pulumi-google-native-kotlin/com.pulumi.googlenative.accesscontextmanager.v1beta.kotlin.outputs/ServicePerimeterConfigResponse

ServicePerimeterConfigResponse

data class ServicePerimeterConfigResponse(val accessLevels: List<String>, val resources: List<String>, val restrictedServices: List<String>, val unrestrictedServices: List<String>, val vpcAccessibleServices: VpcAccessibleServicesResponse)

ServicePerimeterConfig specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.

Constructors

constructor(accessLevels: List<String>, resources: List<String>, restrictedServices: List<String>, unrestrictedServices: List<String>, vpcAccessibleServices: VpcAccessibleServicesResponse)

Types

Companion

object Companion

Properties

accessLevels

val accessLevels: List<String>

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL". For Service Perimeter Bridge, must be empty.

resources

val resources: List<String>

A list of Google Cloud resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

restrictedServices

val restrictedServices: List<String>

Google Cloud services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

unrestrictedServices

val ~~unrestrictedServices~~: List<String>

Google Cloud services that are not subject to the Service Perimeter restrictions. Deprecated. Must be set to a single wildcard "*". The wildcard means that unless explicitly specified by "restricted_services" list, any service is treated as unrestricted.

vpcAccessibleServices

val vpcAccessibleServices: VpcAccessibleServicesResponse

Beta. Configuration for APIs allowed within Perimeter.