kovagoadam 1907c38e22 Add IAM deny policies support (#3970) ...

* Added IAM denial policies

* Moved default to empty, removed trys, added condition vars to expression

* remove redundant null checks

* reduce line length

* boilerplate and principal context expansion

* update readmes

* add explicit validation against null values

* add context tests

* Add missing license headers to examples

---------

Co-authored-by: Julio Castillo <jccb@google.com>

2026-05-21 02:38:06 +00:00

..

autokey.yaml

Add support for KMS key creation to project factory (#3518)

2025-11-11 07:23:50 +01:00

basic.yaml

Make service agents work in different universes (#2894)

2025-02-14 12:16:07 +00:00

bigqueryreservation.yaml

BigQuery reservation (#3441)

2025-11-03 11:36:42 +01:00

custom-modules-sha.yaml

Fix pre-commit hook (#3882)

2026-04-18 10:07:14 +02:00

custom-role-iam.yaml

Use fixture custom role for modules/project tests

2025-10-13 18:58:52 +02:00

data.yaml

Enable terraform_naming_convention in tflint (#3930)

2026-05-06 06:06:26 +00:00

feeds.yaml

Add asset_feeds to resman modules (#3658)

2026-01-20 14:37:35 +00:00

iam-authoritative.yaml

Fix E2E tests.

2025-11-04 10:23:55 +01:00

iam-bindings-additive.yaml

Use email from variables in tests

2025-10-13 18:58:52 +02:00

iam-bindings.yaml

Use fixture custom role for modules/project tests

2025-10-13 18:58:52 +02:00

iam-bpc.yaml

Introduce iam_by_principals_conditional (#3649)

2026-01-14 11:16:07 +00:00

iam-deny-policies.yaml

Add IAM deny policies support (#3970)

2026-05-21 02:38:06 +00:00

iam-group.yaml

Fix E2E tests.

2025-11-04 10:23:55 +01:00

kms.yaml

yamlint tests/

2025-10-24 13:11:17 +02:00

log-scopes.yaml

Enable terraform_naming_convention in tflint (#3930)

2026-05-06 06:06:26 +00:00

logging-data-access.yaml

Add deletion_policy to project module (#2502)

2024-08-16 18:33:39 +02:00

logging.yaml

Enable terraform_naming_convention in tflint (#3930)

2026-05-06 06:06:26 +00:00

org-policies-dry-run.yaml

Add deletion_policy to project module (#2502)

2024-08-16 18:33:39 +02:00

org-policies.yaml

Add context to organization policiy factories (#2876)

2025-02-10 22:24:01 +00:00

outputs.yaml

Add deletion_policy to project module (#2502)

2024-08-16 18:33:39 +02:00

quotas.yaml

Add deletion_policy to project module (#2502)

2024-08-16 18:33:39 +02:00

scc-mute-configs.yaml

Add support for security command center mute rules in module organization, folder and project (#3694)

2026-02-04 08:31:05 +07:00

shared-vpc-auto-grants.yaml

Make service agents work in different universes (#2894)

2025-02-14 12:16:07 +00:00

shared-vpc-host-project-iam.yaml

Make service agents work in different universes (#2894)

2025-02-14 12:16:07 +00:00

shared-vpc-subnet-grants.yaml

yamlint tests/

2025-10-24 13:11:17 +02:00

shared-vpc.yaml

yamlint tests/

2025-10-24 13:11:17 +02:00

tags-factory.yaml

FAST light implementation (#3255)

2025-09-02 08:38:57 +02:00

tags-network-all.yaml

Allow any VPC for (secure) network_tags (#3634)

2026-01-12 09:34:18 +00:00

tags-network.yaml

Add deletion_policy to project module (#2502)

2024-08-16 18:33:39 +02:00

tags.yaml

Add support for dynamic tags (#3897)

2026-04-24 20:45:45 +00:00

vpc-sc-2.yaml

yamlint tests/

2025-10-24 13:11:17 +02:00

vpc-sc.yaml

yamlint tests/

2025-10-24 13:11:17 +02:00

wif.yaml

Add support for Workload Identity to project module and project factory (#3531)

2025-11-17 07:31:21 +00:00