Constal Resource Names

Every policy and binding target has one canonical address.

text

crn:constal:<environment>:<tenant>:<namespace>:<kind>/<path>

Construct general names with resourceName and parse them with parseResourceName. Narrow validators include authProviderName, credentialProviderName, credentialName, policyName, customerTenantName, and bindingName. Use these helpers rather than string concatenation.

Part	Example
environment	production
tenant	acme
namespace	support
kind	agent
path	triage

Patterns are separate validated values for Policy matching. Exact resource operations authorize the exact CRN, not a display name or mutable deployment service.