restrictionType property
The type of restriction for using gcp products in the Workload environment.
Required. Possible string values are:
- "RESTRICTION_TYPE_UNSPECIFIED" : Unknown restriction type.
- "ALLOW_ALL_GCP_RESOURCES" : Allow the use all of all gcp products, irrespective of the compliance posture. This effectively removes gcp.restrictServiceUsage OrgPolicy on the AssuredWorkloads Folder.
- "ALLOW_COMPLIANT_RESOURCES" : Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources.
- "APPEND_COMPLIANT_RESOURCES" : Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of compliant resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows.
Implementation
core.String? restrictionType;