Organization Policy
Allows management of Organization Policies for a Google Cloud Project.
Warning: This resource has been superseded by
gcp.orgpolicy.Policy.gcp.orgpolicy.Policyuses Organization Policy API V2 instead of Cloud Resource Manager API V1 and it supports additional features such as tags and conditions. To get more information about Organization Policies, see:
Example Usage
To set policy with a boolean constraint:
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.projects.OrganizationPolicy;
import com.pulumi.gcp.projects.OrganizationPolicyArgs;
import com.pulumi.gcp.projects.inputs.OrganizationPolicyBooleanPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var serialPortPolicy = new OrganizationPolicy("serialPortPolicy", OrganizationPolicyArgs.builder()
.booleanPolicy(OrganizationPolicyBooleanPolicyArgs.builder()
.enforced(true)
.build())
.constraint("compute.disableSerialPortAccess")
.project("your-project-id")
.build());
}
}Import
Project organization policies can be imported using any of the follow formats* projects/{{project_id}}:constraints/{{constraint}} * {{project_id}}:constraints/{{constraint}} * {{project_id}}:{{constraint}} In Terraform v1.5.0 and later, use an import block to import project organization policies using one of the formats above. For exampletf import { id = "projects/{{project_id}}:constraints/{{constraint}}" to = google_project_organization_policy.default }
$ pulumi import gcp:projects/organizationPolicy:OrganizationPolicy When using the [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import), project organization policies can be imported using one of the formats above. For example$ pulumi import gcp:projects/organizationPolicy:OrganizationPolicy default projects/{{project_id}}:constraints/{{constraint}}$ pulumi import gcp:projects/organizationPolicy:OrganizationPolicy default {{project_id}}:constraints/{{constraint}}$ pulumi import gcp:projects/organizationPolicy:OrganizationPolicy default {{project_id}}:{{constraint}}Properties
The name of the Constraint the Policy is configuring, for example, serviceuser.services. Check out the complete list of available constraints.