Class: Google::Apis::AccesscontextmanagerV1beta::ServicePerimeterConfig

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
generated/google/apis/accesscontextmanager_v1beta/classes.rb,
generated/google/apis/accesscontextmanager_v1beta/representations.rb,
generated/google/apis/accesscontextmanager_v1beta/representations.rb

Overview

ServicePerimeterConfig specifies a set of GCP resources that describe specific Service Perimeter configuration.

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods included from Core::JsonObjectSupport

#to_json

Methods included from Core::Hashable

process_value, #to_h

Constructor Details

#initialize(**args) ⇒ ServicePerimeterConfig

Returns a new instance of ServicePerimeterConfig



595
596
597
 
# File 'generated/google/apis/accesscontextmanager_v1beta/classes.rb', line 595

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#access_levels ⇒ Array<String>

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL". For Service Perimeter Bridge, must be empty. Corresponds to the JSON property accessLevels

Returns:

  • (Array<String>) 


565
566
567
 
# File 'generated/google/apis/accesscontextmanager_v1beta/classes.rb', line 565

def access_levels
  @access_levels
end

#resources ⇒ Array<String>

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/project_number` Corresponds to the JSON propertyresources`

Returns:

  • (Array<String>) 


571
572
573
 
# File 'generated/google/apis/accesscontextmanager_v1beta/classes.rb', line 571

def resources
  @resources
end

#restricted_services ⇒ Array<String>

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions. Corresponds to the JSON property restrictedServices

Returns:

  • (Array<String>) 


579
580
581
 
# File 'generated/google/apis/accesscontextmanager_v1beta/classes.rb', line 579

def restricted_services
  @restricted_services
end

#unrestricted_services ⇒ Array<String>

GCP services that are not subject to the Service Perimeter restrictions. Deprecated. Must be set to a single wildcard "*". The wildcard means that unless explicitly specified by "restricted_services" list, any service is treated as unrestricted. Corresponds to the JSON property unrestrictedServices

Returns:

  • (Array<String>) 


587
588
589
 
# File 'generated/google/apis/accesscontextmanager_v1beta/classes.rb', line 587

def unrestricted_services
  @unrestricted_services
end

#vpc_service_restriction ⇒ Google::Apis::AccesscontextmanagerV1beta::VpcServiceRestriction

Alpha. Specifies how APIs are allowed to communicate within the Service Perimeter. Corresponds to the JSON property vpcServiceRestriction

Returns:



593
594
595
 
# File 'generated/google/apis/accesscontextmanager_v1beta/classes.rb', line 593

def vpc_service_restriction
  @vpc_service_restriction
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



600
601
602
603
604
605
606
 
# File 'generated/google/apis/accesscontextmanager_v1beta/classes.rb', line 600

def update!(**args)
  @access_levels = args[:access_levels] if args.key?(:access_levels)
  @resources = args[:resources] if args.key?(:resources)
  @restricted_services = args[:restricted_services] if args.key?(:restricted_services)
  @unrestricted_services = args[:unrestricted_services] if args.key?(:unrestricted_services)
  @vpc_service_restriction = args[:vpc_service_restriction] if args.key?(:vpc_service_restriction)
end