This organization policy message is a modified version of the one defined in the Organization Policy system. This message contains several fields defined in the original organization policy with some new fields for analysis purpose.
JSON representation |
---|
{
"attachedResource"
:
string
,
"appliedResource"
:
string
,
"rules"
:
[
{
object (
|
Fields | |
---|---|
attachedResource
|
The full resource name of an organization/folder/project resource where this organization policy is set. Notice that some type of constraints are defined with default policy. This field will be empty for them. |
appliedResource
|
The full resource name of an organization/folder/project resource where this organization policy applies to. For any user defined org policies, this field has the same value as the [attachedResource] field. Only for default policy, this field has the different value. |
rules[]
|
List of rules for this organization policy. |
inheritFromParent
|
If |
reset
|
Ignores policies set above this resource and restores the default behavior of the constraint at this resource. This field can be set in policies for either list or boolean constraints. If set, |
Rule
This rule message is a customized version of the one defined in the Organization Policy system. In addition to the fields defined in the original organization policy, it contains additional field(s) under specific circumstances to support analysis results.
JSON representation |
---|
{ "condition" : { object ( |
condition
object (
Expr
)
The evaluating condition for this rule.
conditionEvaluation
object (
ConditionEvaluation
)
The condition evaluation result for this rule. Only populated if it meets all the following criteria:
- There is a
condition
defined for this rule. - This rule is within
AnalyzeOrgPolicyGovernedContainersResponse.GovernedContainer.consolidated_policy
, orAnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset.consolidated_policy
when theAnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset
hasAnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset.governed_resource
.
Union field kind
.
kind
can be only one of the following:
values
object (
StringValues
)
List of values to be used for this policy rule. This field can be set only in policies for list constraints.
allowAll
boolean
Setting this to true means that all values are allowed. This field can be set only in Policies for list constraints.
denyAll
boolean
Setting this to true means that all values are denied. This field can be set only in Policies for list constraints.
enforce
boolean
If true
, then the Policy
is enforced. If false
, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.
StringValues
The string values for the list constraints.
JSON representation |
---|
{ "allowedValues" : [ string ] , "deniedValues" : [ string ] } |
Fields | |
---|---|
allowedValues[]
|
List of values allowed at this resource. |
deniedValues[]
|
List of values denied at this resource. |