doc: Updates Cedar action names and namespaces for Public Preview. (#3017)

erabil-mdb · web-flow · commit cacb830e2822 · 2025-02-06T10:16:39.000-07:00
* doc: Updates Cedar action names and namespaces for Public Preview.

* Revises per tech review.

* Revises per tech review.

* Updates Private to Public.
diff --git a/docs/data-sources/resource_policies.md b/docs/data-sources/resource_policies.md
@@ -2,7 +2,7 @@
 
 `mongodbatlas_resource_policies` returns all resource policies in an organization.
 
--> **NOTE**: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:
+-> **NOTE**: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:
 1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
 2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
 
@@ -17,7 +17,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {
       body = <<EOF
         forbid (
                 principal,
-                action == cloud::Action::"project.edit",
+                action == ResourcePolicy::Action::"project.ipAccessList.modify",
                 resource
         )
                 when {
@@ -50,12 +50,12 @@ data "cedar_policyset" "cloud_region" {
     any_principal = true
     effect        = "forbid"
     action = {
-      type = " cloud::Action"
-      id   = "cluster.createEdit"
+      type = " ResourcePolicy::Action"
+      id   = "cluster.modify"
     }
     any_resource = true
     when {
-      text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"
+      text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"
     }
   }
 }
diff --git a/docs/data-sources/resource_policy.md b/docs/data-sources/resource_policy.md
@@ -2,7 +2,7 @@
 
 `mongodbatlas_resource_policy` describes a resource policy in an organization.
 
--> **NOTE**: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:
+-> **NOTE**: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:
 1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
 2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
 
@@ -17,7 +17,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {
       body = <<EOF
         forbid (
                 principal,
-                action == cloud::Action::"project.edit",
+                action == ResourcePolicy::Action::"project.ipAccessList.modify",
                 resource
         )
                 when {
@@ -50,12 +50,12 @@ data "cedar_policyset" "cloud_region" {
     any_principal = true
     effect        = "forbid"
     action = {
-      type = " cloud::Action"
-      id   = "cluster.createEdit"
+      type = " ResourcePolicy::Action"
+      id   = "cluster.modify"
     }
     any_resource = true
     when {
-      text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"
+      text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"
     }
   }
 }
diff --git a/docs/resources/resource_policy.md b/docs/resources/resource_policy.md
@@ -2,7 +2,7 @@
 
 `mongodbatlas_resource_policy` provides a Resource Policy resource. The resource lets you create, edit and delete resource policies to prevent misconfigurations and reduce the need for corrective interventions in your organization.
 
--> **NOTE**: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:
+-> **NOTE**: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:
 1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
 2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
 
@@ -19,7 +19,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {
       body = <<EOF
         forbid (
                 principal,
-                action == cloud::Action::"project.edit",
+                action == ResourcePolicy::Action::"project.ipAccessList.modify",
                 resource
         )
                 when {
@@ -52,12 +52,12 @@ data "cedar_policyset" "cloud_region" {
     any_principal = true
     effect        = "forbid"
     action = {
-      type = " cloud::Action"
-      id   = "cluster.createEdit"
+      type = " ResourcePolicy::Action"
+      id   = "cluster.modify"
     }
     any_resource = true
     when {
-      text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"
+      text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"
     }
   }
 }
diff --git a/examples/mongodbatlas_resource_policy/README.md b/examples/mongodbatlas_resource_policy/README.md
@@ -1,7 +1,7 @@
 # MongoDB Atlas Provider -- Atlas Resource Policy
 This example creates three different resource policies in an organization.
 
-**NOTE**: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:
+**NOTE**: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:
 1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
 2. Enable the [Preview Features](../../README.md#preview-features) when running `terraform` commands.
 
diff --git a/examples/mongodbatlas_resource_policy/cloud-provider.cedar b/examples/mongodbatlas_resource_policy/cloud-provider.cedar
@@ -1,7 +1,7 @@
 forbid (
     principal,
-    action == cloud::Action::"cluster.createEdit",
+    action == ResourcePolicy::Action::"cluster.modify",
     resource
 )
 when
-{ context.cluster.cloudProviders.containsAny([cloud::cloudProvider::"${CLOUD_PROVIDER}"]) };
+{ context.cluster.cloudProviders.containsAny([ResourcePolicy::CloudProvider::"${CLOUD_PROVIDER}"]) };
diff --git a/examples/mongodbatlas_resource_policy/main.tf b/examples/mongodbatlas_resource_policy/main.tf
@@ -7,7 +7,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {
       body = <<EOF
         forbid (
                 principal,
-                action == cloud::Action::"project.edit",
+                action == ResourcePolicy::Action::"project.ipAccessList.modify",
                 resource
         )
                 when {
@@ -40,12 +40,12 @@ data "cedar_policyset" "cloud_region" {
     any_principal = true
     effect        = "forbid"
     action = {
-      type = " cloud::Action"
-      id   = "cluster.createEdit"
+      type = " ResourcePolicy::Action"
+      id   = "cluster.modify"
     }
     any_resource = true
     when {
-      text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"
+      text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"
     }
   }
 }
diff --git a/templates/data-sources/resource_policies.md.tmpl b/templates/data-sources/resource_policies.md.tmpl
@@ -2,7 +2,7 @@
 
 `{{.Name}}` returns all resource policies in an organization.
 
--> **NOTE**: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:
+-> **NOTE**: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:
 1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
 2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
 
diff --git a/templates/data-sources/resource_policy.md.tmpl b/templates/data-sources/resource_policy.md.tmpl
@@ -2,7 +2,7 @@
 
 `{{.Name}}` describes a resource policy in an organization.
 
--> **NOTE**: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:
+-> **NOTE**: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:
 1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
 2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
 
diff --git a/templates/resources/resource_policy.md.tmpl b/templates/resources/resource_policy.md.tmpl
@@ -2,7 +2,7 @@
 
 `{{.Name}}` provides a Resource Policy resource. The resource lets you create, edit and delete resource policies to prevent misconfigurations and reduce the need for corrective interventions in your organization.
 
--> **NOTE**: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:
+-> **NOTE**: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:
 1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
 2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
 

Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`
`3`	`3`	`mongodbatlas_resource_policies` returns all resource policies in an organization.
`4`	`4`
`5`		`--> NOTE: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:`
	`5`	`+-> NOTE: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:`
`6`	`6`	1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
`7`	`7`	2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
`8`	`8`
`@@ -17,7 +17,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {`
`17`	`17`	`body = <<EOF`
`18`	`18`	`forbid (`
`19`	`19`	`principal,`
`20`		`- action == cloud::Action::"project.edit",`
	`20`	`+ action == ResourcePolicy::Action::"project.ipAccessList.modify",`
`21`	`21`	`resource`
`22`	`22`	`)`
`23`	`23`	`when {`
`@@ -50,12 +50,12 @@ data "cedar_policyset" "cloud_region" {`
`50`	`50`	`any_principal = true`
`51`	`51`	`effect = "forbid"`
`52`	`52`	`action = {`
`53`		`- type = " cloud::Action"`
`54`		`- id = "cluster.createEdit"`
	`53`	`+ type = " ResourcePolicy::Action"`
	`54`	`+ id = "cluster.modify"`
`55`	`55`	`}`
`56`	`56`	`any_resource = true`
`57`	`57`	`when {`
`58`		`- text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"`
	`58`	`+ text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"`
`59`	`59`	`}`
`60`	`60`	`}`
`61`	`61`	`}`
Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`
`3`	`3`	`mongodbatlas_resource_policy` describes a resource policy in an organization.
`4`	`4`
`5`		`--> NOTE: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:`
	`5`	`+-> NOTE: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:`
`6`	`6`	1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
`7`	`7`	2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
`8`	`8`
`@@ -17,7 +17,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {`
`17`	`17`	`body = <<EOF`
`18`	`18`	`forbid (`
`19`	`19`	`principal,`
`20`		`- action == cloud::Action::"project.edit",`
	`20`	`+ action == ResourcePolicy::Action::"project.ipAccessList.modify",`
`21`	`21`	`resource`
`22`	`22`	`)`
`23`	`23`	`when {`
`@@ -50,12 +50,12 @@ data "cedar_policyset" "cloud_region" {`
`50`	`50`	`any_principal = true`
`51`	`51`	`effect = "forbid"`
`52`	`52`	`action = {`
`53`		`- type = " cloud::Action"`
`54`		`- id = "cluster.createEdit"`
	`53`	`+ type = " ResourcePolicy::Action"`
	`54`	`+ id = "cluster.modify"`
`55`	`55`	`}`
`56`	`56`	`any_resource = true`
`57`	`57`	`when {`
`58`		`- text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"`
	`58`	`+ text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"`
`59`	`59`	`}`
`60`	`60`	`}`
`61`	`61`	`}`
Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`
`3`	`3`	`mongodbatlas_resource_policy` provides a Resource Policy resource. The resource lets you create, edit and delete resource policies to prevent misconfigurations and reduce the need for corrective interventions in your organization.
`4`	`4`
`5`		`--> NOTE: Resource Policies are currently in Private Preview. To use this feature, you must take the following actions:`
	`5`	`+-> NOTE: Resource Policies are currently in Public Preview. To use this feature, you must take the following actions:`
`6`	`6`	1. Enable the `Atlas Resource Policies` Preview Feature in your organization (contact [MongoDB Support](https://www.mongodb.com/services/support)).
`7`	`7`	2. Enable the [Preview Features](https://github.com/mongodb/terraform-provider-mongodbatlas?tab=readme-ov-file#preview-features) when running `terraform` commands.
`8`	`8`
`@@ -19,7 +19,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {`
`19`	`19`	`body = <<EOF`
`20`	`20`	`forbid (`
`21`	`21`	`principal,`
`22`		`- action == cloud::Action::"project.edit",`
	`22`	`+ action == ResourcePolicy::Action::"project.ipAccessList.modify",`
`23`	`23`	`resource`
`24`	`24`	`)`
`25`	`25`	`when {`
`@@ -52,12 +52,12 @@ data "cedar_policyset" "cloud_region" {`
`52`	`52`	`any_principal = true`
`53`	`53`	`effect = "forbid"`
`54`	`54`	`action = {`
`55`		`- type = " cloud::Action"`
`56`		`- id = "cluster.createEdit"`
	`55`	`+ type = " ResourcePolicy::Action"`
	`56`	`+ id = "cluster.modify"`
`57`	`57`	`}`
`58`	`58`	`any_resource = true`
`59`	`59`	`when {`
`60`		`- text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"`
	`60`	`+ text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"`
`61`	`61`	`}`
`62`	`62`	`}`
`63`	`63`	`}`
Original file line number	Diff line number	Diff line change
`@@ -7,7 +7,7 @@ resource "mongodbatlas_resource_policy" "project_ip_access_list" {`
`7`	`7`	`body = <<EOF`
`8`	`8`	`forbid (`
`9`	`9`	`principal,`
`10`		`- action == cloud::Action::"project.edit",`
	`10`	`+ action == ResourcePolicy::Action::"project.ipAccessList.modify",`
`11`	`11`	`resource`
`12`	`12`	`)`
`13`	`13`	`when {`
`@@ -40,12 +40,12 @@ data "cedar_policyset" "cloud_region" {`
`40`	`40`	`any_principal = true`
`41`	`41`	`effect = "forbid"`
`42`	`42`	`action = {`
`43`		`- type = " cloud::Action"`
`44`		`- id = "cluster.createEdit"`
	`43`	`+ type = " ResourcePolicy::Action"`
	`44`	`+ id = "cluster.modify"`
`45`	`45`	`}`
`46`	`46`	`any_resource = true`
`47`	`47`	`when {`
`48`		`- text = "context.cluster.regions.contains(cloud::region::\"gcp:us-east1\")"`
	`48`	`+ text = "context.cluster.regions.contains(ResourcePolicy::Region::\"gcp:us-east1\")"`
`49`	`49`	`}`
`50`	`50`	`}`
`51`	`51`	`}`