pulumi-gcp-kotlin/com.pulumi.gcp.compute.kotlin.outputs/NetworkFirewallPolicyWithRulesPredefinedRuleMatch

NetworkFirewallPolicyWithRulesPredefinedRuleMatch

data class NetworkFirewallPolicyWithRulesPredefinedRuleMatch(val destAddressGroups: List<String>? = null, val destFqdns: List<String>? = null, val destIpRanges: List<String>? = null, val destRegionCodes: List<String>? = null, val destThreatIntelligences: List<String>? = null, val layer4Configs: List<NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4Config>? = null, val srcAddressGroups: List<String>? = null, val srcFqdns: List<String>? = null, val srcIpRanges: List<String>? = null, val srcRegionCodes: List<String>? = null, val srcSecureTags: List<NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTag>? = null, val srcThreatIntelligences: List<String>? = null)

Constructors

constructor(destAddressGroups: List<String>? = null, destFqdns: List<String>? = null, destIpRanges: List<String>? = null, destRegionCodes: List<String>? = null, destThreatIntelligences: List<String>? = null, layer4Configs: List<NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4Config>? = null, srcAddressGroups: List<String>? = null, srcFqdns: List<String>? = null, srcIpRanges: List<String>? = null, srcRegionCodes: List<String>? = null, srcSecureTags: List<NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTag>? = null, srcThreatIntelligences: List<String>? = null)

Types

Companion

object Companion

Properties

destAddressGroups

val destAddressGroups: List<String>? = null

Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.

destFqdns

val destFqdns: List<String>? = null

Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.

destIpRanges

val destIpRanges: List<String>? = null

Destination IP address range in CIDR format. Required for EGRESS rules.

destRegionCodes

val destRegionCodes: List<String>? = null

Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of destination region codes allowed is 5000.

destThreatIntelligences

val destThreatIntelligences: List<String>? = null

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.

layer4Configs

val layer4Configs: List<NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4Config>? = null

Pairs of IP protocols and ports that the rule should match. Structure is documented below.

srcAddressGroups

val srcAddressGroups: List<String>? = null

Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.

srcFqdns

val srcFqdns: List<String>? = null

Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.

srcIpRanges

val srcIpRanges: List<String>? = null

Source IP address range in CIDR format. Required for INGRESS rules.

srcRegionCodes

val srcRegionCodes: List<String>? = null

Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.

srcSecureTags

val srcSecureTags: List<NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTag>? = null

List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256. Structure is documented below. The layer4_config block supports:

srcThreatIntelligences

val srcThreatIntelligences: List<String>? = null

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.