Most validate policies here are set to audit mode by default. To block resources immediately, set to enforce.