Class Rule (3.27.1)

Rule(mapping=None, *, ignore_unknown_fields=False, **kwargs)

This rule message is a customized version of the one defined in the Organization Policy system. In addition to the fields defined in the original organization policy, it contains additional field(s) under specific circumstances to support analysis results.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes

Name Description
values google.cloud.asset_v1.types.AnalyzerOrgPolicy.Rule.StringValues
List of values to be used for this policy rule. This field can be set only in policies for list constraints. This field is a member of oneof_ kind.
allow_all bool
Setting this to true means that all values are allowed. This field can be set only in Policies for list constraints. This field is a member of oneof_ kind.
deny_all bool
Setting this to true means that all values are denied. This field can be set only in Policies for list constraints. This field is a member of oneof_ kind.
enforce bool
If true, then the Policy is enforced. If false, then any configuration is acceptable. This field can be set only in Policies for boolean constraints. This field is a member of oneof_ kind.
condition google.type.expr_pb2.Expr
The evaluating condition for this rule.
condition_evaluation google.cloud.asset_v1.types.ConditionEvaluation
The condition evaluation result for this rule. Only populated if it meets all the following criteria: - There is a condition defined for this rule. - This rule is within AnalyzeOrgPolicyGovernedContainersResponse.GovernedContainer.consolidated_policy, or AnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset.consolidated_policy when the AnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset has AnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset.governed_resource.

Classes

StringValues

StringValues(mapping=None, *, ignore_unknown_fields=False, **kwargs)

The string values for the list constraints.