pulumi-gcp-kotlin/com.pulumi.gcp.compute.kotlin.inputs/NetworkFirewallPolicyRuleMatchArgs

NetworkFirewallPolicyRuleMatchArgs

data class NetworkFirewallPolicyRuleMatchArgs(val destAddressGroups: Output<List<String>>? = null, val destFqdns: Output<List<String>>? = null, val destIpRanges: Output<List<String>>? = null, val destRegionCodes: Output<List<String>>? = null, val destThreatIntelligences: Output<List<String>>? = null, val layer4Configs: Output<List<NetworkFirewallPolicyRuleMatchLayer4ConfigArgs>>, val srcAddressGroups: Output<List<String>>? = null, val srcFqdns: Output<List<String>>? = null, val srcIpRanges: Output<List<String>>? = null, val srcRegionCodes: Output<List<String>>? = null, val srcSecureTags: Output<List<NetworkFirewallPolicyRuleMatchSrcSecureTagArgs>>? = null, val srcThreatIntelligences: Output<List<String>>? = null) : ConvertibleToJava<NetworkFirewallPolicyRuleMatchArgs>

Constructors

Link copied to clipboard
fun NetworkFirewallPolicyRuleMatchArgs(destAddressGroups: Output<List<String>>? = null, destFqdns: Output<List<String>>? = null, destIpRanges: Output<List<String>>? = null, destRegionCodes: Output<List<String>>? = null, destThreatIntelligences: Output<List<String>>? = null, layer4Configs: Output<List<NetworkFirewallPolicyRuleMatchLayer4ConfigArgs>>, srcAddressGroups: Output<List<String>>? = null, srcFqdns: Output<List<String>>? = null, srcIpRanges: Output<List<String>>? = null, srcRegionCodes: Output<List<String>>? = null, srcSecureTags: Output<List<NetworkFirewallPolicyRuleMatchSrcSecureTagArgs>>? = null, srcThreatIntelligences: Output<List<String>>? = null)

Functions

Link copied to clipboard
open override fun toJava(): NetworkFirewallPolicyRuleMatchArgs

Properties

Link copied to clipboard
val destAddressGroups: Output<List<String>>? = null

Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. Destination address groups is only supported in Egress rules.

Link copied to clipboard
val destFqdns: Output<List<String>>? = null

Domain names that will be used to match against the resolved domain name of destination of traffic. Can only be specified if DIRECTION is egress.

Link copied to clipboard
val destIpRanges: Output<List<String>>? = null

CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.

Link copied to clipboard
val destRegionCodes: Output<List<String>>? = null

The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is egress.

Link copied to clipboard
val destThreatIntelligences: Output<List<String>>? = null

Name of the Google Cloud Threat Intelligence list.

Link copied to clipboard
val layer4Configs: Output<List<NetworkFirewallPolicyRuleMatchLayer4ConfigArgs>>

Pairs of IP protocols and ports that the rule should match.

Link copied to clipboard
val srcAddressGroups: Output<List<String>>? = null

Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. Source address groups is only supported in Ingress rules.

Link copied to clipboard
val srcFqdns: Output<List<String>>? = null

Domain names that will be used to match against the resolved domain name of source of traffic. Can only be specified if DIRECTION is ingress.

Link copied to clipboard
val srcIpRanges: Output<List<String>>? = null

CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.

Link copied to clipboard
val srcRegionCodes: Output<List<String>>? = null

The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is ingress.

Link copied to clipboard
val srcSecureTags: Output<List<NetworkFirewallPolicyRuleMatchSrcSecureTagArgs>>? = null

List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.

Link copied to clipboard
val srcThreatIntelligences: Output<List<String>>? = null

Name of the Google Cloud Threat Intelligence list. The layer4_configs block supports: