Policy Spec Rule Args
data class PolicySpecRuleArgs(val allowAll: Output<String>? = null, val condition: Output<PolicySpecRuleConditionArgs>? = null, val denyAll: Output<String>? = null, val enforce: Output<String>? = null, val values: Output<PolicySpecRuleValuesArgs>? = null) : ConvertibleToJava<PolicySpecRuleArgs>
Constructors
Link copied to clipboard
fun PolicySpecRuleArgs(allowAll: Output<String>? = null, condition: Output<PolicySpecRuleConditionArgs>? = null, denyAll: Output<String>? = null, enforce: Output<String>? = null, values: Output<PolicySpecRuleValuesArgs>? = null)
Functions
Properties
Link copied to clipboard
A condition which determines whether this rule is used in the evaluation of the policy. When set, the expression
field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')".