Prevent multiple resources from managing the state of a single policy

[scottford-io]

Is your feature request related to a problem? Please describe.
The following code is valid, but it shows that a single policy can have a conflicting configuration that makes the policy "enabled" "disabled" and "preview"

resource "mondoo_policy_assignment" "enabled_policies" {
  space_id = mondoo_space.os_policy_testing.id

  policies = [
    "//policy.api.mondoo.app/policies/mondoo-gcp-security",
  ]

  state = "enabled" # default is enabled, we also support preview and disabled

  depends_on = [
    mondoo_space.os_policy_testing
  ]
}

resource "mondoo_policy_assignment" "disabled_policies" {
  space_id = mondoo_space.os_policy_testing.id

  policies = [
    "//policy.api.mondoo.app/policies/mondoo-gcp-security",
  ]

  state = "disabled" # default is enabled, we also support preview and disabled

  depends_on = [
    mondoo_space.os_policy_testing
  ]
}

resource "mondoo_policy_assignment" "preview_policies" {
  space_id = mondoo_space.os_policy_testing.id

  policies = [
    "//policy.api.mondoo.app/policies/mondoo-gcp-security",
  ]

  state = "preview" # default is enabled, we also support preview and disabled

  depends_on = [
    mondoo_space.os_policy_testing
  ]
}

Describe the solution you'd like
Is there a way for the API to return an error if multiple resources are trying to manage the state of policy? 🤔

[chris-rock]

This is something that would need to be checked in terraform, not on the API side.