Class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressFrom
- Inherits:
-
Object
- Object
- Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressFrom
- Includes:
- Google::Apis::Core::Hashable, Google::Apis::Core::JsonObjectSupport
- Defined in:
- lib/google/apis/cloudasset_v1/classes.rb,
lib/google/apis/cloudasset_v1/representations.rb,
lib/google/apis/cloudasset_v1/representations.rb
Overview
Defines the conditions under which an EgressPolicy matches a request. Conditions based on information about the source of the request. Note that if the destination of the request is also protected by a ServicePerimeter, then that ServicePerimeter must have an IngressPolicy which allows access in order for this request to succeed.
Instance Attribute Summary collapse
-
#identities ⇒ Array<String>
A list of identities that are allowed access through [EgressPolicy].
-
#identity_type ⇒ String
Specifies the type of identities that are allowed access to outside the perimeter.
-
#source_restriction ⇒ String
Whether to enforce traffic restrictions based on
sources
field. -
#sources ⇒ Array<Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressSource>
Sources that this EgressPolicy authorizes access from.
Instance Method Summary collapse
-
#initialize(**args) ⇒ GoogleIdentityAccesscontextmanagerV1EgressFrom
constructor
A new instance of GoogleIdentityAccesscontextmanagerV1EgressFrom.
-
#update!(**args) ⇒ Object
Update properties of this object.
Constructor Details
#initialize(**args) ⇒ GoogleIdentityAccesscontextmanagerV1EgressFrom
Returns a new instance of GoogleIdentityAccesscontextmanagerV1EgressFrom.
3178 3179 3180 |
# File 'lib/google/apis/cloudasset_v1/classes.rb', line 3178 def initialize(**args) update!(**args) end |
Instance Attribute Details
#identities ⇒ Array<String>
A list of identities that are allowed access through [EgressPolicy].
Identities can be an individual user, service account, Google group, or third-
party identity. The v1
identities that have the prefix user
, group
,
serviceAccount
, principal
, and principalSet
in https://cloud.google.com/
iam/docs/principal-identifiers#v1 are supported.
Corresponds to the JSON property identities
3156 3157 3158 |
# File 'lib/google/apis/cloudasset_v1/classes.rb', line 3156 def identities @identities end |
#identity_type ⇒ String
Specifies the type of identities that are allowed access to outside the
perimeter. If left unspecified, then members of identities
field will be
allowed access.
Corresponds to the JSON property identityType
3163 3164 3165 |
# File 'lib/google/apis/cloudasset_v1/classes.rb', line 3163 def identity_type @identity_type end |
#source_restriction ⇒ String
Whether to enforce traffic restrictions based on sources
field. If the
sources
fields is non-empty, then this field must be set to
SOURCE_RESTRICTION_ENABLED
.
Corresponds to the JSON property sourceRestriction
3170 3171 3172 |
# File 'lib/google/apis/cloudasset_v1/classes.rb', line 3170 def source_restriction @source_restriction end |
#sources ⇒ Array<Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressSource>
Sources that this EgressPolicy authorizes access from. If this field is not
empty, then source_restriction
must be set to SOURCE_RESTRICTION_ENABLED
.
Corresponds to the JSON property sources
3176 3177 3178 |
# File 'lib/google/apis/cloudasset_v1/classes.rb', line 3176 def sources @sources end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
3183 3184 3185 3186 3187 3188 |
# File 'lib/google/apis/cloudasset_v1/classes.rb', line 3183 def update!(**args) @identities = args[:identities] if args.key?(:identities) @identity_type = args[:identity_type] if args.key?(:identity_type) @source_restriction = args[:source_restriction] if args.key?(:source_restriction) @sources = args[:sources] if args.key?(:sources) end |