View Source GoogleApi.OrgPolicy.V2.Model.GoogleCloudOrgpolicyV2PolicySpecPolicyRule (google_api_org_policy v0.5.0)

A rule used to express this policy.

Attributes

  • allowAll (type: boolean(), default: nil) - Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
  • condition (type: GoogleApi.OrgPolicy.V2.Model.GoogleTypeExpr.t, default: nil) - A condition which determines whether this rule is used in the evaluation of the policy. When set, the expression field in the Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')". *denyAll(*type:*boolean(), *default:*nil) - Setting this to true means that all values are denied. This field can be set only in policies for list constraints. *enforce(*type:*boolean(), *default:*nil) - Iftrue, then the policy is enforced. Iffalse, then any configuration is acceptable. This field can be set only in policies for boolean constraints. *values(*type:*GoogleApi.OrgPolicy.V2.Model.GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues.t, *default:*nil`) - List of values to be used for this policy rule. This field can be set only in policies for list constraints.

Summary

Functions

Unwrap a decoded JSON object into its complex fields.

Types

@type t() :: %GoogleApi.OrgPolicy.V2.Model.GoogleCloudOrgpolicyV2PolicySpecPolicyRule{
  allowAll: boolean() | nil,
  condition: GoogleApi.OrgPolicy.V2.Model.GoogleTypeExpr.t() | nil,
  denyAll: boolean() | nil,
  enforce: boolean() | nil,
  values:
    GoogleApi.OrgPolicy.V2.Model.GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues.t()
    | nil
}

Functions

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.