Most validate policies here are set to Audit mode by default. To block resources immediately, set to Enforce.