sbx policy inspect
| Description | Inspect policy or rule details |
|---|---|
| Usage | sbx policy inspect <policy-or-rule> [flags] |
Description
Inspect full detail for a selected policy or rule.
The selector may be a policy ID, policy name, rule ID, or rule name. Selecting a policy lists every resource with its decision, rule, and status, plus a rule table showing each rule's RULE_ID, whether it is editable, and either the exact removal command or the reason it is read-only. Selecting a rule shows just that rule with the same editability detail. RULE_ID is the identifier accepted by "sbx policy rm network --id" (local rules only). Use "sbx policy ls" to find policy names and "sbx policy ls --wide" to find rule IDs and resource values.
Options
| Option | Default | Description |
|---|---|---|
--json | Output in JSON format |
Global options
| Option | Default | Description |
|---|---|---|
--cloud | Dispatch to Docker Cloud Sandboxes API instead of local sandboxd (supported by a growing set of verbs — run 'sbx --cloud --help' for the current list) | |
--cloud-api-url | https://api.sandboxes-cloud.docker.com | Cloud Sandboxes API base URL; only used with --cloud. Defaults to prod (https://api.sandboxes-cloud.docker.com). Set DOCKER_CLOUD_API_URL or pass this flag to override; a legacy value ending in /v1 is accepted. |
-D, --debug | Enable debug logging |
Examples
# Inspect a policy by name
sbx policy inspect "Developer access"
# Inspect a rule by ID
sbx policy inspect 2d3c1f0e-4a73-4e05-bc9d-f2f9a4b50d67
# Machine-readable output for scripting
sbx policy inspect "Developer access" --json