Table: turbot_policy_value

A policy value is the effective policy setting on an instance of a resource type. Every resource that is targeted by a given policy setting will have its own value for that policy, which will be the resultant calculated policy for the "winning" policy in the hierarchy.

Policy settings are inherited through the resource hierarchy, and values for a resource are calculated according to policy settings at or above it in the resource hierarchy. For example, a policy setting at the Turbot level will be inherited by all resources below.

It is recommended that queries to this table should include (usually in the where clause) at least one of these columns: state, policy_type_id, resource_type_id, resource_type_uri or filter.

Examples

List policy values by policy type ID

select
  id,
  state,
  is_default,
  is_calculated,
  policy_type_id,
  type_mod_uri
from
  turbot_policy_value
where
  policy_type_id = 221505068398189;

List policy values by resource ID

select
  id,
  state,
  is_default,
  is_calculated,
  resource_id,
  type_mod_uri
from
  turbot_policy_value
where
  resource_id = 161587219904115;

List non-default calculated policy values

select
  id,
  state,
  is_default,
  is_calculated,
  resource_type_id,
  type_mod_uri
from
  turbot_policy_value
where
  is_calculated
  and not is_default;

Filter policy values using Turbot filter syntax

select
  id,
  state,
  is_default,
  is_calculated,
  policy_type_id,
  resource_id,
  resource_type_id
from
  turbot_policy_value
where
  filter = 'state:ok';