Add scoping (limit to apply the policy) with net-attach-def

[s1061123]

Use case: User can add net-attach-def name in policy to specify which net-attach-def is the target