ConstReadonlyFULL_ACCESS: "FULL_ACCESS"Allows requests from any source workspace, regardless of account. Deny rules and allow rules cannot be set in this mode.
ReadonlyLEGACY_MODE: "LEGACY_MODE"Cross-workspace ingress is not governed by this policy. Traffic from other workspaces is subject only to the workspace's pre-existing network controls, not to the allow and deny rules configured here.
ReadonlyRESTRICTED_ACCESS: "RESTRICTED_ACCESS"Restricts access based on deny rules and allow rules. Requests that do not match any allow rule are denied.
The restriction mode for cross-workspace access. In FULL_ACCESS mode, requests from any source workspace (in any account) are allowed, and deny rules and allow rules cannot be set. In RESTRICTED_ACCESS mode, access is restricted based on deny rules and allow rules; requests that do not match any allow rule are denied. In LEGACY_MODE, cross-workspace ingress is not governed by this policy.