UpdateControllerPolicyInput

"""
Input for updating a controller policy. Only provided fields are changed.
"""
input UpdateControllerPolicyInput {
  """Target controller (must exist in this tenant)"""
  controllerId: ControllerID
  """Prefix-allowlist for filesystem IO. Empty list = deny all."""
  allowedIoPaths: [String!]
  """Absolute-path allowlist for exec. Empty list = deny all."""
  allowedExecBinaries: [String!]
}