Skip to main content

constraints

Overview

Nameconstraints
TypeResource
Idgoogle.orgpolicy.constraints

Fields

NameDatatypeDescription
namestringImmutable. The resource name of the constraint. Must be in one of the following forms: projects/{project_number}/constraints/{constraint_name} folders/{folder_id}/constraints/{constraint_name} * organizations/{organization_id}/constraints/{constraint_name} For example, "/projects/123/constraints/compute.disableSerialPortAccess".
descriptionstringDetailed description of what this constraint controls as well as how and where it is enforced. Mutable.
booleanConstraintobjectA constraint that is either enforced or not. For example, a constraint constraints/compute.disableSerialPortAccess. If it is enforced on a VM instance, serial port connections will not be opened to that instance.
constraintDefaultstringThe evaluation behavior of this constraint in the absence of a policy.
displayNamestringThe human readable name. Mutable.
listConstraintobjectA constraint that allows or disallows a list of string values, which are configured by an Organization Policy administrator with a policy.
supportsDryRunbooleanShows if dry run is supported for this constraint or not.

Methods

NameAccessible byRequired Params
folders_constraints_listSELECTfoldersId
organizations_constraints_listSELECTorganizationsId
projects_constraints_listSELECTprojectsId
_folders_constraints_listEXECfoldersId
_organizations_constraints_listEXECorganizationsId
_projects_constraints_listEXECprojectsId