Output only. Immutable. Identifier. Resource name of the WorkloadUpdate. Format: organizations/{organization}/locations/{location}/workloads/{workload}/updates/{update}
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
{// Union field kind can be only one of the following:"orgPolicyUpdate": {object (OrgPolicyUpdate)}// End of list of possible types for union field kind.}
Fields
Union field kind. The type of the update. This can be an update to a org policy of a resource e.g. gcp.resourceLocation org policy. kind can be only one of the following:
The suggested org policy that replaces the applied policy.
OrgPolicy
This assured workload service object is used to represent the org policy attached to a resource. It servces the same purpose as the orgpolicy.v2.Policy object but with functionality that is limited to what is supported by Assured Workloads(e.g. only one rule under one OrgPolicy object, no conditions, etc).
If inherit is true, policy rules of the lowest ancestor in the resource hierarchy chain are inherited. If it is false, policy rules are not inherited.
reset
boolean
Ignores policies set above this resource and restores to the constraint_default value. reset can only be true when rules is empty and inherit is false.
PolicyRule
A rule used to express this policy.
JSON representation
{// Union field kind can be only one of the following:"values": {object (StringValues)},"allowAll": boolean,"denyAll": boolean,"enforce": boolean// End of list of possible types for union field kind.}
Fields
Union field kind. The kind of the rule. kind can be only one of the following:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-30 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eApplyWorkloadUpdate\u003c/code\u003e endpoint returns an object containing the \u003ccode\u003eappliedUpdate\u003c/code\u003e, which represents a change to the workload's compliance configuration.\u003c/p\u003e\n"],["\u003cp\u003eA \u003ccode\u003eWorkloadUpdate\u003c/code\u003e includes details such as its \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003estate\u003c/code\u003e, \u003ccode\u003ecreateTime\u003c/code\u003e, \u003ccode\u003eupdateTime\u003c/code\u003e, and specifics found in the \u003ccode\u003edetails\u003c/code\u003e field, representing a change to the workload's compliance configuration.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eUpdateDetails\u003c/code\u003e can contain an \u003ccode\u003eorgPolicyUpdate\u003c/code\u003e, which details the update to an organization policy, such as \u003ccode\u003egcp.resourceLocation\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eOrgPolicyUpdate\u003c/code\u003e encompasses both the \u003ccode\u003eappliedPolicy\u003c/code\u003e and the \u003ccode\u003esuggestedPolicy\u003c/code\u003e, which are \u003ccode\u003eOrgPolicy\u003c/code\u003e objects and represent the current and proposed org policy changes.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eOrgPolicy\u003c/code\u003e objects contain information about resource constraints and rules, such as \u003ccode\u003eresource\u003c/code\u003e, \u003ccode\u003econstraint\u003c/code\u003e, \u003ccode\u003erule\u003c/code\u003e, \u003ccode\u003einherit\u003c/code\u003e, and \u003ccode\u003ereset\u003c/code\u003e, while \u003ccode\u003ePolicyRule\u003c/code\u003e supports \u003ccode\u003eStringValues\u003c/code\u003e, \u003ccode\u003eallowAll\u003c/code\u003e, \u003ccode\u003edenyAll\u003c/code\u003e, and \u003ccode\u003eenforce\u003c/code\u003e fields to define policy behaviors.\u003c/p\u003e\n"]]],[],null,["# ApplyWorkloadUpdateResponse\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n- [WorkloadUpdate](#WorkloadUpdate)\n - [JSON representation](#WorkloadUpdate.SCHEMA_REPRESENTATION)\n- [UpdateDetails](#UpdateDetails)\n - [JSON representation](#UpdateDetails.SCHEMA_REPRESENTATION)\n- [OrgPolicyUpdate](#OrgPolicyUpdate)\n - [JSON representation](#OrgPolicyUpdate.SCHEMA_REPRESENTATION)\n- [OrgPolicy](#OrgPolicy)\n - [JSON representation](#OrgPolicy.SCHEMA_REPRESENTATION)\n- [PolicyRule](#PolicyRule)\n - [JSON representation](#PolicyRule.SCHEMA_REPRESENTATION)\n- [StringValues](#StringValues)\n - [JSON representation](#StringValues.SCHEMA_REPRESENTATION)\n\nResponse for ApplyWorkloadUpdate endpoint.\n\nWorkloadUpdate\n--------------\n\nA workload update is a change to the workload's compliance configuration.\n\nUpdateDetails\n-------------\n\nThe details of the update.\n\nOrgPolicyUpdate\n---------------\n\nRepresents an update for an org policy control applied on an Assured Workload resource. The inherited org policy is not considered.\n\nOrgPolicy\n---------\n\nThis assured workload service object is used to represent the org policy attached to a resource. It servces the same purpose as the orgpolicy.v2.Policy object but with functionality that is limited to what is supported by Assured Workloads(e.g. only one rule under one OrgPolicy object, no conditions, etc).\n\nPolicyRule\n----------\n\nA rule used to express this policy.\n\nStringValues\n------------\n\nThe values allowed for a ListPolicy."]]