Class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig

ServicePerimeterConfig specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.

Inheritance

object

GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig

Implements

IDirectResponseSchema

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Namespace: Google.Apis.CloudAsset.v1p5beta1.Data

Assembly: Google.Apis.CloudAsset.v1p5beta1.dll

Syntax

public class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig : IDirectResponseSchema

Properties

AccessLevels

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL". For Service Perimeter Bridge, must be empty.

Declaration

[JsonProperty("accessLevels")]
public virtual IList<string> AccessLevels { get; set; }

Property Value

Type	Description
IList<string>

ETag

The ETag of the item.

Declaration

public virtual string ETag { get; set; }

Property Value

Type	Description
string

EgressPolicies

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge.

Declaration

[JsonProperty("egressPolicies")]
public virtual IList<GoogleIdentityAccesscontextmanagerV1EgressPolicy> EgressPolicies { get; set; }

Property Value

Type	Description
IList<GoogleIdentityAccesscontextmanagerV1EgressPolicy>

IngressPolicies

List of IngressPolicies to apply to the perimeter. A perimeter may have multiple IngressPolicies, each of which is evaluated separately. Access is granted if any Ingress Policy grants it. Must be empty for a perimeter bridge.

Declaration

[JsonProperty("ingressPolicies")]
public virtual IList<GoogleIdentityAccesscontextmanagerV1IngressPolicy> IngressPolicies { get; set; }

Property Value

Type	Description
IList<GoogleIdentityAccesscontextmanagerV1IngressPolicy>

Resources

A list of Google Cloud resources that are inside of the service perimeter. Currently only projects and VPCs are allowed. Project format: projects/{project_number} VPC network format: //compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}.

Declaration

[JsonProperty("resources")]
public virtual IList<string> Resources { get; set; }

Property Value

Type	Description
IList<string>

RestrictedServices

Google Cloud services that are subject to the Service Perimeter restrictions. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

Declaration

[JsonProperty("restrictedServices")]
public virtual IList<string> RestrictedServices { get; set; }

Property Value

Type	Description
IList<string>

VpcAccessibleServices

Configuration for APIs allowed within Perimeter.

Declaration

[JsonProperty("vpcAccessibleServices")]
public virtual GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices VpcAccessibleServices { get; set; }

Property Value

Type	Description
GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices

Implements

IDirectResponseSchema