{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":30957,"path":"it-operations-management/itom-cloud-accelerate/ccg-policy-form.md","title":"Cloud Configuration Governance Policy form","bundle":null,"doc_type":null,"release":"australia","body":"\n# Cloud Configuration Governance Policy form\n\nThe Cloud Configuration Governance Policy form displays detailed information about the policy such as cloud provider, resource type, policy type, and policy violation reporting settings.\n\n|Field|Description|\n|-----|-----------|\n|Policy name|Name that uniquely identifies the policy.|\n|Description|Brief description of the policy.|\n\n## Resource type\n\nDefine the resource type for which you want to create the policy.\n\n<table id=\"table_jy1_mll_hsb\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nCloud provider\n\n</td><td>\n\nCloud that hosts the resources to be scanned.\n\n</td></tr><tr><td>\n\nResource type\n\n</td><td>\n\nCloud resource type to be scanned through the policy. If the required resource type is not available, you can create a resource type. For more information, see [Create a resource collector](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-cloud-accelerate/create-ccg-resource-collector.md).\n\n</td></tr></tbody>\n</table>## Policy condition\n\nDefine the policy type and the non-compliant resource configuration.\n\n<table id=\"table_etw_nll_hsb\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nType\n\n</td><td>\n\nCloud Configuration Governance supports the following types:-   **Condition builder**: The no-code method for creating policies.\n-   **Integration Hub Flow**: The low-code method for creating policies.\n-   **Script**: The code-based method for creating policies.\n\n Select the show available keys icon \\(\\[Omitted image \"show-available-keys-icon.png\"\\] Alt text: Show available keys icon.\\) to view the list of all available configuration keys for the selected resource type. You can use any of the keys in the policy.\n\n</td></tr><tr><td>\n\nCondition\n\n</td><td>\n\nConditions for reporting the non-compliant cloud resource configuration. Always specify the key and value in a pair. Use the **OR** operator and the **AND** operator to perform logical operations in the policy condition.\n\n **Syntax**\n\n ```\nKey is <key_name>\n<data_type> Value <condition> <value>\n\n```\n\n For example,\n\n ```\nKey is AWS:IAM:User:PasswordEnabled\nBoolean Value is true\n\n```\n\n This field appears only when **Condition Builder** is selected from the **Type** field.\n\n</td></tr><tr><td>\n\nConfiguration key\n\n</td><td>\n\nConfiguration keys for the policy.\n\n This field appears only when **Integration Hub Flow** is selected from the **Type** field.\n\n</td></tr><tr><td>\n\nIntegration flow\n\n</td><td>\n\nThe appropriate Integration Hub flow.\n\n This field appears only when **Integration Hub Flow** is selected from the **Type** field.\n\n</td></tr><tr><td>\n\nCondition script\n\n</td><td>\n\nScript that implements the policy conditions to identify and report the policy violations. Cloud Configuration Governance contains several scriptable objects and variables for use in the policy scripts. For more information see, [Scripting reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-cloud-accelerate/ccg-scripting-reference.md).\n\n You can create script includes to externalize the decision making and reuse the code across different scripts. For more information on creating the script includes, see [Script includes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/api-reference/scripts/c_ScriptIncludes.md).\n\n **Note:** If you create a custom audit result record through the script, then the **Audit Violation Reporting** configuration defined in the policy doesn’t take effect.\n\nThis field appears only when **Script** is selected from the **Type** field.\n\n</td></tr></tbody>\n</table>## Audit violation reporting\n\nDefine how Cloud Configuration Governance reports the policy violation.\n\n<table id=\"table_zwp_qll_hsb\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nReport violation as\n\n</td><td>\n\nViolation definition to be included in the audit violation report. Cloud Configuration Governance uses the violation definition to report the policy non-compliances.If an appropriate violation definition is not available, you can create one as follows:\n\n1.  Select the lookup using list icon \\(\\[Omitted image \"lookup-using-list.png\"\\] Alt text: Lookup using list icon.\\).\n2.  Select **New**.\n3.  Enter a name that uniquely identifies the violation definition.\n\nCloud Configuration Governance includes the name of the violation definition in the audit issue report.\n\n4.  Select the default severity for the violation definition.\n5.  \\(Optional\\) Enter a brief description of the violation.\n\n</td></tr><tr><td>\n\nSeverity\n\n</td><td>\n\nSeverity level of the violation. If you do not select the severity level in the policy, Cloud Configuration Governance uses the default severity defined in the violation definition.\n\n</td></tr></tbody>\n</table>**Parent Topic:**[Cloud Configuration Governance reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-cloud-accelerate/ccg-reference.md)\n\n"}}