Service Perimeters Service Perimeter Status Egress Policy Egress From
Properties
Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of identities
field will be allowed access. Possible values are: IDENTITY_TYPE_UNSPECIFIED
, ANY_IDENTITY
, ANY_USER_ACCOUNT
, ANY_SERVICE_ACCOUNT
.
Whether to enforce traffic restrictions based on sources
field. If the sources
field is non-empty, then this field must be set to SOURCE_RESTRICTION_ENABLED
. Possible values are: SOURCE_RESTRICTION_UNSPECIFIED
, SOURCE_RESTRICTION_ENABLED
, SOURCE_RESTRICTION_DISABLED
.
Sources that this EgressPolicy authorizes access from. Structure is documented below.