Package-level declarations

Types

Link copied to clipboard

An AccessLevel is a label that can be applied to requests to GCP services, along with a list of requirements necessary for the label to be applied. To get more information about AccessLevel, see:

Link copied to clipboard
data class AccessLevelArgs(val basic: Output<AccessLevelBasicArgs>? = null, val custom: Output<AccessLevelCustomArgs>? = null, val description: Output<String>? = null, val name: Output<String>? = null, val parent: Output<String>? = null, val title: Output<String>? = null) : ConvertibleToJava<AccessLevelArgs>

An AccessLevel is a label that can be applied to requests to GCP services, along with a list of requirements necessary for the label to be applied. To get more information about AccessLevel, see:

Link copied to clipboard
Link copied to clipboard

Allows configuring a single access level condition to be appended to an access level's conditions. This resource is intended to be used in cases where it is not possible to compile a full list of conditions to include in a gcp.accesscontextmanager.AccessLevel resource, to enable them to be added separately.

Link copied to clipboard
data class AccessLevelConditionArgs(val accessLevel: Output<String>? = null, val devicePolicy: Output<AccessLevelConditionDevicePolicyArgs>? = null, val ipSubnetworks: Output<List<String>>? = null, val members: Output<List<String>>? = null, val negate: Output<Boolean>? = null, val regions: Output<List<String>>? = null, val requiredAccessLevels: Output<List<String>>? = null) : ConvertibleToJava<AccessLevelConditionArgs>

Allows configuring a single access level condition to be appended to an access level's conditions. This resource is intended to be used in cases where it is not possible to compile a full list of conditions to include in a gcp.accesscontextmanager.AccessLevel resource, to enable them to be added separately.

Link copied to clipboard
Link copied to clipboard
Link copied to clipboard

Replace all existing Access Levels in an Access Policy with the Access Levels provided. This is done atomically. This is a bulk edit of all Access Levels and may override existing Access Levels created by gcp.accesscontextmanager.AccessLevel, thus causing a permadiff if used alongside gcp.accesscontextmanager.AccessLevel on the same parent. To get more information about AccessLevels, see:

Link copied to clipboard
data class AccessLevelsArgs(val accessLevels: Output<List<AccessLevelsAccessLevelArgs>>? = null, val parent: Output<String>? = null) : ConvertibleToJava<AccessLevelsArgs>

Replace all existing Access Levels in an Access Policy with the Access Levels provided. This is done atomically. This is a bulk edit of all Access Levels and may override existing Access Levels created by gcp.accesscontextmanager.AccessLevel, thus causing a permadiff if used alongside gcp.accesscontextmanager.AccessLevel on the same parent. To get more information about AccessLevels, see:

Link copied to clipboard
Link copied to clipboard
Link copied to clipboard

AccessPolicy is a container for AccessLevels (which define the necessary attributes to use GCP services) and ServicePerimeters (which define regions of services able to freely pass data within a perimeter). An access policy is globally visible within an organization, and the restrictions it specifies apply to all projects within an organization. To get more information about AccessPolicy, see:

Link copied to clipboard
data class AccessPolicyArgs(val parent: Output<String>? = null, val scopes: Output<String>? = null, val title: Output<String>? = null) : ConvertibleToJava<AccessPolicyArgs>

AccessPolicy is a container for AccessLevels (which define the necessary attributes to use GCP services) and ServicePerimeters (which define regions of services able to freely pass data within a perimeter). An access policy is globally visible within an organization, and the restrictions it specifies apply to all projects within an organization. To get more information about AccessPolicy, see:

Link copied to clipboard
Link copied to clipboard

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

Link copied to clipboard
data class AccessPolicyIamBindingArgs(val condition: Output<AccessPolicyIamBindingConditionArgs>? = null, val members: Output<List<String>>? = null, val name: Output<String>? = null, val role: Output<String>? = null) : ConvertibleToJava<AccessPolicyIamBindingArgs>

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

Link copied to clipboard

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

Link copied to clipboard
data class AccessPolicyIamMemberArgs(val condition: Output<AccessPolicyIamMemberConditionArgs>? = null, val member: Output<String>? = null, val name: Output<String>? = null, val role: Output<String>? = null) : ConvertibleToJava<AccessPolicyIamMemberArgs>

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

Link copied to clipboard

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

Link copied to clipboard
data class AccessPolicyIamPolicyArgs(val name: Output<String>? = null, val policyData: Output<String>? = null) : ConvertibleToJava<AccessPolicyIamPolicyArgs>

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

Link copied to clipboard
Link copied to clipboard

Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access. To get more information about GcpUserAccessBinding, see:

Link copied to clipboard
data class GcpUserAccessBindingArgs(val accessLevels: Output<String>? = null, val groupKey: Output<String>? = null, val organizationId: Output<String>? = null) : ConvertibleToJava<GcpUserAccessBindingArgs>

Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access. To get more information about GcpUserAccessBinding, see:

Link copied to clipboard

ServicePerimeter describes a set of GCP resources which can freely import and export data amongst themselves, but not export outside of the ServicePerimeter. If a request with a source within this ServicePerimeter has a target outside of the ServicePerimeter, the request will be blocked. Otherwise the request is allowed. There are two types of Service Perimeter

Link copied to clipboard
data class ServicePerimeterArgs(val description: Output<String>? = null, val name: Output<String>? = null, val parent: Output<String>? = null, val perimeterType: Output<String>? = null, val spec: Output<ServicePerimeterSpecArgs>? = null, val status: Output<ServicePerimeterStatusArgs>? = null, val title: Output<String>? = null, val useExplicitDryRunSpec: Output<Boolean>? = null) : ConvertibleToJava<ServicePerimeterArgs>

ServicePerimeter describes a set of GCP resources which can freely import and export data amongst themselves, but not export outside of the ServicePerimeter. If a request with a source within this ServicePerimeter has a target outside of the ServicePerimeter, the request will be blocked. Otherwise the request is allowed. There are two types of Service Perimeter

Link copied to clipboard

Allows configuring a single GCP resource that should be inside of a service perimeter. This resource is intended to be used in cases where it is not possible to compile a full list of projects to include in a gcp.accesscontextmanager.ServicePerimeter resource, to enable them to be added separately.

Link copied to clipboard
data class ServicePerimeterResourceArgs(val perimeterName: Output<String>? = null, val resource: Output<String>? = null) : ConvertibleToJava<ServicePerimeterResourceArgs>

Allows configuring a single GCP resource that should be inside of a service perimeter. This resource is intended to be used in cases where it is not possible to compile a full list of projects to include in a gcp.accesscontextmanager.ServicePerimeter resource, to enable them to be added separately.

Link copied to clipboard

Replace all existing Service Perimeters in an Access Policy with the Service Perimeters provided. This is done atomically. This is a bulk edit of all Service Perimeters and may override existing Service Perimeters created by gcp.accesscontextmanager.ServicePerimeter, thus causing a permadiff if used alongside gcp.accesscontextmanager.ServicePerimeter on the same parent. To get more information about ServicePerimeters, see:

Link copied to clipboard
data class ServicePerimetersArgs(val parent: Output<String>? = null, val servicePerimeters: Output<List<ServicePerimetersServicePerimeterArgs>>? = null) : ConvertibleToJava<ServicePerimetersArgs>

Replace all existing Service Perimeters in an Access Policy with the Service Perimeters provided. This is done atomically. This is a bulk edit of all Service Perimeters and may override existing Service Perimeters created by gcp.accesscontextmanager.ServicePerimeter, thus causing a permadiff if used alongside gcp.accesscontextmanager.ServicePerimeter on the same parent. To get more information about ServicePerimeters, see:

Functions

Link copied to clipboard
suspend fun accessLevelResource(name: String, block: suspend AccessLevelResourceBuilder.() -> Unit): AccessLevel
Link copied to clipboard
suspend fun accessLevelsResource(name: String, block: suspend AccessLevelsResourceBuilder.() -> Unit): AccessLevels
Link copied to clipboard
suspend fun accessPolicyResource(name: String, block: suspend AccessPolicyResourceBuilder.() -> Unit): AccessPolicy
Link copied to clipboard
Link copied to clipboard