# 

# exoscale_iam_org_policy (Data Source)

Fetch Exoscale [IAM](https://community.exoscale.com/documentation/iam/) Organization Policy.

Corresponding resource: [exoscale_iam_org_policy]({{< ref "../resources/iam_org_policy.md" >}}).



<!-- schema generated by tfplugindocs -->
## Schema

### Optional

- `timeouts` (Block, Optional) (see [below for nested schema](#nestedblock--timeouts))

### Read-Only

- `default_service_strategy` (String) Default service strategy (`allow` or `deny`).
- `id` (String) The ID of this resource.
- `services` (Attributes Map) IAM policy services. (see [below for nested schema](#nestedatt--services))

<a id="nestedblock--timeouts"></a>
### Nested Schema for `timeouts`

Optional:

- `read` (String) A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.


<a id="nestedatt--services"></a>
### Nested Schema for `services`

Read-Only:

- `rules` (Attributes List) List of IAM service rules (if type is `rules`). (see [below for nested schema](#nestedatt--services--rules))
- `type` (String) Service type (`rules`, `allow`, or `deny`).

<a id="nestedatt--services--rules"></a>
### Nested Schema for `services.rules`

Read-Only:

- `action` (String) IAM policy rule action (`allow` or `deny`).
- `expression` (String) IAM policy rule expression.
- `resources` (List of String, Deprecated)