Policy: GCP > IAM > Project Role > Configured

Determine how to configure this resource. Note that if the resource is managed by another stack, then the Skip/Check/Enforce values here are ignored and inherit from the stack that owns it

Resource Types

This policy targets the following resource types:

GCP > IAM > Project Role

Controls

GCP > IAM > Project Role > Configured

Policy Specification

Default	`Enforce: Configured if using Configured > Source`
Valid Values [YAML]	`Skip if using Configured > Source` `Check: Configured if using Configured > Source` `Enforce: Configured if using Configured > Source`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/configured

Policy Type URI

tmod:@turbot/gcp-iam#/policy/types/projectRoleConfigured

GraphQL

query policyType(id: "tmod:@turbot/gcp-iam#/policy/types/projectRoleConfigured") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-iam#/policy/types/projectRoleConfigured'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-iam#/policy/types/projectRoleConfigured'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-iam#/policy/types/projectRoleConfigured"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-iam#/policy/types/projectRoleConfigured"