Class Constraint (3.21.0)

Constraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)

The definition of a constraint.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes

NameDescription
name str
The unique name of the constraint. Format of the name should be - constraints/{constraint_name} For example, constraints/compute.disableSerialPortAccess.
display_name str
The human readable name of the constraint.
description str
Detailed description of what this Constraint controls as well as how and where it is enforced.
constraint_default google.cloud.asset_v1.types.AnalyzerOrgPolicyConstraint.Constraint.ConstraintDefault
The evaluation behavior of this constraint in the absence of 'Policy'.
list_constraint google.cloud.asset_v1.types.AnalyzerOrgPolicyConstraint.Constraint.ListConstraint
Defines this constraint as being a ListConstraint. This field is a member of oneof_ constraint_type.
boolean_constraint google.cloud.asset_v1.types.AnalyzerOrgPolicyConstraint.Constraint.BooleanConstraint
Defines this constraint as being a BooleanConstraint. This field is a member of oneof_ constraint_type.

Classes

BooleanConstraint

BooleanConstraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A Constraint that is either enforced or not.

For example a constraint constraints/compute.disableSerialPortAccess. If it is enforced on a VM instance, serial port connections will not be opened to that instance.

ConstraintDefault

ConstraintDefault(value)

Specifies the default behavior in the absence of any Policy for the Constraint. This must not be CONSTRAINT_DEFAULT_UNSPECIFIED.

Values: CONSTRAINT_DEFAULT_UNSPECIFIED (0): This is only used for distinguishing unset values and should never be used. ALLOW (1): Indicate that all values are allowed for list constraints. Indicate that enforcement is off for boolean constraints. DENY (2): Indicate that all values are denied for list constraints. Indicate that enforcement is on for boolean constraints.

ListConstraint

ListConstraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A Constraint that allows or disallows a list of string values, which are configured by an organization's policy administrator with a Policy.