Skip to main content

SecurityPolicy

Struct SecurityPolicy 

Source
#[non_exhaustive]
pub struct SecurityPolicy {
Show 20 fields pub adaptive_protection_config: Option<SecurityPolicyAdaptiveProtectionConfig>, pub advanced_options_config: Option<SecurityPolicyAdvancedOptionsConfig>, pub associations: Vec<SecurityPolicyAssociation>, pub creation_timestamp: Option<String>, pub ddos_protection_config: Option<SecurityPolicyDdosProtectionConfig>, pub description: Option<String>, pub fingerprint: Option<Bytes>, pub id: Option<u64>, pub kind: Option<String>, pub label_fingerprint: Option<Bytes>, pub labels: HashMap<String, String>, pub name: Option<String>, pub parent: Option<String>, pub recaptcha_options_config: Option<SecurityPolicyRecaptchaOptionsConfig>, pub region: Option<String>, pub rules: Vec<SecurityPolicyRule>, pub self_link: Option<String>, pub short_name: Option<String>, pub type: Option<Type>, pub user_defined_fields: Vec<SecurityPolicyUserDefinedField>, /* private fields */
}
Available on crate features organization-security-policies or region-security-policies or security-policies only.
Expand description

Represents a Google Cloud Armor security policy resource.

Only external backend services that use load balancers can reference a security policy. For more information, see Google Cloud Armor security policy overview.

Fields (Non-exhaustive)§

This struct is marked as non-exhaustive
Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.
§adaptive_protection_config: Option<SecurityPolicyAdaptiveProtectionConfig>§advanced_options_config: Option<SecurityPolicyAdvancedOptionsConfig>§associations: Vec<SecurityPolicyAssociation>

A list of associations that belong to this policy.

§creation_timestamp: Option<String>

Output only. [Output Only] Creation timestamp inRFC3339 text format.

§ddos_protection_config: Option<SecurityPolicyDdosProtectionConfig>§description: Option<String>

An optional description of this resource. Provide this property when you create the resource.

§fingerprint: Option<Bytes>

Specifies a fingerprint for this resource, which is essentially a hash of the metadata’s contents and used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update metadata. You must always provide an up-to-date fingerprint hash in order to update or change metadata, otherwise the request will fail with error412 conditionNotMet.

To see the latest fingerprint, make get() request to the security policy.

§id: Option<u64>

Output only. [Output Only] The unique identifier for the resource. This identifier is defined by the server.

§kind: Option<String>

Output only. [Output only] Type of the resource. Alwayscompute#securityPolicyfor security policies

§label_fingerprint: Option<Bytes>

A fingerprint for the labels being applied to this security policy, which is essentially a hash of the labels set used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels.

To see the latest fingerprint, make get() request to the security policy.

§labels: HashMap<String, String>

Labels for this resource. These can only be added or modified by thesetLabels method. Each label key/value pair must comply withRFC1035. Label values may be empty.

§name: Option<String>

Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply withRFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.

§parent: Option<String>

Output only. [Output Only] The parent of the security policy.

§recaptcha_options_config: Option<SecurityPolicyRecaptchaOptionsConfig>§region: Option<String>

Output only. [Output Only] URL of the region where the regional security policy resides. This field is not applicable to global security policies.

§rules: Vec<SecurityPolicyRule>

A list of rules that belong to this policy. There must always be a default rule which is a rule with priority 2147483647 and match all condition (for the match condition this means match “” for srcIpRanges and for the networkMatch condition every field must be either match “” or not set). If no rules are provided when creating a security policy, a default rule with action “allow” will be added.

§self_link: Option<String>

Output only. [Output Only] Server-defined URL for the resource.

§short_name: Option<String>

User-provided name of the organization security policy. The name should be unique in the organization in which the security policy is created. This should only be used when SecurityPolicyType is CLOUD_ARMOR. The name must be 1-63 characters long, and comply with https://www.ietf.org/rfc/rfc1035.txt. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.

§type: Option<Type>

The type indicates the intended use of the security policy.

  • CLOUD_ARMOR: Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services. They filter requests before they hit the origin servers.

  • CLOUD_ARMOR_EDGE: Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage). They filter requests before the request is served from Google’s cache.

  • CLOUD_ARMOR_INTERNAL_SERVICE (preview only): Cloud Armor internal service policies can be configured to filter HTTP requests targeting services managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.

  • CLOUD_ARMOR_NETWORK: Cloud Armor network policies can be configured to filter packets targeting network load balancing resources such as backend services, target pools, target instances, and instances with external IPs. They filter requests before the request is served from the application.

This field can be set only at resource creation time.

§user_defined_fields: Vec<SecurityPolicyUserDefinedField>

Definitions of user-defined fields for CLOUD_ARMOR_NETWORK policies. A user-defined field consists of up to 4 bytes extracted from a fixed offset in the packet, relative to the IPv4, IPv6, TCP, or UDP header, with an optional mask to select certain bits. Rules may then specify matching values for these fields.

Example:

userDefinedFields:

  • name: “ipv4_fragment_offset” base: IPV4 offset: 6 size: 2 mask: “0x1fff”

Implementations§

Source§

impl SecurityPolicy

Source

pub fn new() -> Self

Source

pub fn set_adaptive_protection_config<T>(self, v: T) -> Self

Sets the value of adaptive_protection_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyAdaptiveProtectionConfig;
let x = SecurityPolicy::new().set_adaptive_protection_config(SecurityPolicyAdaptiveProtectionConfig::default()/* use setters */);
Source

pub fn set_or_clear_adaptive_protection_config<T>(self, v: Option<T>) -> Self

Sets or clears the value of adaptive_protection_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyAdaptiveProtectionConfig;
let x = SecurityPolicy::new().set_or_clear_adaptive_protection_config(Some(SecurityPolicyAdaptiveProtectionConfig::default()/* use setters */));
let x = SecurityPolicy::new().set_or_clear_adaptive_protection_config(None::<SecurityPolicyAdaptiveProtectionConfig>);
Source

pub fn set_advanced_options_config<T>(self, v: T) -> Self

Sets the value of advanced_options_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyAdvancedOptionsConfig;
let x = SecurityPolicy::new().set_advanced_options_config(SecurityPolicyAdvancedOptionsConfig::default()/* use setters */);
Source

pub fn set_or_clear_advanced_options_config<T>(self, v: Option<T>) -> Self

Sets or clears the value of advanced_options_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyAdvancedOptionsConfig;
let x = SecurityPolicy::new().set_or_clear_advanced_options_config(Some(SecurityPolicyAdvancedOptionsConfig::default()/* use setters */));
let x = SecurityPolicy::new().set_or_clear_advanced_options_config(None::<SecurityPolicyAdvancedOptionsConfig>);
Source

pub fn set_associations<T, V>(self, v: T) -> Self

Sets the value of associations.

§Example
use google_cloud_compute_v1::model::SecurityPolicyAssociation;
let x = SecurityPolicy::new()
    .set_associations([
        SecurityPolicyAssociation::default()/* use setters */,
        SecurityPolicyAssociation::default()/* use (different) setters */,
    ]);
Source

pub fn set_creation_timestamp<T>(self, v: T) -> Self
where T: Into<String>,

Sets the value of creation_timestamp.

§Example
let x = SecurityPolicy::new().set_creation_timestamp("example");
Source

pub fn set_or_clear_creation_timestamp<T>(self, v: Option<T>) -> Self
where T: Into<String>,

Sets or clears the value of creation_timestamp.

§Example
let x = SecurityPolicy::new().set_or_clear_creation_timestamp(Some("example"));
let x = SecurityPolicy::new().set_or_clear_creation_timestamp(None::<String>);
Source

pub fn set_ddos_protection_config<T>(self, v: T) -> Self

Sets the value of ddos_protection_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyDdosProtectionConfig;
let x = SecurityPolicy::new().set_ddos_protection_config(SecurityPolicyDdosProtectionConfig::default()/* use setters */);
Source

pub fn set_or_clear_ddos_protection_config<T>(self, v: Option<T>) -> Self

Sets or clears the value of ddos_protection_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyDdosProtectionConfig;
let x = SecurityPolicy::new().set_or_clear_ddos_protection_config(Some(SecurityPolicyDdosProtectionConfig::default()/* use setters */));
let x = SecurityPolicy::new().set_or_clear_ddos_protection_config(None::<SecurityPolicyDdosProtectionConfig>);
Source

pub fn set_description<T>(self, v: T) -> Self
where T: Into<String>,

Sets the value of description.

§Example
let x = SecurityPolicy::new().set_description("example");
Source

pub fn set_or_clear_description<T>(self, v: Option<T>) -> Self
where T: Into<String>,

Sets or clears the value of description.

§Example
let x = SecurityPolicy::new().set_or_clear_description(Some("example"));
let x = SecurityPolicy::new().set_or_clear_description(None::<String>);
Source

pub fn set_fingerprint<T>(self, v: T) -> Self
where T: Into<Bytes>,

Sets the value of fingerprint.

§Example
let x = SecurityPolicy::new().set_fingerprint(bytes::Bytes::from_static(b"example"));
Source

pub fn set_or_clear_fingerprint<T>(self, v: Option<T>) -> Self
where T: Into<Bytes>,

Sets or clears the value of fingerprint.

§Example
let x = SecurityPolicy::new().set_or_clear_fingerprint(Some(bytes::Bytes::from_static(b"example")));
let x = SecurityPolicy::new().set_or_clear_fingerprint(None::<bytes::Bytes>);
Source

pub fn set_id<T>(self, v: T) -> Self
where T: Into<u64>,

Sets the value of id.

§Example
let x = SecurityPolicy::new().set_id(42_u32);
Source

pub fn set_or_clear_id<T>(self, v: Option<T>) -> Self
where T: Into<u64>,

Sets or clears the value of id.

§Example
let x = SecurityPolicy::new().set_or_clear_id(Some(42_u32));
let x = SecurityPolicy::new().set_or_clear_id(None::<u32>);
Source

pub fn set_kind<T>(self, v: T) -> Self
where T: Into<String>,

Sets the value of kind.

§Example
let x = SecurityPolicy::new().set_kind("example");
Source

pub fn set_or_clear_kind<T>(self, v: Option<T>) -> Self
where T: Into<String>,

Sets or clears the value of kind.

§Example
let x = SecurityPolicy::new().set_or_clear_kind(Some("example"));
let x = SecurityPolicy::new().set_or_clear_kind(None::<String>);
Source

pub fn set_label_fingerprint<T>(self, v: T) -> Self
where T: Into<Bytes>,

Sets the value of label_fingerprint.

§Example
let x = SecurityPolicy::new().set_label_fingerprint(bytes::Bytes::from_static(b"example"));
Source

pub fn set_or_clear_label_fingerprint<T>(self, v: Option<T>) -> Self
where T: Into<Bytes>,

Sets or clears the value of label_fingerprint.

§Example
let x = SecurityPolicy::new().set_or_clear_label_fingerprint(Some(bytes::Bytes::from_static(b"example")));
let x = SecurityPolicy::new().set_or_clear_label_fingerprint(None::<bytes::Bytes>);
Source

pub fn set_labels<T, K, V>(self, v: T) -> Self
where T: IntoIterator<Item = (K, V)>, K: Into<String>, V: Into<String>,

Sets the value of labels.

§Example
let x = SecurityPolicy::new().set_labels([
    ("key0", "abc"),
    ("key1", "xyz"),
]);
Source

pub fn set_name<T>(self, v: T) -> Self
where T: Into<String>,

Sets the value of name.

§Example
let x = SecurityPolicy::new().set_name("example");
Source

pub fn set_or_clear_name<T>(self, v: Option<T>) -> Self
where T: Into<String>,

Sets or clears the value of name.

§Example
let x = SecurityPolicy::new().set_or_clear_name(Some("example"));
let x = SecurityPolicy::new().set_or_clear_name(None::<String>);
Source

pub fn set_parent<T>(self, v: T) -> Self
where T: Into<String>,

Sets the value of parent.

§Example
let x = SecurityPolicy::new().set_parent("example");
Source

pub fn set_or_clear_parent<T>(self, v: Option<T>) -> Self
where T: Into<String>,

Sets or clears the value of parent.

§Example
let x = SecurityPolicy::new().set_or_clear_parent(Some("example"));
let x = SecurityPolicy::new().set_or_clear_parent(None::<String>);
Source

pub fn set_recaptcha_options_config<T>(self, v: T) -> Self

Sets the value of recaptcha_options_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyRecaptchaOptionsConfig;
let x = SecurityPolicy::new().set_recaptcha_options_config(SecurityPolicyRecaptchaOptionsConfig::default()/* use setters */);
Source

pub fn set_or_clear_recaptcha_options_config<T>(self, v: Option<T>) -> Self

Sets or clears the value of recaptcha_options_config.

§Example
use google_cloud_compute_v1::model::SecurityPolicyRecaptchaOptionsConfig;
let x = SecurityPolicy::new().set_or_clear_recaptcha_options_config(Some(SecurityPolicyRecaptchaOptionsConfig::default()/* use setters */));
let x = SecurityPolicy::new().set_or_clear_recaptcha_options_config(None::<SecurityPolicyRecaptchaOptionsConfig>);
Source

pub fn set_region<T>(self, v: T) -> Self
where T: Into<String>,

Sets the value of region.

§Example
let x = SecurityPolicy::new().set_region("example");
Source

pub fn set_or_clear_region<T>(self, v: Option<T>) -> Self
where T: Into<String>,

Sets or clears the value of region.

§Example
let x = SecurityPolicy::new().set_or_clear_region(Some("example"));
let x = SecurityPolicy::new().set_or_clear_region(None::<String>);
Source

pub fn set_rules<T, V>(self, v: T) -> Self
where T: IntoIterator<Item = V>, V: Into<SecurityPolicyRule>,

Sets the value of rules.

§Example
use google_cloud_compute_v1::model::SecurityPolicyRule;
let x = SecurityPolicy::new()
    .set_rules([
        SecurityPolicyRule::default()/* use setters */,
        SecurityPolicyRule::default()/* use (different) setters */,
    ]);

Sets the value of self_link.

§Example
let x = SecurityPolicy::new().set_self_link("example");

Sets or clears the value of self_link.

§Example
let x = SecurityPolicy::new().set_or_clear_self_link(Some("example"));
let x = SecurityPolicy::new().set_or_clear_self_link(None::<String>);
Source

pub fn set_short_name<T>(self, v: T) -> Self
where T: Into<String>,

Sets the value of short_name.

§Example
let x = SecurityPolicy::new().set_short_name("example");
Source

pub fn set_or_clear_short_name<T>(self, v: Option<T>) -> Self
where T: Into<String>,

Sets or clears the value of short_name.

§Example
let x = SecurityPolicy::new().set_or_clear_short_name(Some("example"));
let x = SecurityPolicy::new().set_or_clear_short_name(None::<String>);
Source

pub fn set_type<T>(self, v: T) -> Self
where T: Into<Type>,

Sets the value of r#type.

§Example
use google_cloud_compute_v1::model::security_policy::Type;
let x0 = SecurityPolicy::new().set_type(Type::CloudArmorEdge);
let x1 = SecurityPolicy::new().set_type(Type::CloudArmorNetwork);
Source

pub fn set_or_clear_type<T>(self, v: Option<T>) -> Self
where T: Into<Type>,

Sets or clears the value of r#type.

§Example
use google_cloud_compute_v1::model::security_policy::Type;
let x0 = SecurityPolicy::new().set_or_clear_type(Some(Type::CloudArmorEdge));
let x1 = SecurityPolicy::new().set_or_clear_type(Some(Type::CloudArmorNetwork));
let x_none = SecurityPolicy::new().set_or_clear_type(None::<Type>);
Source

pub fn set_user_defined_fields<T, V>(self, v: T) -> Self

Sets the value of user_defined_fields.

§Example
use google_cloud_compute_v1::model::SecurityPolicyUserDefinedField;
let x = SecurityPolicy::new()
    .set_user_defined_fields([
        SecurityPolicyUserDefinedField::default()/* use setters */,
        SecurityPolicyUserDefinedField::default()/* use (different) setters */,
    ]);

Trait Implementations§

Source§

impl Clone for SecurityPolicy

Source§

fn clone(&self) -> SecurityPolicy

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for SecurityPolicy

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for SecurityPolicy

Source§

fn default() -> SecurityPolicy

Returns the “default value” for a type. Read more
Source§

impl Message for SecurityPolicy

Source§

fn typename() -> &'static str

The typename of this message.
Source§

impl PartialEq for SecurityPolicy

Source§

fn eq(&self, other: &SecurityPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl StructuralPartialEq for SecurityPolicy

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,