pulumi policy group edit | CLI commands

[EXPERIMENTAL] Update a Policy Group’s configuration

Synopsis

[EXPERIMENTAL] Update a Policy Group’s configuration.

Renames a Policy Group, adds or removes stacks, applies or detaches Policy Packs, and adds or removes Insights accounts. At least one mutation flag must be provided.

Default output is a human-readable summary; pass –output=json for the full response as JSON.

pulumi policy group edit <name> [flags]

Examples

  # Rename a Policy Group
  pulumi policy group edit prod-policies --name production

  # Add a stack and a Policy Pack to a group
  pulumi policy group edit prod-policies --add-stack web/prod --add-policy-pack aws-guardrails@3

Options

      --add-insights-account stringArray      Add an Insights account to the Policy Group (repeatable)
      --add-policy-pack stringArray           Add a Policy Pack to the Policy Group (repeatable). Format: 'name@version' or 'name'
      --add-stack stringArray                 Add a stack to the Policy Group (repeatable). Format: 'project/stack' or 'stack'
  -h, --help                                  help for edit
      --name string                           Rename the Policy Group
      --org string                            The organization that owns the Policy Group
      --output string                         Output format. Supported values are: default and json (default "default")
      --remove-insights-account stringArray   Remove an Insights account from the Policy Group (repeatable)
      --remove-policy-pack stringArray        Remove a Policy Pack from the Policy Group (repeatable). Format: 'name@version' or 'name'
      --remove-stack stringArray              Remove a stack from the Policy Group (repeatable). Format: 'project/stack' or 'stack'

Options inherited from parent commands

      --color string                 Colorize output. Choices are: always, never, raw, auto (default "auto")
  -C, --cwd string                   Run pulumi as if it had been started in another directory
      --disable-integrity-checking   Disable integrity checking of checkpoint files
  -e, --emoji                        Enable emojis in the output
  -Q, --fully-qualify-stack-names    Show fully-qualified stack names
      --logflow                      Flow log settings to child processes (like plugins)
      --logtostderr                  Log to stderr instead of to files
      --memprofilerate int           Enable more precise (and expensive) memory allocation profiles by setting runtime.MemProfileRate
      --non-interactive              Disable interactive mode for all commands
      --otel-traces string           Export OpenTelemetry traces to the specified endpoint. Use file:// for local JSON files, grpc:// for remote collectors
      --profiling string             Emit CPU and memory profiles and an execution trace to '[filename].[pid].{cpu,mem,trace}', respectively
      --tracing file:                Emit tracing to the specified endpoint. Use the file: scheme to write tracing data to a local file
  -v, --verbose int                  Enable verbose logging (e.g., v=3); anything >3 is very verbose

SEE ALSO

• pulumi policy group - Manage policy groups