Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deactivate all default policies #104

Open
ehaselwanter opened this issue May 21, 2024 · 1 comment
Open

deactivate all default policies #104

ehaselwanter opened this issue May 21, 2024 · 1 comment

Comments

@ehaselwanter
Copy link

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

@chris-rock
Copy link
Member

Thank you for the issue @ehaselwanter If I understand the problem correctly, the goal is:

  1. setup a new space
  2. active a specific list of policies

Right now you would need to know the default policies and then deactivate the default ones if you do not need them and activate the one you want.

The purpose of the current resource is to manipulate the state of an individual policies.

resource "mondoo_policy_assignment" "space" {
  space_id = mondoo_space.my_space.id

  policies = [
    "//policy.api.mondoo.app/policies/mondoo-aws-security",
  ]

  state = "enabled"

}

To set all policies for the whole space, I propose we introduce a new attribute partial_update which is set to true by default:

resource "mondoo_policy_assignment" "space" {
  space_id = mondoo_space.my_space.id

  policies = [
    "//policy.api.mondoo.app/policies/mondoo-aws-security",
  ]

  state = "enabled"
  
  # allow partial update, if deactivated the list of policies defined automatically deactivates
  # previously set policies
  partial_update = true # default is true, we can change in the next major version
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants