The policy can define specific values that are allowed or denied.
final pulumi.Input<List<String>> values;