Struct ServicePerimeterConfig 

#[non_exhaustive]
pub struct ServicePerimeterConfig {
    pub resources: Vec<String>,
    pub access_levels: Vec<String>,
    pub restricted_services: Vec<String>,
    pub vpc_accessible_services: Option<VpcAccessibleServices>,
    pub ingress_policies: Vec<IngressPolicy>,
    pub egress_policies: Vec<EgressPolicy>,
    /* private fields */
}

ServicePerimeterConfig specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

resources: Vec<String>

A list of Google Cloud resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

access_levels: Vec<String>

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL". For Service Perimeter Bridge, must be empty.

restricted_services: Vec<String>

Google Cloud services that are subject to the Service Perimeter restrictions. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter’s access restrictions.

vpc_accessible_services: Option<VpcAccessibleServices>

Configuration for APIs allowed within Perimeter.

ingress_policies: Vec<IngressPolicy>

List of [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] to apply to the perimeter. A perimeter may have multiple [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy], each of which is evaluated separately. Access is granted if any [Ingress Policy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] grants it. Must be empty for a perimeter bridge.

egress_policies: Vec<EgressPolicy>

List of [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] to apply to the perimeter. A perimeter may have multiple [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy], each of which is evaluated separately. Access is granted if any [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] grants it. Must be empty for a perimeter bridge.

Implementations

impl ServicePerimeterConfig

pub fn new() -> Self

pub fn set_resources<T, V>(self, v: T) -> Self

where T: IntoIterator<Item = V>, V: Into<String>,

Sets the value of resources.

pub fn set_access_levels<T, V>(self, v: T) -> Self

where T: IntoIterator<Item = V>, V: Into<String>,

Sets the value of access_levels.

pub fn set_restricted_services<T, V>(self, v: T) -> Self

where T: IntoIterator<Item = V>, V: Into<String>,

Sets the value of restricted_services.

pub fn set_vpc_accessible_services<T>(self, v: T) -> Self

where T: Into<VpcAccessibleServices>,

Sets the value of vpc_accessible_services.

pub fn set_or_clear_vpc_accessible_services<T>(self, v: Option<T>) -> Self

where T: Into<VpcAccessibleServices>,

Sets or clears the value of vpc_accessible_services.

pub fn set_ingress_policies<T, V>(self, v: T) -> Self

where T: IntoIterator<Item = V>, V: Into<IngressPolicy>,

Sets the value of ingress_policies.

pub fn set_egress_policies<T, V>(self, v: T) -> Self

where T: IntoIterator<Item = V>, V: Into<EgressPolicy>,

Sets the value of egress_policies.

Trait Implementations

impl Clone for ServicePerimeterConfig

fn clone(&self) -> ServicePerimeterConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServicePerimeterConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ServicePerimeterConfig

fn default() -> ServicePerimeterConfig

Returns the “default value” for a type.

impl Message for ServicePerimeterConfig

fn typename() -> &'static str

The typename of this message.

impl PartialEq for ServicePerimeterConfig

fn eq(&self, other: &ServicePerimeterConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ServicePerimeterConfig