google_api_cloud_asset v0.11.0 GoogleApi.CloudAsset.V1.Model.GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig View Source
ServicePerimeterConfig
specifies a set of Google Cloud resources that
describe specific Service Perimeter configuration.
Attributes
-
accessLevels
(type:list(String.t)
, default:nil
) - A list ofAccessLevel
resource names that allow resources within theServicePerimeter
to be accessed from the internet.AccessLevels
listed must be in the same policy as thisServicePerimeter
. Referencing a nonexistentAccessLevel
is a syntax error. If noAccessLevel
names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example:"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"
. For Service Perimeter Bridge, must be empty. -
resources
(type:list(String.t)
, default:nil
) - A list of Google Cloud resources that are inside of the service perimeter. Currently only projects are allowed. Format:projects/{project_number}
-
restrictedServices
(type:list(String.t)
, default:nil
) - Google Cloud services that are subject to the Service Perimeter restrictions. For example, ifstorage.googleapis.com
is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions. -
vpcAccessibleServices
(type:GoogleApi.CloudAsset.V1.Model.GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices.t
, default:nil
) - Configuration for APIs allowed within Perimeter.
Link to this section Summary
Functions
Unwrap a decoded JSON object into its complex fields.
Link to this section Types
Specs
t() :: %GoogleApi.CloudAsset.V1.Model.GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig{ accessLevels: [String.t()], resources: [String.t()], restrictedServices: [String.t()], vpcAccessibleServices: GoogleApi.CloudAsset.V1.Model.GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices.t() }
Link to this section Functions
Specs
Unwrap a decoded JSON object into its complex fields.