Class Constraint (3.21.0rc0)

Version 3.21.0-rc0

• 3.27.1 (latest)
• 3.27.0
• 3.26.4
• 3.25.1
• 3.24.3
• 3.23.0
• 3.22.0
• 3.21.0
• 3.20.1
• 3.19.1
• 3.18.1
• 3.17.1
• 3.16.0
• 3.15.0
• 3.14.2
• 3.13.1
• 3.12.0
• 3.11.0
• 3.10.0
• 3.9.1
• 3.8.1
• 3.7.1
• 3.6.1
• 3.5.0
• 3.4.0
• 3.3.0
• 3.2.1
• 3.1.0
• 2.2.2
• 2.1.0
• 2.0.0
• 1.3.2
• 1.2.0
• 1.1.0
• 1.0.0
• 0.10.0
• 0.9.0
• 0.8.0
• 0.7.0
• 0.6.0
• 0.5.0
• 0.4.1
• 0.3.0

Constraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)

The definition of a constraint.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes
Name	Description
name	str The unique name of the constraint. Format of the name should be - constraints/{constraint_name} For example, constraints/compute.disableSerialPortAccess.
display_name	str The human readable name of the constraint.
description	str Detailed description of what this Constraint controls as well as how and where it is enforced.
constraint_default	google.cloud.asset_v1.types.AnalyzerOrgPolicyConstraint.Constraint.ConstraintDefault The evaluation behavior of this constraint in the absence of 'Policy'.
list_constraint	google.cloud.asset_v1.types.AnalyzerOrgPolicyConstraint.Constraint.ListConstraint Defines this constraint as being a ListConstraint. This field is a member of oneof_ constraint_type.
boolean_constraint	google.cloud.asset_v1.types.AnalyzerOrgPolicyConstraint.Constraint.BooleanConstraint Defines this constraint as being a BooleanConstraint. This field is a member of oneof_ constraint_type.

Classes

BooleanConstraint

BooleanConstraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A Constraint that is either enforced or not.

For example a constraint constraints/compute.disableSerialPortAccess. If it is enforced on a VM instance, serial port connections will not be opened to that instance.

ConstraintDefault

ConstraintDefault(value)

Specifies the default behavior in the absence of any Policy for the Constraint. This must not be CONSTRAINT_DEFAULT_UNSPECIFIED.

Values: CONSTRAINT_DEFAULT_UNSPECIFIED (0): This is only used for distinguishing unset values and should never be used. ALLOW (1): Indicate that all values are allowed for list constraints. Indicate that enforcement is off for boolean constraints. DENY (2): Indicate that all values are denied for list constraints. Indicate that enforcement is on for boolean constraints.

ListConstraint

ListConstraint(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A Constraint that allows or disallows a list of string values, which are configured by an organization's policy administrator with a Policy.