RuleArgs

data class RuleArgs(val action: Output<RuleAction>? = null, val conditions: Output<List<ConditionArgs>>? = null, val description: Output<String>? = null, val in: Output<List<String>>? = null, val logConfig: Output<List<LogConfigArgs>>? = null, val notIn: Output<List<String>>? = null, val permissions: Output<List<String>>? = null) : ConvertibleToJava<RuleArgs>

A rule to be applied in a Policy.

Constructors

Link copied to clipboard
fun RuleArgs(action: Output<RuleAction>? = null, conditions: Output<List<ConditionArgs>>? = null, description: Output<String>? = null, in: Output<List<String>>? = null, logConfig: Output<List<LogConfigArgs>>? = null, notIn: Output<List<String>>? = null, permissions: Output<List<String>>? = null)

Functions

Link copied to clipboard
open override fun toJava(): RuleArgs

Properties

Link copied to clipboard
val action: Output<RuleAction>? = null

Required

Link copied to clipboard
val conditions: Output<List<ConditionArgs>>? = null

Additional restrictions that must be met. All conditions must pass for the rule to match.

Link copied to clipboard
val description: Output<String>? = null

Human-readable description of the rule.

Link copied to clipboard
val in: Output<List<String>>? = null

If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.

Link copied to clipboard
val logConfig: Output<List<LogConfigArgs>>? = null

The config returned to callers of CheckPolicy for any entries that match the LOG action.

Link copied to clipboard
val notIn: Output<List<String>>? = null

If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).

Link copied to clipboard
val permissions: Output<List<String>>? = null

A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.