# Copyright 2022 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. values: google_org_policy_policy.default["iam.disableServiceAccountKeyCreation"]: name: organizations/1234567890/policies/iam.disableServiceAccountKeyCreation parent: organizations/1234567890 spec: - inherit_from_parent: null reset: null rules: - allow_all: null condition: [] deny_all: null enforce: 'TRUE' values: [] timeouts: null google_org_policy_policy.default["iam.disableServiceAccountKeyUpload"]: name: organizations/1234567890/policies/iam.disableServiceAccountKeyUpload parent: organizations/1234567890 spec: - inherit_from_parent: null reset: null rules: - allow_all: null condition: - description: test condition expression: resource.matchTagId(aa, bb) location: xxx title: condition deny_all: null enforce: 'TRUE' values: [] - allow_all: null condition: [] deny_all: null enforce: 'FALSE' values: [] timeouts: null counts: google_org_policy_policy: 2