pulumi-google-native-kotlin/com.pulumi.googlenative.compute.v1.kotlin.inputs/SecurityPolicyRuleMatcherArgs

SecurityPolicyRuleMatcherArgs

data class SecurityPolicyRuleMatcherArgs(val config: Output<SecurityPolicyRuleMatcherConfigArgs>? = null, val expr: Output<ExprArgs>? = null, val versionedExpr: Output<SecurityPolicyRuleMatcherVersionedExpr>? = null) : ConvertibleToJava<SecurityPolicyRuleMatcherArgs>

Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.

Constructors

constructor(config: Output<SecurityPolicyRuleMatcherConfigArgs>? = null, expr: Output<ExprArgs>? = null, versionedExpr: Output<SecurityPolicyRuleMatcherVersionedExpr>? = null)

Properties

config

val config: Output<SecurityPolicyRuleMatcherConfigArgs>? = null

The configuration options available when specifying versioned_expr. This field must be specified if versioned_expr is specified and cannot be specified if versioned_expr is not specified.

expr

val expr: Output<ExprArgs>? = null

User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing evaluateThreatIntelligence require Cloud Armor Managed Protection Plus tier and are not supported in Edge Policies nor in Regional Policies. Expressions containing evaluatePreconfiguredExpr('sourceiplist-*') require Cloud Armor Managed Protection Plus tier and are only supported in Global Security Policies.

versionedExpr

val versionedExpr: Output<SecurityPolicyRuleMatcherVersionedExpr>? = null

Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config.

Functions

toJava

open override fun toJava(): SecurityPolicyRuleMatcherArgs