gcloud beta compute org-security-policies associations create

gcloud beta compute org-security-policies associations create - create a new association between a security policy and an organization or folder resource

gcloud beta compute org-security-policies associations create --security-policy=SECURITY_POLICY [--excluded-folders=[EXCLUDED_FOLDERS,…]] [--excluded-projects=[EXCLUDED_PROJECTS,…]] [--folder=FOLDER] [--name=NAME] [--organization=ORGANIZATION] [--replace-association-on-target] [GCLOUD_WIDE_FLAG …]

--security-policy=SECURITY_POLICY

Security policy ID of the association.

--excluded-folders=[EXCLUDED_FOLDERS,…]

List of folders to exclude from the application of this security policy. Folders should be specified in the form "folders/123".

--excluded-projects=[EXCLUDED_PROJECTS,…]

List of projects to exclude from the application of this security policy. Projects should be specified in the form "projects/123".

--folder=FOLDER

ID of the folder with which the association is created.

--name=NAME

Name to identify this association. If unspecified, the name will be set to "organization-{ORGANIZATION_ID}" or "folder-{FOLDER_ID}".

--organization=ORGANIZATION

ID of the organization in which the security policy is to be associated. Must be set if SECURITY_POLICY is short name.

--replace-association-on-target

By default, if you attempt to insert an association to an organization or folder resource that is already associated with a security policy the method will fail. If this is set, the existing association will be deleted at the same time that the new association is created.

Run $ gcloud help for details.