Package-level declarations

Types

Link copied to clipboard
class AddressGroup : KotlinCustomResource

AddressGroup is a resource that specifies how a collection of IP/DNS used in Firewall Policy. To get more information about AddressGroup, see:

Link copied to clipboard
data class AddressGroupArgs(val capacity: Output<Int>? = null, val description: Output<String>? = null, val items: Output<List<String>>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val parent: Output<String>? = null, val purposes: Output<List<String>>? = null, val type: Output<String>? = null) : ConvertibleToJava<AddressGroupArgs>

AddressGroup is a resource that specifies how a collection of IP/DNS used in Firewall Policy. To get more information about AddressGroup, see:

Link copied to clipboard
Link copied to clipboard
class AddressGroupIamBinding : KotlinCustomResource

Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:

Link copied to clipboard
data class AddressGroupIamBindingArgs(val condition: Output<AddressGroupIamBindingConditionArgs>? = null, val location: Output<String>? = null, val members: Output<List<String>>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val role: Output<String>? = null) : ConvertibleToJava<AddressGroupIamBindingArgs>

Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:

Link copied to clipboard
Link copied to clipboard
class AddressGroupIamMember : KotlinCustomResource

Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:

Link copied to clipboard
data class AddressGroupIamMemberArgs(val condition: Output<AddressGroupIamMemberConditionArgs>? = null, val location: Output<String>? = null, val member: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val role: Output<String>? = null) : ConvertibleToJava<AddressGroupIamMemberArgs>

Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:

Link copied to clipboard
Link copied to clipboard
class AddressGroupIamPolicy : KotlinCustomResource

Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:

Link copied to clipboard
data class AddressGroupIamPolicyArgs(val location: Output<String>? = null, val name: Output<String>? = null, val policyData: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<AddressGroupIamPolicyArgs>

Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:

Link copied to clipboard
Link copied to clipboard
object AddressGroupMapper : ResourceMapper<AddressGroup>
Link copied to clipboard
Link copied to clipboard
class AuthorizationPolicy : KotlinCustomResource
Link copied to clipboard
data class AuthorizationPolicyArgs(val action: Output<String>? = null, val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val rules: Output<List<AuthorizationPolicyRuleArgs>>? = null) : ConvertibleToJava<AuthorizationPolicyArgs>
Link copied to clipboard
Link copied to clipboard
class AuthzPolicy : KotlinCustomResource

AuthzPolicy is a resource that allows to forward traffic to a callout backend designed to scan the traffic for security purposes. To get more information about AuthzPolicy, see:

Link copied to clipboard
data class AuthzPolicyArgs(val action: Output<String>? = null, val customProvider: Output<AuthzPolicyCustomProviderArgs>? = null, val description: Output<String>? = null, val httpRules: Output<List<AuthzPolicyHttpRuleArgs>>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val target: Output<AuthzPolicyTargetArgs>? = null) : ConvertibleToJava<AuthzPolicyArgs>

AuthzPolicy is a resource that allows to forward traffic to a callout backend designed to scan the traffic for security purposes. To get more information about AuthzPolicy, see:

Link copied to clipboard
Link copied to clipboard
object AuthzPolicyMapper : ResourceMapper<AuthzPolicy>
Link copied to clipboard
Link copied to clipboard
class BackendAuthenticationConfig : KotlinCustomResource
Link copied to clipboard
data class BackendAuthenticationConfigArgs(val clientCertificate: Output<String>? = null, val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val trustConfig: Output<String>? = null, val wellKnownRoots: Output<String>? = null) : ConvertibleToJava<BackendAuthenticationConfigArgs>
Link copied to clipboard
class ClientTlsPolicy : KotlinCustomResource

ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource. To get more information about ClientTlsPolicy, see:

Link copied to clipboard
data class ClientTlsPolicyArgs(val clientCertificate: Output<ClientTlsPolicyClientCertificateArgs>? = null, val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val serverValidationCas: Output<List<ClientTlsPolicyServerValidationCaArgs>>? = null, val sni: Output<String>? = null) : ConvertibleToJava<ClientTlsPolicyArgs>

ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource. To get more information about ClientTlsPolicy, see:

Link copied to clipboard
object ClientTlsPolicyMapper : ResourceMapper<ClientTlsPolicy>
Link copied to clipboard
class FirewallEndpoint : KotlinCustomResource

A Firewall endpoint is a Cloud Firewall resource that enables layer 7 advanced protection capabilities, such as intrusion prevention, in your network. To get more information about FirewallEndpoint, see:

Link copied to clipboard
data class FirewallEndpointArgs(val billingProjectId: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val parent: Output<String>? = null) : ConvertibleToJava<FirewallEndpointArgs>

A Firewall endpoint is a Cloud Firewall resource that enables layer 7 advanced protection capabilities, such as intrusion prevention, in your network. To get more information about FirewallEndpoint, see:

Link copied to clipboard
class FirewallEndpointAssociation : KotlinCustomResource

Firewall endpoint association links a firewall endpoint to a VPC network in the same zone. After you define this association, Cloud Firewall forwards the zonal workload traffic in your VPC network that requires layer 7 inspection to the attached firewall endpoint. To get more information about FirewallEndpointAssociation, see:

Link copied to clipboard
data class FirewallEndpointAssociationArgs(val disabled: Output<Boolean>? = null, val firewallEndpoint: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val network: Output<String>? = null, val parent: Output<String>? = null, val tlsInspectionPolicy: Output<String>? = null) : ConvertibleToJava<FirewallEndpointAssociationArgs>

Firewall endpoint association links a firewall endpoint to a VPC network in the same zone. After you define this association, Cloud Firewall forwards the zonal workload traffic in your VPC network that requires layer 7 inspection to the attached firewall endpoint. To get more information about FirewallEndpointAssociation, see:

Link copied to clipboard
object FirewallEndpointMapper : ResourceMapper<FirewallEndpoint>
Link copied to clipboard
class GatewaySecurityPolicy : KotlinCustomResource

The GatewaySecurityPolicy resource contains a collection of GatewaySecurityPolicyRules and associated metadata. To get more information about GatewaySecurityPolicy, see:

Link copied to clipboard
data class GatewaySecurityPolicyArgs(val description: Output<String>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val tlsInspectionPolicy: Output<String>? = null) : ConvertibleToJava<GatewaySecurityPolicyArgs>

The GatewaySecurityPolicy resource contains a collection of GatewaySecurityPolicyRules and associated metadata. To get more information about GatewaySecurityPolicy, see:

Link copied to clipboard
Link copied to clipboard
class GatewaySecurityPolicyRule : KotlinCustomResource

The GatewaySecurityPolicyRule resource is in a nested collection within a GatewaySecurityPolicy and represents a traffic matching condition and associated action to perform. To get more information about GatewaySecurityPolicyRule, see:

Link copied to clipboard
data class GatewaySecurityPolicyRuleArgs(val applicationMatcher: Output<String>? = null, val basicProfile: Output<String>? = null, val description: Output<String>? = null, val enabled: Output<Boolean>? = null, val gatewaySecurityPolicy: Output<String>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val priority: Output<Int>? = null, val project: Output<String>? = null, val sessionMatcher: Output<String>? = null, val tlsInspectionEnabled: Output<Boolean>? = null) : ConvertibleToJava<GatewaySecurityPolicyRuleArgs>

The GatewaySecurityPolicyRule resource is in a nested collection within a GatewaySecurityPolicy and represents a traffic matching condition and associated action to perform. To get more information about GatewaySecurityPolicyRule, see:

Link copied to clipboard
class InterceptDeployment : KotlinCustomResource
Link copied to clipboard
data class InterceptDeploymentArgs(val description: Output<String>? = null, val forwardingRule: Output<String>? = null, val interceptDeploymentGroup: Output<String>? = null, val interceptDeploymentId: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<InterceptDeploymentArgs>
Link copied to clipboard
class InterceptDeploymentGroup : KotlinCustomResource
Link copied to clipboard
data class InterceptDeploymentGroupArgs(val description: Output<String>? = null, val interceptDeploymentGroupId: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val network: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<InterceptDeploymentGroupArgs>
Link copied to clipboard
Link copied to clipboard
class InterceptEndpointGroup : KotlinCustomResource
Link copied to clipboard
data class InterceptEndpointGroupArgs(val description: Output<String>? = null, val interceptDeploymentGroup: Output<String>? = null, val interceptEndpointGroupId: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<InterceptEndpointGroupArgs>
Link copied to clipboard
class InterceptEndpointGroupAssociation : KotlinCustomResource
Link copied to clipboard
data class InterceptEndpointGroupAssociationArgs(val interceptEndpointGroup: Output<String>? = null, val interceptEndpointGroupAssociationId: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val network: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<InterceptEndpointGroupAssociationArgs>
Link copied to clipboard
Link copied to clipboard
class MirroringDeployment : KotlinCustomResource

A deployment represents a zonal mirroring backend ready to accept GENEVE-encapsulated replica traffic, e.g. a zonal instance group fronted by an internal passthrough load balancer. Deployments are always part of a global deployment group which represents a global mirroring service. To get more information about MirroringDeployment, see:

Link copied to clipboard
data class MirroringDeploymentArgs(val description: Output<String>? = null, val forwardingRule: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val mirroringDeploymentGroup: Output<String>? = null, val mirroringDeploymentId: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<MirroringDeploymentArgs>

A deployment represents a zonal mirroring backend ready to accept GENEVE-encapsulated replica traffic, e.g. a zonal instance group fronted by an internal passthrough load balancer. Deployments are always part of a global deployment group which represents a global mirroring service. To get more information about MirroringDeployment, see:

Link copied to clipboard
class MirroringDeploymentGroup : KotlinCustomResource

A deployment group aggregates many zonal mirroring backends (deployments) into a single global mirroring service. Consumers can connect this service using an endpoint group. To get more information about MirroringDeploymentGroup, see:

Link copied to clipboard
data class MirroringDeploymentGroupArgs(val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val mirroringDeploymentGroupId: Output<String>? = null, val network: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<MirroringDeploymentGroupArgs>

A deployment group aggregates many zonal mirroring backends (deployments) into a single global mirroring service. Consumers can connect this service using an endpoint group. To get more information about MirroringDeploymentGroup, see:

Link copied to clipboard
Link copied to clipboard
class MirroringEndpointGroup : KotlinCustomResource

An endpoint group is a consumer frontend for a deployment group (backend). In order to configure mirroring for a network, consumers must create:

Link copied to clipboard
data class MirroringEndpointGroupArgs(val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val mirroringDeploymentGroup: Output<String>? = null, val mirroringEndpointGroupId: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<MirroringEndpointGroupArgs>

An endpoint group is a consumer frontend for a deployment group (backend). In order to configure mirroring for a network, consumers must create:

Link copied to clipboard
class MirroringEndpointGroupAssociation : KotlinCustomResource

An endpoint group association represents a link between a network and an endpoint group in the organization. Creating an association creates the networking infrastructure linking the network to the endpoint group, but does not enable mirroring by itself. To enable mirroring, the user must also create a network firewall policy containing mirroring rules and associate it with the network. To get more information about MirroringEndpointGroupAssociation, see:

Link copied to clipboard
data class MirroringEndpointGroupAssociationArgs(val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val mirroringEndpointGroup: Output<String>? = null, val mirroringEndpointGroupAssociationId: Output<String>? = null, val network: Output<String>? = null, val project: Output<String>? = null) : ConvertibleToJava<MirroringEndpointGroupAssociationArgs>

An endpoint group association represents a link between a network and an endpoint group in the organization. Creating an association creates the networking infrastructure linking the network to the endpoint group, but does not enable mirroring by itself. To enable mirroring, the user must also create a network firewall policy containing mirroring rules and associate it with the network. To get more information about MirroringEndpointGroupAssociation, see:

Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
class SecurityProfile : KotlinCustomResource

A security profile defines the behavior associated to a profile type. To get more information about SecurityProfile, see:

Link copied to clipboard
data class SecurityProfileArgs(val customInterceptProfile: Output<SecurityProfileCustomInterceptProfileArgs>? = null, val customMirroringProfile: Output<SecurityProfileCustomMirroringProfileArgs>? = null, val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val parent: Output<String>? = null, val threatPreventionProfile: Output<SecurityProfileThreatPreventionProfileArgs>? = null, val type: Output<String>? = null) : ConvertibleToJava<SecurityProfileArgs>

A security profile defines the behavior associated to a profile type. To get more information about SecurityProfile, see:

Link copied to clipboard
class SecurityProfileGroup : KotlinCustomResource

A security profile group defines a container for security profiles. To get more information about SecurityProfileGroup, see:

Link copied to clipboard
data class SecurityProfileGroupArgs(val customInterceptProfile: Output<String>? = null, val customMirroringProfile: Output<String>? = null, val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val parent: Output<String>? = null, val threatPreventionProfile: Output<String>? = null) : ConvertibleToJava<SecurityProfileGroupArgs>

A security profile group defines a container for security profiles. To get more information about SecurityProfileGroup, see:

Link copied to clipboard
Link copied to clipboard
object SecurityProfileMapper : ResourceMapper<SecurityProfile>
Link copied to clipboard
class ServerTlsPolicy : KotlinCustomResource

ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target HTTPS proxy or endpoint config selector resource. To get more information about ServerTlsPolicy, see:

Link copied to clipboard
data class ServerTlsPolicyArgs(val allowOpen: Output<Boolean>? = null, val description: Output<String>? = null, val labels: Output<Map<String, String>>? = null, val location: Output<String>? = null, val mtlsPolicy: Output<ServerTlsPolicyMtlsPolicyArgs>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val serverCertificate: Output<ServerTlsPolicyServerCertificateArgs>? = null) : ConvertibleToJava<ServerTlsPolicyArgs>

ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target HTTPS proxy or endpoint config selector resource. To get more information about ServerTlsPolicy, see:

Link copied to clipboard
object ServerTlsPolicyMapper : ResourceMapper<ServerTlsPolicy>
Link copied to clipboard
class TlsInspectionPolicy : KotlinCustomResource

The TlsInspectionPolicy resource contains references to CA pools in Certificate Authority Service and associated metadata. To get more information about TlsInspectionPolicy, see:

Link copied to clipboard
data class TlsInspectionPolicyArgs(val caPool: Output<String>? = null, val customTlsFeatures: Output<List<String>>? = null, val description: Output<String>? = null, val excludePublicCaSet: Output<Boolean>? = null, val location: Output<String>? = null, val minTlsVersion: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val tlsFeatureProfile: Output<String>? = null, val trustConfig: Output<String>? = null) : ConvertibleToJava<TlsInspectionPolicyArgs>

The TlsInspectionPolicy resource contains references to CA pools in Certificate Authority Service and associated metadata. To get more information about TlsInspectionPolicy, see:

Link copied to clipboard
Link copied to clipboard
class UrlList : KotlinCustomResource

UrlList proto helps users to set reusable, independently manageable lists of hosts, host patterns, URLs, URL patterns. To get more information about UrlLists, see:

Link copied to clipboard
data class UrlListArgs(val description: Output<String>? = null, val location: Output<String>? = null, val name: Output<String>? = null, val project: Output<String>? = null, val values: Output<List<String>>? = null) : ConvertibleToJava<UrlListArgs>

UrlList proto helps users to set reusable, independently manageable lists of hosts, host patterns, URLs, URL patterns. To get more information about UrlLists, see:

Link copied to clipboard
Link copied to clipboard
object UrlListMapper : ResourceMapper<UrlList>
Link copied to clipboard

Functions

Link copied to clipboard
Link copied to clipboard
suspend fun authzPolicy(name: String, block: suspend AuthzPolicyResourceBuilder.() -> Unit): AuthzPolicy
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
fun urlList(name: String): UrlList
suspend fun urlList(name: String, block: suspend UrlListResourceBuilder.() -> Unit): UrlList