Struct google_cloudasset1_beta1::api::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig [−][src]
pub struct GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig {
pub access_levels: Option<Vec<String>>,
pub egress_policies: Option<Vec<GoogleIdentityAccesscontextmanagerV1EgressPolicy>>,
pub ingress_policies: Option<Vec<GoogleIdentityAccesscontextmanagerV1IngressPolicy>>,
pub resources: Option<Vec<String>>,
pub restricted_services: Option<Vec<String>>,
pub vpc_accessible_services: Option<GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices>,
}
Expand description
ServicePerimeterConfig
specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.
This type is not used in any activity, and only used as part of another schema.
Fields
access_levels: Option<Vec<String>>
A list of AccessLevel
resource names that allow resources within the ServicePerimeter
to be accessed from the internet. AccessLevels
listed must be in the same policy as this ServicePerimeter
. Referencing a nonexistent AccessLevel
is a syntax error. If no AccessLevel
names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"
. For Service Perimeter Bridge, must be empty.
egress_policies: Option<Vec<GoogleIdentityAccesscontextmanagerV1EgressPolicy>>
List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge.
ingress_policies: Option<Vec<GoogleIdentityAccesscontextmanagerV1IngressPolicy>>
List of IngressPolicies to apply to the perimeter. A perimeter may have multiple IngressPolicies, each of which is evaluated separately. Access is granted if any Ingress Policy grants it. Must be empty for a perimeter bridge.
resources: Option<Vec<String>>
A list of Google Cloud resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}
restricted_services: Option<Vec<String>>
Google Cloud services that are subject to the Service Perimeter restrictions. For example, if storage.googleapis.com
is specified, access to the storage buckets inside the perimeter must meet the perimeter’s access restrictions.
vpc_accessible_services: Option<GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices>
Configuration for APIs allowed within Perimeter.
Trait Implementations
Returns the “default value” for a type. Read more
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
Auto Trait Implementations
Blanket Implementations
Mutably borrows from an owned value. Read more
Instruments this type with the provided Span
, returning an
Instrumented
wrapper. Read more