You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description: "Setting this to true means that all values are denied. This field can be set only in policies for list constraints.",
152
+
Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in policies for list constraints.",
153
153
},
154
154
155
155
"enforce": {
156
156
Type: schema.TypeString,
157
157
Optional: true,
158
-
Description: "If `true`, then the policy is enforced. If `false`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.",
158
+
Description: "If `\"TRUE\"`, then the policy is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.",
Description: "Setting this to true means that all values are denied. This field can be set only in Policies for list constraints.",
279
+
Description: "Setting this to `\"TRUE\"` means that all values are denied. This field can be set only in Policies for list constraints.",
280
280
},
281
281
282
282
"enforce": {
283
283
Type: schema.TypeString,
284
284
Optional: true,
285
-
Description: "If `true`, then the `Policy` is enforced. If `false`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.",
285
+
Description: "If `\"TRUE\"`, then the `Policy` is enforced. If `\"FALSE\"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.",
Copy file name to clipboardExpand all lines: website/docs/r/org_policy_policy.html.markdown
+6-6
Original file line number
Diff line number
Diff line change
@@ -205,19 +205,19 @@ The `rules` block supports:
205
205
206
206
*`allow_all` -
207
207
(Optional)
208
-
Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
208
+
Setting this to `"TRUE"` means that all values are allowed. This field can be set only in policies for list constraints.
209
209
210
210
*`condition` -
211
211
(Optional)
212
212
A condition which determines whether this rule is used in the evaluation of the policy. When set, the `expression` field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')".
213
213
214
214
*`deny_all` -
215
215
(Optional)
216
-
Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
216
+
Setting this to `"TRUE"` means that all values are denied. This field can be set only in policies for list constraints.
217
217
218
218
*`enforce` -
219
219
(Optional)
220
-
If `true`, then the policy is enforced. If `false`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.
220
+
If `"TRUE"`, then the policy is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in policies for boolean constraints.
221
221
222
222
*`values` -
223
223
(Optional)
@@ -275,19 +275,19 @@ The `rules` block supports:
275
275
276
276
*`allow_all` -
277
277
(Optional)
278
-
Setting this to true means that all values are allowed. This field can be set only in Policies for list constraints.
278
+
Setting this to `"TRUE"` means that all values are allowed. This field can be set only in Policies for list constraints.
279
279
280
280
*`condition` -
281
281
(Optional)
282
282
A condition which determines whether this rule is used in the evaluation of the policy. When set, the `expression` field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')".
283
283
284
284
*`deny_all` -
285
285
(Optional)
286
-
Setting this to true means that all values are denied. This field can be set only in Policies for list constraints.
286
+
Setting this to `"TRUE"` means that all values are denied. This field can be set only in Policies for list constraints.
287
287
288
288
*`enforce` -
289
289
(Optional)
290
-
If `true`, then the `Policy` is enforced. If `false`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.
290
+
If `"TRUE"`, then the `Policy` is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.
0 commit comments