pulumi-gcp-kotlin/com.pulumi.gcp.organizations.kotlin/PolicyArgs

PolicyArgs

data class PolicyArgs(val booleanPolicy: Output<PolicyBooleanPolicyArgs>? = null, val constraint: Output<String>? = null, val listPolicy: Output<PolicyListPolicyArgs>? = null, val orgId: Output<String>? = null, val restorePolicy: Output<PolicyRestorePolicyArgs>? = null, val version: Output<Int>? = null) : ConvertibleToJava<PolicyArgs>

Allows management of Organization Policies for a Google Cloud Organization.

Warning: This resource has been superseded by gcp.orgpolicy.Policy. gcp.orgpolicy.Policy uses Organization Policy API V2 instead of Cloud Resource Manager API V1 and it supports additional features such as tags and conditions. To get more information about Organization Policies, see:

API documentation
How-to Guides

Introduction to the Organization Policy Service

Example Usage

To set policy with a boolean constraint:

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.Policy;
import com.pulumi.gcp.organizations.PolicyArgs;
import com.pulumi.gcp.organizations.inputs.PolicyBooleanPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var serialPortPolicy = new Policy("serialPortPolicy", PolicyArgs.builder()
            .booleanPolicy(PolicyBooleanPolicyArgs.builder()
                .enforced(true)
                .build())
            .constraint("compute.disableSerialPortAccess")
            .orgId("123456789")
            .build());
    }
}

Import

Organization Policies can be imported using the org_id and the constraint, e.g. * {{org_id}}/constraints/{{constraint}} In Terraform v1.5.0 and later, use an import block to import Organization Policies using one of the formats above. For exampletf import { id = "{{org_id}}/constraints/{{constraint}}" to = google_organization_policy.default }

$ pulumi import gcp:organizations/policy:Policy When using the [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import), Organization Policies can be imported using one of the formats above. For example

$ pulumi import gcp:organizations/policy:Policy default {{org_id}}/constraints/{{constraint}}

It is all right if the constraint contains a slash, as in the example above.

Constructors

PolicyArgs

fun PolicyArgs(booleanPolicy: Output<PolicyBooleanPolicyArgs>? = null, constraint: Output<String>? = null, listPolicy: Output<PolicyListPolicyArgs>? = null, orgId: Output<String>? = null, restorePolicy: Output<PolicyRestorePolicyArgs>? = null, version: Output<Int>? = null)

Functions

toJava

open override fun toJava(): PolicyArgs

Properties

booleanPolicy

val booleanPolicy: Output<PolicyBooleanPolicyArgs>? = null

A boolean policy is a constraint that is either enforced or not. Structure is documented below.

constraint

val constraint: Output<String>? = null

The name of the Constraint the Policy is configuring, for example, serviceuser.services. Check out the complete list of available constraints.

listPolicy

val listPolicy: Output<PolicyListPolicyArgs>? = null

A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below.

orgId

val orgId: Output<String>? = null

The numeric ID of the organization to set the policy for.

restorePolicy

val restorePolicy: Output<PolicyRestorePolicyArgs>? = null

A restore policy is a constraint to restore the default policy. Structure is documented below.

version

val version: Output<Int>? = null

Version of the Policy. Default version is 0.