Organization Policy v2 API - Class CustomConstraint (2.8.0)

Reference documentation and code samples for the Organization Policy v2 API class CustomConstraint.

A custom constraint defined by customers which can only be applied to the given resource types and organization.

By creating a custom constraint, customers can apply policies of this custom constraint. Creating a custom constraint itself does NOT apply any policy enforcement.

Allow or deny type.

A Common Expression Language (CEL) condition which is used in the evaluation of the constraint. For example: resource.instanceName.matches("[production|test]_.*_(\d)+") or, resource.management.auto_upgrade == true

The max length of the condition is 1000 characters.

CustomConstraintName-typed view over the Name resource name property.

Detailed information about this custom policy constraint. The max length of the description is 2000 characters.

One line display name for the UI. The max length of the display_name is 200 characters.

All the operations being applied for this constraint.

Immutable. Name of the constraint. This is unique within the organization. Format of the name should be

• organizations/{organization_id}/customConstraints/{custom_constraint_id}

Example: organizations/123/customConstraints/custom.createOnlyE2TypeVms

The max length is 70 characters and the minimum length is 1. Note that the prefix organizations/{organization_id}/customConstraints/ is not counted.

Immutable. The resource instance type on which this policy applies. Format will be of the form : <service name>/<type> Example:

• compute.googleapis.com/Instance.

Output only. The last time this custom constraint was updated. This represents the last time that the CreateCustomConstraint or UpdateCustomConstraint methods were called.