Class: Google::Apis::CloudassetV1p4beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter
- Inherits:
-
Object
- Object
- Google::Apis::CloudassetV1p4beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter
- Includes:
- Google::Apis::Core::Hashable, Google::Apis::Core::JsonObjectSupport
- Defined in:
- lib/google/apis/cloudasset_v1p4beta1/classes.rb,
lib/google/apis/cloudasset_v1p4beta1/representations.rb,
lib/google/apis/cloudasset_v1p4beta1/representations.rb
Overview
ServicePerimeter
describes a set of Google Cloud resources which can freely
import and export data amongst themselves, but not export outside of the
ServicePerimeter
. If a request with a source within this ServicePerimeter
has a target outside of the ServicePerimeter
, the request will be blocked.
Otherwise the request is allowed. There are two types of Service Perimeter -
Regular and Bridge. Regular Service Perimeters cannot overlap, a single Google
Cloud project can only belong to a single regular Service Perimeter. Service
Perimeter Bridges can contain only Google Cloud projects as members, a single
Google Cloud project may belong to multiple Service Perimeter Bridges.
Instance Attribute Summary collapse
-
#description ⇒ String
Description of the
ServicePerimeter
and its use. -
#name ⇒ String
Required.
-
#perimeter_type ⇒ String
Perimeter type indicator.
-
#spec ⇒ Google::Apis::CloudassetV1p4beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
ServicePerimeterConfig
specifies a set of Google Cloud resources that describe specific Service Perimeter configuration. -
#status ⇒ Google::Apis::CloudassetV1p4beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
ServicePerimeterConfig
specifies a set of Google Cloud resources that describe specific Service Perimeter configuration. -
#title ⇒ String
Human readable title.
-
#use_explicit_dry_run_spec ⇒ Boolean
(also: #use_explicit_dry_run_spec?)
Use explicit dry run spec flag.
Instance Method Summary collapse
-
#initialize(**args) ⇒ GoogleIdentityAccesscontextmanagerV1ServicePerimeter
constructor
A new instance of GoogleIdentityAccesscontextmanagerV1ServicePerimeter.
-
#update!(**args) ⇒ Object
Update properties of this object.
Constructor Details
#initialize(**args) ⇒ GoogleIdentityAccesscontextmanagerV1ServicePerimeter
Returns a new instance of GoogleIdentityAccesscontextmanagerV1ServicePerimeter.
1938 1939 1940 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1938 def initialize(**args) update!(**args) end |
Instance Attribute Details
#description ⇒ String
Description of the ServicePerimeter
and its use. Does not affect behavior.
Corresponds to the JSON property description
1889 1890 1891 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1889 def description @description end |
#name ⇒ String
Required. Resource name for the ServicePerimeter. The short_name
component
must begin with a letter and only include alphanumeric and '_'. Format:
accessPolicies/
access_policy/servicePerimeters/
service_perimeter`
Corresponds to the JSON property
name`
1896 1897 1898 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1896 def name @name end |
#perimeter_type ⇒ String
Perimeter type indicator. A single project is allowed to be a member of single
regular perimeter, but multiple service perimeter bridges. A project cannot be
a included in a perimeter bridge without being included in regular perimeter.
For perimeter bridges, the restricted service list as well as access level
lists must be empty.
Corresponds to the JSON property perimeterType
1905 1906 1907 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1905 def perimeter_type @perimeter_type end |
#spec ⇒ Google::Apis::CloudassetV1p4beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
ServicePerimeterConfig
specifies a set of Google Cloud resources that
describe specific Service Perimeter configuration.
Corresponds to the JSON property spec
1911 1912 1913 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1911 def spec @spec end |
#status ⇒ Google::Apis::CloudassetV1p4beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
ServicePerimeterConfig
specifies a set of Google Cloud resources that
describe specific Service Perimeter configuration.
Corresponds to the JSON property status
1917 1918 1919 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1917 def status @status end |
#title ⇒ String
Human readable title. Must be unique within the Policy.
Corresponds to the JSON property title
1922 1923 1924 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1922 def title @title end |
#use_explicit_dry_run_spec ⇒ Boolean Also known as: use_explicit_dry_run_spec?
Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists
for all Service Perimeters, and that spec is identical to the status for those
Service Perimeters. When this flag is set, it inhibits the generation of the
implicit spec, thereby allowing the user to explicitly provide a configuration
("spec") to use in a dry-run version of the Service Perimeter. This allows the
user to test changes to the enforced config ("status") without actually
enforcing them. This testing is done through analyzing the differences between
currently enforced and suggested restrictions. use_explicit_dry_run_spec must
bet set to True if any of the fields in the spec are set to non-default values.
Corresponds to the JSON property useExplicitDryRunSpec
1935 1936 1937 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1935 def use_explicit_dry_run_spec @use_explicit_dry_run_spec end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
1943 1944 1945 1946 1947 1948 1949 1950 1951 |
# File 'lib/google/apis/cloudasset_v1p4beta1/classes.rb', line 1943 def update!(**args) @description = args[:description] if args.key?(:description) @name = args[:name] if args.key?(:name) @perimeter_type = args[:perimeter_type] if args.key?(:perimeter_type) @spec = args[:spec] if args.key?(:spec) @status = args[:status] if args.key?(:status) @title = args[:title] if args.key?(:title) @use_explicit_dry_run_spec = args[:use_explicit_dry_run_spec] if args.key?(:use_explicit_dry_run_spec) end |