restrictionType property

String? restrictionType
getter/setter pair

The type of restriction for using gcp products in the Workload environment.

Required. Possible string values are:

  • "RESTRICTION_TYPE_UNSPECIFIED" : Unknown restriction type.
  • "ALLOW_ALL_GCP_RESOURCES" : Allow the use all of all gcp products, irrespective of the compliance posture. This effectively removes gcp.restrictServiceUsage OrgPolicy on the AssuredWorkloads Folder.
  • "ALLOW_COMPLIANT_RESOURCES" : Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources.
  • "APPEND_COMPLIANT_RESOURCES" : Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of compliant resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows.

Implementation

core.String? restrictionType;