Class: Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues

Inherits:

Object

Object
Google::Cloud::OrgPolicy::V2::PolicySpec::PolicyRule::StringValues

show all

Extended by:: Protobuf::MessageExts::ClassMethods

Includes:: Protobuf::MessageExts

Defined in:: proto_docs/google/cloud/orgpolicy/v2/orgpolicy.rb

Overview

A message that holds specific allowed and denied values. This message can define specific values and subtrees of the Resource Manager resource hierarchy (Organizations, Folders, Projects) that are allowed or denied. This is achieved by using the under: and optional is: prefixes. The under: prefix is used to denote resource subtree values. The is: prefix is used to denote specific values, and is required only if the value contains a ":". Values prefixed with "is:" are treated the same as values with no prefix. Ancestry subtrees must be in one of the following formats:

projects/<project-id> (for example, projects/tokyo-rain-123)
folders/<folder-id> (for example, folders/1234)
organizations/<organization-id> (for example, organizations/1234)

The supports_under field of the associated Constraint defines whether ancestry prefixes can be used.

Instance Attribute Summary collapse

#allowed_values ⇒ ::Array<::String>
List of values allowed at this resource.
#denied_values ⇒ ::Array<::String>
List of values denied at this resource.

Instance Attribute Details

#allowed_values ⇒ `::Array<::String>`

Returns List of values allowed at this resource.

Returns:

(::Array<::String>) —
List of values allowed at this resource.

# File 'proto_docs/google/cloud/orgpolicy/v2/orgpolicy.rb', line 188

class StringValues
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#denied_values ⇒ `::Array<::String>`

Returns List of values denied at this resource.