<String> - List of values denied at this resource.
GoogleCloudOrgpolicyV2PolicySpecResponse
- Etag
This property is required. string - An opaque tag indicating the current version of the policy, used for concurrency control. This field is ignored if used in a
CreatePolicy
request. When the policyis returned from either a
GetPolicyor a
ListPoliciesrequest, this
etagindicates the version of the current policy to use when executing a read-modify-write loop. When the policy is returned from a
GetEffectivePolicyrequest, the
etag` will be unset. - Inherit
From Parent This property is required. bool - Determines the inheritance behavior for this policy. If
inherit_from_parent
is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints. - Reset
This property is required. bool - Ignores policies set above this resource and restores the
constraint_default
enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set,rules
must be empty andinherit_from_parent
must be set to false. - Rules
This property is required. List<Pulumi.Google Native. Orgpolicy. V2. Inputs. Google Cloud Orgpolicy V2Policy Spec Policy Rule Response> - In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set
enforced
to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence. - Update
Time This property is required. string - The time stamp this was previously updated. This represents the last time a call to
CreatePolicy
orUpdatePolicy
was made for that policy.
- Etag
This property is required. string - An opaque tag indicating the current version of the policy, used for concurrency control. This field is ignored if used in a
CreatePolicy
request. When the policyis returned from either a
GetPolicyor a
ListPoliciesrequest, this
etagindicates the version of the current policy to use when executing a read-modify-write loop. When the policy is returned from a
GetEffectivePolicyrequest, the
etag` will be unset. - Inherit
From Parent This property is required. bool - Determines the inheritance behavior for this policy. If
inherit_from_parent
is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints. - Reset
This property is required. bool - Ignores policies set above this resource and restores the
constraint_default
enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set,rules
must be empty andinherit_from_parent
must be set to false. - Rules
This property is required. []GoogleCloud Orgpolicy V2Policy Spec Policy Rule Response - In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set
enforced
to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence. - Update
Time This property is required. string - The time stamp this was previously updated. This represents the last time a call to
CreatePolicy
orUpdatePolicy
was made for that policy.
- etag
This property is required. String - An opaque tag indicating the current version of the policy, used for concurrency control. This field is ignored if used in a
CreatePolicy
request. When the policyis returned from either a
GetPolicyor a
ListPoliciesrequest, this
etagindicates the version of the current policy to use when executing a read-modify-write loop. When the policy is returned from a
GetEffectivePolicyrequest, the
etag` will be unset. - inherit
From Parent This property is required. Boolean - Determines the inheritance behavior for this policy. If
inherit_from_parent
is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints. - reset
This property is required. Boolean - Ignores policies set above this resource and restores the
constraint_default
enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set,rules
must be empty andinherit_from_parent
must be set to false. - rules
This property is required. List<GoogleCloud Orgpolicy V2Policy Spec Policy Rule Response> - In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set
enforced
to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence. - update
Time This property is required. String - The time stamp this was previously updated. This represents the last time a call to
CreatePolicy
orUpdatePolicy
was made for that policy.
- etag
This property is required. string - An opaque tag indicating the current version of the policy, used for concurrency control. This field is ignored if used in a
CreatePolicy
request. When the policyis returned from either a
GetPolicyor a
ListPoliciesrequest, this
etagindicates the version of the current policy to use when executing a read-modify-write loop. When the policy is returned from a
GetEffectivePolicyrequest, the
etag` will be unset. - inherit
From Parent This property is required. boolean - Determines the inheritance behavior for this policy. If
inherit_from_parent
is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints. - reset
This property is required. boolean - Ignores policies set above this resource and restores the
constraint_default
enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set,rules
must be empty andinherit_from_parent
must be set to false. - rules
This property is required. GoogleCloud Orgpolicy V2Policy Spec Policy Rule Response[] - In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set
enforced
to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence. - update
Time This property is required. string - The time stamp this was previously updated. This represents the last time a call to
CreatePolicy
orUpdatePolicy
was made for that policy.
- etag
This property is required. str - An opaque tag indicating the current version of the policy, used for concurrency control. This field is ignored if used in a
CreatePolicy
request. When the policyis returned from either a
GetPolicyor a
ListPoliciesrequest, this
etagindicates the version of the current policy to use when executing a read-modify-write loop. When the policy is returned from a
GetEffectivePolicyrequest, the
etag` will be unset. - inherit_
from_ parent This property is required. bool - Determines the inheritance behavior for this policy. If
inherit_from_parent
is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints. - reset
This property is required. bool - Ignores policies set above this resource and restores the
constraint_default
enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set,rules
must be empty andinherit_from_parent
must be set to false. - rules
This property is required. Sequence[GoogleCloud Orgpolicy V2Policy Spec Policy Rule Response] - In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set
enforced
to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence. - update_
time This property is required. str - The time stamp this was previously updated. This represents the last time a call to
CreatePolicy
orUpdatePolicy
was made for that policy.
- etag
This property is required. String - An opaque tag indicating the current version of the policy, used for concurrency control. This field is ignored if used in a
CreatePolicy
request. When the policyis returned from either a
GetPolicyor a
ListPoliciesrequest, this
etagindicates the version of the current policy to use when executing a read-modify-write loop. When the policy is returned from a
GetEffectivePolicyrequest, the
etag` will be unset. - inherit
From Parent This property is required. Boolean - Determines the inheritance behavior for this policy. If
inherit_from_parent
is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints. - reset
This property is required. Boolean - Ignores policies set above this resource and restores the
constraint_default
enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set,rules
must be empty andinherit_from_parent
must be set to false. - rules
This property is required. List<Property Map> - In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set
enforced
to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence. - update
Time This property is required. String - The time stamp this was previously updated. This represents the last time a call to
CreatePolicy
orUpdatePolicy
was made for that policy.
GoogleTypeExprResponse
- Description
This property is required. string - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- Expression
This property is required. string - Textual representation of an expression in Common Expression Language syntax.
- Location
This property is required. string - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- Title
This property is required. string - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- Description
This property is required. string - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- Expression
This property is required. string - Textual representation of an expression in Common Expression Language syntax.
- Location
This property is required. string - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- Title
This property is required. string - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. String - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. String - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. String - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. String - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. string - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. string - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. string - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. string - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. str - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. str - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. str - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. str - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. String - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. String - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. String - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. String - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.