A mechanism for defining constraint rules applied across an organization.
A mechanism that enforces specific settings -- such as disallowing external IPs or restricting resource creation to certain regions -- as constraints across all or part of the resource hierarchy. Whereas IAM controls "who," organization policy differs in that it restricts "what's possible" in the first place.
© 2026 ITBGM