Policies

Filtering Policy Settings

You can use the policySettings filter to search and filter Policy Setting in the Turbot Guardrails Console or GraphQL queries.

• The policySettings filter supports the standard sort and limit keywords

• You can search Standard Guardrails metadata properties such as timestamp, updateTimestamp, etc. Note that you cannot search actorIdentityId or title in policySettings queries.

• Full Text Search will search/filter both the Policy Setting and the Resource

• You can use Tag Filters. Note that the tag filters are Resource filters - they filter Policy Settings on resources with these tags.

• You can filter the scope with Hierarchy Scope Filters. Note that these are implicitly set when filtering the policies page in the Guardrails Console

• You can use validToTimestamp to filter py policy expiration

• is:orphan will filter to settings that are orphaned by a higher level required setting

• is:exception will filter to settings that are an exception to a higher level required setting

Examples

Filtering Policy Values

You can use the policyValues filter to search and filter Policy Values in the Guardrails Console or GraphQL.

• The policyValues filter supports the standard sort and limit keywords

• You can search standard Guardrails metadata properties such as timestamp, updateTimestamp, etc. Note that you cannot search actorIdentityId or title in policyValues queries.

• Full Text Search will search/filter both the Policy Value and the Resource

• You can use Tag Filters. Note that the tag filters are Resource filters - they filter Policy Values on resources with these tags.

• You can filter the scope with Hierarchy Scope Filters. Note that these are implicitly set when filtering the policies page in the Guardrails Console

• The value keyword allows you to filter Policy Values set to a specific value

• You can search and filter policy values by the policy value state using the state keyword. Possible values are:

  • error
  • invalid
  • ok
  • tbd

Examples