Organization Policy v2 API - Class Constraint (2.1.0)

public sealed class Constraint : IMessage<Constraint>, IEquatable<Constraint>, IDeepCloneable<Constraint>, IBufferMessage, IMessage

Reference documentation and code samples for the Organization Policy v2 API class Constraint.

A constraint describes a way to restrict resource's configuration. For example, you could enforce a constraint that controls which cloud services can be activated across an organization, or whether a Compute Engine instance can have serial port connections established. Constraints can be configured by the organization's policy administrator to fit the needs of the organization by setting a policy that includes constraints at different locations in the organization's resource hierarchy. Policies are inherited down the resource hierarchy from higher levels, but can also be overridden. For details about the inheritance rules please read about [policies][google.cloud.OrgPolicy.v2.Policy].

Constraints have a default behavior determined by the constraint_default field, which is the enforcement behavior that is used in the absence of a policy being defined or inherited for the resource in question.

Inheritance

Object > Constraint

Namespace

Google.Cloud.OrgPolicy.V2

Assembly

Google.Cloud.OrgPolicy.V2.dll

Constructors

Constraint()

public Constraint()

Constraint(Constraint)

public Constraint(Constraint other)
Parameter
NameDescription
otherConstraint

Properties

BooleanConstraint

public Constraint.Types.BooleanConstraint BooleanConstraint { get; set; }

Defines this constraint as being a BooleanConstraint.

Property Value
TypeDescription
Constraint.Types.BooleanConstraint

ConstraintDefault

public Constraint.Types.ConstraintDefault ConstraintDefault { get; set; }

The evaluation behavior of this constraint in the absence of 'Policy'.

Property Value
TypeDescription
Constraint.Types.ConstraintDefault

ConstraintName

public ConstraintName ConstraintName { get; set; }

ConstraintName-typed view over the Name resource name property.

Property Value
TypeDescription
ConstraintName

ConstraintTypeCase

public Constraint.ConstraintTypeOneofCase ConstraintTypeCase { get; }
Property Value
TypeDescription
Constraint.ConstraintTypeOneofCase

Description

public string Description { get; set; }

Detailed description of what this Constraint controls as well as how and where it is enforced.

Mutable.

Property Value
TypeDescription
String

DisplayName

public string DisplayName { get; set; }

The human readable name.

Mutable.

Property Value
TypeDescription
String

ListConstraint

public Constraint.Types.ListConstraint ListConstraint { get; set; }

Defines this constraint as being a ListConstraint.

Property Value
TypeDescription
Constraint.Types.ListConstraint

Name

public string Name { get; set; }

Immutable. The resource name of the Constraint. Must be in one of the following forms:

  • projects/{project_number}/constraints/{constraint_name}
  • folders/{folder_id}/constraints/{constraint_name}
  • organizations/{organization_id}/constraints/{constraint_name}

For example, "/projects/123/constraints/compute.disableSerialPortAccess".

Property Value
TypeDescription
String