Policy
(
mapping
=
None
,
*
,
ignore_unknown_fields
=
False
,
**
kwargs
)
Data for an IAM policy.
Attributes
Name
Description
name
str
Immutable. The resource name of the
Policy
, which must
be unique. Format: policies/{attachment_point}/denypolicies/{policy_id}
The attachment point is identified by its URL-encoded full
resource name, which means that the forward-slash character, /
, must be written as %2F
. For example, policies/cloudresourcemanager.googleapis.com%2Fprojects%2Fmy-project/denypolicies/my-deny-policy
.
For organizations and folders, use the numeric ID in the
full resource name. For projects, requests can use the
alphanumeric or the numeric ID. Responses always contain the
numeric ID.uid
str
Immutable. The globally unique ID of the
Policy
.
Assigned automatically when the Policy
is created.kind
str
Output only. The kind of the
Policy
. Always contains the
value DenyPolicy
.display_name
str
A user-specified description of the
Policy
. This value
can be up to 63 characters.annotations
MutableMapping[str, str]
A key-value map to store arbitrary metadata for the
Policy
. Keys can be up to 63 characters. Values can be
up to 255 characters.etag
str
An opaque tag that identifies the current version of the
Policy
. IAM uses this value to help manage concurrent
updates, so they do not cause one update to be overwritten
by another.
If this field is present in a [CreatePolicy][] request, the
value is ignored.create_time
google.protobuf.timestamp_pb2.Timestamp
Output only. The time when the
Policy
was created.update_time
google.protobuf.timestamp_pb2.Timestamp
Output only. The time when the
Policy
was last updated.delete_time
google.protobuf.timestamp_pb2.Timestamp
Output only. The time when the
Policy
was deleted. Empty
if the policy is not deleted.rules
MutableSequence[ google.cloud.iam_v2.types.PolicyRule
]
A list of rules that specify the behavior of the
Policy
.
All of the rules should be of the kind
specified in the Policy
.managing_authority
str
Immutable. Specifies that this policy is managed by an authority and can only be modified by that authority. Usage is restricted.
Classes
AnnotationsEntry
AnnotationsEntry
(
mapping
=
None
,
*
,
ignore_unknown_fields
=
False
,
**
kwargs
)
The abstract base class for a message.
Parameters
Name
Description
kwargs
dict
Keys and values corresponding to the fields of the message.
mapping
Union[dict, .Message
]
A dictionary or message to be used to determine the values for this message.
ignore_unknown_fields
Optional(bool)
If True, do not raise errors for unknown fields. Only applied if mapping
is a mapping type or there are keyword parameters.