Authz
AuthzPolicy is a resource that allows to forward traffic to a callout backend designed to scan the traffic for security purposes. To get more information about AuthzPolicy, see:
Example Usage
Import
AuthzPolicy can be imported using any of these accepted formats:
projects/{{project}}/locations/{{location}}/authzPolicies/{{name}}{{project}}/{{location}}/{{name}}{{location}}/{{name}}{{name}}When using thepulumi importcommand, AuthzPolicy can be imported using one of the formats above. For example:
$ pulumi import gcp:networksecurity/authzPolicy:AuthzPolicy default projects/{{project}}/locations/{{location}}/authzPolicies/{{name}}$ pulumi import gcp:networksecurity/authzPolicy:AuthzPolicy default {{project}}/{{location}}/{{name}}$ pulumi import gcp:networksecurity/authzPolicy:AuthzPolicy default {{location}}/{{name}}$ pulumi import gcp:networksecurity/authzPolicy:AuthzPolicy default {{name}}Properties
When the action is CUSTOM, customProvider must be specified. When the action is ALLOW, only requests matching the policy will be allowed. When the action is DENY, only requests matching the policy will be denied. When a request arrives, the policies are evaluated in the following order:
The timestamp when the resource was created.
Required if the action is CUSTOM. Allows delegating authorization decisions to Cloud IAP or to Service Extensions. One of cloudIap or authzExtension must be specified.
A human-readable description of the resource.
All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
A list of authorization HTTP rules to match against the incoming request.A policy match occurs when at least one HTTP rule matches the request or when no HTTP rules are specified in the policy. At least one HTTP Rule is required for Allow or Deny Action. Limited to 5 rules.
The combination of labels configured directly on the resource and default labels configured on the provider.
Specifies the set of resources to which this policy should be applied to. Structure is documented below.
The timestamp when the resource was updated.