resource "okta_app_signon_policy" "tfer--app_signon_policyaaa-test" {
  description = "abcdef"
  name        = "AAA_test"
}

resource "okta_app_signon_policy_rule" "tfer--app_policyrule_signon_aaa-catch-all-rule" {
  access                      = "ALLOW"
  constraints                 = ["{\"possession\":{\"deviceBound\":\"REQUIRED\"}}"]
  factor_mode                 = "2FA"
  name                        = "Catch-all Rule"
  policy_id                   = "aaaaaaaaaaaaa"
  priority                    = "99"
  re_authentication_frequency = "PT12H"
  status                      = "ACTIVE"
  type                        = "ASSURANCE"
}