accesscontextmanager

package
v8.10.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Dec 10, 2024 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AccessLevel 

type AccessLevel struct {
	pulumi.CustomResourceState

	// A set of predefined conditions for the access level and a combining function.
	// Structure is documented below.
	Basic AccessLevelBasicPtrOutput `pulumi:"basic"`
	// Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request.
	// See CEL spec at: https://github.com/google/cel-spec.
	// Structure is documented below.
	Custom AccessLevelCustomPtrOutput `pulumi:"custom"`
	// Description of the AccessLevel and its use. Does not affect behavior.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Resource name for the Access Level. The shortName component must begin
	// with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	//
	// ***
	Name pulumi.StringOutput `pulumi:"name"`
	// The AccessPolicy this AccessLevel lives in.
	// Format: accessPolicies/{policy_id}
	Parent pulumi.StringOutput `pulumi:"parent"`
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringOutput `pulumi:"title"`
}

An AccessLevel is a label that can be applied to requests to GCP services, along with a list of requirements necessary for the label to be applied.

To get more information about AccessLevel, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.accessLevels) * How-to Guides

> **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, you must specify a `billingProject` and set `userProjectOverride` to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the `serviceusage.services.use` permission on the `billingProject` you defined.

## Example Usage

### Access Context Manager Access Level Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevel(ctx, "access-level", &accesscontextmanager.AccessLevelArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("chromeos_no_lock"),
			Basic: &accesscontextmanager.AccessLevelBasicArgs{
				Conditions: accesscontextmanager.AccessLevelBasicConditionArray{
					&accesscontextmanager.AccessLevelBasicConditionArgs{
						DevicePolicy: &accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs{
							RequireScreenLock: pulumi.Bool(true),
							OsConstraints: accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArray{
								&accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs{
									OsType: pulumi.String("DESKTOP_CHROME_OS"),
								},
							},
						},
						Regions: pulumi.StringArray{
							pulumi.String("CH"),
							pulumi.String("IT"),
							pulumi.String("US"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

AccessLevel can be imported using any of these accepted formats:

* `{{name}}`

When using the `pulumi import` command, AccessLevel can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/accessLevel:AccessLevel default {{name}} ```

func GetAccessLevel 

func GetAccessLevel(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessLevelState, opts ...pulumi.ResourceOption) (*AccessLevel, error)

GetAccessLevel gets an existing AccessLevel resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessLevel 

func NewAccessLevel(ctx *pulumi.Context,
	name string, args *AccessLevelArgs, opts ...pulumi.ResourceOption) (*AccessLevel, error)

NewAccessLevel registers a new resource with the given unique name, arguments, and options.

func (*AccessLevel) ElementType 

func (*AccessLevel) ElementType() reflect.Type

func (*AccessLevel) ToAccessLevelOutput 

func (i *AccessLevel) ToAccessLevelOutput() AccessLevelOutput

func (*AccessLevel) ToAccessLevelOutputWithContext 

func (i *AccessLevel) ToAccessLevelOutputWithContext(ctx context.Context) AccessLevelOutput

type AccessLevelArgs 

type AccessLevelArgs struct {
	// A set of predefined conditions for the access level and a combining function.
	// Structure is documented below.
	Basic AccessLevelBasicPtrInput
	// Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request.
	// See CEL spec at: https://github.com/google/cel-spec.
	// Structure is documented below.
	Custom AccessLevelCustomPtrInput
	// Description of the AccessLevel and its use. Does not affect behavior.
	Description pulumi.StringPtrInput
	// Resource name for the Access Level. The shortName component must begin
	// with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	//
	// ***
	Name pulumi.StringPtrInput
	// The AccessPolicy this AccessLevel lives in.
	// Format: accessPolicies/{policy_id}
	Parent pulumi.StringInput
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringInput
}

The set of arguments for constructing a AccessLevel resource.

func (AccessLevelArgs) ElementType 

func (AccessLevelArgs) ElementType() reflect.Type

type AccessLevelArray 

type AccessLevelArray []AccessLevelInput

func (AccessLevelArray) ElementType 

func (AccessLevelArray) ElementType() reflect.Type

func (AccessLevelArray) ToAccessLevelArrayOutput 

func (i AccessLevelArray) ToAccessLevelArrayOutput() AccessLevelArrayOutput

func (AccessLevelArray) ToAccessLevelArrayOutputWithContext 

func (i AccessLevelArray) ToAccessLevelArrayOutputWithContext(ctx context.Context) AccessLevelArrayOutput

type AccessLevelArrayInput 

type AccessLevelArrayInput interface {
	pulumi.Input

	ToAccessLevelArrayOutput() AccessLevelArrayOutput
	ToAccessLevelArrayOutputWithContext(context.Context) AccessLevelArrayOutput
}

AccessLevelArrayInput is an input type that accepts AccessLevelArray and AccessLevelArrayOutput values. You can construct a concrete instance of `AccessLevelArrayInput` via: 

AccessLevelArray{ AccessLevelArgs{...} }

type AccessLevelArrayOutput 

type AccessLevelArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelArrayOutput) ElementType 

func (AccessLevelArrayOutput) ElementType() reflect.Type

func (AccessLevelArrayOutput) Index 

func (o AccessLevelArrayOutput) Index(i pulumi.IntInput) AccessLevelOutput

func (AccessLevelArrayOutput) ToAccessLevelArrayOutput 

func (o AccessLevelArrayOutput) ToAccessLevelArrayOutput() AccessLevelArrayOutput

func (AccessLevelArrayOutput) ToAccessLevelArrayOutputWithContext 

func (o AccessLevelArrayOutput) ToAccessLevelArrayOutputWithContext(ctx context.Context) AccessLevelArrayOutput

type AccessLevelBasic 

type AccessLevelBasic struct {
	// How the conditions list should be combined to determine if a request
	// is granted this AccessLevel. If AND is used, each Condition in
	// conditions must be satisfied for the AccessLevel to be applied. If
	// OR is used, at least one Condition in conditions must be satisfied
	// for the AccessLevel to be applied.
	// Default value is `AND`.
	// Possible values are: `AND`, `OR`.
	CombiningFunction *string `pulumi:"combiningFunction"`
	// A set of requirements for the AccessLevel to be granted.
	// Structure is documented below.
	Conditions []AccessLevelBasicCondition `pulumi:"conditions"`
}

type AccessLevelBasicArgs 

type AccessLevelBasicArgs struct {
	// How the conditions list should be combined to determine if a request
	// is granted this AccessLevel. If AND is used, each Condition in
	// conditions must be satisfied for the AccessLevel to be applied. If
	// OR is used, at least one Condition in conditions must be satisfied
	// for the AccessLevel to be applied.
	// Default value is `AND`.
	// Possible values are: `AND`, `OR`.
	CombiningFunction pulumi.StringPtrInput `pulumi:"combiningFunction"`
	// A set of requirements for the AccessLevel to be granted.
	// Structure is documented below.
	Conditions AccessLevelBasicConditionArrayInput `pulumi:"conditions"`
}

func (AccessLevelBasicArgs) ElementType 

func (AccessLevelBasicArgs) ElementType() reflect.Type

func (AccessLevelBasicArgs) ToAccessLevelBasicOutput 

func (i AccessLevelBasicArgs) ToAccessLevelBasicOutput() AccessLevelBasicOutput

func (AccessLevelBasicArgs) ToAccessLevelBasicOutputWithContext 

func (i AccessLevelBasicArgs) ToAccessLevelBasicOutputWithContext(ctx context.Context) AccessLevelBasicOutput

func (AccessLevelBasicArgs) ToAccessLevelBasicPtrOutput 

func (i AccessLevelBasicArgs) ToAccessLevelBasicPtrOutput() AccessLevelBasicPtrOutput

func (AccessLevelBasicArgs) ToAccessLevelBasicPtrOutputWithContext 

func (i AccessLevelBasicArgs) ToAccessLevelBasicPtrOutputWithContext(ctx context.Context) AccessLevelBasicPtrOutput

type AccessLevelBasicCondition 

type AccessLevelBasicCondition struct {
	// Device specific restrictions, all restrictions must hold for
	// the Condition to be true. If not specified, all devices are
	// allowed.
	// Structure is documented below.
	DevicePolicy *AccessLevelBasicConditionDevicePolicy `pulumi:"devicePolicy"`
	// A list of CIDR block IP subnetwork specification. May be IPv4
	// or IPv6.
	// Note that for a CIDR IP address block, the specified IP address
	// portion must be properly truncated (i.e. all the host bits must
	// be zero) or the input is considered malformed. For example,
	// "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly,
	// for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32"
	// is not. The originating IP of a request must be in one of the
	// listed subnets in order for this Condition to be true.
	// If empty, all IP addresses are allowed.
	IpSubnetworks []string `pulumi:"ipSubnetworks"`
	// An allowed list of members (users, service accounts).
	// Using groups is not supported yet.
	// The signed-in user originating the request must be a part of one
	// of the provided members. If not specified, a request may come
	// from any user (logged in/not logged in, not present in any
	// groups, etc.).
	// Formats: `user:{emailid}`, `serviceAccount:{emailid}`
	Members []string `pulumi:"members"`
	// Whether to negate the Condition. If true, the Condition becomes
	// a NAND over its non-empty fields, each field must be false for
	// the Condition overall to be satisfied. Defaults to false.
	Negate *bool `pulumi:"negate"`
	// The request must originate from one of the provided
	// countries/regions.
	// Format: A valid ISO 3166-1 alpha-2 code.
	Regions []string `pulumi:"regions"`
	// A list of other access levels defined in the same Policy,
	// referenced by resource name. Referencing an AccessLevel which
	// does not exist is an error. All access levels listed must be
	// granted for the Condition to be true.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	RequiredAccessLevels []string `pulumi:"requiredAccessLevels"`
	// The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`.
	// Structure is documented below.
	VpcNetworkSources []AccessLevelBasicConditionVpcNetworkSource `pulumi:"vpcNetworkSources"`
}

type AccessLevelBasicConditionArgs 

type AccessLevelBasicConditionArgs struct {
	// Device specific restrictions, all restrictions must hold for
	// the Condition to be true. If not specified, all devices are
	// allowed.
	// Structure is documented below.
	DevicePolicy AccessLevelBasicConditionDevicePolicyPtrInput `pulumi:"devicePolicy"`
	// A list of CIDR block IP subnetwork specification. May be IPv4
	// or IPv6.
	// Note that for a CIDR IP address block, the specified IP address
	// portion must be properly truncated (i.e. all the host bits must
	// be zero) or the input is considered malformed. For example,
	// "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly,
	// for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32"
	// is not. The originating IP of a request must be in one of the
	// listed subnets in order for this Condition to be true.
	// If empty, all IP addresses are allowed.
	IpSubnetworks pulumi.StringArrayInput `pulumi:"ipSubnetworks"`
	// An allowed list of members (users, service accounts).
	// Using groups is not supported yet.
	// The signed-in user originating the request must be a part of one
	// of the provided members. If not specified, a request may come
	// from any user (logged in/not logged in, not present in any
	// groups, etc.).
	// Formats: `user:{emailid}`, `serviceAccount:{emailid}`
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Whether to negate the Condition. If true, the Condition becomes
	// a NAND over its non-empty fields, each field must be false for
	// the Condition overall to be satisfied. Defaults to false.
	Negate pulumi.BoolPtrInput `pulumi:"negate"`
	// The request must originate from one of the provided
	// countries/regions.
	// Format: A valid ISO 3166-1 alpha-2 code.
	Regions pulumi.StringArrayInput `pulumi:"regions"`
	// A list of other access levels defined in the same Policy,
	// referenced by resource name. Referencing an AccessLevel which
	// does not exist is an error. All access levels listed must be
	// granted for the Condition to be true.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	RequiredAccessLevels pulumi.StringArrayInput `pulumi:"requiredAccessLevels"`
	// The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`.
	// Structure is documented below.
	VpcNetworkSources AccessLevelBasicConditionVpcNetworkSourceArrayInput `pulumi:"vpcNetworkSources"`
}

func (AccessLevelBasicConditionArgs) ElementType 

func (AccessLevelBasicConditionArgs) ElementType() reflect.Type

func (AccessLevelBasicConditionArgs) ToAccessLevelBasicConditionOutput 

func (i AccessLevelBasicConditionArgs) ToAccessLevelBasicConditionOutput() AccessLevelBasicConditionOutput

func (AccessLevelBasicConditionArgs) ToAccessLevelBasicConditionOutputWithContext 

func (i AccessLevelBasicConditionArgs) ToAccessLevelBasicConditionOutputWithContext(ctx context.Context) AccessLevelBasicConditionOutput

type AccessLevelBasicConditionArray 

type AccessLevelBasicConditionArray []AccessLevelBasicConditionInput

func (AccessLevelBasicConditionArray) ElementType 

func (AccessLevelBasicConditionArray) ElementType() reflect.Type

func (AccessLevelBasicConditionArray) ToAccessLevelBasicConditionArrayOutput 

func (i AccessLevelBasicConditionArray) ToAccessLevelBasicConditionArrayOutput() AccessLevelBasicConditionArrayOutput

func (AccessLevelBasicConditionArray) ToAccessLevelBasicConditionArrayOutputWithContext 

func (i AccessLevelBasicConditionArray) ToAccessLevelBasicConditionArrayOutputWithContext(ctx context.Context) AccessLevelBasicConditionArrayOutput

type AccessLevelBasicConditionArrayInput 

type AccessLevelBasicConditionArrayInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionArrayOutput() AccessLevelBasicConditionArrayOutput
	ToAccessLevelBasicConditionArrayOutputWithContext(context.Context) AccessLevelBasicConditionArrayOutput
}

AccessLevelBasicConditionArrayInput is an input type that accepts AccessLevelBasicConditionArray and AccessLevelBasicConditionArrayOutput values. You can construct a concrete instance of `AccessLevelBasicConditionArrayInput` via: 

AccessLevelBasicConditionArray{ AccessLevelBasicConditionArgs{...} }

type AccessLevelBasicConditionArrayOutput 

type AccessLevelBasicConditionArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionArrayOutput) ElementType 

func (AccessLevelBasicConditionArrayOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionArrayOutput) Index 

func (o AccessLevelBasicConditionArrayOutput) Index(i pulumi.IntInput) AccessLevelBasicConditionOutput

func (AccessLevelBasicConditionArrayOutput) ToAccessLevelBasicConditionArrayOutput 

func (o AccessLevelBasicConditionArrayOutput) ToAccessLevelBasicConditionArrayOutput() AccessLevelBasicConditionArrayOutput

func (AccessLevelBasicConditionArrayOutput) ToAccessLevelBasicConditionArrayOutputWithContext 

func (o AccessLevelBasicConditionArrayOutput) ToAccessLevelBasicConditionArrayOutputWithContext(ctx context.Context) AccessLevelBasicConditionArrayOutput

type AccessLevelBasicConditionDevicePolicy 

type AccessLevelBasicConditionDevicePolicy struct {
	// A list of allowed device management levels.
	// An empty list allows all management levels.
	// Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.
	AllowedDeviceManagementLevels []string `pulumi:"allowedDeviceManagementLevels"`
	// A list of allowed encryptions statuses.
	// An empty list allows all statuses.
	// Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.
	AllowedEncryptionStatuses []string `pulumi:"allowedEncryptionStatuses"`
	// A list of allowed OS versions.
	// An empty list allows all types and all versions.
	// Structure is documented below.
	OsConstraints []AccessLevelBasicConditionDevicePolicyOsConstraint `pulumi:"osConstraints"`
	// Whether the device needs to be approved by the customer admin.
	RequireAdminApproval *bool `pulumi:"requireAdminApproval"`
	// Whether the device needs to be corp owned.
	RequireCorpOwned *bool `pulumi:"requireCorpOwned"`
	// Whether or not screenlock is required for the DevicePolicy
	// to be true. Defaults to false.
	RequireScreenLock *bool `pulumi:"requireScreenLock"`
}

type AccessLevelBasicConditionDevicePolicyArgs 

type AccessLevelBasicConditionDevicePolicyArgs struct {
	// A list of allowed device management levels.
	// An empty list allows all management levels.
	// Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.
	AllowedDeviceManagementLevels pulumi.StringArrayInput `pulumi:"allowedDeviceManagementLevels"`
	// A list of allowed encryptions statuses.
	// An empty list allows all statuses.
	// Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.
	AllowedEncryptionStatuses pulumi.StringArrayInput `pulumi:"allowedEncryptionStatuses"`
	// A list of allowed OS versions.
	// An empty list allows all types and all versions.
	// Structure is documented below.
	OsConstraints AccessLevelBasicConditionDevicePolicyOsConstraintArrayInput `pulumi:"osConstraints"`
	// Whether the device needs to be approved by the customer admin.
	RequireAdminApproval pulumi.BoolPtrInput `pulumi:"requireAdminApproval"`
	// Whether the device needs to be corp owned.
	RequireCorpOwned pulumi.BoolPtrInput `pulumi:"requireCorpOwned"`
	// Whether or not screenlock is required for the DevicePolicy
	// to be true. Defaults to false.
	RequireScreenLock pulumi.BoolPtrInput `pulumi:"requireScreenLock"`
}

func (AccessLevelBasicConditionDevicePolicyArgs) ElementType 

func (AccessLevelBasicConditionDevicePolicyArgs) ElementType() reflect.Type

func (AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyOutput 

func (i AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyOutput() AccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyOutputWithContext 

func (i AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyPtrOutput 

func (i AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelBasicConditionDevicePolicyPtrOutput

func (AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyPtrOutputWithContext 

func (i AccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyPtrOutput

type AccessLevelBasicConditionDevicePolicyInput 

type AccessLevelBasicConditionDevicePolicyInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionDevicePolicyOutput() AccessLevelBasicConditionDevicePolicyOutput
	ToAccessLevelBasicConditionDevicePolicyOutputWithContext(context.Context) AccessLevelBasicConditionDevicePolicyOutput
}

AccessLevelBasicConditionDevicePolicyInput is an input type that accepts AccessLevelBasicConditionDevicePolicyArgs and AccessLevelBasicConditionDevicePolicyOutput values. You can construct a concrete instance of `AccessLevelBasicConditionDevicePolicyInput` via: 

AccessLevelBasicConditionDevicePolicyArgs{...}

type AccessLevelBasicConditionDevicePolicyOsConstraint 

type AccessLevelBasicConditionDevicePolicyOsConstraint struct {
	// The minimum allowed OS version. If not set, any version
	// of this OS satisfies the constraint.
	// Format: "major.minor.patch" such as "10.5.301", "9.2.1".
	MinimumVersion *string `pulumi:"minimumVersion"`
	// The operating system type of the device.
	// Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.
	OsType string `pulumi:"osType"`
	// If you specify DESKTOP_CHROME_OS for osType, you can optionally include requireVerifiedChromeOs to require Chrome Verified Access.
	RequireVerifiedChromeOs *bool `pulumi:"requireVerifiedChromeOs"`
}

type AccessLevelBasicConditionDevicePolicyOsConstraintArgs 

type AccessLevelBasicConditionDevicePolicyOsConstraintArgs struct {
	// The minimum allowed OS version. If not set, any version
	// of this OS satisfies the constraint.
	// Format: "major.minor.patch" such as "10.5.301", "9.2.1".
	MinimumVersion pulumi.StringPtrInput `pulumi:"minimumVersion"`
	// The operating system type of the device.
	// Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.
	OsType pulumi.StringInput `pulumi:"osType"`
	// If you specify DESKTOP_CHROME_OS for osType, you can optionally include requireVerifiedChromeOs to require Chrome Verified Access.
	RequireVerifiedChromeOs pulumi.BoolPtrInput `pulumi:"requireVerifiedChromeOs"`
}

func (AccessLevelBasicConditionDevicePolicyOsConstraintArgs) ElementType 

func (AccessLevelBasicConditionDevicePolicyOsConstraintArgs) ElementType() reflect.Type

func (AccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutput 

func (i AccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutput() AccessLevelBasicConditionDevicePolicyOsConstraintOutput

func (AccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext 

func (i AccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyOsConstraintOutput

type AccessLevelBasicConditionDevicePolicyOsConstraintArray 

type AccessLevelBasicConditionDevicePolicyOsConstraintArray []AccessLevelBasicConditionDevicePolicyOsConstraintInput

func (AccessLevelBasicConditionDevicePolicyOsConstraintArray) ElementType 

func (AccessLevelBasicConditionDevicePolicyOsConstraintArray) ElementType() reflect.Type

func (AccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput 

func (i AccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput() AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

func (AccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext 

func (i AccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

type AccessLevelBasicConditionDevicePolicyOsConstraintArrayInput 

type AccessLevelBasicConditionDevicePolicyOsConstraintArrayInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput() AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput
	ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext(context.Context) AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput
}

AccessLevelBasicConditionDevicePolicyOsConstraintArrayInput is an input type that accepts AccessLevelBasicConditionDevicePolicyOsConstraintArray and AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput values. You can construct a concrete instance of `AccessLevelBasicConditionDevicePolicyOsConstraintArrayInput` via: 

AccessLevelBasicConditionDevicePolicyOsConstraintArray{ AccessLevelBasicConditionDevicePolicyOsConstraintArgs{...} }

type AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput 

type AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ElementType 

func (AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) Index 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) Index(i pulumi.IntInput) AccessLevelBasicConditionDevicePolicyOsConstraintOutput

func (AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput() AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

func (AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

type AccessLevelBasicConditionDevicePolicyOsConstraintInput 

type AccessLevelBasicConditionDevicePolicyOsConstraintInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionDevicePolicyOsConstraintOutput() AccessLevelBasicConditionDevicePolicyOsConstraintOutput
	ToAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext(context.Context) AccessLevelBasicConditionDevicePolicyOsConstraintOutput
}

AccessLevelBasicConditionDevicePolicyOsConstraintInput is an input type that accepts AccessLevelBasicConditionDevicePolicyOsConstraintArgs and AccessLevelBasicConditionDevicePolicyOsConstraintOutput values. You can construct a concrete instance of `AccessLevelBasicConditionDevicePolicyOsConstraintInput` via: 

AccessLevelBasicConditionDevicePolicyOsConstraintArgs{...}

type AccessLevelBasicConditionDevicePolicyOsConstraintOutput 

type AccessLevelBasicConditionDevicePolicyOsConstraintOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionDevicePolicyOsConstraintOutput) ElementType 

func (AccessLevelBasicConditionDevicePolicyOsConstraintOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionDevicePolicyOsConstraintOutput) MinimumVersion 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintOutput) MinimumVersion() pulumi.StringPtrOutput

The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".

func (AccessLevelBasicConditionDevicePolicyOsConstraintOutput) OsType 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintOutput) OsType() pulumi.StringOutput

The operating system type of the device. Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.

func (AccessLevelBasicConditionDevicePolicyOsConstraintOutput) RequireVerifiedChromeOs 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintOutput) RequireVerifiedChromeOs() pulumi.BoolPtrOutput

If you specify DESKTOP_CHROME_OS for osType, you can optionally include requireVerifiedChromeOs to require Chrome Verified Access.

func (AccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutput 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutput() AccessLevelBasicConditionDevicePolicyOsConstraintOutput

func (AccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext 

func (o AccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyOsConstraintOutput

type AccessLevelBasicConditionDevicePolicyOutput 

type AccessLevelBasicConditionDevicePolicyOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionDevicePolicyOutput) AllowedDeviceManagementLevels 

func (o AccessLevelBasicConditionDevicePolicyOutput) AllowedDeviceManagementLevels() pulumi.StringArrayOutput

A list of allowed device management levels. An empty list allows all management levels. Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.

func (AccessLevelBasicConditionDevicePolicyOutput) AllowedEncryptionStatuses 

func (o AccessLevelBasicConditionDevicePolicyOutput) AllowedEncryptionStatuses() pulumi.StringArrayOutput

A list of allowed encryptions statuses. An empty list allows all statuses. Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.

func (AccessLevelBasicConditionDevicePolicyOutput) ElementType 

func (AccessLevelBasicConditionDevicePolicyOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionDevicePolicyOutput) OsConstraints 

func (o AccessLevelBasicConditionDevicePolicyOutput) OsConstraints() AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.

func (AccessLevelBasicConditionDevicePolicyOutput) RequireAdminApproval 

func (o AccessLevelBasicConditionDevicePolicyOutput) RequireAdminApproval() pulumi.BoolPtrOutput

Whether the device needs to be approved by the customer admin.

func (AccessLevelBasicConditionDevicePolicyOutput) RequireCorpOwned 

func (o AccessLevelBasicConditionDevicePolicyOutput) RequireCorpOwned() pulumi.BoolPtrOutput

Whether the device needs to be corp owned.

func (AccessLevelBasicConditionDevicePolicyOutput) RequireScreenLock 

func (o AccessLevelBasicConditionDevicePolicyOutput) RequireScreenLock() pulumi.BoolPtrOutput

Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.

func (AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyOutput 

func (o AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyOutput() AccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyOutputWithContext 

func (o AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutput 

func (o AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelBasicConditionDevicePolicyPtrOutput

func (AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutputWithContext 

func (o AccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyPtrOutput

type AccessLevelBasicConditionDevicePolicyPtrInput 

type AccessLevelBasicConditionDevicePolicyPtrInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelBasicConditionDevicePolicyPtrOutput
	ToAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(context.Context) AccessLevelBasicConditionDevicePolicyPtrOutput
}

AccessLevelBasicConditionDevicePolicyPtrInput is an input type that accepts AccessLevelBasicConditionDevicePolicyArgs, AccessLevelBasicConditionDevicePolicyPtr and AccessLevelBasicConditionDevicePolicyPtrOutput values. You can construct a concrete instance of `AccessLevelBasicConditionDevicePolicyPtrInput` via: 

        AccessLevelBasicConditionDevicePolicyArgs{...}

or:

        nil

func AccessLevelBasicConditionDevicePolicyPtr 

func AccessLevelBasicConditionDevicePolicyPtr(v *AccessLevelBasicConditionDevicePolicyArgs) AccessLevelBasicConditionDevicePolicyPtrInput

type AccessLevelBasicConditionDevicePolicyPtrOutput 

type AccessLevelBasicConditionDevicePolicyPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionDevicePolicyPtrOutput) AllowedDeviceManagementLevels 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) AllowedDeviceManagementLevels() pulumi.StringArrayOutput

A list of allowed device management levels. An empty list allows all management levels. Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.

func (AccessLevelBasicConditionDevicePolicyPtrOutput) AllowedEncryptionStatuses 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) AllowedEncryptionStatuses() pulumi.StringArrayOutput

A list of allowed encryptions statuses. An empty list allows all statuses. Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.

func (AccessLevelBasicConditionDevicePolicyPtrOutput) Elem 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) Elem() AccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelBasicConditionDevicePolicyPtrOutput) ElementType 

func (AccessLevelBasicConditionDevicePolicyPtrOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionDevicePolicyPtrOutput) OsConstraints 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) OsConstraints() AccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.

func (AccessLevelBasicConditionDevicePolicyPtrOutput) RequireAdminApproval 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) RequireAdminApproval() pulumi.BoolPtrOutput

Whether the device needs to be approved by the customer admin.

func (AccessLevelBasicConditionDevicePolicyPtrOutput) RequireCorpOwned 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) RequireCorpOwned() pulumi.BoolPtrOutput

Whether the device needs to be corp owned.

func (AccessLevelBasicConditionDevicePolicyPtrOutput) RequireScreenLock 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) RequireScreenLock() pulumi.BoolPtrOutput

Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.

func (AccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutput 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelBasicConditionDevicePolicyPtrOutput

func (AccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutputWithContext 

func (o AccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelBasicConditionDevicePolicyPtrOutput

type AccessLevelBasicConditionInput 

type AccessLevelBasicConditionInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionOutput() AccessLevelBasicConditionOutput
	ToAccessLevelBasicConditionOutputWithContext(context.Context) AccessLevelBasicConditionOutput
}

AccessLevelBasicConditionInput is an input type that accepts AccessLevelBasicConditionArgs and AccessLevelBasicConditionOutput values. You can construct a concrete instance of `AccessLevelBasicConditionInput` via: 

AccessLevelBasicConditionArgs{...}

type AccessLevelBasicConditionOutput 

type AccessLevelBasicConditionOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionOutput) DevicePolicy 

func (o AccessLevelBasicConditionOutput) DevicePolicy() AccessLevelBasicConditionDevicePolicyPtrOutput

Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.

func (AccessLevelBasicConditionOutput) ElementType 

func (AccessLevelBasicConditionOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionOutput) IpSubnetworks 

func (o AccessLevelBasicConditionOutput) IpSubnetworks() pulumi.StringArrayOutput

A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.

func (AccessLevelBasicConditionOutput) Members 

func (o AccessLevelBasicConditionOutput) Members() pulumi.StringArrayOutput

An allowed list of members (users, service accounts). Using groups is not supported yet. The signed-in user originating the request must be a part of one of the provided members. If not specified, a request may come from any user (logged in/not logged in, not present in any groups, etc.). Formats: `user:{emailid}`, `serviceAccount:{emailid}`

func (AccessLevelBasicConditionOutput) Negate 

func (o AccessLevelBasicConditionOutput) Negate() pulumi.BoolPtrOutput

Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.

func (AccessLevelBasicConditionOutput) Regions 

func (o AccessLevelBasicConditionOutput) Regions() pulumi.StringArrayOutput

The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.

func (AccessLevelBasicConditionOutput) RequiredAccessLevels 

func (o AccessLevelBasicConditionOutput) RequiredAccessLevels() pulumi.StringArrayOutput

A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}

func (AccessLevelBasicConditionOutput) ToAccessLevelBasicConditionOutput 

func (o AccessLevelBasicConditionOutput) ToAccessLevelBasicConditionOutput() AccessLevelBasicConditionOutput

func (AccessLevelBasicConditionOutput) ToAccessLevelBasicConditionOutputWithContext 

func (o AccessLevelBasicConditionOutput) ToAccessLevelBasicConditionOutputWithContext(ctx context.Context) AccessLevelBasicConditionOutput

func (AccessLevelBasicConditionOutput) VpcNetworkSources 

func (o AccessLevelBasicConditionOutput) VpcNetworkSources() AccessLevelBasicConditionVpcNetworkSourceArrayOutput

The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`. Structure is documented below.

type AccessLevelBasicConditionVpcNetworkSource 

type AccessLevelBasicConditionVpcNetworkSource struct {
	// Sub networks within a VPC network.
	// Structure is documented below.
	VpcSubnetwork *AccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork `pulumi:"vpcSubnetwork"`
}

type AccessLevelBasicConditionVpcNetworkSourceArgs 

type AccessLevelBasicConditionVpcNetworkSourceArgs struct {
	// Sub networks within a VPC network.
	// Structure is documented below.
	VpcSubnetwork AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput `pulumi:"vpcSubnetwork"`
}

func (AccessLevelBasicConditionVpcNetworkSourceArgs) ElementType 

func (AccessLevelBasicConditionVpcNetworkSourceArgs) ElementType() reflect.Type

func (AccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelBasicConditionVpcNetworkSourceOutput 

func (i AccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelBasicConditionVpcNetworkSourceOutput() AccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelBasicConditionVpcNetworkSourceOutputWithContext 

func (i AccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelBasicConditionVpcNetworkSourceOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceOutput

type AccessLevelBasicConditionVpcNetworkSourceArray 

type AccessLevelBasicConditionVpcNetworkSourceArray []AccessLevelBasicConditionVpcNetworkSourceInput

func (AccessLevelBasicConditionVpcNetworkSourceArray) ElementType 

func (AccessLevelBasicConditionVpcNetworkSourceArray) ElementType() reflect.Type

func (AccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutput 

func (i AccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutput() AccessLevelBasicConditionVpcNetworkSourceArrayOutput

func (AccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext 

func (i AccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceArrayOutput

type AccessLevelBasicConditionVpcNetworkSourceArrayInput 

type AccessLevelBasicConditionVpcNetworkSourceArrayInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionVpcNetworkSourceArrayOutput() AccessLevelBasicConditionVpcNetworkSourceArrayOutput
	ToAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext(context.Context) AccessLevelBasicConditionVpcNetworkSourceArrayOutput
}

AccessLevelBasicConditionVpcNetworkSourceArrayInput is an input type that accepts AccessLevelBasicConditionVpcNetworkSourceArray and AccessLevelBasicConditionVpcNetworkSourceArrayOutput values. You can construct a concrete instance of `AccessLevelBasicConditionVpcNetworkSourceArrayInput` via: 

AccessLevelBasicConditionVpcNetworkSourceArray{ AccessLevelBasicConditionVpcNetworkSourceArgs{...} }

type AccessLevelBasicConditionVpcNetworkSourceArrayOutput 

type AccessLevelBasicConditionVpcNetworkSourceArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionVpcNetworkSourceArrayOutput) ElementType 

func (AccessLevelBasicConditionVpcNetworkSourceArrayOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionVpcNetworkSourceArrayOutput) Index 

func (o AccessLevelBasicConditionVpcNetworkSourceArrayOutput) Index(i pulumi.IntInput) AccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutput 

func (o AccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutput() AccessLevelBasicConditionVpcNetworkSourceArrayOutput

func (AccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext 

func (o AccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceArrayOutput

type AccessLevelBasicConditionVpcNetworkSourceInput 

type AccessLevelBasicConditionVpcNetworkSourceInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionVpcNetworkSourceOutput() AccessLevelBasicConditionVpcNetworkSourceOutput
	ToAccessLevelBasicConditionVpcNetworkSourceOutputWithContext(context.Context) AccessLevelBasicConditionVpcNetworkSourceOutput
}

AccessLevelBasicConditionVpcNetworkSourceInput is an input type that accepts AccessLevelBasicConditionVpcNetworkSourceArgs and AccessLevelBasicConditionVpcNetworkSourceOutput values. You can construct a concrete instance of `AccessLevelBasicConditionVpcNetworkSourceInput` via: 

AccessLevelBasicConditionVpcNetworkSourceArgs{...}

type AccessLevelBasicConditionVpcNetworkSourceOutput 

type AccessLevelBasicConditionVpcNetworkSourceOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionVpcNetworkSourceOutput) ElementType 

func (AccessLevelBasicConditionVpcNetworkSourceOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelBasicConditionVpcNetworkSourceOutput 

func (o AccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelBasicConditionVpcNetworkSourceOutput() AccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelBasicConditionVpcNetworkSourceOutputWithContext 

func (o AccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelBasicConditionVpcNetworkSourceOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelBasicConditionVpcNetworkSourceOutput) VpcSubnetwork 

func (o AccessLevelBasicConditionVpcNetworkSourceOutput) VpcSubnetwork() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

Sub networks within a VPC network. Structure is documented below.

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork 

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork struct {
	// Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.
	Network string `pulumi:"network"`
	// CIDR block IP subnetwork specification. Must be IPv4.
	VpcIpSubnetworks []string `pulumi:"vpcIpSubnetworks"`
}

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs 

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs struct {
	// Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.
	Network pulumi.StringInput `pulumi:"network"`
	// CIDR block IP subnetwork specification. Must be IPv4.
	VpcIpSubnetworks pulumi.StringArrayInput `pulumi:"vpcIpSubnetworks"`
}

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ElementType 

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ElementType() reflect.Type

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput 

func (i AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext 

func (i AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (i AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (i AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput 

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput
	ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(context.Context) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput
}

AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput is an input type that accepts AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs and AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput values. You can construct a concrete instance of `AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput` via: 

AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs{...}

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput 

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ElementType 

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) Network 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) Network() pulumi.StringOutput

Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) VpcIpSubnetworks 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) VpcIpSubnetworks() pulumi.StringArrayOutput

CIDR block IP subnetwork specification. Must be IPv4.

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput 

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput interface {
	pulumi.Input

	ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput
	ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(context.Context) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput
}

AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput is an input type that accepts AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs, AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtr and AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput values. You can construct a concrete instance of `AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput` via: 

        AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs{...}

or:

        nil

func AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtr 

func AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtr(v *AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

type AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Elem 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Elem() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ElementType 

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ElementType() reflect.Type

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Network 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Network() pulumi.StringPtrOutput

Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) VpcIpSubnetworks 

func (o AccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) VpcIpSubnetworks() pulumi.StringArrayOutput

CIDR block IP subnetwork specification. Must be IPv4.

type AccessLevelBasicInput 

type AccessLevelBasicInput interface {
	pulumi.Input

	ToAccessLevelBasicOutput() AccessLevelBasicOutput
	ToAccessLevelBasicOutputWithContext(context.Context) AccessLevelBasicOutput
}

AccessLevelBasicInput is an input type that accepts AccessLevelBasicArgs and AccessLevelBasicOutput values. You can construct a concrete instance of `AccessLevelBasicInput` via: 

AccessLevelBasicArgs{...}

type AccessLevelBasicOutput 

type AccessLevelBasicOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicOutput) CombiningFunction 

func (o AccessLevelBasicOutput) CombiningFunction() pulumi.StringPtrOutput

How the conditions list should be combined to determine if a request is granted this AccessLevel. If AND is used, each Condition in conditions must be satisfied for the AccessLevel to be applied. If OR is used, at least one Condition in conditions must be satisfied for the AccessLevel to be applied. Default value is `AND`. Possible values are: `AND`, `OR`.

func (AccessLevelBasicOutput) Conditions 

func (o AccessLevelBasicOutput) Conditions() AccessLevelBasicConditionArrayOutput

A set of requirements for the AccessLevel to be granted. Structure is documented below.

func (AccessLevelBasicOutput) ElementType 

func (AccessLevelBasicOutput) ElementType() reflect.Type

func (AccessLevelBasicOutput) ToAccessLevelBasicOutput 

func (o AccessLevelBasicOutput) ToAccessLevelBasicOutput() AccessLevelBasicOutput

func (AccessLevelBasicOutput) ToAccessLevelBasicOutputWithContext 

func (o AccessLevelBasicOutput) ToAccessLevelBasicOutputWithContext(ctx context.Context) AccessLevelBasicOutput

func (AccessLevelBasicOutput) ToAccessLevelBasicPtrOutput 

func (o AccessLevelBasicOutput) ToAccessLevelBasicPtrOutput() AccessLevelBasicPtrOutput

func (AccessLevelBasicOutput) ToAccessLevelBasicPtrOutputWithContext 

func (o AccessLevelBasicOutput) ToAccessLevelBasicPtrOutputWithContext(ctx context.Context) AccessLevelBasicPtrOutput

type AccessLevelBasicPtrInput 

type AccessLevelBasicPtrInput interface {
	pulumi.Input

	ToAccessLevelBasicPtrOutput() AccessLevelBasicPtrOutput
	ToAccessLevelBasicPtrOutputWithContext(context.Context) AccessLevelBasicPtrOutput
}

AccessLevelBasicPtrInput is an input type that accepts AccessLevelBasicArgs, AccessLevelBasicPtr and AccessLevelBasicPtrOutput values. You can construct a concrete instance of `AccessLevelBasicPtrInput` via: 

        AccessLevelBasicArgs{...}

or:

        nil

func AccessLevelBasicPtr 

func AccessLevelBasicPtr(v *AccessLevelBasicArgs) AccessLevelBasicPtrInput

type AccessLevelBasicPtrOutput 

type AccessLevelBasicPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelBasicPtrOutput) CombiningFunction 

func (o AccessLevelBasicPtrOutput) CombiningFunction() pulumi.StringPtrOutput

How the conditions list should be combined to determine if a request is granted this AccessLevel. If AND is used, each Condition in conditions must be satisfied for the AccessLevel to be applied. If OR is used, at least one Condition in conditions must be satisfied for the AccessLevel to be applied. Default value is `AND`. Possible values are: `AND`, `OR`.

func (AccessLevelBasicPtrOutput) Conditions 

func (o AccessLevelBasicPtrOutput) Conditions() AccessLevelBasicConditionArrayOutput

A set of requirements for the AccessLevel to be granted. Structure is documented below.

func (AccessLevelBasicPtrOutput) Elem 

func (o AccessLevelBasicPtrOutput) Elem() AccessLevelBasicOutput

func (AccessLevelBasicPtrOutput) ElementType 

func (AccessLevelBasicPtrOutput) ElementType() reflect.Type

func (AccessLevelBasicPtrOutput) ToAccessLevelBasicPtrOutput 

func (o AccessLevelBasicPtrOutput) ToAccessLevelBasicPtrOutput() AccessLevelBasicPtrOutput

func (AccessLevelBasicPtrOutput) ToAccessLevelBasicPtrOutputWithContext 

func (o AccessLevelBasicPtrOutput) ToAccessLevelBasicPtrOutputWithContext(ctx context.Context) AccessLevelBasicPtrOutput

type AccessLevelCondition 

type AccessLevelCondition struct {
	pulumi.CustomResourceState

	// The name of the Access Level to add this condition to.
	//
	// ***
	AccessLevel pulumi.StringOutput `pulumi:"accessLevel"`
	// Device specific restrictions, all restrictions must hold for
	// the Condition to be true. If not specified, all devices are
	// allowed.
	// Structure is documented below.
	DevicePolicy AccessLevelConditionDevicePolicyPtrOutput `pulumi:"devicePolicy"`
	// A list of CIDR block IP subnetwork specification. May be IPv4
	// or IPv6.
	// Note that for a CIDR IP address block, the specified IP address
	// portion must be properly truncated (i.e. all the host bits must
	// be zero) or the input is considered malformed. For example,
	// "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly,
	// for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32"
	// is not. The originating IP of a request must be in one of the
	// listed subnets in order for this Condition to be true.
	// If empty, all IP addresses are allowed.
	IpSubnetworks pulumi.StringArrayOutput `pulumi:"ipSubnetworks"`
	// An allowed list of members (users, service accounts).
	// Using groups is not supported yet.
	// The signed-in user originating the request must be a part of one
	// of the provided members. If not specified, a request may come
	// from any user (logged in/not logged in, not present in any
	// groups, etc.).
	// Formats: `user:{emailid}`, `serviceAccount:{emailid}`
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// Whether to negate the Condition. If true, the Condition becomes
	// a NAND over its non-empty fields, each field must be false for
	// the Condition overall to be satisfied. Defaults to false.
	Negate pulumi.BoolPtrOutput `pulumi:"negate"`
	// The request must originate from one of the provided
	// countries/regions.
	// Format: A valid ISO 3166-1 alpha-2 code.
	Regions pulumi.StringArrayOutput `pulumi:"regions"`
	// A list of other access levels defined in the same Policy,
	// referenced by resource name. Referencing an AccessLevel which
	// does not exist is an error. All access levels listed must be
	// granted for the Condition to be true.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	RequiredAccessLevels pulumi.StringArrayOutput `pulumi:"requiredAccessLevels"`
	// The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`.
	// Structure is documented below.
	VpcNetworkSources AccessLevelConditionVpcNetworkSourceArrayOutput `pulumi:"vpcNetworkSources"`
}

Allows configuring a single access level condition to be appended to an access level's conditions. This resource is intended to be used in cases where it is not possible to compile a full list of conditions to include in a `accesscontextmanager.AccessLevel` resource, to enable them to be added separately.

> **Note:** If this resource is used alongside a `accesscontextmanager.AccessLevel` resource, the access level resource must have a `lifecycle` block with `ignoreChanges = [basic[0].conditions]` so they don't fight over which service accounts should be included.

To get more information about AccessLevelCondition, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.accessLevels) * How-to Guides

> **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, you must specify a `billingProject` and set `userProjectOverride` to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the `serviceusage.services.use` permission on the `billingProject` you defined.

## Example Usage

### Access Context Manager Access Level Condition Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevel(ctx, "access-level-service-account", &accesscontextmanager.AccessLevelArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("chromeos_no_lock"),
			Basic: &accesscontextmanager.AccessLevelBasicArgs{
				Conditions: accesscontextmanager.AccessLevelBasicConditionArray{
					&accesscontextmanager.AccessLevelBasicConditionArgs{
						DevicePolicy: &accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs{
							RequireScreenLock: pulumi.Bool(true),
							OsConstraints: accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArray{
								&accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs{
									OsType: pulumi.String("DESKTOP_CHROME_OS"),
								},
							},
						},
						Regions: pulumi.StringArray{
							pulumi.String("CH"),
							pulumi.String("IT"),
							pulumi.String("US"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = serviceaccount.NewAccount(ctx, "created-later", &serviceaccount.AccountArgs{
			AccountId: pulumi.String("my-account-id"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevelCondition(ctx, "access-level-conditions", &accesscontextmanager.AccessLevelConditionArgs{
			AccessLevel: access_level_service_account.Name,
			IpSubnetworks: pulumi.StringArray{
				pulumi.String("192.0.4.0/24"),
			},
			Members: pulumi.StringArray{
				pulumi.String("user:test@google.com"),
				pulumi.String("user:test2@google.com"),
				created_later.Email.ApplyT(func(email string) (string, error) {
					return fmt.Sprintf("serviceAccount:%v", email), nil
				}).(pulumi.StringOutput),
			},
			Negate: pulumi.Bool(false),
			DevicePolicy: &accesscontextmanager.AccessLevelConditionDevicePolicyArgs{
				RequireScreenLock:    pulumi.Bool(false),
				RequireAdminApproval: pulumi.Bool(false),
				RequireCorpOwned:     pulumi.Bool(true),
				OsConstraints: accesscontextmanager.AccessLevelConditionDevicePolicyOsConstraintArray{
					&accesscontextmanager.AccessLevelConditionDevicePolicyOsConstraintArgs{
						OsType: pulumi.String("DESKTOP_CHROME_OS"),
					},
				},
			},
			Regions: pulumi.StringArray{
				pulumi.String("IT"),
				pulumi.String("US"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

This resource does not support import.

func GetAccessLevelCondition 

func GetAccessLevelCondition(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessLevelConditionState, opts ...pulumi.ResourceOption) (*AccessLevelCondition, error)

GetAccessLevelCondition gets an existing AccessLevelCondition resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessLevelCondition 

func NewAccessLevelCondition(ctx *pulumi.Context,
	name string, args *AccessLevelConditionArgs, opts ...pulumi.ResourceOption) (*AccessLevelCondition, error)

NewAccessLevelCondition registers a new resource with the given unique name, arguments, and options.

func (*AccessLevelCondition) ElementType 

func (*AccessLevelCondition) ElementType() reflect.Type

func (*AccessLevelCondition) ToAccessLevelConditionOutput 

func (i *AccessLevelCondition) ToAccessLevelConditionOutput() AccessLevelConditionOutput

func (*AccessLevelCondition) ToAccessLevelConditionOutputWithContext 

func (i *AccessLevelCondition) ToAccessLevelConditionOutputWithContext(ctx context.Context) AccessLevelConditionOutput

type AccessLevelConditionArgs 

type AccessLevelConditionArgs struct {
	// The name of the Access Level to add this condition to.
	//
	// ***
	AccessLevel pulumi.StringInput
	// Device specific restrictions, all restrictions must hold for
	// the Condition to be true. If not specified, all devices are
	// allowed.
	// Structure is documented below.
	DevicePolicy AccessLevelConditionDevicePolicyPtrInput
	// A list of CIDR block IP subnetwork specification. May be IPv4
	// or IPv6.
	// Note that for a CIDR IP address block, the specified IP address
	// portion must be properly truncated (i.e. all the host bits must
	// be zero) or the input is considered malformed. For example,
	// "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly,
	// for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32"
	// is not. The originating IP of a request must be in one of the
	// listed subnets in order for this Condition to be true.
	// If empty, all IP addresses are allowed.
	IpSubnetworks pulumi.StringArrayInput
	// An allowed list of members (users, service accounts).
	// Using groups is not supported yet.
	// The signed-in user originating the request must be a part of one
	// of the provided members. If not specified, a request may come
	// from any user (logged in/not logged in, not present in any
	// groups, etc.).
	// Formats: `user:{emailid}`, `serviceAccount:{emailid}`
	Members pulumi.StringArrayInput
	// Whether to negate the Condition. If true, the Condition becomes
	// a NAND over its non-empty fields, each field must be false for
	// the Condition overall to be satisfied. Defaults to false.
	Negate pulumi.BoolPtrInput
	// The request must originate from one of the provided
	// countries/regions.
	// Format: A valid ISO 3166-1 alpha-2 code.
	Regions pulumi.StringArrayInput
	// A list of other access levels defined in the same Policy,
	// referenced by resource name. Referencing an AccessLevel which
	// does not exist is an error. All access levels listed must be
	// granted for the Condition to be true.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	RequiredAccessLevels pulumi.StringArrayInput
	// The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`.
	// Structure is documented below.
	VpcNetworkSources AccessLevelConditionVpcNetworkSourceArrayInput
}

The set of arguments for constructing a AccessLevelCondition resource.

func (AccessLevelConditionArgs) ElementType 

func (AccessLevelConditionArgs) ElementType() reflect.Type

type AccessLevelConditionArray 

type AccessLevelConditionArray []AccessLevelConditionInput

func (AccessLevelConditionArray) ElementType 

func (AccessLevelConditionArray) ElementType() reflect.Type

func (AccessLevelConditionArray) ToAccessLevelConditionArrayOutput 

func (i AccessLevelConditionArray) ToAccessLevelConditionArrayOutput() AccessLevelConditionArrayOutput

func (AccessLevelConditionArray) ToAccessLevelConditionArrayOutputWithContext 

func (i AccessLevelConditionArray) ToAccessLevelConditionArrayOutputWithContext(ctx context.Context) AccessLevelConditionArrayOutput

type AccessLevelConditionArrayInput 

type AccessLevelConditionArrayInput interface {
	pulumi.Input

	ToAccessLevelConditionArrayOutput() AccessLevelConditionArrayOutput
	ToAccessLevelConditionArrayOutputWithContext(context.Context) AccessLevelConditionArrayOutput
}

AccessLevelConditionArrayInput is an input type that accepts AccessLevelConditionArray and AccessLevelConditionArrayOutput values. You can construct a concrete instance of `AccessLevelConditionArrayInput` via: 

AccessLevelConditionArray{ AccessLevelConditionArgs{...} }

type AccessLevelConditionArrayOutput 

type AccessLevelConditionArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionArrayOutput) ElementType 

func (AccessLevelConditionArrayOutput) ElementType() reflect.Type

func (AccessLevelConditionArrayOutput) Index 

func (o AccessLevelConditionArrayOutput) Index(i pulumi.IntInput) AccessLevelConditionOutput

func (AccessLevelConditionArrayOutput) ToAccessLevelConditionArrayOutput 

func (o AccessLevelConditionArrayOutput) ToAccessLevelConditionArrayOutput() AccessLevelConditionArrayOutput

func (AccessLevelConditionArrayOutput) ToAccessLevelConditionArrayOutputWithContext 

func (o AccessLevelConditionArrayOutput) ToAccessLevelConditionArrayOutputWithContext(ctx context.Context) AccessLevelConditionArrayOutput

type AccessLevelConditionDevicePolicy 

type AccessLevelConditionDevicePolicy struct {
	// A list of allowed device management levels.
	// An empty list allows all management levels.
	// Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.
	AllowedDeviceManagementLevels []string `pulumi:"allowedDeviceManagementLevels"`
	// A list of allowed encryptions statuses.
	// An empty list allows all statuses.
	// Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.
	AllowedEncryptionStatuses []string `pulumi:"allowedEncryptionStatuses"`
	// A list of allowed OS versions.
	// An empty list allows all types and all versions.
	// Structure is documented below.
	OsConstraints []AccessLevelConditionDevicePolicyOsConstraint `pulumi:"osConstraints"`
	// Whether the device needs to be approved by the customer admin.
	RequireAdminApproval *bool `pulumi:"requireAdminApproval"`
	// Whether the device needs to be corp owned.
	RequireCorpOwned *bool `pulumi:"requireCorpOwned"`
	// Whether or not screenlock is required for the DevicePolicy
	// to be true. Defaults to false.
	RequireScreenLock *bool `pulumi:"requireScreenLock"`
}

type AccessLevelConditionDevicePolicyArgs 

type AccessLevelConditionDevicePolicyArgs struct {
	// A list of allowed device management levels.
	// An empty list allows all management levels.
	// Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.
	AllowedDeviceManagementLevels pulumi.StringArrayInput `pulumi:"allowedDeviceManagementLevels"`
	// A list of allowed encryptions statuses.
	// An empty list allows all statuses.
	// Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.
	AllowedEncryptionStatuses pulumi.StringArrayInput `pulumi:"allowedEncryptionStatuses"`
	// A list of allowed OS versions.
	// An empty list allows all types and all versions.
	// Structure is documented below.
	OsConstraints AccessLevelConditionDevicePolicyOsConstraintArrayInput `pulumi:"osConstraints"`
	// Whether the device needs to be approved by the customer admin.
	RequireAdminApproval pulumi.BoolPtrInput `pulumi:"requireAdminApproval"`
	// Whether the device needs to be corp owned.
	RequireCorpOwned pulumi.BoolPtrInput `pulumi:"requireCorpOwned"`
	// Whether or not screenlock is required for the DevicePolicy
	// to be true. Defaults to false.
	RequireScreenLock pulumi.BoolPtrInput `pulumi:"requireScreenLock"`
}

func (AccessLevelConditionDevicePolicyArgs) ElementType 

func (AccessLevelConditionDevicePolicyArgs) ElementType() reflect.Type

func (AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyOutput 

func (i AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyOutput() AccessLevelConditionDevicePolicyOutput

func (AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyOutputWithContext 

func (i AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyOutput

func (AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyPtrOutput 

func (i AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyPtrOutput() AccessLevelConditionDevicePolicyPtrOutput

func (AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyPtrOutputWithContext 

func (i AccessLevelConditionDevicePolicyArgs) ToAccessLevelConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyPtrOutput

type AccessLevelConditionDevicePolicyInput 

type AccessLevelConditionDevicePolicyInput interface {
	pulumi.Input

	ToAccessLevelConditionDevicePolicyOutput() AccessLevelConditionDevicePolicyOutput
	ToAccessLevelConditionDevicePolicyOutputWithContext(context.Context) AccessLevelConditionDevicePolicyOutput
}

AccessLevelConditionDevicePolicyInput is an input type that accepts AccessLevelConditionDevicePolicyArgs and AccessLevelConditionDevicePolicyOutput values. You can construct a concrete instance of `AccessLevelConditionDevicePolicyInput` via: 

AccessLevelConditionDevicePolicyArgs{...}

type AccessLevelConditionDevicePolicyOsConstraint 

type AccessLevelConditionDevicePolicyOsConstraint struct {
	// The minimum allowed OS version. If not set, any version
	// of this OS satisfies the constraint.
	// Format: "major.minor.patch" such as "10.5.301", "9.2.1".
	MinimumVersion *string `pulumi:"minimumVersion"`
	// The operating system type of the device.
	// Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.
	OsType string `pulumi:"osType"`
}

type AccessLevelConditionDevicePolicyOsConstraintArgs 

type AccessLevelConditionDevicePolicyOsConstraintArgs struct {
	// The minimum allowed OS version. If not set, any version
	// of this OS satisfies the constraint.
	// Format: "major.minor.patch" such as "10.5.301", "9.2.1".
	MinimumVersion pulumi.StringPtrInput `pulumi:"minimumVersion"`
	// The operating system type of the device.
	// Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.
	OsType pulumi.StringInput `pulumi:"osType"`
}

func (AccessLevelConditionDevicePolicyOsConstraintArgs) ElementType 

func (AccessLevelConditionDevicePolicyOsConstraintArgs) ElementType() reflect.Type

func (AccessLevelConditionDevicePolicyOsConstraintArgs) ToAccessLevelConditionDevicePolicyOsConstraintOutput 

func (i AccessLevelConditionDevicePolicyOsConstraintArgs) ToAccessLevelConditionDevicePolicyOsConstraintOutput() AccessLevelConditionDevicePolicyOsConstraintOutput

func (AccessLevelConditionDevicePolicyOsConstraintArgs) ToAccessLevelConditionDevicePolicyOsConstraintOutputWithContext 

func (i AccessLevelConditionDevicePolicyOsConstraintArgs) ToAccessLevelConditionDevicePolicyOsConstraintOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyOsConstraintOutput

type AccessLevelConditionDevicePolicyOsConstraintArray 

type AccessLevelConditionDevicePolicyOsConstraintArray []AccessLevelConditionDevicePolicyOsConstraintInput

func (AccessLevelConditionDevicePolicyOsConstraintArray) ElementType 

func (AccessLevelConditionDevicePolicyOsConstraintArray) ElementType() reflect.Type

func (AccessLevelConditionDevicePolicyOsConstraintArray) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutput 

func (i AccessLevelConditionDevicePolicyOsConstraintArray) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutput() AccessLevelConditionDevicePolicyOsConstraintArrayOutput

func (AccessLevelConditionDevicePolicyOsConstraintArray) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutputWithContext 

func (i AccessLevelConditionDevicePolicyOsConstraintArray) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyOsConstraintArrayOutput

type AccessLevelConditionDevicePolicyOsConstraintArrayInput 

type AccessLevelConditionDevicePolicyOsConstraintArrayInput interface {
	pulumi.Input

	ToAccessLevelConditionDevicePolicyOsConstraintArrayOutput() AccessLevelConditionDevicePolicyOsConstraintArrayOutput
	ToAccessLevelConditionDevicePolicyOsConstraintArrayOutputWithContext(context.Context) AccessLevelConditionDevicePolicyOsConstraintArrayOutput
}

AccessLevelConditionDevicePolicyOsConstraintArrayInput is an input type that accepts AccessLevelConditionDevicePolicyOsConstraintArray and AccessLevelConditionDevicePolicyOsConstraintArrayOutput values. You can construct a concrete instance of `AccessLevelConditionDevicePolicyOsConstraintArrayInput` via: 

AccessLevelConditionDevicePolicyOsConstraintArray{ AccessLevelConditionDevicePolicyOsConstraintArgs{...} }

type AccessLevelConditionDevicePolicyOsConstraintArrayOutput 

type AccessLevelConditionDevicePolicyOsConstraintArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionDevicePolicyOsConstraintArrayOutput) ElementType 

func (AccessLevelConditionDevicePolicyOsConstraintArrayOutput) ElementType() reflect.Type

func (AccessLevelConditionDevicePolicyOsConstraintArrayOutput) Index 

func (o AccessLevelConditionDevicePolicyOsConstraintArrayOutput) Index(i pulumi.IntInput) AccessLevelConditionDevicePolicyOsConstraintOutput

func (AccessLevelConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutput 

func (o AccessLevelConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutput() AccessLevelConditionDevicePolicyOsConstraintArrayOutput

func (AccessLevelConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutputWithContext 

func (o AccessLevelConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelConditionDevicePolicyOsConstraintArrayOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyOsConstraintArrayOutput

type AccessLevelConditionDevicePolicyOsConstraintInput 

type AccessLevelConditionDevicePolicyOsConstraintInput interface {
	pulumi.Input

	ToAccessLevelConditionDevicePolicyOsConstraintOutput() AccessLevelConditionDevicePolicyOsConstraintOutput
	ToAccessLevelConditionDevicePolicyOsConstraintOutputWithContext(context.Context) AccessLevelConditionDevicePolicyOsConstraintOutput
}

AccessLevelConditionDevicePolicyOsConstraintInput is an input type that accepts AccessLevelConditionDevicePolicyOsConstraintArgs and AccessLevelConditionDevicePolicyOsConstraintOutput values. You can construct a concrete instance of `AccessLevelConditionDevicePolicyOsConstraintInput` via: 

AccessLevelConditionDevicePolicyOsConstraintArgs{...}

type AccessLevelConditionDevicePolicyOsConstraintOutput 

type AccessLevelConditionDevicePolicyOsConstraintOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionDevicePolicyOsConstraintOutput) ElementType 

func (AccessLevelConditionDevicePolicyOsConstraintOutput) ElementType() reflect.Type

func (AccessLevelConditionDevicePolicyOsConstraintOutput) MinimumVersion 

func (o AccessLevelConditionDevicePolicyOsConstraintOutput) MinimumVersion() pulumi.StringPtrOutput

The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".

func (AccessLevelConditionDevicePolicyOsConstraintOutput) OsType 

func (o AccessLevelConditionDevicePolicyOsConstraintOutput) OsType() pulumi.StringOutput

The operating system type of the device. Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.

func (AccessLevelConditionDevicePolicyOsConstraintOutput) ToAccessLevelConditionDevicePolicyOsConstraintOutput 

func (o AccessLevelConditionDevicePolicyOsConstraintOutput) ToAccessLevelConditionDevicePolicyOsConstraintOutput() AccessLevelConditionDevicePolicyOsConstraintOutput

func (AccessLevelConditionDevicePolicyOsConstraintOutput) ToAccessLevelConditionDevicePolicyOsConstraintOutputWithContext 

func (o AccessLevelConditionDevicePolicyOsConstraintOutput) ToAccessLevelConditionDevicePolicyOsConstraintOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyOsConstraintOutput

type AccessLevelConditionDevicePolicyOutput 

type AccessLevelConditionDevicePolicyOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionDevicePolicyOutput) AllowedDeviceManagementLevels 

func (o AccessLevelConditionDevicePolicyOutput) AllowedDeviceManagementLevels() pulumi.StringArrayOutput

A list of allowed device management levels. An empty list allows all management levels. Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.

func (AccessLevelConditionDevicePolicyOutput) AllowedEncryptionStatuses 

func (o AccessLevelConditionDevicePolicyOutput) AllowedEncryptionStatuses() pulumi.StringArrayOutput

A list of allowed encryptions statuses. An empty list allows all statuses. Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.

func (AccessLevelConditionDevicePolicyOutput) ElementType 

func (AccessLevelConditionDevicePolicyOutput) ElementType() reflect.Type

func (AccessLevelConditionDevicePolicyOutput) OsConstraints 

func (o AccessLevelConditionDevicePolicyOutput) OsConstraints() AccessLevelConditionDevicePolicyOsConstraintArrayOutput

A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.

func (AccessLevelConditionDevicePolicyOutput) RequireAdminApproval 

func (o AccessLevelConditionDevicePolicyOutput) RequireAdminApproval() pulumi.BoolPtrOutput

Whether the device needs to be approved by the customer admin.

func (AccessLevelConditionDevicePolicyOutput) RequireCorpOwned 

func (o AccessLevelConditionDevicePolicyOutput) RequireCorpOwned() pulumi.BoolPtrOutput

Whether the device needs to be corp owned.

func (AccessLevelConditionDevicePolicyOutput) RequireScreenLock 

func (o AccessLevelConditionDevicePolicyOutput) RequireScreenLock() pulumi.BoolPtrOutput

Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.

func (AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyOutput 

func (o AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyOutput() AccessLevelConditionDevicePolicyOutput

func (AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyOutputWithContext 

func (o AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyOutput

func (AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyPtrOutput 

func (o AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyPtrOutput() AccessLevelConditionDevicePolicyPtrOutput

func (AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyPtrOutputWithContext 

func (o AccessLevelConditionDevicePolicyOutput) ToAccessLevelConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyPtrOutput

type AccessLevelConditionDevicePolicyPtrInput 

type AccessLevelConditionDevicePolicyPtrInput interface {
	pulumi.Input

	ToAccessLevelConditionDevicePolicyPtrOutput() AccessLevelConditionDevicePolicyPtrOutput
	ToAccessLevelConditionDevicePolicyPtrOutputWithContext(context.Context) AccessLevelConditionDevicePolicyPtrOutput
}

AccessLevelConditionDevicePolicyPtrInput is an input type that accepts AccessLevelConditionDevicePolicyArgs, AccessLevelConditionDevicePolicyPtr and AccessLevelConditionDevicePolicyPtrOutput values. You can construct a concrete instance of `AccessLevelConditionDevicePolicyPtrInput` via: 

        AccessLevelConditionDevicePolicyArgs{...}

or:

        nil

func AccessLevelConditionDevicePolicyPtr 

func AccessLevelConditionDevicePolicyPtr(v *AccessLevelConditionDevicePolicyArgs) AccessLevelConditionDevicePolicyPtrInput

type AccessLevelConditionDevicePolicyPtrOutput 

type AccessLevelConditionDevicePolicyPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionDevicePolicyPtrOutput) AllowedDeviceManagementLevels 

func (o AccessLevelConditionDevicePolicyPtrOutput) AllowedDeviceManagementLevels() pulumi.StringArrayOutput

A list of allowed device management levels. An empty list allows all management levels. Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.

func (AccessLevelConditionDevicePolicyPtrOutput) AllowedEncryptionStatuses 

func (o AccessLevelConditionDevicePolicyPtrOutput) AllowedEncryptionStatuses() pulumi.StringArrayOutput

A list of allowed encryptions statuses. An empty list allows all statuses. Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.

func (AccessLevelConditionDevicePolicyPtrOutput) Elem 

func (o AccessLevelConditionDevicePolicyPtrOutput) Elem() AccessLevelConditionDevicePolicyOutput

func (AccessLevelConditionDevicePolicyPtrOutput) ElementType 

func (AccessLevelConditionDevicePolicyPtrOutput) ElementType() reflect.Type

func (AccessLevelConditionDevicePolicyPtrOutput) OsConstraints 

func (o AccessLevelConditionDevicePolicyPtrOutput) OsConstraints() AccessLevelConditionDevicePolicyOsConstraintArrayOutput

A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.

func (AccessLevelConditionDevicePolicyPtrOutput) RequireAdminApproval 

func (o AccessLevelConditionDevicePolicyPtrOutput) RequireAdminApproval() pulumi.BoolPtrOutput

Whether the device needs to be approved by the customer admin.

func (AccessLevelConditionDevicePolicyPtrOutput) RequireCorpOwned 

func (o AccessLevelConditionDevicePolicyPtrOutput) RequireCorpOwned() pulumi.BoolPtrOutput

Whether the device needs to be corp owned.

func (AccessLevelConditionDevicePolicyPtrOutput) RequireScreenLock 

func (o AccessLevelConditionDevicePolicyPtrOutput) RequireScreenLock() pulumi.BoolPtrOutput

Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.

func (AccessLevelConditionDevicePolicyPtrOutput) ToAccessLevelConditionDevicePolicyPtrOutput 

func (o AccessLevelConditionDevicePolicyPtrOutput) ToAccessLevelConditionDevicePolicyPtrOutput() AccessLevelConditionDevicePolicyPtrOutput

func (AccessLevelConditionDevicePolicyPtrOutput) ToAccessLevelConditionDevicePolicyPtrOutputWithContext 

func (o AccessLevelConditionDevicePolicyPtrOutput) ToAccessLevelConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelConditionDevicePolicyPtrOutput

type AccessLevelConditionInput 

type AccessLevelConditionInput interface {
	pulumi.Input

	ToAccessLevelConditionOutput() AccessLevelConditionOutput
	ToAccessLevelConditionOutputWithContext(ctx context.Context) AccessLevelConditionOutput
}

type AccessLevelConditionMap 

type AccessLevelConditionMap map[string]AccessLevelConditionInput

func (AccessLevelConditionMap) ElementType 

func (AccessLevelConditionMap) ElementType() reflect.Type

func (AccessLevelConditionMap) ToAccessLevelConditionMapOutput 

func (i AccessLevelConditionMap) ToAccessLevelConditionMapOutput() AccessLevelConditionMapOutput

func (AccessLevelConditionMap) ToAccessLevelConditionMapOutputWithContext 

func (i AccessLevelConditionMap) ToAccessLevelConditionMapOutputWithContext(ctx context.Context) AccessLevelConditionMapOutput

type AccessLevelConditionMapInput 

type AccessLevelConditionMapInput interface {
	pulumi.Input

	ToAccessLevelConditionMapOutput() AccessLevelConditionMapOutput
	ToAccessLevelConditionMapOutputWithContext(context.Context) AccessLevelConditionMapOutput
}

AccessLevelConditionMapInput is an input type that accepts AccessLevelConditionMap and AccessLevelConditionMapOutput values. You can construct a concrete instance of `AccessLevelConditionMapInput` via: 

AccessLevelConditionMap{ "key": AccessLevelConditionArgs{...} }

type AccessLevelConditionMapOutput 

type AccessLevelConditionMapOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionMapOutput) ElementType 

func (AccessLevelConditionMapOutput) ElementType() reflect.Type

func (AccessLevelConditionMapOutput) MapIndex 

func (o AccessLevelConditionMapOutput) MapIndex(k pulumi.StringInput) AccessLevelConditionOutput

func (AccessLevelConditionMapOutput) ToAccessLevelConditionMapOutput 

func (o AccessLevelConditionMapOutput) ToAccessLevelConditionMapOutput() AccessLevelConditionMapOutput

func (AccessLevelConditionMapOutput) ToAccessLevelConditionMapOutputWithContext 

func (o AccessLevelConditionMapOutput) ToAccessLevelConditionMapOutputWithContext(ctx context.Context) AccessLevelConditionMapOutput

type AccessLevelConditionOutput 

type AccessLevelConditionOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionOutput) AccessLevel 

func (o AccessLevelConditionOutput) AccessLevel() pulumi.StringOutput

The name of the Access Level to add this condition to.

***

func (AccessLevelConditionOutput) DevicePolicy 

func (o AccessLevelConditionOutput) DevicePolicy() AccessLevelConditionDevicePolicyPtrOutput

Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.

func (AccessLevelConditionOutput) ElementType 

func (AccessLevelConditionOutput) ElementType() reflect.Type

func (AccessLevelConditionOutput) IpSubnetworks 

func (o AccessLevelConditionOutput) IpSubnetworks() pulumi.StringArrayOutput

A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.

func (AccessLevelConditionOutput) Members 

func (o AccessLevelConditionOutput) Members() pulumi.StringArrayOutput

An allowed list of members (users, service accounts). Using groups is not supported yet. The signed-in user originating the request must be a part of one of the provided members. If not specified, a request may come from any user (logged in/not logged in, not present in any groups, etc.). Formats: `user:{emailid}`, `serviceAccount:{emailid}`

func (AccessLevelConditionOutput) Negate 

func (o AccessLevelConditionOutput) Negate() pulumi.BoolPtrOutput

Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.

func (AccessLevelConditionOutput) Regions 

func (o AccessLevelConditionOutput) Regions() pulumi.StringArrayOutput

The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.

func (AccessLevelConditionOutput) RequiredAccessLevels 

func (o AccessLevelConditionOutput) RequiredAccessLevels() pulumi.StringArrayOutput

A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}

func (AccessLevelConditionOutput) ToAccessLevelConditionOutput 

func (o AccessLevelConditionOutput) ToAccessLevelConditionOutput() AccessLevelConditionOutput

func (AccessLevelConditionOutput) ToAccessLevelConditionOutputWithContext 

func (o AccessLevelConditionOutput) ToAccessLevelConditionOutputWithContext(ctx context.Context) AccessLevelConditionOutput

func (AccessLevelConditionOutput) VpcNetworkSources 

func (o AccessLevelConditionOutput) VpcNetworkSources() AccessLevelConditionVpcNetworkSourceArrayOutput

The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`. Structure is documented below.

type AccessLevelConditionState 

type AccessLevelConditionState struct {
	// The name of the Access Level to add this condition to.
	//
	// ***
	AccessLevel pulumi.StringPtrInput
	// Device specific restrictions, all restrictions must hold for
	// the Condition to be true. If not specified, all devices are
	// allowed.
	// Structure is documented below.
	DevicePolicy AccessLevelConditionDevicePolicyPtrInput
	// A list of CIDR block IP subnetwork specification. May be IPv4
	// or IPv6.
	// Note that for a CIDR IP address block, the specified IP address
	// portion must be properly truncated (i.e. all the host bits must
	// be zero) or the input is considered malformed. For example,
	// "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly,
	// for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32"
	// is not. The originating IP of a request must be in one of the
	// listed subnets in order for this Condition to be true.
	// If empty, all IP addresses are allowed.
	IpSubnetworks pulumi.StringArrayInput
	// An allowed list of members (users, service accounts).
	// Using groups is not supported yet.
	// The signed-in user originating the request must be a part of one
	// of the provided members. If not specified, a request may come
	// from any user (logged in/not logged in, not present in any
	// groups, etc.).
	// Formats: `user:{emailid}`, `serviceAccount:{emailid}`
	Members pulumi.StringArrayInput
	// Whether to negate the Condition. If true, the Condition becomes
	// a NAND over its non-empty fields, each field must be false for
	// the Condition overall to be satisfied. Defaults to false.
	Negate pulumi.BoolPtrInput
	// The request must originate from one of the provided
	// countries/regions.
	// Format: A valid ISO 3166-1 alpha-2 code.
	Regions pulumi.StringArrayInput
	// A list of other access levels defined in the same Policy,
	// referenced by resource name. Referencing an AccessLevel which
	// does not exist is an error. All access levels listed must be
	// granted for the Condition to be true.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	RequiredAccessLevels pulumi.StringArrayInput
	// The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`.
	// Structure is documented below.
	VpcNetworkSources AccessLevelConditionVpcNetworkSourceArrayInput
}

func (AccessLevelConditionState) ElementType 

func (AccessLevelConditionState) ElementType() reflect.Type

type AccessLevelConditionVpcNetworkSource 

type AccessLevelConditionVpcNetworkSource struct {
	// Sub networks within a VPC network.
	// Structure is documented below.
	VpcSubnetwork *AccessLevelConditionVpcNetworkSourceVpcSubnetwork `pulumi:"vpcSubnetwork"`
}

type AccessLevelConditionVpcNetworkSourceArgs 

type AccessLevelConditionVpcNetworkSourceArgs struct {
	// Sub networks within a VPC network.
	// Structure is documented below.
	VpcSubnetwork AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrInput `pulumi:"vpcSubnetwork"`
}

func (AccessLevelConditionVpcNetworkSourceArgs) ElementType 

func (AccessLevelConditionVpcNetworkSourceArgs) ElementType() reflect.Type

func (AccessLevelConditionVpcNetworkSourceArgs) ToAccessLevelConditionVpcNetworkSourceOutput 

func (i AccessLevelConditionVpcNetworkSourceArgs) ToAccessLevelConditionVpcNetworkSourceOutput() AccessLevelConditionVpcNetworkSourceOutput

func (AccessLevelConditionVpcNetworkSourceArgs) ToAccessLevelConditionVpcNetworkSourceOutputWithContext 

func (i AccessLevelConditionVpcNetworkSourceArgs) ToAccessLevelConditionVpcNetworkSourceOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceOutput

type AccessLevelConditionVpcNetworkSourceArray 

type AccessLevelConditionVpcNetworkSourceArray []AccessLevelConditionVpcNetworkSourceInput

func (AccessLevelConditionVpcNetworkSourceArray) ElementType 

func (AccessLevelConditionVpcNetworkSourceArray) ElementType() reflect.Type

func (AccessLevelConditionVpcNetworkSourceArray) ToAccessLevelConditionVpcNetworkSourceArrayOutput 

func (i AccessLevelConditionVpcNetworkSourceArray) ToAccessLevelConditionVpcNetworkSourceArrayOutput() AccessLevelConditionVpcNetworkSourceArrayOutput

func (AccessLevelConditionVpcNetworkSourceArray) ToAccessLevelConditionVpcNetworkSourceArrayOutputWithContext 

func (i AccessLevelConditionVpcNetworkSourceArray) ToAccessLevelConditionVpcNetworkSourceArrayOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceArrayOutput

type AccessLevelConditionVpcNetworkSourceArrayInput 

type AccessLevelConditionVpcNetworkSourceArrayInput interface {
	pulumi.Input

	ToAccessLevelConditionVpcNetworkSourceArrayOutput() AccessLevelConditionVpcNetworkSourceArrayOutput
	ToAccessLevelConditionVpcNetworkSourceArrayOutputWithContext(context.Context) AccessLevelConditionVpcNetworkSourceArrayOutput
}

AccessLevelConditionVpcNetworkSourceArrayInput is an input type that accepts AccessLevelConditionVpcNetworkSourceArray and AccessLevelConditionVpcNetworkSourceArrayOutput values. You can construct a concrete instance of `AccessLevelConditionVpcNetworkSourceArrayInput` via: 

AccessLevelConditionVpcNetworkSourceArray{ AccessLevelConditionVpcNetworkSourceArgs{...} }

type AccessLevelConditionVpcNetworkSourceArrayOutput 

type AccessLevelConditionVpcNetworkSourceArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionVpcNetworkSourceArrayOutput) ElementType 

func (AccessLevelConditionVpcNetworkSourceArrayOutput) ElementType() reflect.Type

func (AccessLevelConditionVpcNetworkSourceArrayOutput) Index 

func (o AccessLevelConditionVpcNetworkSourceArrayOutput) Index(i pulumi.IntInput) AccessLevelConditionVpcNetworkSourceOutput

func (AccessLevelConditionVpcNetworkSourceArrayOutput) ToAccessLevelConditionVpcNetworkSourceArrayOutput 

func (o AccessLevelConditionVpcNetworkSourceArrayOutput) ToAccessLevelConditionVpcNetworkSourceArrayOutput() AccessLevelConditionVpcNetworkSourceArrayOutput

func (AccessLevelConditionVpcNetworkSourceArrayOutput) ToAccessLevelConditionVpcNetworkSourceArrayOutputWithContext 

func (o AccessLevelConditionVpcNetworkSourceArrayOutput) ToAccessLevelConditionVpcNetworkSourceArrayOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceArrayOutput

type AccessLevelConditionVpcNetworkSourceInput 

type AccessLevelConditionVpcNetworkSourceInput interface {
	pulumi.Input

	ToAccessLevelConditionVpcNetworkSourceOutput() AccessLevelConditionVpcNetworkSourceOutput
	ToAccessLevelConditionVpcNetworkSourceOutputWithContext(context.Context) AccessLevelConditionVpcNetworkSourceOutput
}

AccessLevelConditionVpcNetworkSourceInput is an input type that accepts AccessLevelConditionVpcNetworkSourceArgs and AccessLevelConditionVpcNetworkSourceOutput values. You can construct a concrete instance of `AccessLevelConditionVpcNetworkSourceInput` via: 

AccessLevelConditionVpcNetworkSourceArgs{...}

type AccessLevelConditionVpcNetworkSourceOutput 

type AccessLevelConditionVpcNetworkSourceOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionVpcNetworkSourceOutput) ElementType 

func (AccessLevelConditionVpcNetworkSourceOutput) ElementType() reflect.Type

func (AccessLevelConditionVpcNetworkSourceOutput) ToAccessLevelConditionVpcNetworkSourceOutput 

func (o AccessLevelConditionVpcNetworkSourceOutput) ToAccessLevelConditionVpcNetworkSourceOutput() AccessLevelConditionVpcNetworkSourceOutput

func (AccessLevelConditionVpcNetworkSourceOutput) ToAccessLevelConditionVpcNetworkSourceOutputWithContext 

func (o AccessLevelConditionVpcNetworkSourceOutput) ToAccessLevelConditionVpcNetworkSourceOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceOutput

func (AccessLevelConditionVpcNetworkSourceOutput) VpcSubnetwork 

func (o AccessLevelConditionVpcNetworkSourceOutput) VpcSubnetwork() AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput

Sub networks within a VPC network. Structure is documented below.

type AccessLevelConditionVpcNetworkSourceVpcSubnetwork 

type AccessLevelConditionVpcNetworkSourceVpcSubnetwork struct {
	// Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.
	Network string `pulumi:"network"`
	// CIDR block IP subnetwork specification. Must be IPv4.
	VpcIpSubnetworks []string `pulumi:"vpcIpSubnetworks"`
}

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs 

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs struct {
	// Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.
	Network pulumi.StringInput `pulumi:"network"`
	// CIDR block IP subnetwork specification. Must be IPv4.
	VpcIpSubnetworks pulumi.StringArrayInput `pulumi:"vpcIpSubnetworks"`
}

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ElementType 

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ElementType() reflect.Type

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput 

func (i AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutputWithContext 

func (i AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (i AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (i AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkInput 

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkInput interface {
	pulumi.Input

	ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput
	ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(context.Context) AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput
}

AccessLevelConditionVpcNetworkSourceVpcSubnetworkInput is an input type that accepts AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs and AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput values. You can construct a concrete instance of `AccessLevelConditionVpcNetworkSourceVpcSubnetworkInput` via: 

AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs{...}

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput 

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ElementType 

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ElementType() reflect.Type

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) Network 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) Network() pulumi.StringOutput

Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutputWithContext 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) VpcIpSubnetworks 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput) VpcIpSubnetworks() pulumi.StringArrayOutput

CIDR block IP subnetwork specification. Must be IPv4.

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrInput 

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrInput interface {
	pulumi.Input

	ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput
	ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(context.Context) AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput
}

AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrInput is an input type that accepts AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs, AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtr and AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput values. You can construct a concrete instance of `AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrInput` via: 

        AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs{...}

or:

        nil

func AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtr 

func AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtr(v *AccessLevelConditionVpcNetworkSourceVpcSubnetworkArgs) AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrInput

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

type AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Elem 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Elem() AccessLevelConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ElementType 

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ElementType() reflect.Type

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Network 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Network() pulumi.StringPtrOutput

Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) VpcIpSubnetworks 

func (o AccessLevelConditionVpcNetworkSourceVpcSubnetworkPtrOutput) VpcIpSubnetworks() pulumi.StringArrayOutput

CIDR block IP subnetwork specification. Must be IPv4.

type AccessLevelCustom 

type AccessLevelCustom struct {
	// Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
	// This page details the objects and attributes that are used to the build the CEL expressions for
	// custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
	// Structure is documented below.
	Expr AccessLevelCustomExpr `pulumi:"expr"`
}

type AccessLevelCustomArgs 

type AccessLevelCustomArgs struct {
	// Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
	// This page details the objects and attributes that are used to the build the CEL expressions for
	// custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
	// Structure is documented below.
	Expr AccessLevelCustomExprInput `pulumi:"expr"`
}

func (AccessLevelCustomArgs) ElementType 

func (AccessLevelCustomArgs) ElementType() reflect.Type

func (AccessLevelCustomArgs) ToAccessLevelCustomOutput 

func (i AccessLevelCustomArgs) ToAccessLevelCustomOutput() AccessLevelCustomOutput

func (AccessLevelCustomArgs) ToAccessLevelCustomOutputWithContext 

func (i AccessLevelCustomArgs) ToAccessLevelCustomOutputWithContext(ctx context.Context) AccessLevelCustomOutput

func (AccessLevelCustomArgs) ToAccessLevelCustomPtrOutput 

func (i AccessLevelCustomArgs) ToAccessLevelCustomPtrOutput() AccessLevelCustomPtrOutput

func (AccessLevelCustomArgs) ToAccessLevelCustomPtrOutputWithContext 

func (i AccessLevelCustomArgs) ToAccessLevelCustomPtrOutputWithContext(ctx context.Context) AccessLevelCustomPtrOutput

type AccessLevelCustomExpr 

type AccessLevelCustomExpr struct {
	// Description of the expression
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
	Location *string `pulumi:"location"`
	// Title for the expression, i.e. a short string describing its purpose.
	Title *string `pulumi:"title"`
}

type AccessLevelCustomExprArgs 

type AccessLevelCustomExprArgs struct {
	// Description of the expression
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

func (AccessLevelCustomExprArgs) ElementType 

func (AccessLevelCustomExprArgs) ElementType() reflect.Type

func (AccessLevelCustomExprArgs) ToAccessLevelCustomExprOutput 

func (i AccessLevelCustomExprArgs) ToAccessLevelCustomExprOutput() AccessLevelCustomExprOutput

func (AccessLevelCustomExprArgs) ToAccessLevelCustomExprOutputWithContext 

func (i AccessLevelCustomExprArgs) ToAccessLevelCustomExprOutputWithContext(ctx context.Context) AccessLevelCustomExprOutput

func (AccessLevelCustomExprArgs) ToAccessLevelCustomExprPtrOutput 

func (i AccessLevelCustomExprArgs) ToAccessLevelCustomExprPtrOutput() AccessLevelCustomExprPtrOutput

func (AccessLevelCustomExprArgs) ToAccessLevelCustomExprPtrOutputWithContext 

func (i AccessLevelCustomExprArgs) ToAccessLevelCustomExprPtrOutputWithContext(ctx context.Context) AccessLevelCustomExprPtrOutput

type AccessLevelCustomExprInput 

type AccessLevelCustomExprInput interface {
	pulumi.Input

	ToAccessLevelCustomExprOutput() AccessLevelCustomExprOutput
	ToAccessLevelCustomExprOutputWithContext(context.Context) AccessLevelCustomExprOutput
}

AccessLevelCustomExprInput is an input type that accepts AccessLevelCustomExprArgs and AccessLevelCustomExprOutput values. You can construct a concrete instance of `AccessLevelCustomExprInput` via: 

AccessLevelCustomExprArgs{...}

type AccessLevelCustomExprOutput 

type AccessLevelCustomExprOutput struct{ *pulumi.OutputState }

func (AccessLevelCustomExprOutput) Description 

func (o AccessLevelCustomExprOutput) Description() pulumi.StringPtrOutput

Description of the expression

func (AccessLevelCustomExprOutput) ElementType 

func (AccessLevelCustomExprOutput) ElementType() reflect.Type

func (AccessLevelCustomExprOutput) Expression 

func (o AccessLevelCustomExprOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (AccessLevelCustomExprOutput) Location 

func (o AccessLevelCustomExprOutput) Location() pulumi.StringPtrOutput

String indicating the location of the expression for error reporting, e.g. a file name and a position in the file

func (AccessLevelCustomExprOutput) Title 

func (o AccessLevelCustomExprOutput) Title() pulumi.StringPtrOutput

Title for the expression, i.e. a short string describing its purpose.

func (AccessLevelCustomExprOutput) ToAccessLevelCustomExprOutput 

func (o AccessLevelCustomExprOutput) ToAccessLevelCustomExprOutput() AccessLevelCustomExprOutput

func (AccessLevelCustomExprOutput) ToAccessLevelCustomExprOutputWithContext 

func (o AccessLevelCustomExprOutput) ToAccessLevelCustomExprOutputWithContext(ctx context.Context) AccessLevelCustomExprOutput

func (AccessLevelCustomExprOutput) ToAccessLevelCustomExprPtrOutput 

func (o AccessLevelCustomExprOutput) ToAccessLevelCustomExprPtrOutput() AccessLevelCustomExprPtrOutput

func (AccessLevelCustomExprOutput) ToAccessLevelCustomExprPtrOutputWithContext 

func (o AccessLevelCustomExprOutput) ToAccessLevelCustomExprPtrOutputWithContext(ctx context.Context) AccessLevelCustomExprPtrOutput

type AccessLevelCustomExprPtrInput 

type AccessLevelCustomExprPtrInput interface {
	pulumi.Input

	ToAccessLevelCustomExprPtrOutput() AccessLevelCustomExprPtrOutput
	ToAccessLevelCustomExprPtrOutputWithContext(context.Context) AccessLevelCustomExprPtrOutput
}

AccessLevelCustomExprPtrInput is an input type that accepts AccessLevelCustomExprArgs, AccessLevelCustomExprPtr and AccessLevelCustomExprPtrOutput values. You can construct a concrete instance of `AccessLevelCustomExprPtrInput` via: 

        AccessLevelCustomExprArgs{...}

or:

        nil

func AccessLevelCustomExprPtr 

func AccessLevelCustomExprPtr(v *AccessLevelCustomExprArgs) AccessLevelCustomExprPtrInput

type AccessLevelCustomExprPtrOutput 

type AccessLevelCustomExprPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelCustomExprPtrOutput) Description 

func (o AccessLevelCustomExprPtrOutput) Description() pulumi.StringPtrOutput

Description of the expression

func (AccessLevelCustomExprPtrOutput) Elem 

func (o AccessLevelCustomExprPtrOutput) Elem() AccessLevelCustomExprOutput

func (AccessLevelCustomExprPtrOutput) ElementType 

func (AccessLevelCustomExprPtrOutput) ElementType() reflect.Type

func (AccessLevelCustomExprPtrOutput) Expression 

func (o AccessLevelCustomExprPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (AccessLevelCustomExprPtrOutput) Location 

func (o AccessLevelCustomExprPtrOutput) Location() pulumi.StringPtrOutput

String indicating the location of the expression for error reporting, e.g. a file name and a position in the file

func (AccessLevelCustomExprPtrOutput) Title 

func (o AccessLevelCustomExprPtrOutput) Title() pulumi.StringPtrOutput

Title for the expression, i.e. a short string describing its purpose.

func (AccessLevelCustomExprPtrOutput) ToAccessLevelCustomExprPtrOutput 

func (o AccessLevelCustomExprPtrOutput) ToAccessLevelCustomExprPtrOutput() AccessLevelCustomExprPtrOutput

func (AccessLevelCustomExprPtrOutput) ToAccessLevelCustomExprPtrOutputWithContext 

func (o AccessLevelCustomExprPtrOutput) ToAccessLevelCustomExprPtrOutputWithContext(ctx context.Context) AccessLevelCustomExprPtrOutput

type AccessLevelCustomInput 

type AccessLevelCustomInput interface {
	pulumi.Input

	ToAccessLevelCustomOutput() AccessLevelCustomOutput
	ToAccessLevelCustomOutputWithContext(context.Context) AccessLevelCustomOutput
}

AccessLevelCustomInput is an input type that accepts AccessLevelCustomArgs and AccessLevelCustomOutput values. You can construct a concrete instance of `AccessLevelCustomInput` via: 

AccessLevelCustomArgs{...}

type AccessLevelCustomOutput 

type AccessLevelCustomOutput struct{ *pulumi.OutputState }

func (AccessLevelCustomOutput) ElementType 

func (AccessLevelCustomOutput) ElementType() reflect.Type

func (AccessLevelCustomOutput) Expr 

func (o AccessLevelCustomOutput) Expr() AccessLevelCustomExprOutput

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.

func (AccessLevelCustomOutput) ToAccessLevelCustomOutput 

func (o AccessLevelCustomOutput) ToAccessLevelCustomOutput() AccessLevelCustomOutput

func (AccessLevelCustomOutput) ToAccessLevelCustomOutputWithContext 

func (o AccessLevelCustomOutput) ToAccessLevelCustomOutputWithContext(ctx context.Context) AccessLevelCustomOutput

func (AccessLevelCustomOutput) ToAccessLevelCustomPtrOutput 

func (o AccessLevelCustomOutput) ToAccessLevelCustomPtrOutput() AccessLevelCustomPtrOutput

func (AccessLevelCustomOutput) ToAccessLevelCustomPtrOutputWithContext 

func (o AccessLevelCustomOutput) ToAccessLevelCustomPtrOutputWithContext(ctx context.Context) AccessLevelCustomPtrOutput

type AccessLevelCustomPtrInput 

type AccessLevelCustomPtrInput interface {
	pulumi.Input

	ToAccessLevelCustomPtrOutput() AccessLevelCustomPtrOutput
	ToAccessLevelCustomPtrOutputWithContext(context.Context) AccessLevelCustomPtrOutput
}

AccessLevelCustomPtrInput is an input type that accepts AccessLevelCustomArgs, AccessLevelCustomPtr and AccessLevelCustomPtrOutput values. You can construct a concrete instance of `AccessLevelCustomPtrInput` via: 

        AccessLevelCustomArgs{...}

or:

        nil

func AccessLevelCustomPtr 

func AccessLevelCustomPtr(v *AccessLevelCustomArgs) AccessLevelCustomPtrInput

type AccessLevelCustomPtrOutput 

type AccessLevelCustomPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelCustomPtrOutput) Elem 

func (o AccessLevelCustomPtrOutput) Elem() AccessLevelCustomOutput

func (AccessLevelCustomPtrOutput) ElementType 

func (AccessLevelCustomPtrOutput) ElementType() reflect.Type

func (AccessLevelCustomPtrOutput) Expr 

func (o AccessLevelCustomPtrOutput) Expr() AccessLevelCustomExprPtrOutput

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.

func (AccessLevelCustomPtrOutput) ToAccessLevelCustomPtrOutput 

func (o AccessLevelCustomPtrOutput) ToAccessLevelCustomPtrOutput() AccessLevelCustomPtrOutput

func (AccessLevelCustomPtrOutput) ToAccessLevelCustomPtrOutputWithContext 

func (o AccessLevelCustomPtrOutput) ToAccessLevelCustomPtrOutputWithContext(ctx context.Context) AccessLevelCustomPtrOutput

type AccessLevelInput 

type AccessLevelInput interface {
	pulumi.Input

	ToAccessLevelOutput() AccessLevelOutput
	ToAccessLevelOutputWithContext(ctx context.Context) AccessLevelOutput
}

type AccessLevelMap 

type AccessLevelMap map[string]AccessLevelInput

func (AccessLevelMap) ElementType 

func (AccessLevelMap) ElementType() reflect.Type

func (AccessLevelMap) ToAccessLevelMapOutput 

func (i AccessLevelMap) ToAccessLevelMapOutput() AccessLevelMapOutput

func (AccessLevelMap) ToAccessLevelMapOutputWithContext 

func (i AccessLevelMap) ToAccessLevelMapOutputWithContext(ctx context.Context) AccessLevelMapOutput

type AccessLevelMapInput 

type AccessLevelMapInput interface {
	pulumi.Input

	ToAccessLevelMapOutput() AccessLevelMapOutput
	ToAccessLevelMapOutputWithContext(context.Context) AccessLevelMapOutput
}

AccessLevelMapInput is an input type that accepts AccessLevelMap and AccessLevelMapOutput values. You can construct a concrete instance of `AccessLevelMapInput` via: 

AccessLevelMap{ "key": AccessLevelArgs{...} }

type AccessLevelMapOutput 

type AccessLevelMapOutput struct{ *pulumi.OutputState }

func (AccessLevelMapOutput) ElementType 

func (AccessLevelMapOutput) ElementType() reflect.Type

func (AccessLevelMapOutput) MapIndex 

func (o AccessLevelMapOutput) MapIndex(k pulumi.StringInput) AccessLevelOutput

func (AccessLevelMapOutput) ToAccessLevelMapOutput 

func (o AccessLevelMapOutput) ToAccessLevelMapOutput() AccessLevelMapOutput

func (AccessLevelMapOutput) ToAccessLevelMapOutputWithContext 

func (o AccessLevelMapOutput) ToAccessLevelMapOutputWithContext(ctx context.Context) AccessLevelMapOutput

type AccessLevelOutput 

type AccessLevelOutput struct{ *pulumi.OutputState }

func (AccessLevelOutput) Basic 

func (o AccessLevelOutput) Basic() AccessLevelBasicPtrOutput

A set of predefined conditions for the access level and a combining function. Structure is documented below.

func (AccessLevelOutput) Custom 

func (o AccessLevelOutput) Custom() AccessLevelCustomPtrOutput

Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.

func (AccessLevelOutput) Description 

func (o AccessLevelOutput) Description() pulumi.StringPtrOutput

Description of the AccessLevel and its use. Does not affect behavior.

func (AccessLevelOutput) ElementType 

func (AccessLevelOutput) ElementType() reflect.Type

func (AccessLevelOutput) Name 

func (o AccessLevelOutput) Name() pulumi.StringOutput

Resource name for the Access Level. The shortName component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}

***

func (AccessLevelOutput) Parent 

func (o AccessLevelOutput) Parent() pulumi.StringOutput

The AccessPolicy this AccessLevel lives in. Format: accessPolicies/{policy_id}

func (AccessLevelOutput) Title 

func (o AccessLevelOutput) Title() pulumi.StringOutput

Human readable title. Must be unique within the Policy.

func (AccessLevelOutput) ToAccessLevelOutput 

func (o AccessLevelOutput) ToAccessLevelOutput() AccessLevelOutput

func (AccessLevelOutput) ToAccessLevelOutputWithContext 

func (o AccessLevelOutput) ToAccessLevelOutputWithContext(ctx context.Context) AccessLevelOutput

type AccessLevelState 

type AccessLevelState struct {
	// A set of predefined conditions for the access level and a combining function.
	// Structure is documented below.
	Basic AccessLevelBasicPtrInput
	// Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request.
	// See CEL spec at: https://github.com/google/cel-spec.
	// Structure is documented below.
	Custom AccessLevelCustomPtrInput
	// Description of the AccessLevel and its use. Does not affect behavior.
	Description pulumi.StringPtrInput
	// Resource name for the Access Level. The shortName component must begin
	// with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	//
	// ***
	Name pulumi.StringPtrInput
	// The AccessPolicy this AccessLevel lives in.
	// Format: accessPolicies/{policy_id}
	Parent pulumi.StringPtrInput
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringPtrInput
}

func (AccessLevelState) ElementType 

func (AccessLevelState) ElementType() reflect.Type

type AccessLevels 

type AccessLevels struct {
	pulumi.CustomResourceState

	// The desired Access Levels that should replace all existing Access Levels in the Access Policy.
	// Structure is documented below.
	AccessLevels AccessLevelsAccessLevelArrayOutput `pulumi:"accessLevels"`
	// The AccessPolicy this AccessLevel lives in.
	// Format: accessPolicies/{policy_id}
	//
	// ***
	Parent pulumi.StringOutput `pulumi:"parent"`
}

## Example Usage

### Access Context Manager Access Levels Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevels(ctx, "access-levels", &accesscontextmanager.AccessLevelsArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			AccessLevels: accesscontextmanager.AccessLevelsAccessLevelArray{
				&accesscontextmanager.AccessLevelsAccessLevelArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String("chromeos_no_lock"),
					Basic: &accesscontextmanager.AccessLevelsAccessLevelBasicArgs{
						Conditions: accesscontextmanager.AccessLevelsAccessLevelBasicConditionArray{
							&accesscontextmanager.AccessLevelsAccessLevelBasicConditionArgs{
								DevicePolicy: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{
									RequireScreenLock: pulumi.Bool(true),
									OsConstraints: accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{
										&accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{
											OsType: pulumi.String("DESKTOP_CHROME_OS"),
										},
									},
								},
								Regions: pulumi.StringArray{
									pulumi.String("CH"),
									pulumi.String("IT"),
									pulumi.String("US"),
								},
							},
						},
					},
				},
				&accesscontextmanager.AccessLevelsAccessLevelArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/accessLevels/mac_no_lock", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String("mac_no_lock"),
					Basic: &accesscontextmanager.AccessLevelsAccessLevelBasicArgs{
						Conditions: accesscontextmanager.AccessLevelsAccessLevelBasicConditionArray{
							&accesscontextmanager.AccessLevelsAccessLevelBasicConditionArgs{
								DevicePolicy: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{
									RequireScreenLock: pulumi.Bool(true),
									OsConstraints: accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{
										&accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{
											OsType: pulumi.String("DESKTOP_MAC"),
										},
									},
								},
								Regions: pulumi.StringArray{
									pulumi.String("CH"),
									pulumi.String("IT"),
									pulumi.String("US"),
								},
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

AccessLevels can be imported using any of these accepted formats:

* `{{parent}}/accessLevels`

* `{{parent}}`

When using the `pulumi import` command, AccessLevels can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/accessLevels:AccessLevels default {{parent}}/accessLevels ```

```sh $ pulumi import gcp:accesscontextmanager/accessLevels:AccessLevels default {{parent}} ```

func GetAccessLevels 

func GetAccessLevels(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessLevelsState, opts ...pulumi.ResourceOption) (*AccessLevels, error)

GetAccessLevels gets an existing AccessLevels resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessLevels 

func NewAccessLevels(ctx *pulumi.Context,
	name string, args *AccessLevelsArgs, opts ...pulumi.ResourceOption) (*AccessLevels, error)

NewAccessLevels registers a new resource with the given unique name, arguments, and options.

func (*AccessLevels) ElementType 

func (*AccessLevels) ElementType() reflect.Type

func (*AccessLevels) ToAccessLevelsOutput 

func (i *AccessLevels) ToAccessLevelsOutput() AccessLevelsOutput

func (*AccessLevels) ToAccessLevelsOutputWithContext 

func (i *AccessLevels) ToAccessLevelsOutputWithContext(ctx context.Context) AccessLevelsOutput

type AccessLevelsAccessLevel 

type AccessLevelsAccessLevel struct {
	// A set of predefined conditions for the access level and a combining function.
	// Structure is documented below.
	Basic *AccessLevelsAccessLevelBasic `pulumi:"basic"`
	// Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request.
	// See CEL spec at: https://github.com/google/cel-spec.
	// Structure is documented below.
	Custom *AccessLevelsAccessLevelCustom `pulumi:"custom"`
	// Description of the AccessLevel and its use. Does not affect behavior.
	Description *string `pulumi:"description"`
	// Resource name for the Access Level. The shortName component must begin
	// with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	Name string `pulumi:"name"`
	// Human readable title. Must be unique within the Policy.
	Title string `pulumi:"title"`
}

type AccessLevelsAccessLevelArgs 

type AccessLevelsAccessLevelArgs struct {
	// A set of predefined conditions for the access level and a combining function.
	// Structure is documented below.
	Basic AccessLevelsAccessLevelBasicPtrInput `pulumi:"basic"`
	// Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request.
	// See CEL spec at: https://github.com/google/cel-spec.
	// Structure is documented below.
	Custom AccessLevelsAccessLevelCustomPtrInput `pulumi:"custom"`
	// Description of the AccessLevel and its use. Does not affect behavior.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Resource name for the Access Level. The shortName component must begin
	// with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	Name pulumi.StringInput `pulumi:"name"`
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringInput `pulumi:"title"`
}

func (AccessLevelsAccessLevelArgs) ElementType 

func (AccessLevelsAccessLevelArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelArgs) ToAccessLevelsAccessLevelOutput 

func (i AccessLevelsAccessLevelArgs) ToAccessLevelsAccessLevelOutput() AccessLevelsAccessLevelOutput

func (AccessLevelsAccessLevelArgs) ToAccessLevelsAccessLevelOutputWithContext 

func (i AccessLevelsAccessLevelArgs) ToAccessLevelsAccessLevelOutputWithContext(ctx context.Context) AccessLevelsAccessLevelOutput

type AccessLevelsAccessLevelArray 

type AccessLevelsAccessLevelArray []AccessLevelsAccessLevelInput

func (AccessLevelsAccessLevelArray) ElementType 

func (AccessLevelsAccessLevelArray) ElementType() reflect.Type

func (AccessLevelsAccessLevelArray) ToAccessLevelsAccessLevelArrayOutput 

func (i AccessLevelsAccessLevelArray) ToAccessLevelsAccessLevelArrayOutput() AccessLevelsAccessLevelArrayOutput

func (AccessLevelsAccessLevelArray) ToAccessLevelsAccessLevelArrayOutputWithContext 

func (i AccessLevelsAccessLevelArray) ToAccessLevelsAccessLevelArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelArrayOutput

type AccessLevelsAccessLevelArrayInput 

type AccessLevelsAccessLevelArrayInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelArrayOutput() AccessLevelsAccessLevelArrayOutput
	ToAccessLevelsAccessLevelArrayOutputWithContext(context.Context) AccessLevelsAccessLevelArrayOutput
}

AccessLevelsAccessLevelArrayInput is an input type that accepts AccessLevelsAccessLevelArray and AccessLevelsAccessLevelArrayOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelArrayInput` via: 

AccessLevelsAccessLevelArray{ AccessLevelsAccessLevelArgs{...} }

type AccessLevelsAccessLevelArrayOutput 

type AccessLevelsAccessLevelArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelArrayOutput) ElementType 

func (AccessLevelsAccessLevelArrayOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelArrayOutput) Index 

func (o AccessLevelsAccessLevelArrayOutput) Index(i pulumi.IntInput) AccessLevelsAccessLevelOutput

func (AccessLevelsAccessLevelArrayOutput) ToAccessLevelsAccessLevelArrayOutput 

func (o AccessLevelsAccessLevelArrayOutput) ToAccessLevelsAccessLevelArrayOutput() AccessLevelsAccessLevelArrayOutput

func (AccessLevelsAccessLevelArrayOutput) ToAccessLevelsAccessLevelArrayOutputWithContext 

func (o AccessLevelsAccessLevelArrayOutput) ToAccessLevelsAccessLevelArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelArrayOutput

type AccessLevelsAccessLevelBasic 

type AccessLevelsAccessLevelBasic struct {
	// How the conditions list should be combined to determine if a request
	// is granted this AccessLevel. If AND is used, each Condition in
	// conditions must be satisfied for the AccessLevel to be applied. If
	// OR is used, at least one Condition in conditions must be satisfied
	// for the AccessLevel to be applied.
	// Default value is `AND`.
	// Possible values are: `AND`, `OR`.
	CombiningFunction *string `pulumi:"combiningFunction"`
	// A set of requirements for the AccessLevel to be granted.
	// Structure is documented below.
	Conditions []AccessLevelsAccessLevelBasicCondition `pulumi:"conditions"`
}

type AccessLevelsAccessLevelBasicArgs 

type AccessLevelsAccessLevelBasicArgs struct {
	// How the conditions list should be combined to determine if a request
	// is granted this AccessLevel. If AND is used, each Condition in
	// conditions must be satisfied for the AccessLevel to be applied. If
	// OR is used, at least one Condition in conditions must be satisfied
	// for the AccessLevel to be applied.
	// Default value is `AND`.
	// Possible values are: `AND`, `OR`.
	CombiningFunction pulumi.StringPtrInput `pulumi:"combiningFunction"`
	// A set of requirements for the AccessLevel to be granted.
	// Structure is documented below.
	Conditions AccessLevelsAccessLevelBasicConditionArrayInput `pulumi:"conditions"`
}

func (AccessLevelsAccessLevelBasicArgs) ElementType 

func (AccessLevelsAccessLevelBasicArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicOutput 

func (i AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicOutput() AccessLevelsAccessLevelBasicOutput

func (AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicOutputWithContext 

func (i AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicOutput

func (AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicPtrOutput 

func (i AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicPtrOutput() AccessLevelsAccessLevelBasicPtrOutput

func (AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicPtrOutputWithContext 

func (i AccessLevelsAccessLevelBasicArgs) ToAccessLevelsAccessLevelBasicPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicPtrOutput

type AccessLevelsAccessLevelBasicCondition 

type AccessLevelsAccessLevelBasicCondition struct {
	// Device specific restrictions, all restrictions must hold for
	// the Condition to be true. If not specified, all devices are
	// allowed.
	// Structure is documented below.
	DevicePolicy *AccessLevelsAccessLevelBasicConditionDevicePolicy `pulumi:"devicePolicy"`
	// A list of CIDR block IP subnetwork specification. May be IPv4
	// or IPv6.
	// Note that for a CIDR IP address block, the specified IP address
	// portion must be properly truncated (i.e. all the host bits must
	// be zero) or the input is considered malformed. For example,
	// "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly,
	// for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32"
	// is not. The originating IP of a request must be in one of the
	// listed subnets in order for this Condition to be true.
	// If empty, all IP addresses are allowed.
	IpSubnetworks []string `pulumi:"ipSubnetworks"`
	// An allowed list of members (users, service accounts).
	// Using groups is not supported yet.
	// The signed-in user originating the request must be a part of one
	// of the provided members. If not specified, a request may come
	// from any user (logged in/not logged in, not present in any
	// groups, etc.).
	// Formats: `user:{emailid}`, `serviceAccount:{emailid}`
	Members []string `pulumi:"members"`
	// Whether to negate the Condition. If true, the Condition becomes
	// a NAND over its non-empty fields, each field must be false for
	// the Condition overall to be satisfied. Defaults to false.
	Negate *bool `pulumi:"negate"`
	// The request must originate from one of the provided
	// countries/regions.
	// Format: A valid ISO 3166-1 alpha-2 code.
	Regions []string `pulumi:"regions"`
	// A list of other access levels defined in the same Policy,
	// referenced by resource name. Referencing an AccessLevel which
	// does not exist is an error. All access levels listed must be
	// granted for the Condition to be true.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	RequiredAccessLevels []string `pulumi:"requiredAccessLevels"`
	// The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`.
	// Structure is documented below.
	VpcNetworkSources []AccessLevelsAccessLevelBasicConditionVpcNetworkSource `pulumi:"vpcNetworkSources"`
}

type AccessLevelsAccessLevelBasicConditionArgs 

type AccessLevelsAccessLevelBasicConditionArgs struct {
	// Device specific restrictions, all restrictions must hold for
	// the Condition to be true. If not specified, all devices are
	// allowed.
	// Structure is documented below.
	DevicePolicy AccessLevelsAccessLevelBasicConditionDevicePolicyPtrInput `pulumi:"devicePolicy"`
	// A list of CIDR block IP subnetwork specification. May be IPv4
	// or IPv6.
	// Note that for a CIDR IP address block, the specified IP address
	// portion must be properly truncated (i.e. all the host bits must
	// be zero) or the input is considered malformed. For example,
	// "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly,
	// for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32"
	// is not. The originating IP of a request must be in one of the
	// listed subnets in order for this Condition to be true.
	// If empty, all IP addresses are allowed.
	IpSubnetworks pulumi.StringArrayInput `pulumi:"ipSubnetworks"`
	// An allowed list of members (users, service accounts).
	// Using groups is not supported yet.
	// The signed-in user originating the request must be a part of one
	// of the provided members. If not specified, a request may come
	// from any user (logged in/not logged in, not present in any
	// groups, etc.).
	// Formats: `user:{emailid}`, `serviceAccount:{emailid}`
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Whether to negate the Condition. If true, the Condition becomes
	// a NAND over its non-empty fields, each field must be false for
	// the Condition overall to be satisfied. Defaults to false.
	Negate pulumi.BoolPtrInput `pulumi:"negate"`
	// The request must originate from one of the provided
	// countries/regions.
	// Format: A valid ISO 3166-1 alpha-2 code.
	Regions pulumi.StringArrayInput `pulumi:"regions"`
	// A list of other access levels defined in the same Policy,
	// referenced by resource name. Referencing an AccessLevel which
	// does not exist is an error. All access levels listed must be
	// granted for the Condition to be true.
	// Format: accessPolicies/{policy_id}/accessLevels/{short_name}
	RequiredAccessLevels pulumi.StringArrayInput `pulumi:"requiredAccessLevels"`
	// The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`.
	// Structure is documented below.
	VpcNetworkSources AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayInput `pulumi:"vpcNetworkSources"`
}

func (AccessLevelsAccessLevelBasicConditionArgs) ElementType 

func (AccessLevelsAccessLevelBasicConditionArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionArgs) ToAccessLevelsAccessLevelBasicConditionOutput 

func (i AccessLevelsAccessLevelBasicConditionArgs) ToAccessLevelsAccessLevelBasicConditionOutput() AccessLevelsAccessLevelBasicConditionOutput

func (AccessLevelsAccessLevelBasicConditionArgs) ToAccessLevelsAccessLevelBasicConditionOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionArgs) ToAccessLevelsAccessLevelBasicConditionOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionOutput

type AccessLevelsAccessLevelBasicConditionArray 

type AccessLevelsAccessLevelBasicConditionArray []AccessLevelsAccessLevelBasicConditionInput

func (AccessLevelsAccessLevelBasicConditionArray) ElementType 

func (AccessLevelsAccessLevelBasicConditionArray) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionArray) ToAccessLevelsAccessLevelBasicConditionArrayOutput 

func (i AccessLevelsAccessLevelBasicConditionArray) ToAccessLevelsAccessLevelBasicConditionArrayOutput() AccessLevelsAccessLevelBasicConditionArrayOutput

func (AccessLevelsAccessLevelBasicConditionArray) ToAccessLevelsAccessLevelBasicConditionArrayOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionArray) ToAccessLevelsAccessLevelBasicConditionArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionArrayOutput

type AccessLevelsAccessLevelBasicConditionArrayInput 

type AccessLevelsAccessLevelBasicConditionArrayInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionArrayOutput() AccessLevelsAccessLevelBasicConditionArrayOutput
	ToAccessLevelsAccessLevelBasicConditionArrayOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionArrayOutput
}

AccessLevelsAccessLevelBasicConditionArrayInput is an input type that accepts AccessLevelsAccessLevelBasicConditionArray and AccessLevelsAccessLevelBasicConditionArrayOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionArrayInput` via: 

AccessLevelsAccessLevelBasicConditionArray{ AccessLevelsAccessLevelBasicConditionArgs{...} }

type AccessLevelsAccessLevelBasicConditionArrayOutput 

type AccessLevelsAccessLevelBasicConditionArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionArrayOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionArrayOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionArrayOutput) Index 

func (o AccessLevelsAccessLevelBasicConditionArrayOutput) Index(i pulumi.IntInput) AccessLevelsAccessLevelBasicConditionOutput

func (AccessLevelsAccessLevelBasicConditionArrayOutput) ToAccessLevelsAccessLevelBasicConditionArrayOutput 

func (o AccessLevelsAccessLevelBasicConditionArrayOutput) ToAccessLevelsAccessLevelBasicConditionArrayOutput() AccessLevelsAccessLevelBasicConditionArrayOutput

func (AccessLevelsAccessLevelBasicConditionArrayOutput) ToAccessLevelsAccessLevelBasicConditionArrayOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionArrayOutput) ToAccessLevelsAccessLevelBasicConditionArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionArrayOutput

type AccessLevelsAccessLevelBasicConditionDevicePolicy 

type AccessLevelsAccessLevelBasicConditionDevicePolicy struct {
	// A list of allowed device management levels.
	// An empty list allows all management levels.
	// Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.
	AllowedDeviceManagementLevels []string `pulumi:"allowedDeviceManagementLevels"`
	// A list of allowed encryptions statuses.
	// An empty list allows all statuses.
	// Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.
	AllowedEncryptionStatuses []string `pulumi:"allowedEncryptionStatuses"`
	// A list of allowed OS versions.
	// An empty list allows all types and all versions.
	// Structure is documented below.
	OsConstraints []AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraint `pulumi:"osConstraints"`
	// Whether the device needs to be approved by the customer admin.
	RequireAdminApproval *bool `pulumi:"requireAdminApproval"`
	// Whether the device needs to be corp owned.
	RequireCorpOwned *bool `pulumi:"requireCorpOwned"`
	// Whether or not screenlock is required for the DevicePolicy
	// to be true. Defaults to false.
	RequireScreenLock *bool `pulumi:"requireScreenLock"`
}

type AccessLevelsAccessLevelBasicConditionDevicePolicyArgs 

type AccessLevelsAccessLevelBasicConditionDevicePolicyArgs struct {
	// A list of allowed device management levels.
	// An empty list allows all management levels.
	// Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.
	AllowedDeviceManagementLevels pulumi.StringArrayInput `pulumi:"allowedDeviceManagementLevels"`
	// A list of allowed encryptions statuses.
	// An empty list allows all statuses.
	// Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.
	AllowedEncryptionStatuses pulumi.StringArrayInput `pulumi:"allowedEncryptionStatuses"`
	// A list of allowed OS versions.
	// An empty list allows all types and all versions.
	// Structure is documented below.
	OsConstraints AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayInput `pulumi:"osConstraints"`
	// Whether the device needs to be approved by the customer admin.
	RequireAdminApproval pulumi.BoolPtrInput `pulumi:"requireAdminApproval"`
	// Whether the device needs to be corp owned.
	RequireCorpOwned pulumi.BoolPtrInput `pulumi:"requireCorpOwned"`
	// Whether or not screenlock is required for the DevicePolicy
	// to be true. Defaults to false.
	RequireScreenLock pulumi.BoolPtrInput `pulumi:"requireScreenLock"`
}

func (AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ElementType 

func (AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutput 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput

type AccessLevelsAccessLevelBasicConditionDevicePolicyInput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOutput
	ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOutput
}

AccessLevelsAccessLevelBasicConditionDevicePolicyInput is an input type that accepts AccessLevelsAccessLevelBasicConditionDevicePolicyArgs and AccessLevelsAccessLevelBasicConditionDevicePolicyOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionDevicePolicyInput` via: 

AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{...}

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraint 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraint struct {
	// The minimum allowed OS version. If not set, any version
	// of this OS satisfies the constraint.
	// Format: "major.minor.patch" such as "10.5.301", "9.2.1".
	MinimumVersion *string `pulumi:"minimumVersion"`
	// The operating system type of the device.
	// Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.
	OsType string `pulumi:"osType"`
}

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs struct {
	// The minimum allowed OS version. If not set, any version
	// of this OS satisfies the constraint.
	// Format: "major.minor.patch" such as "10.5.301", "9.2.1".
	MinimumVersion pulumi.StringPtrInput `pulumi:"minimumVersion"`
	// The operating system type of the device.
	// Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.
	OsType pulumi.StringInput `pulumi:"osType"`
}

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs) ElementType 

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray []AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintInput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray) ElementType 

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayInput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput
	ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput
}

AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayInput is an input type that accepts AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray and AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayInput` via: 

AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{ AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{...} }

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) Index 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) Index(i pulumi.IntInput) AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintInput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput
	ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput
}

AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintInput is an input type that accepts AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs and AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintInput` via: 

AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{...}

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) MinimumVersion 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) MinimumVersion() pulumi.StringPtrOutput

The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) OsType 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) OsType() pulumi.StringOutput

The operating system type of the device. Possible values are: `OS_UNSPECIFIED`, `DESKTOP_MAC`, `DESKTOP_WINDOWS`, `DESKTOP_LINUX`, `DESKTOP_CHROME_OS`, `ANDROID`, `IOS`.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintOutput

type AccessLevelsAccessLevelBasicConditionDevicePolicyOutput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) AllowedDeviceManagementLevels 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) AllowedDeviceManagementLevels() pulumi.StringArrayOutput

A list of allowed device management levels. An empty list allows all management levels. Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) AllowedEncryptionStatuses 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) AllowedEncryptionStatuses() pulumi.StringArrayOutput

A list of allowed encryptions statuses. An empty list allows all statuses. Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) OsConstraints 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) OsConstraints() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) RequireAdminApproval 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) RequireAdminApproval() pulumi.BoolPtrOutput

Whether the device needs to be approved by the customer admin.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) RequireCorpOwned 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) RequireCorpOwned() pulumi.BoolPtrOutput

Whether the device needs to be corp owned.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) RequireScreenLock 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) RequireScreenLock() pulumi.BoolPtrOutput

Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutput 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput

type AccessLevelsAccessLevelBasicConditionDevicePolicyPtrInput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyPtrInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput
	ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput
}

AccessLevelsAccessLevelBasicConditionDevicePolicyPtrInput is an input type that accepts AccessLevelsAccessLevelBasicConditionDevicePolicyArgs, AccessLevelsAccessLevelBasicConditionDevicePolicyPtr and AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionDevicePolicyPtrInput` via: 

        AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{...}

or:

        nil

func AccessLevelsAccessLevelBasicConditionDevicePolicyPtr 

func AccessLevelsAccessLevelBasicConditionDevicePolicyPtr(v *AccessLevelsAccessLevelBasicConditionDevicePolicyArgs) AccessLevelsAccessLevelBasicConditionDevicePolicyPtrInput

type AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput 

type AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) AllowedDeviceManagementLevels 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) AllowedDeviceManagementLevels() pulumi.StringArrayOutput

A list of allowed device management levels. An empty list allows all management levels. Each value may be one of: `MANAGEMENT_UNSPECIFIED`, `NONE`, `BASIC`, `COMPLETE`.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) AllowedEncryptionStatuses 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) AllowedEncryptionStatuses() pulumi.StringArrayOutput

A list of allowed encryptions statuses. An empty list allows all statuses. Each value may be one of: `ENCRYPTION_UNSPECIFIED`, `ENCRYPTION_UNSUPPORTED`, `UNENCRYPTED`, `ENCRYPTED`.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) Elem 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) Elem() AccessLevelsAccessLevelBasicConditionDevicePolicyOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) OsConstraints 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) OsConstraints() AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArrayOutput

A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) RequireAdminApproval 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) RequireAdminApproval() pulumi.BoolPtrOutput

Whether the device needs to be approved by the customer admin.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) RequireCorpOwned 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) RequireCorpOwned() pulumi.BoolPtrOutput

Whether the device needs to be corp owned.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) RequireScreenLock 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) RequireScreenLock() pulumi.BoolPtrOutput

Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput() AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput

func (AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput) ToAccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput

type AccessLevelsAccessLevelBasicConditionInput 

type AccessLevelsAccessLevelBasicConditionInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionOutput() AccessLevelsAccessLevelBasicConditionOutput
	ToAccessLevelsAccessLevelBasicConditionOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionOutput
}

AccessLevelsAccessLevelBasicConditionInput is an input type that accepts AccessLevelsAccessLevelBasicConditionArgs and AccessLevelsAccessLevelBasicConditionOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionInput` via: 

AccessLevelsAccessLevelBasicConditionArgs{...}

type AccessLevelsAccessLevelBasicConditionOutput 

type AccessLevelsAccessLevelBasicConditionOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionOutput) DevicePolicy 

func (o AccessLevelsAccessLevelBasicConditionOutput) DevicePolicy() AccessLevelsAccessLevelBasicConditionDevicePolicyPtrOutput

Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.

func (AccessLevelsAccessLevelBasicConditionOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionOutput) IpSubnetworks 

func (o AccessLevelsAccessLevelBasicConditionOutput) IpSubnetworks() pulumi.StringArrayOutput

A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.

func (AccessLevelsAccessLevelBasicConditionOutput) Members 

func (o AccessLevelsAccessLevelBasicConditionOutput) Members() pulumi.StringArrayOutput

An allowed list of members (users, service accounts). Using groups is not supported yet. The signed-in user originating the request must be a part of one of the provided members. If not specified, a request may come from any user (logged in/not logged in, not present in any groups, etc.). Formats: `user:{emailid}`, `serviceAccount:{emailid}`

func (AccessLevelsAccessLevelBasicConditionOutput) Negate 

func (o AccessLevelsAccessLevelBasicConditionOutput) Negate() pulumi.BoolPtrOutput

Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.

func (AccessLevelsAccessLevelBasicConditionOutput) Regions 

func (o AccessLevelsAccessLevelBasicConditionOutput) Regions() pulumi.StringArrayOutput

The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.

func (AccessLevelsAccessLevelBasicConditionOutput) RequiredAccessLevels 

func (o AccessLevelsAccessLevelBasicConditionOutput) RequiredAccessLevels() pulumi.StringArrayOutput

A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}

func (AccessLevelsAccessLevelBasicConditionOutput) ToAccessLevelsAccessLevelBasicConditionOutput 

func (o AccessLevelsAccessLevelBasicConditionOutput) ToAccessLevelsAccessLevelBasicConditionOutput() AccessLevelsAccessLevelBasicConditionOutput

func (AccessLevelsAccessLevelBasicConditionOutput) ToAccessLevelsAccessLevelBasicConditionOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionOutput) ToAccessLevelsAccessLevelBasicConditionOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionOutput

func (AccessLevelsAccessLevelBasicConditionOutput) VpcNetworkSources 

func (o AccessLevelsAccessLevelBasicConditionOutput) VpcNetworkSources() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput

The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ipSubnetworks`. Structure is documented below.

type AccessLevelsAccessLevelBasicConditionVpcNetworkSource 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSource struct {
	// Sub networks within a VPC network.
	// Structure is documented below.
	VpcSubnetwork *AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork `pulumi:"vpcSubnetwork"`
}

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs struct {
	// Sub networks within a VPC network.
	// Structure is documented below.
	VpcSubnetwork AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput `pulumi:"vpcSubnetwork"`
}

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs) ElementType 

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray []AccessLevelsAccessLevelBasicConditionVpcNetworkSourceInput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray) ElementType 

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayInput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput
	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput
}

AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayInput is an input type that accepts AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray and AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayInput` via: 

AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray{ AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs{...} }

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) Index 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) Index(i pulumi.IntInput) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArrayOutput

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceInput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput
	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput
}

AccessLevelsAccessLevelBasicConditionVpcNetworkSourceInput is an input type that accepts AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs and AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionVpcNetworkSourceInput` via: 

AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs{...}

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) VpcSubnetwork 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceOutput) VpcSubnetwork() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

Sub networks within a VPC network. Structure is documented below.

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork struct {
	// Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.
	Network string `pulumi:"network"`
	// CIDR block IP subnetwork specification. Must be IPv4.
	VpcIpSubnetworks []string `pulumi:"vpcIpSubnetworks"`
}

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs struct {
	// Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.
	Network pulumi.StringInput `pulumi:"network"`
	// CIDR block IP subnetwork specification. Must be IPv4.
	VpcIpSubnetworks pulumi.StringArrayInput `pulumi:"vpcIpSubnetworks"`
}

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ElementType 

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (i AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput
	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput
}

AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput is an input type that accepts AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs and AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkInput` via: 

AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs{...}

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) Network 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) Network() pulumi.StringOutput

Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) VpcIpSubnetworks 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput) VpcIpSubnetworks() pulumi.StringArrayOutput

CIDR block IP subnetwork specification. Must be IPv4.

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput
	ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput
}

AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput is an input type that accepts AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs, AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtr and AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput` via: 

        AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs{...}

or:

        nil

func AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtr 

func AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtr(v *AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrInput

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

type AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Elem 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Elem() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ElementType 

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Network 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) Network() pulumi.StringPtrOutput

Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires `compute.network.get` permission to be granted to caller.

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput() AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) ToAccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput

func (AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) VpcIpSubnetworks 

func (o AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkPtrOutput) VpcIpSubnetworks() pulumi.StringArrayOutput

CIDR block IP subnetwork specification. Must be IPv4.

type AccessLevelsAccessLevelBasicInput 

type AccessLevelsAccessLevelBasicInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicOutput() AccessLevelsAccessLevelBasicOutput
	ToAccessLevelsAccessLevelBasicOutputWithContext(context.Context) AccessLevelsAccessLevelBasicOutput
}

AccessLevelsAccessLevelBasicInput is an input type that accepts AccessLevelsAccessLevelBasicArgs and AccessLevelsAccessLevelBasicOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicInput` via: 

AccessLevelsAccessLevelBasicArgs{...}

type AccessLevelsAccessLevelBasicOutput 

type AccessLevelsAccessLevelBasicOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicOutput) CombiningFunction 

func (o AccessLevelsAccessLevelBasicOutput) CombiningFunction() pulumi.StringPtrOutput

How the conditions list should be combined to determine if a request is granted this AccessLevel. If AND is used, each Condition in conditions must be satisfied for the AccessLevel to be applied. If OR is used, at least one Condition in conditions must be satisfied for the AccessLevel to be applied. Default value is `AND`. Possible values are: `AND`, `OR`.

func (AccessLevelsAccessLevelBasicOutput) Conditions 

func (o AccessLevelsAccessLevelBasicOutput) Conditions() AccessLevelsAccessLevelBasicConditionArrayOutput

A set of requirements for the AccessLevel to be granted. Structure is documented below.

func (AccessLevelsAccessLevelBasicOutput) ElementType 

func (AccessLevelsAccessLevelBasicOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicOutput 

func (o AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicOutput() AccessLevelsAccessLevelBasicOutput

func (AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicOutputWithContext 

func (o AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicOutput

func (AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicPtrOutput 

func (o AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicPtrOutput() AccessLevelsAccessLevelBasicPtrOutput

func (AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicPtrOutputWithContext 

func (o AccessLevelsAccessLevelBasicOutput) ToAccessLevelsAccessLevelBasicPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicPtrOutput

type AccessLevelsAccessLevelBasicPtrInput 

type AccessLevelsAccessLevelBasicPtrInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelBasicPtrOutput() AccessLevelsAccessLevelBasicPtrOutput
	ToAccessLevelsAccessLevelBasicPtrOutputWithContext(context.Context) AccessLevelsAccessLevelBasicPtrOutput
}

AccessLevelsAccessLevelBasicPtrInput is an input type that accepts AccessLevelsAccessLevelBasicArgs, AccessLevelsAccessLevelBasicPtr and AccessLevelsAccessLevelBasicPtrOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelBasicPtrInput` via: 

        AccessLevelsAccessLevelBasicArgs{...}

or:

        nil

func AccessLevelsAccessLevelBasicPtr 

func AccessLevelsAccessLevelBasicPtr(v *AccessLevelsAccessLevelBasicArgs) AccessLevelsAccessLevelBasicPtrInput

type AccessLevelsAccessLevelBasicPtrOutput 

type AccessLevelsAccessLevelBasicPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelBasicPtrOutput) CombiningFunction 

func (o AccessLevelsAccessLevelBasicPtrOutput) CombiningFunction() pulumi.StringPtrOutput

How the conditions list should be combined to determine if a request is granted this AccessLevel. If AND is used, each Condition in conditions must be satisfied for the AccessLevel to be applied. If OR is used, at least one Condition in conditions must be satisfied for the AccessLevel to be applied. Default value is `AND`. Possible values are: `AND`, `OR`.

func (AccessLevelsAccessLevelBasicPtrOutput) Conditions 

func (o AccessLevelsAccessLevelBasicPtrOutput) Conditions() AccessLevelsAccessLevelBasicConditionArrayOutput

A set of requirements for the AccessLevel to be granted. Structure is documented below.

func (AccessLevelsAccessLevelBasicPtrOutput) Elem 

func (o AccessLevelsAccessLevelBasicPtrOutput) Elem() AccessLevelsAccessLevelBasicOutput

func (AccessLevelsAccessLevelBasicPtrOutput) ElementType 

func (AccessLevelsAccessLevelBasicPtrOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelBasicPtrOutput) ToAccessLevelsAccessLevelBasicPtrOutput 

func (o AccessLevelsAccessLevelBasicPtrOutput) ToAccessLevelsAccessLevelBasicPtrOutput() AccessLevelsAccessLevelBasicPtrOutput

func (AccessLevelsAccessLevelBasicPtrOutput) ToAccessLevelsAccessLevelBasicPtrOutputWithContext 

func (o AccessLevelsAccessLevelBasicPtrOutput) ToAccessLevelsAccessLevelBasicPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelBasicPtrOutput

type AccessLevelsAccessLevelCustom 

type AccessLevelsAccessLevelCustom struct {
	// Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
	// This page details the objects and attributes that are used to the build the CEL expressions for
	// custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
	// Structure is documented below.
	Expr AccessLevelsAccessLevelCustomExpr `pulumi:"expr"`
}

type AccessLevelsAccessLevelCustomArgs 

type AccessLevelsAccessLevelCustomArgs struct {
	// Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
	// This page details the objects and attributes that are used to the build the CEL expressions for
	// custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
	// Structure is documented below.
	Expr AccessLevelsAccessLevelCustomExprInput `pulumi:"expr"`
}

func (AccessLevelsAccessLevelCustomArgs) ElementType 

func (AccessLevelsAccessLevelCustomArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomOutput 

func (i AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomOutput() AccessLevelsAccessLevelCustomOutput

func (AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomOutputWithContext 

func (i AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomOutput

func (AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomPtrOutput 

func (i AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomPtrOutput() AccessLevelsAccessLevelCustomPtrOutput

func (AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomPtrOutputWithContext 

func (i AccessLevelsAccessLevelCustomArgs) ToAccessLevelsAccessLevelCustomPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomPtrOutput

type AccessLevelsAccessLevelCustomExpr 

type AccessLevelsAccessLevelCustomExpr struct {
	// Description of the expression
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
	Location *string `pulumi:"location"`
	// Title for the expression, i.e. a short string describing its purpose.
	Title *string `pulumi:"title"`
}

type AccessLevelsAccessLevelCustomExprArgs 

type AccessLevelsAccessLevelCustomExprArgs struct {
	// Description of the expression
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

func (AccessLevelsAccessLevelCustomExprArgs) ElementType 

func (AccessLevelsAccessLevelCustomExprArgs) ElementType() reflect.Type

func (AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprOutput 

func (i AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprOutput() AccessLevelsAccessLevelCustomExprOutput

func (AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprOutputWithContext 

func (i AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomExprOutput

func (AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprPtrOutput 

func (i AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprPtrOutput() AccessLevelsAccessLevelCustomExprPtrOutput

func (AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprPtrOutputWithContext 

func (i AccessLevelsAccessLevelCustomExprArgs) ToAccessLevelsAccessLevelCustomExprPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomExprPtrOutput

type AccessLevelsAccessLevelCustomExprInput 

type AccessLevelsAccessLevelCustomExprInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelCustomExprOutput() AccessLevelsAccessLevelCustomExprOutput
	ToAccessLevelsAccessLevelCustomExprOutputWithContext(context.Context) AccessLevelsAccessLevelCustomExprOutput
}

AccessLevelsAccessLevelCustomExprInput is an input type that accepts AccessLevelsAccessLevelCustomExprArgs and AccessLevelsAccessLevelCustomExprOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelCustomExprInput` via: 

AccessLevelsAccessLevelCustomExprArgs{...}

type AccessLevelsAccessLevelCustomExprOutput 

type AccessLevelsAccessLevelCustomExprOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelCustomExprOutput) Description 

func (o AccessLevelsAccessLevelCustomExprOutput) Description() pulumi.StringPtrOutput

Description of the expression

func (AccessLevelsAccessLevelCustomExprOutput) ElementType 

func (AccessLevelsAccessLevelCustomExprOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelCustomExprOutput) Expression 

func (o AccessLevelsAccessLevelCustomExprOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (AccessLevelsAccessLevelCustomExprOutput) Location 

func (o AccessLevelsAccessLevelCustomExprOutput) Location() pulumi.StringPtrOutput

String indicating the location of the expression for error reporting, e.g. a file name and a position in the file

func (AccessLevelsAccessLevelCustomExprOutput) Title 

func (o AccessLevelsAccessLevelCustomExprOutput) Title() pulumi.StringPtrOutput

Title for the expression, i.e. a short string describing its purpose.

func (AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprOutput 

func (o AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprOutput() AccessLevelsAccessLevelCustomExprOutput

func (AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprOutputWithContext 

func (o AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomExprOutput

func (AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprPtrOutput 

func (o AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprPtrOutput() AccessLevelsAccessLevelCustomExprPtrOutput

func (AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprPtrOutputWithContext 

func (o AccessLevelsAccessLevelCustomExprOutput) ToAccessLevelsAccessLevelCustomExprPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomExprPtrOutput

type AccessLevelsAccessLevelCustomExprPtrInput 

type AccessLevelsAccessLevelCustomExprPtrInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelCustomExprPtrOutput() AccessLevelsAccessLevelCustomExprPtrOutput
	ToAccessLevelsAccessLevelCustomExprPtrOutputWithContext(context.Context) AccessLevelsAccessLevelCustomExprPtrOutput
}

AccessLevelsAccessLevelCustomExprPtrInput is an input type that accepts AccessLevelsAccessLevelCustomExprArgs, AccessLevelsAccessLevelCustomExprPtr and AccessLevelsAccessLevelCustomExprPtrOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelCustomExprPtrInput` via: 

        AccessLevelsAccessLevelCustomExprArgs{...}

or:

        nil

func AccessLevelsAccessLevelCustomExprPtr 

func AccessLevelsAccessLevelCustomExprPtr(v *AccessLevelsAccessLevelCustomExprArgs) AccessLevelsAccessLevelCustomExprPtrInput

type AccessLevelsAccessLevelCustomExprPtrOutput 

type AccessLevelsAccessLevelCustomExprPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelCustomExprPtrOutput) Description 

func (o AccessLevelsAccessLevelCustomExprPtrOutput) Description() pulumi.StringPtrOutput

Description of the expression

func (AccessLevelsAccessLevelCustomExprPtrOutput) Elem 

func (o AccessLevelsAccessLevelCustomExprPtrOutput) Elem() AccessLevelsAccessLevelCustomExprOutput

func (AccessLevelsAccessLevelCustomExprPtrOutput) ElementType 

func (AccessLevelsAccessLevelCustomExprPtrOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelCustomExprPtrOutput) Expression 

func (o AccessLevelsAccessLevelCustomExprPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (AccessLevelsAccessLevelCustomExprPtrOutput) Location 

func (o AccessLevelsAccessLevelCustomExprPtrOutput) Location() pulumi.StringPtrOutput

String indicating the location of the expression for error reporting, e.g. a file name and a position in the file

func (AccessLevelsAccessLevelCustomExprPtrOutput) Title 

func (o AccessLevelsAccessLevelCustomExprPtrOutput) Title() pulumi.StringPtrOutput

Title for the expression, i.e. a short string describing its purpose.

func (AccessLevelsAccessLevelCustomExprPtrOutput) ToAccessLevelsAccessLevelCustomExprPtrOutput 

func (o AccessLevelsAccessLevelCustomExprPtrOutput) ToAccessLevelsAccessLevelCustomExprPtrOutput() AccessLevelsAccessLevelCustomExprPtrOutput

func (AccessLevelsAccessLevelCustomExprPtrOutput) ToAccessLevelsAccessLevelCustomExprPtrOutputWithContext 

func (o AccessLevelsAccessLevelCustomExprPtrOutput) ToAccessLevelsAccessLevelCustomExprPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomExprPtrOutput

type AccessLevelsAccessLevelCustomInput 

type AccessLevelsAccessLevelCustomInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelCustomOutput() AccessLevelsAccessLevelCustomOutput
	ToAccessLevelsAccessLevelCustomOutputWithContext(context.Context) AccessLevelsAccessLevelCustomOutput
}

AccessLevelsAccessLevelCustomInput is an input type that accepts AccessLevelsAccessLevelCustomArgs and AccessLevelsAccessLevelCustomOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelCustomInput` via: 

AccessLevelsAccessLevelCustomArgs{...}

type AccessLevelsAccessLevelCustomOutput 

type AccessLevelsAccessLevelCustomOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelCustomOutput) ElementType 

func (AccessLevelsAccessLevelCustomOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelCustomOutput) Expr 

func (o AccessLevelsAccessLevelCustomOutput) Expr() AccessLevelsAccessLevelCustomExprOutput

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.

func (AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomOutput 

func (o AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomOutput() AccessLevelsAccessLevelCustomOutput

func (AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomOutputWithContext 

func (o AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomOutput

func (AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomPtrOutput 

func (o AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomPtrOutput() AccessLevelsAccessLevelCustomPtrOutput

func (AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomPtrOutputWithContext 

func (o AccessLevelsAccessLevelCustomOutput) ToAccessLevelsAccessLevelCustomPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomPtrOutput

type AccessLevelsAccessLevelCustomPtrInput 

type AccessLevelsAccessLevelCustomPtrInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelCustomPtrOutput() AccessLevelsAccessLevelCustomPtrOutput
	ToAccessLevelsAccessLevelCustomPtrOutputWithContext(context.Context) AccessLevelsAccessLevelCustomPtrOutput
}

AccessLevelsAccessLevelCustomPtrInput is an input type that accepts AccessLevelsAccessLevelCustomArgs, AccessLevelsAccessLevelCustomPtr and AccessLevelsAccessLevelCustomPtrOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelCustomPtrInput` via: 

        AccessLevelsAccessLevelCustomArgs{...}

or:

        nil

func AccessLevelsAccessLevelCustomPtr 

func AccessLevelsAccessLevelCustomPtr(v *AccessLevelsAccessLevelCustomArgs) AccessLevelsAccessLevelCustomPtrInput

type AccessLevelsAccessLevelCustomPtrOutput 

type AccessLevelsAccessLevelCustomPtrOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelCustomPtrOutput) Elem 

func (o AccessLevelsAccessLevelCustomPtrOutput) Elem() AccessLevelsAccessLevelCustomOutput

func (AccessLevelsAccessLevelCustomPtrOutput) ElementType 

func (AccessLevelsAccessLevelCustomPtrOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelCustomPtrOutput) Expr 

func (o AccessLevelsAccessLevelCustomPtrOutput) Expr() AccessLevelsAccessLevelCustomExprPtrOutput

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.

func (AccessLevelsAccessLevelCustomPtrOutput) ToAccessLevelsAccessLevelCustomPtrOutput 

func (o AccessLevelsAccessLevelCustomPtrOutput) ToAccessLevelsAccessLevelCustomPtrOutput() AccessLevelsAccessLevelCustomPtrOutput

func (AccessLevelsAccessLevelCustomPtrOutput) ToAccessLevelsAccessLevelCustomPtrOutputWithContext 

func (o AccessLevelsAccessLevelCustomPtrOutput) ToAccessLevelsAccessLevelCustomPtrOutputWithContext(ctx context.Context) AccessLevelsAccessLevelCustomPtrOutput

type AccessLevelsAccessLevelInput 

type AccessLevelsAccessLevelInput interface {
	pulumi.Input

	ToAccessLevelsAccessLevelOutput() AccessLevelsAccessLevelOutput
	ToAccessLevelsAccessLevelOutputWithContext(context.Context) AccessLevelsAccessLevelOutput
}

AccessLevelsAccessLevelInput is an input type that accepts AccessLevelsAccessLevelArgs and AccessLevelsAccessLevelOutput values. You can construct a concrete instance of `AccessLevelsAccessLevelInput` via: 

AccessLevelsAccessLevelArgs{...}

type AccessLevelsAccessLevelOutput 

type AccessLevelsAccessLevelOutput struct{ *pulumi.OutputState }

func (AccessLevelsAccessLevelOutput) Basic 

func (o AccessLevelsAccessLevelOutput) Basic() AccessLevelsAccessLevelBasicPtrOutput

A set of predefined conditions for the access level and a combining function. Structure is documented below.

func (AccessLevelsAccessLevelOutput) Custom 

func (o AccessLevelsAccessLevelOutput) Custom() AccessLevelsAccessLevelCustomPtrOutput

Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.

func (AccessLevelsAccessLevelOutput) Description 

func (o AccessLevelsAccessLevelOutput) Description() pulumi.StringPtrOutput

Description of the AccessLevel and its use. Does not affect behavior.

func (AccessLevelsAccessLevelOutput) ElementType 

func (AccessLevelsAccessLevelOutput) ElementType() reflect.Type

func (AccessLevelsAccessLevelOutput) Name 

func (o AccessLevelsAccessLevelOutput) Name() pulumi.StringOutput

Resource name for the Access Level. The shortName component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}

func (AccessLevelsAccessLevelOutput) Title 

func (o AccessLevelsAccessLevelOutput) Title() pulumi.StringOutput

Human readable title. Must be unique within the Policy.

func (AccessLevelsAccessLevelOutput) ToAccessLevelsAccessLevelOutput 

func (o AccessLevelsAccessLevelOutput) ToAccessLevelsAccessLevelOutput() AccessLevelsAccessLevelOutput

func (AccessLevelsAccessLevelOutput) ToAccessLevelsAccessLevelOutputWithContext 

func (o AccessLevelsAccessLevelOutput) ToAccessLevelsAccessLevelOutputWithContext(ctx context.Context) AccessLevelsAccessLevelOutput

type AccessLevelsArgs 

type AccessLevelsArgs struct {
	// The desired Access Levels that should replace all existing Access Levels in the Access Policy.
	// Structure is documented below.
	AccessLevels AccessLevelsAccessLevelArrayInput
	// The AccessPolicy this AccessLevel lives in.
	// Format: accessPolicies/{policy_id}
	//
	// ***
	Parent pulumi.StringInput
}

The set of arguments for constructing a AccessLevels resource.

func (AccessLevelsArgs) ElementType 

func (AccessLevelsArgs) ElementType() reflect.Type

type AccessLevelsArray 

type AccessLevelsArray []AccessLevelsInput

func (AccessLevelsArray) ElementType 

func (AccessLevelsArray) ElementType() reflect.Type

func (AccessLevelsArray) ToAccessLevelsArrayOutput 

func (i AccessLevelsArray) ToAccessLevelsArrayOutput() AccessLevelsArrayOutput

func (AccessLevelsArray) ToAccessLevelsArrayOutputWithContext 

func (i AccessLevelsArray) ToAccessLevelsArrayOutputWithContext(ctx context.Context) AccessLevelsArrayOutput

type AccessLevelsArrayInput 

type AccessLevelsArrayInput interface {
	pulumi.Input

	ToAccessLevelsArrayOutput() AccessLevelsArrayOutput
	ToAccessLevelsArrayOutputWithContext(context.Context) AccessLevelsArrayOutput
}

AccessLevelsArrayInput is an input type that accepts AccessLevelsArray and AccessLevelsArrayOutput values. You can construct a concrete instance of `AccessLevelsArrayInput` via: 

AccessLevelsArray{ AccessLevelsArgs{...} }

type AccessLevelsArrayOutput 

type AccessLevelsArrayOutput struct{ *pulumi.OutputState }

func (AccessLevelsArrayOutput) ElementType 

func (AccessLevelsArrayOutput) ElementType() reflect.Type

func (AccessLevelsArrayOutput) Index 

func (o AccessLevelsArrayOutput) Index(i pulumi.IntInput) AccessLevelsOutput

func (AccessLevelsArrayOutput) ToAccessLevelsArrayOutput 

func (o AccessLevelsArrayOutput) ToAccessLevelsArrayOutput() AccessLevelsArrayOutput

func (AccessLevelsArrayOutput) ToAccessLevelsArrayOutputWithContext 

func (o AccessLevelsArrayOutput) ToAccessLevelsArrayOutputWithContext(ctx context.Context) AccessLevelsArrayOutput

type AccessLevelsInput 

type AccessLevelsInput interface {
	pulumi.Input

	ToAccessLevelsOutput() AccessLevelsOutput
	ToAccessLevelsOutputWithContext(ctx context.Context) AccessLevelsOutput
}

type AccessLevelsMap 

type AccessLevelsMap map[string]AccessLevelsInput

func (AccessLevelsMap) ElementType 

func (AccessLevelsMap) ElementType() reflect.Type

func (AccessLevelsMap) ToAccessLevelsMapOutput 

func (i AccessLevelsMap) ToAccessLevelsMapOutput() AccessLevelsMapOutput

func (AccessLevelsMap) ToAccessLevelsMapOutputWithContext 

func (i AccessLevelsMap) ToAccessLevelsMapOutputWithContext(ctx context.Context) AccessLevelsMapOutput

type AccessLevelsMapInput 

type AccessLevelsMapInput interface {
	pulumi.Input

	ToAccessLevelsMapOutput() AccessLevelsMapOutput
	ToAccessLevelsMapOutputWithContext(context.Context) AccessLevelsMapOutput
}

AccessLevelsMapInput is an input type that accepts AccessLevelsMap and AccessLevelsMapOutput values. You can construct a concrete instance of `AccessLevelsMapInput` via: 

AccessLevelsMap{ "key": AccessLevelsArgs{...} }

type AccessLevelsMapOutput 

type AccessLevelsMapOutput struct{ *pulumi.OutputState }

func (AccessLevelsMapOutput) ElementType 

func (AccessLevelsMapOutput) ElementType() reflect.Type

func (AccessLevelsMapOutput) MapIndex 

func (o AccessLevelsMapOutput) MapIndex(k pulumi.StringInput) AccessLevelsOutput

func (AccessLevelsMapOutput) ToAccessLevelsMapOutput 

func (o AccessLevelsMapOutput) ToAccessLevelsMapOutput() AccessLevelsMapOutput

func (AccessLevelsMapOutput) ToAccessLevelsMapOutputWithContext 

func (o AccessLevelsMapOutput) ToAccessLevelsMapOutputWithContext(ctx context.Context) AccessLevelsMapOutput

type AccessLevelsOutput 

type AccessLevelsOutput struct{ *pulumi.OutputState }

func (AccessLevelsOutput) AccessLevels 

func (o AccessLevelsOutput) AccessLevels() AccessLevelsAccessLevelArrayOutput

The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.

func (AccessLevelsOutput) ElementType 

func (AccessLevelsOutput) ElementType() reflect.Type

func (AccessLevelsOutput) Parent 

func (o AccessLevelsOutput) Parent() pulumi.StringOutput

The AccessPolicy this AccessLevel lives in. Format: accessPolicies/{policy_id}

***

func (AccessLevelsOutput) ToAccessLevelsOutput 

func (o AccessLevelsOutput) ToAccessLevelsOutput() AccessLevelsOutput

func (AccessLevelsOutput) ToAccessLevelsOutputWithContext 

func (o AccessLevelsOutput) ToAccessLevelsOutputWithContext(ctx context.Context) AccessLevelsOutput

type AccessLevelsState 

type AccessLevelsState struct {
	// The desired Access Levels that should replace all existing Access Levels in the Access Policy.
	// Structure is documented below.
	AccessLevels AccessLevelsAccessLevelArrayInput
	// The AccessPolicy this AccessLevel lives in.
	// Format: accessPolicies/{policy_id}
	//
	// ***
	Parent pulumi.StringPtrInput
}

func (AccessLevelsState) ElementType 

func (AccessLevelsState) ElementType() reflect.Type

type AccessPolicy 

type AccessPolicy struct {
	pulumi.CustomResourceState

	// Time the AccessPolicy was created in UTC.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Resource name of the AccessPolicy. Format: '{{policy_id}}'
	Name pulumi.StringOutput `pulumi:"name"`
	// The parent of this AccessPolicy in the Cloud Resource Hierarchy.
	// Format: 'organizations/{{organization_id}}'
	Parent pulumi.StringOutput `pulumi:"parent"`
	// Folder or project on which this policy is applicable.
	// Format: 'folders/{{folder_id}}' or 'projects/{{project_number}}'
	Scopes pulumi.StringPtrOutput `pulumi:"scopes"`
	// Human readable title. Does not affect behavior.
	//
	// ***
	Title pulumi.StringOutput `pulumi:"title"`
	// Time the AccessPolicy was updated in UTC.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

AccessPolicy is a container for AccessLevels (which define the necessary attributes to use GCP services) and ServicePerimeters (which define regions of services able to freely pass data within a perimeter). An access policy is globally visible within an organization, and the restrictions it specifies apply to all projects within an organization.

To get more information about AccessPolicy, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies) * How-to Guides

> **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, you must specify a `billingProject` and set `userProjectOverride` to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the `serviceusage.services.use` permission on the `billingProject` you defined.

## Example Usage

### Access Context Manager Access Policy Basic

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("Org Access Policy"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Access Context Manager Access Policy Scoped

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		project, err := organizations.NewProject(ctx, "project", &organizations.ProjectArgs{
			ProjectId:      pulumi.String("my-project-name"),
			Name:           pulumi.String("my-project-name"),
			OrgId:          pulumi.String("123456789"),
			DeletionPolicy: pulumi.String("DELETE"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("Scoped Access Policy"),
			Scopes: project.Number.ApplyT(func(number string) (string, error) {
				return fmt.Sprintf("projects/%v", number), nil
			}).(pulumi.StringOutput),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

AccessPolicy can be imported using any of these accepted formats:

* `{{name}}`

When using the `pulumi import` command, AccessPolicy can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/accessPolicy:AccessPolicy default {{name}} ```

func GetAccessPolicy 

func GetAccessPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessPolicyState, opts ...pulumi.ResourceOption) (*AccessPolicy, error)

GetAccessPolicy gets an existing AccessPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessPolicy 

func NewAccessPolicy(ctx *pulumi.Context,
	name string, args *AccessPolicyArgs, opts ...pulumi.ResourceOption) (*AccessPolicy, error)

NewAccessPolicy registers a new resource with the given unique name, arguments, and options.

func (*AccessPolicy) ElementType 

func (*AccessPolicy) ElementType() reflect.Type

func (*AccessPolicy) ToAccessPolicyOutput 

func (i *AccessPolicy) ToAccessPolicyOutput() AccessPolicyOutput

func (*AccessPolicy) ToAccessPolicyOutputWithContext 

func (i *AccessPolicy) ToAccessPolicyOutputWithContext(ctx context.Context) AccessPolicyOutput

type AccessPolicyArgs 

type AccessPolicyArgs struct {
	// The parent of this AccessPolicy in the Cloud Resource Hierarchy.
	// Format: 'organizations/{{organization_id}}'
	Parent pulumi.StringInput
	// Folder or project on which this policy is applicable.
	// Format: 'folders/{{folder_id}}' or 'projects/{{project_number}}'
	Scopes pulumi.StringPtrInput
	// Human readable title. Does not affect behavior.
	//
	// ***
	Title pulumi.StringInput
}

The set of arguments for constructing a AccessPolicy resource.

func (AccessPolicyArgs) ElementType 

func (AccessPolicyArgs) ElementType() reflect.Type

type AccessPolicyArray 

type AccessPolicyArray []AccessPolicyInput

func (AccessPolicyArray) ElementType 

func (AccessPolicyArray) ElementType() reflect.Type

func (AccessPolicyArray) ToAccessPolicyArrayOutput 

func (i AccessPolicyArray) ToAccessPolicyArrayOutput() AccessPolicyArrayOutput

func (AccessPolicyArray) ToAccessPolicyArrayOutputWithContext 

func (i AccessPolicyArray) ToAccessPolicyArrayOutputWithContext(ctx context.Context) AccessPolicyArrayOutput

type AccessPolicyArrayInput 

type AccessPolicyArrayInput interface {
	pulumi.Input

	ToAccessPolicyArrayOutput() AccessPolicyArrayOutput
	ToAccessPolicyArrayOutputWithContext(context.Context) AccessPolicyArrayOutput
}

AccessPolicyArrayInput is an input type that accepts AccessPolicyArray and AccessPolicyArrayOutput values. You can construct a concrete instance of `AccessPolicyArrayInput` via: 

AccessPolicyArray{ AccessPolicyArgs{...} }

type AccessPolicyArrayOutput 

type AccessPolicyArrayOutput struct{ *pulumi.OutputState }

func (AccessPolicyArrayOutput) ElementType 

func (AccessPolicyArrayOutput) ElementType() reflect.Type

func (AccessPolicyArrayOutput) Index 

func (o AccessPolicyArrayOutput) Index(i pulumi.IntInput) AccessPolicyOutput

func (AccessPolicyArrayOutput) ToAccessPolicyArrayOutput 

func (o AccessPolicyArrayOutput) ToAccessPolicyArrayOutput() AccessPolicyArrayOutput

func (AccessPolicyArrayOutput) ToAccessPolicyArrayOutputWithContext 

func (o AccessPolicyArrayOutput) ToAccessPolicyArrayOutputWithContext(ctx context.Context) AccessPolicyArrayOutput

type AccessPolicyIamBinding 

type AccessPolicyIamBinding struct {
	pulumi.CustomResourceState

	Condition AccessPolicyIamBindingConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringOutput `pulumi:"name"`
	// The role that should be applied. Only one
	// `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

* `accesscontextmanager.AccessPolicyIamPolicy`: Authoritative. Sets the IAM policy for the accesspolicy and replaces any existing policy already attached. * `accesscontextmanager.AccessPolicyIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the accesspolicy are preserved. * `accesscontextmanager.AccessPolicyIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the accesspolicy are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `accesscontextmanager.AccessPolicyIamPolicy`: Retrieves the IAM policy for the accesspolicy

> **Note:** `accesscontextmanager.AccessPolicyIamPolicy` **cannot** be used in conjunction with `accesscontextmanager.AccessPolicyIamBinding` and `accesscontextmanager.AccessPolicyIamMember` or they will fight over what your policy should be.

> **Note:** `accesscontextmanager.AccessPolicyIamBinding` resources **can be** used in conjunction with `accesscontextmanager.AccessPolicyIamMember` resources **only if** they do not grant privilege to the same role.

## accesscontextmanager.AccessPolicyIamPolicy

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/accesscontextmanager.policyAdmin",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicyIamPolicy(ctx, "policy", &accesscontextmanager.AccessPolicyIamPolicyArgs{
			Name:       pulumi.Any(access_policy.Name),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamBinding(ctx, "binding", &accesscontextmanager.AccessPolicyIamBindingArgs{
			Name: pulumi.Any(access_policy.Name),
			Role: pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamMember(ctx, "member", &accesscontextmanager.AccessPolicyIamMemberArgs{
			Name:   pulumi.Any(access_policy.Name),
			Role:   pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`. ---

# IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

* `accesscontextmanager.AccessPolicyIamPolicy`: Authoritative. Sets the IAM policy for the accesspolicy and replaces any existing policy already attached. * `accesscontextmanager.AccessPolicyIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the accesspolicy are preserved. * `accesscontextmanager.AccessPolicyIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the accesspolicy are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `accesscontextmanager.AccessPolicyIamPolicy`: Retrieves the IAM policy for the accesspolicy

> **Note:** `accesscontextmanager.AccessPolicyIamPolicy` **cannot** be used in conjunction with `accesscontextmanager.AccessPolicyIamBinding` and `accesscontextmanager.AccessPolicyIamMember` or they will fight over what your policy should be.

> **Note:** `accesscontextmanager.AccessPolicyIamBinding` resources **can be** used in conjunction with `accesscontextmanager.AccessPolicyIamMember` resources **only if** they do not grant privilege to the same role.

## accesscontextmanager.AccessPolicyIamPolicy

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/accesscontextmanager.policyAdmin",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicyIamPolicy(ctx, "policy", &accesscontextmanager.AccessPolicyIamPolicyArgs{
			Name:       pulumi.Any(access_policy.Name),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamBinding(ctx, "binding", &accesscontextmanager.AccessPolicyIamBindingArgs{
			Name: pulumi.Any(access_policy.Name),
			Role: pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamMember(ctx, "member", &accesscontextmanager.AccessPolicyIamMemberArgs{
			Name:   pulumi.Any(access_policy.Name),
			Role:   pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* accessPolicies/{{name}}

* {{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Access Context Manager (VPC Service Controls) accesspolicy IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamBinding:AccessPolicyIamBinding editor "accessPolicies/{{access_policy}} roles/accesscontextmanager.policyAdmin user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamBinding:AccessPolicyIamBinding editor "accessPolicies/{{access_policy}} roles/accesscontextmanager.policyAdmin" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamBinding:AccessPolicyIamBinding editor accessPolicies/{{access_policy}} ```

-> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the 

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetAccessPolicyIamBinding 

func GetAccessPolicyIamBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessPolicyIamBindingState, opts ...pulumi.ResourceOption) (*AccessPolicyIamBinding, error)

GetAccessPolicyIamBinding gets an existing AccessPolicyIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessPolicyIamBinding 

func NewAccessPolicyIamBinding(ctx *pulumi.Context,
	name string, args *AccessPolicyIamBindingArgs, opts ...pulumi.ResourceOption) (*AccessPolicyIamBinding, error)

NewAccessPolicyIamBinding registers a new resource with the given unique name, arguments, and options.

func (*AccessPolicyIamBinding) ElementType 

func (*AccessPolicyIamBinding) ElementType() reflect.Type

func (*AccessPolicyIamBinding) ToAccessPolicyIamBindingOutput 

func (i *AccessPolicyIamBinding) ToAccessPolicyIamBindingOutput() AccessPolicyIamBindingOutput

func (*AccessPolicyIamBinding) ToAccessPolicyIamBindingOutputWithContext 

func (i *AccessPolicyIamBinding) ToAccessPolicyIamBindingOutputWithContext(ctx context.Context) AccessPolicyIamBindingOutput

type AccessPolicyIamBindingArgs 

type AccessPolicyIamBindingArgs struct {
	Condition AccessPolicyIamBindingConditionPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayInput
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a AccessPolicyIamBinding resource.

func (AccessPolicyIamBindingArgs) ElementType 

func (AccessPolicyIamBindingArgs) ElementType() reflect.Type

type AccessPolicyIamBindingArray 

type AccessPolicyIamBindingArray []AccessPolicyIamBindingInput

func (AccessPolicyIamBindingArray) ElementType 

func (AccessPolicyIamBindingArray) ElementType() reflect.Type

func (AccessPolicyIamBindingArray) ToAccessPolicyIamBindingArrayOutput 

func (i AccessPolicyIamBindingArray) ToAccessPolicyIamBindingArrayOutput() AccessPolicyIamBindingArrayOutput

func (AccessPolicyIamBindingArray) ToAccessPolicyIamBindingArrayOutputWithContext 

func (i AccessPolicyIamBindingArray) ToAccessPolicyIamBindingArrayOutputWithContext(ctx context.Context) AccessPolicyIamBindingArrayOutput

type AccessPolicyIamBindingArrayInput 

type AccessPolicyIamBindingArrayInput interface {
	pulumi.Input

	ToAccessPolicyIamBindingArrayOutput() AccessPolicyIamBindingArrayOutput
	ToAccessPolicyIamBindingArrayOutputWithContext(context.Context) AccessPolicyIamBindingArrayOutput
}

AccessPolicyIamBindingArrayInput is an input type that accepts AccessPolicyIamBindingArray and AccessPolicyIamBindingArrayOutput values. You can construct a concrete instance of `AccessPolicyIamBindingArrayInput` via: 

AccessPolicyIamBindingArray{ AccessPolicyIamBindingArgs{...} }

type AccessPolicyIamBindingArrayOutput 

type AccessPolicyIamBindingArrayOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamBindingArrayOutput) ElementType 

func (AccessPolicyIamBindingArrayOutput) ElementType() reflect.Type

func (AccessPolicyIamBindingArrayOutput) Index 

func (o AccessPolicyIamBindingArrayOutput) Index(i pulumi.IntInput) AccessPolicyIamBindingOutput

func (AccessPolicyIamBindingArrayOutput) ToAccessPolicyIamBindingArrayOutput 

func (o AccessPolicyIamBindingArrayOutput) ToAccessPolicyIamBindingArrayOutput() AccessPolicyIamBindingArrayOutput

func (AccessPolicyIamBindingArrayOutput) ToAccessPolicyIamBindingArrayOutputWithContext 

func (o AccessPolicyIamBindingArrayOutput) ToAccessPolicyIamBindingArrayOutputWithContext(ctx context.Context) AccessPolicyIamBindingArrayOutput

type AccessPolicyIamBindingCondition 

type AccessPolicyIamBindingCondition struct {
	Description *string `pulumi:"description"`
	Expression  string  `pulumi:"expression"`
	Title       string  `pulumi:"title"`
}

type AccessPolicyIamBindingConditionArgs 

type AccessPolicyIamBindingConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	Expression  pulumi.StringInput    `pulumi:"expression"`
	Title       pulumi.StringInput    `pulumi:"title"`
}

func (AccessPolicyIamBindingConditionArgs) ElementType 

func (AccessPolicyIamBindingConditionArgs) ElementType() reflect.Type

func (AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionOutput 

func (i AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionOutput() AccessPolicyIamBindingConditionOutput

func (AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionOutputWithContext 

func (i AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionOutputWithContext(ctx context.Context) AccessPolicyIamBindingConditionOutput

func (AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionPtrOutput 

func (i AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionPtrOutput() AccessPolicyIamBindingConditionPtrOutput

func (AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionPtrOutputWithContext 

func (i AccessPolicyIamBindingConditionArgs) ToAccessPolicyIamBindingConditionPtrOutputWithContext(ctx context.Context) AccessPolicyIamBindingConditionPtrOutput

type AccessPolicyIamBindingConditionInput 

type AccessPolicyIamBindingConditionInput interface {
	pulumi.Input

	ToAccessPolicyIamBindingConditionOutput() AccessPolicyIamBindingConditionOutput
	ToAccessPolicyIamBindingConditionOutputWithContext(context.Context) AccessPolicyIamBindingConditionOutput
}

AccessPolicyIamBindingConditionInput is an input type that accepts AccessPolicyIamBindingConditionArgs and AccessPolicyIamBindingConditionOutput values. You can construct a concrete instance of `AccessPolicyIamBindingConditionInput` via: 

AccessPolicyIamBindingConditionArgs{...}

type AccessPolicyIamBindingConditionOutput 

type AccessPolicyIamBindingConditionOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamBindingConditionOutput) Description 

func (o AccessPolicyIamBindingConditionOutput) Description() pulumi.StringPtrOutput

func (AccessPolicyIamBindingConditionOutput) ElementType 

func (AccessPolicyIamBindingConditionOutput) ElementType() reflect.Type

func (AccessPolicyIamBindingConditionOutput) Expression 

func (o AccessPolicyIamBindingConditionOutput) Expression() pulumi.StringOutput

func (AccessPolicyIamBindingConditionOutput) Title 

func (o AccessPolicyIamBindingConditionOutput) Title() pulumi.StringOutput

func (AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionOutput 

func (o AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionOutput() AccessPolicyIamBindingConditionOutput

func (AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionOutputWithContext 

func (o AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionOutputWithContext(ctx context.Context) AccessPolicyIamBindingConditionOutput

func (AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionPtrOutput 

func (o AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionPtrOutput() AccessPolicyIamBindingConditionPtrOutput

func (AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionPtrOutputWithContext 

func (o AccessPolicyIamBindingConditionOutput) ToAccessPolicyIamBindingConditionPtrOutputWithContext(ctx context.Context) AccessPolicyIamBindingConditionPtrOutput

type AccessPolicyIamBindingConditionPtrInput 

type AccessPolicyIamBindingConditionPtrInput interface {
	pulumi.Input

	ToAccessPolicyIamBindingConditionPtrOutput() AccessPolicyIamBindingConditionPtrOutput
	ToAccessPolicyIamBindingConditionPtrOutputWithContext(context.Context) AccessPolicyIamBindingConditionPtrOutput
}

AccessPolicyIamBindingConditionPtrInput is an input type that accepts AccessPolicyIamBindingConditionArgs, AccessPolicyIamBindingConditionPtr and AccessPolicyIamBindingConditionPtrOutput values. You can construct a concrete instance of `AccessPolicyIamBindingConditionPtrInput` via: 

        AccessPolicyIamBindingConditionArgs{...}

or:

        nil

func AccessPolicyIamBindingConditionPtr 

func AccessPolicyIamBindingConditionPtr(v *AccessPolicyIamBindingConditionArgs) AccessPolicyIamBindingConditionPtrInput

type AccessPolicyIamBindingConditionPtrOutput 

type AccessPolicyIamBindingConditionPtrOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamBindingConditionPtrOutput) Description 

func (o AccessPolicyIamBindingConditionPtrOutput) Description() pulumi.StringPtrOutput

func (AccessPolicyIamBindingConditionPtrOutput) Elem 

func (o AccessPolicyIamBindingConditionPtrOutput) Elem() AccessPolicyIamBindingConditionOutput

func (AccessPolicyIamBindingConditionPtrOutput) ElementType 

func (AccessPolicyIamBindingConditionPtrOutput) ElementType() reflect.Type

func (AccessPolicyIamBindingConditionPtrOutput) Expression 

func (o AccessPolicyIamBindingConditionPtrOutput) Expression() pulumi.StringPtrOutput

func (AccessPolicyIamBindingConditionPtrOutput) Title 

func (o AccessPolicyIamBindingConditionPtrOutput) Title() pulumi.StringPtrOutput

func (AccessPolicyIamBindingConditionPtrOutput) ToAccessPolicyIamBindingConditionPtrOutput 

func (o AccessPolicyIamBindingConditionPtrOutput) ToAccessPolicyIamBindingConditionPtrOutput() AccessPolicyIamBindingConditionPtrOutput

func (AccessPolicyIamBindingConditionPtrOutput) ToAccessPolicyIamBindingConditionPtrOutputWithContext 

func (o AccessPolicyIamBindingConditionPtrOutput) ToAccessPolicyIamBindingConditionPtrOutputWithContext(ctx context.Context) AccessPolicyIamBindingConditionPtrOutput

type AccessPolicyIamBindingInput 

type AccessPolicyIamBindingInput interface {
	pulumi.Input

	ToAccessPolicyIamBindingOutput() AccessPolicyIamBindingOutput
	ToAccessPolicyIamBindingOutputWithContext(ctx context.Context) AccessPolicyIamBindingOutput
}

type AccessPolicyIamBindingMap 

type AccessPolicyIamBindingMap map[string]AccessPolicyIamBindingInput

func (AccessPolicyIamBindingMap) ElementType 

func (AccessPolicyIamBindingMap) ElementType() reflect.Type

func (AccessPolicyIamBindingMap) ToAccessPolicyIamBindingMapOutput 

func (i AccessPolicyIamBindingMap) ToAccessPolicyIamBindingMapOutput() AccessPolicyIamBindingMapOutput

func (AccessPolicyIamBindingMap) ToAccessPolicyIamBindingMapOutputWithContext 

func (i AccessPolicyIamBindingMap) ToAccessPolicyIamBindingMapOutputWithContext(ctx context.Context) AccessPolicyIamBindingMapOutput

type AccessPolicyIamBindingMapInput 

type AccessPolicyIamBindingMapInput interface {
	pulumi.Input

	ToAccessPolicyIamBindingMapOutput() AccessPolicyIamBindingMapOutput
	ToAccessPolicyIamBindingMapOutputWithContext(context.Context) AccessPolicyIamBindingMapOutput
}

AccessPolicyIamBindingMapInput is an input type that accepts AccessPolicyIamBindingMap and AccessPolicyIamBindingMapOutput values. You can construct a concrete instance of `AccessPolicyIamBindingMapInput` via: 

AccessPolicyIamBindingMap{ "key": AccessPolicyIamBindingArgs{...} }

type AccessPolicyIamBindingMapOutput 

type AccessPolicyIamBindingMapOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamBindingMapOutput) ElementType 

func (AccessPolicyIamBindingMapOutput) ElementType() reflect.Type

func (AccessPolicyIamBindingMapOutput) MapIndex 

func (o AccessPolicyIamBindingMapOutput) MapIndex(k pulumi.StringInput) AccessPolicyIamBindingOutput

func (AccessPolicyIamBindingMapOutput) ToAccessPolicyIamBindingMapOutput 

func (o AccessPolicyIamBindingMapOutput) ToAccessPolicyIamBindingMapOutput() AccessPolicyIamBindingMapOutput

func (AccessPolicyIamBindingMapOutput) ToAccessPolicyIamBindingMapOutputWithContext 

func (o AccessPolicyIamBindingMapOutput) ToAccessPolicyIamBindingMapOutputWithContext(ctx context.Context) AccessPolicyIamBindingMapOutput

type AccessPolicyIamBindingOutput 

type AccessPolicyIamBindingOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamBindingOutput) Condition 

func (o AccessPolicyIamBindingOutput) Condition() AccessPolicyIamBindingConditionPtrOutput

func (AccessPolicyIamBindingOutput) ElementType 

func (AccessPolicyIamBindingOutput) ElementType() reflect.Type

func (AccessPolicyIamBindingOutput) Etag 

func (o AccessPolicyIamBindingOutput) Etag() pulumi.StringOutput

(Computed) The etag of the IAM policy.

func (AccessPolicyIamBindingOutput) Members 

func (o AccessPolicyIamBindingOutput) Members() pulumi.StringArrayOutput

Identities that will be granted the privilege in `role`. Each entry can have one of the following values: * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com. * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project" * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project" * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"

func (AccessPolicyIamBindingOutput) Name 

func (o AccessPolicyIamBindingOutput) Name() pulumi.StringOutput

Used to find the parent resource to bind the IAM policy to

func (AccessPolicyIamBindingOutput) Role 

func (o AccessPolicyIamBindingOutput) Role() pulumi.StringOutput

The role that should be applied. Only one `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (AccessPolicyIamBindingOutput) ToAccessPolicyIamBindingOutput 

func (o AccessPolicyIamBindingOutput) ToAccessPolicyIamBindingOutput() AccessPolicyIamBindingOutput

func (AccessPolicyIamBindingOutput) ToAccessPolicyIamBindingOutputWithContext 

func (o AccessPolicyIamBindingOutput) ToAccessPolicyIamBindingOutputWithContext(ctx context.Context) AccessPolicyIamBindingOutput

type AccessPolicyIamBindingState 

type AccessPolicyIamBindingState struct {
	Condition AccessPolicyIamBindingConditionPtrInput
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Members pulumi.StringArrayInput
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (AccessPolicyIamBindingState) ElementType 

func (AccessPolicyIamBindingState) ElementType() reflect.Type

type AccessPolicyIamMember 

type AccessPolicyIamMember struct {
	pulumi.CustomResourceState

	Condition AccessPolicyIamMemberConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringOutput `pulumi:"member"`
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringOutput `pulumi:"name"`
	// The role that should be applied. Only one
	// `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

* `accesscontextmanager.AccessPolicyIamPolicy`: Authoritative. Sets the IAM policy for the accesspolicy and replaces any existing policy already attached. * `accesscontextmanager.AccessPolicyIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the accesspolicy are preserved. * `accesscontextmanager.AccessPolicyIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the accesspolicy are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `accesscontextmanager.AccessPolicyIamPolicy`: Retrieves the IAM policy for the accesspolicy

> **Note:** `accesscontextmanager.AccessPolicyIamPolicy` **cannot** be used in conjunction with `accesscontextmanager.AccessPolicyIamBinding` and `accesscontextmanager.AccessPolicyIamMember` or they will fight over what your policy should be.

> **Note:** `accesscontextmanager.AccessPolicyIamBinding` resources **can be** used in conjunction with `accesscontextmanager.AccessPolicyIamMember` resources **only if** they do not grant privilege to the same role.

## accesscontextmanager.AccessPolicyIamPolicy

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/accesscontextmanager.policyAdmin",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicyIamPolicy(ctx, "policy", &accesscontextmanager.AccessPolicyIamPolicyArgs{
			Name:       pulumi.Any(access_policy.Name),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamBinding(ctx, "binding", &accesscontextmanager.AccessPolicyIamBindingArgs{
			Name: pulumi.Any(access_policy.Name),
			Role: pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamMember(ctx, "member", &accesscontextmanager.AccessPolicyIamMemberArgs{
			Name:   pulumi.Any(access_policy.Name),
			Role:   pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`. ---

# IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

* `accesscontextmanager.AccessPolicyIamPolicy`: Authoritative. Sets the IAM policy for the accesspolicy and replaces any existing policy already attached. * `accesscontextmanager.AccessPolicyIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the accesspolicy are preserved. * `accesscontextmanager.AccessPolicyIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the accesspolicy are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `accesscontextmanager.AccessPolicyIamPolicy`: Retrieves the IAM policy for the accesspolicy

> **Note:** `accesscontextmanager.AccessPolicyIamPolicy` **cannot** be used in conjunction with `accesscontextmanager.AccessPolicyIamBinding` and `accesscontextmanager.AccessPolicyIamMember` or they will fight over what your policy should be.

> **Note:** `accesscontextmanager.AccessPolicyIamBinding` resources **can be** used in conjunction with `accesscontextmanager.AccessPolicyIamMember` resources **only if** they do not grant privilege to the same role.

## accesscontextmanager.AccessPolicyIamPolicy

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/accesscontextmanager.policyAdmin",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicyIamPolicy(ctx, "policy", &accesscontextmanager.AccessPolicyIamPolicyArgs{
			Name:       pulumi.Any(access_policy.Name),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamBinding(ctx, "binding", &accesscontextmanager.AccessPolicyIamBindingArgs{
			Name: pulumi.Any(access_policy.Name),
			Role: pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamMember(ctx, "member", &accesscontextmanager.AccessPolicyIamMemberArgs{
			Name:   pulumi.Any(access_policy.Name),
			Role:   pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* accessPolicies/{{name}}

* {{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Access Context Manager (VPC Service Controls) accesspolicy IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamMember:AccessPolicyIamMember editor "accessPolicies/{{access_policy}} roles/accesscontextmanager.policyAdmin user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamMember:AccessPolicyIamMember editor "accessPolicies/{{access_policy}} roles/accesscontextmanager.policyAdmin" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamMember:AccessPolicyIamMember editor accessPolicies/{{access_policy}} ```

-> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the 

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetAccessPolicyIamMember 

func GetAccessPolicyIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessPolicyIamMemberState, opts ...pulumi.ResourceOption) (*AccessPolicyIamMember, error)

GetAccessPolicyIamMember gets an existing AccessPolicyIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessPolicyIamMember 

func NewAccessPolicyIamMember(ctx *pulumi.Context,
	name string, args *AccessPolicyIamMemberArgs, opts ...pulumi.ResourceOption) (*AccessPolicyIamMember, error)

NewAccessPolicyIamMember registers a new resource with the given unique name, arguments, and options.

func (*AccessPolicyIamMember) ElementType 

func (*AccessPolicyIamMember) ElementType() reflect.Type

func (*AccessPolicyIamMember) ToAccessPolicyIamMemberOutput 

func (i *AccessPolicyIamMember) ToAccessPolicyIamMemberOutput() AccessPolicyIamMemberOutput

func (*AccessPolicyIamMember) ToAccessPolicyIamMemberOutputWithContext 

func (i *AccessPolicyIamMember) ToAccessPolicyIamMemberOutputWithContext(ctx context.Context) AccessPolicyIamMemberOutput

type AccessPolicyIamMemberArgs 

type AccessPolicyIamMemberArgs struct {
	Condition AccessPolicyIamMemberConditionPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringInput
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a AccessPolicyIamMember resource.

func (AccessPolicyIamMemberArgs) ElementType 

func (AccessPolicyIamMemberArgs) ElementType() reflect.Type

type AccessPolicyIamMemberArray 

type AccessPolicyIamMemberArray []AccessPolicyIamMemberInput

func (AccessPolicyIamMemberArray) ElementType 

func (AccessPolicyIamMemberArray) ElementType() reflect.Type

func (AccessPolicyIamMemberArray) ToAccessPolicyIamMemberArrayOutput 

func (i AccessPolicyIamMemberArray) ToAccessPolicyIamMemberArrayOutput() AccessPolicyIamMemberArrayOutput

func (AccessPolicyIamMemberArray) ToAccessPolicyIamMemberArrayOutputWithContext 

func (i AccessPolicyIamMemberArray) ToAccessPolicyIamMemberArrayOutputWithContext(ctx context.Context) AccessPolicyIamMemberArrayOutput

type AccessPolicyIamMemberArrayInput 

type AccessPolicyIamMemberArrayInput interface {
	pulumi.Input

	ToAccessPolicyIamMemberArrayOutput() AccessPolicyIamMemberArrayOutput
	ToAccessPolicyIamMemberArrayOutputWithContext(context.Context) AccessPolicyIamMemberArrayOutput
}

AccessPolicyIamMemberArrayInput is an input type that accepts AccessPolicyIamMemberArray and AccessPolicyIamMemberArrayOutput values. You can construct a concrete instance of `AccessPolicyIamMemberArrayInput` via: 

AccessPolicyIamMemberArray{ AccessPolicyIamMemberArgs{...} }

type AccessPolicyIamMemberArrayOutput 

type AccessPolicyIamMemberArrayOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamMemberArrayOutput) ElementType 

func (AccessPolicyIamMemberArrayOutput) ElementType() reflect.Type

func (AccessPolicyIamMemberArrayOutput) Index 

func (o AccessPolicyIamMemberArrayOutput) Index(i pulumi.IntInput) AccessPolicyIamMemberOutput

func (AccessPolicyIamMemberArrayOutput) ToAccessPolicyIamMemberArrayOutput 

func (o AccessPolicyIamMemberArrayOutput) ToAccessPolicyIamMemberArrayOutput() AccessPolicyIamMemberArrayOutput

func (AccessPolicyIamMemberArrayOutput) ToAccessPolicyIamMemberArrayOutputWithContext 

func (o AccessPolicyIamMemberArrayOutput) ToAccessPolicyIamMemberArrayOutputWithContext(ctx context.Context) AccessPolicyIamMemberArrayOutput

type AccessPolicyIamMemberCondition 

type AccessPolicyIamMemberCondition struct {
	Description *string `pulumi:"description"`
	Expression  string  `pulumi:"expression"`
	Title       string  `pulumi:"title"`
}

type AccessPolicyIamMemberConditionArgs 

type AccessPolicyIamMemberConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	Expression  pulumi.StringInput    `pulumi:"expression"`
	Title       pulumi.StringInput    `pulumi:"title"`
}

func (AccessPolicyIamMemberConditionArgs) ElementType 

func (AccessPolicyIamMemberConditionArgs) ElementType() reflect.Type

func (AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionOutput 

func (i AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionOutput() AccessPolicyIamMemberConditionOutput

func (AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionOutputWithContext 

func (i AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionOutputWithContext(ctx context.Context) AccessPolicyIamMemberConditionOutput

func (AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionPtrOutput 

func (i AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionPtrOutput() AccessPolicyIamMemberConditionPtrOutput

func (AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionPtrOutputWithContext 

func (i AccessPolicyIamMemberConditionArgs) ToAccessPolicyIamMemberConditionPtrOutputWithContext(ctx context.Context) AccessPolicyIamMemberConditionPtrOutput

type AccessPolicyIamMemberConditionInput 

type AccessPolicyIamMemberConditionInput interface {
	pulumi.Input

	ToAccessPolicyIamMemberConditionOutput() AccessPolicyIamMemberConditionOutput
	ToAccessPolicyIamMemberConditionOutputWithContext(context.Context) AccessPolicyIamMemberConditionOutput
}

AccessPolicyIamMemberConditionInput is an input type that accepts AccessPolicyIamMemberConditionArgs and AccessPolicyIamMemberConditionOutput values. You can construct a concrete instance of `AccessPolicyIamMemberConditionInput` via: 

AccessPolicyIamMemberConditionArgs{...}

type AccessPolicyIamMemberConditionOutput 

type AccessPolicyIamMemberConditionOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamMemberConditionOutput) Description 

func (o AccessPolicyIamMemberConditionOutput) Description() pulumi.StringPtrOutput

func (AccessPolicyIamMemberConditionOutput) ElementType 

func (AccessPolicyIamMemberConditionOutput) ElementType() reflect.Type

func (AccessPolicyIamMemberConditionOutput) Expression 

func (o AccessPolicyIamMemberConditionOutput) Expression() pulumi.StringOutput

func (AccessPolicyIamMemberConditionOutput) Title 

func (o AccessPolicyIamMemberConditionOutput) Title() pulumi.StringOutput

func (AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionOutput 

func (o AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionOutput() AccessPolicyIamMemberConditionOutput

func (AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionOutputWithContext 

func (o AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionOutputWithContext(ctx context.Context) AccessPolicyIamMemberConditionOutput

func (AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionPtrOutput 

func (o AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionPtrOutput() AccessPolicyIamMemberConditionPtrOutput

func (AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionPtrOutputWithContext 

func (o AccessPolicyIamMemberConditionOutput) ToAccessPolicyIamMemberConditionPtrOutputWithContext(ctx context.Context) AccessPolicyIamMemberConditionPtrOutput

type AccessPolicyIamMemberConditionPtrInput 

type AccessPolicyIamMemberConditionPtrInput interface {
	pulumi.Input

	ToAccessPolicyIamMemberConditionPtrOutput() AccessPolicyIamMemberConditionPtrOutput
	ToAccessPolicyIamMemberConditionPtrOutputWithContext(context.Context) AccessPolicyIamMemberConditionPtrOutput
}

AccessPolicyIamMemberConditionPtrInput is an input type that accepts AccessPolicyIamMemberConditionArgs, AccessPolicyIamMemberConditionPtr and AccessPolicyIamMemberConditionPtrOutput values. You can construct a concrete instance of `AccessPolicyIamMemberConditionPtrInput` via: 

        AccessPolicyIamMemberConditionArgs{...}

or:

        nil

func AccessPolicyIamMemberConditionPtr 

func AccessPolicyIamMemberConditionPtr(v *AccessPolicyIamMemberConditionArgs) AccessPolicyIamMemberConditionPtrInput

type AccessPolicyIamMemberConditionPtrOutput 

type AccessPolicyIamMemberConditionPtrOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamMemberConditionPtrOutput) Description 

func (o AccessPolicyIamMemberConditionPtrOutput) Description() pulumi.StringPtrOutput

func (AccessPolicyIamMemberConditionPtrOutput) Elem 

func (o AccessPolicyIamMemberConditionPtrOutput) Elem() AccessPolicyIamMemberConditionOutput

func (AccessPolicyIamMemberConditionPtrOutput) ElementType 

func (AccessPolicyIamMemberConditionPtrOutput) ElementType() reflect.Type

func (AccessPolicyIamMemberConditionPtrOutput) Expression 

func (o AccessPolicyIamMemberConditionPtrOutput) Expression() pulumi.StringPtrOutput

func (AccessPolicyIamMemberConditionPtrOutput) Title 

func (o AccessPolicyIamMemberConditionPtrOutput) Title() pulumi.StringPtrOutput

func (AccessPolicyIamMemberConditionPtrOutput) ToAccessPolicyIamMemberConditionPtrOutput 

func (o AccessPolicyIamMemberConditionPtrOutput) ToAccessPolicyIamMemberConditionPtrOutput() AccessPolicyIamMemberConditionPtrOutput

func (AccessPolicyIamMemberConditionPtrOutput) ToAccessPolicyIamMemberConditionPtrOutputWithContext 

func (o AccessPolicyIamMemberConditionPtrOutput) ToAccessPolicyIamMemberConditionPtrOutputWithContext(ctx context.Context) AccessPolicyIamMemberConditionPtrOutput

type AccessPolicyIamMemberInput 

type AccessPolicyIamMemberInput interface {
	pulumi.Input

	ToAccessPolicyIamMemberOutput() AccessPolicyIamMemberOutput
	ToAccessPolicyIamMemberOutputWithContext(ctx context.Context) AccessPolicyIamMemberOutput
}

type AccessPolicyIamMemberMap 

type AccessPolicyIamMemberMap map[string]AccessPolicyIamMemberInput

func (AccessPolicyIamMemberMap) ElementType 

func (AccessPolicyIamMemberMap) ElementType() reflect.Type

func (AccessPolicyIamMemberMap) ToAccessPolicyIamMemberMapOutput 

func (i AccessPolicyIamMemberMap) ToAccessPolicyIamMemberMapOutput() AccessPolicyIamMemberMapOutput

func (AccessPolicyIamMemberMap) ToAccessPolicyIamMemberMapOutputWithContext 

func (i AccessPolicyIamMemberMap) ToAccessPolicyIamMemberMapOutputWithContext(ctx context.Context) AccessPolicyIamMemberMapOutput

type AccessPolicyIamMemberMapInput 

type AccessPolicyIamMemberMapInput interface {
	pulumi.Input

	ToAccessPolicyIamMemberMapOutput() AccessPolicyIamMemberMapOutput
	ToAccessPolicyIamMemberMapOutputWithContext(context.Context) AccessPolicyIamMemberMapOutput
}

AccessPolicyIamMemberMapInput is an input type that accepts AccessPolicyIamMemberMap and AccessPolicyIamMemberMapOutput values. You can construct a concrete instance of `AccessPolicyIamMemberMapInput` via: 

AccessPolicyIamMemberMap{ "key": AccessPolicyIamMemberArgs{...} }

type AccessPolicyIamMemberMapOutput 

type AccessPolicyIamMemberMapOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamMemberMapOutput) ElementType 

func (AccessPolicyIamMemberMapOutput) ElementType() reflect.Type

func (AccessPolicyIamMemberMapOutput) MapIndex 

func (o AccessPolicyIamMemberMapOutput) MapIndex(k pulumi.StringInput) AccessPolicyIamMemberOutput

func (AccessPolicyIamMemberMapOutput) ToAccessPolicyIamMemberMapOutput 

func (o AccessPolicyIamMemberMapOutput) ToAccessPolicyIamMemberMapOutput() AccessPolicyIamMemberMapOutput

func (AccessPolicyIamMemberMapOutput) ToAccessPolicyIamMemberMapOutputWithContext 

func (o AccessPolicyIamMemberMapOutput) ToAccessPolicyIamMemberMapOutputWithContext(ctx context.Context) AccessPolicyIamMemberMapOutput

type AccessPolicyIamMemberOutput 

type AccessPolicyIamMemberOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamMemberOutput) Condition 

func (o AccessPolicyIamMemberOutput) Condition() AccessPolicyIamMemberConditionPtrOutput

func (AccessPolicyIamMemberOutput) ElementType 

func (AccessPolicyIamMemberOutput) ElementType() reflect.Type

func (AccessPolicyIamMemberOutput) Etag 

func (o AccessPolicyIamMemberOutput) Etag() pulumi.StringOutput

(Computed) The etag of the IAM policy.

func (AccessPolicyIamMemberOutput) Member 

func (o AccessPolicyIamMemberOutput) Member() pulumi.StringOutput

Identities that will be granted the privilege in `role`. Each entry can have one of the following values: * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com. * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project" * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project" * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"

func (AccessPolicyIamMemberOutput) Name 

func (o AccessPolicyIamMemberOutput) Name() pulumi.StringOutput

Used to find the parent resource to bind the IAM policy to

func (AccessPolicyIamMemberOutput) Role 

func (o AccessPolicyIamMemberOutput) Role() pulumi.StringOutput

The role that should be applied. Only one `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (AccessPolicyIamMemberOutput) ToAccessPolicyIamMemberOutput 

func (o AccessPolicyIamMemberOutput) ToAccessPolicyIamMemberOutput() AccessPolicyIamMemberOutput

func (AccessPolicyIamMemberOutput) ToAccessPolicyIamMemberOutputWithContext 

func (o AccessPolicyIamMemberOutput) ToAccessPolicyIamMemberOutputWithContext(ctx context.Context) AccessPolicyIamMemberOutput

type AccessPolicyIamMemberState 

type AccessPolicyIamMemberState struct {
	Condition AccessPolicyIamMemberConditionPtrInput
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`.
	// Each entry can have one of the following values:
	// * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
	// * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	// * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
	// * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
	// * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
	Member pulumi.StringPtrInput
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `accesscontextmanager.AccessPolicyIamBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (AccessPolicyIamMemberState) ElementType 

func (AccessPolicyIamMemberState) ElementType() reflect.Type

type AccessPolicyIamPolicy 

type AccessPolicyIamPolicy struct {
	pulumi.CustomResourceState

	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringOutput `pulumi:"name"`
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringOutput `pulumi:"policyData"`
}

Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

* `accesscontextmanager.AccessPolicyIamPolicy`: Authoritative. Sets the IAM policy for the accesspolicy and replaces any existing policy already attached. * `accesscontextmanager.AccessPolicyIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the accesspolicy are preserved. * `accesscontextmanager.AccessPolicyIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the accesspolicy are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `accesscontextmanager.AccessPolicyIamPolicy`: Retrieves the IAM policy for the accesspolicy

> **Note:** `accesscontextmanager.AccessPolicyIamPolicy` **cannot** be used in conjunction with `accesscontextmanager.AccessPolicyIamBinding` and `accesscontextmanager.AccessPolicyIamMember` or they will fight over what your policy should be.

> **Note:** `accesscontextmanager.AccessPolicyIamBinding` resources **can be** used in conjunction with `accesscontextmanager.AccessPolicyIamMember` resources **only if** they do not grant privilege to the same role.

## accesscontextmanager.AccessPolicyIamPolicy

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/accesscontextmanager.policyAdmin",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicyIamPolicy(ctx, "policy", &accesscontextmanager.AccessPolicyIamPolicyArgs{
			Name:       pulumi.Any(access_policy.Name),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamBinding(ctx, "binding", &accesscontextmanager.AccessPolicyIamBindingArgs{
			Name: pulumi.Any(access_policy.Name),
			Role: pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamMember(ctx, "member", &accesscontextmanager.AccessPolicyIamMemberArgs{
			Name:   pulumi.Any(access_policy.Name),
			Role:   pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`. ---

# IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:

* `accesscontextmanager.AccessPolicyIamPolicy`: Authoritative. Sets the IAM policy for the accesspolicy and replaces any existing policy already attached. * `accesscontextmanager.AccessPolicyIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the accesspolicy are preserved. * `accesscontextmanager.AccessPolicyIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the accesspolicy are preserved.

A data source can be used to retrieve policy data in advent you do not need creation

* `accesscontextmanager.AccessPolicyIamPolicy`: Retrieves the IAM policy for the accesspolicy

> **Note:** `accesscontextmanager.AccessPolicyIamPolicy` **cannot** be used in conjunction with `accesscontextmanager.AccessPolicyIamBinding` and `accesscontextmanager.AccessPolicyIamMember` or they will fight over what your policy should be.

> **Note:** `accesscontextmanager.AccessPolicyIamBinding` resources **can be** used in conjunction with `accesscontextmanager.AccessPolicyIamMember` resources **only if** they do not grant privilege to the same role.

## accesscontextmanager.AccessPolicyIamPolicy

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/accesscontextmanager.policyAdmin",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicyIamPolicy(ctx, "policy", &accesscontextmanager.AccessPolicyIamPolicyArgs{
			Name:       pulumi.Any(access_policy.Name),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamBinding(ctx, "binding", &accesscontextmanager.AccessPolicyIamBindingArgs{
			Name: pulumi.Any(access_policy.Name),
			Role: pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## accesscontextmanager.AccessPolicyIamMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicyIamMember(ctx, "member", &accesscontextmanager.AccessPolicyIamMemberArgs{
			Name:   pulumi.Any(access_policy.Name),
			Role:   pulumi.String("roles/accesscontextmanager.policyAdmin"),
			Member: pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

For all import syntaxes, the "resource in question" can take any of the following forms:

* accessPolicies/{{name}}

* {{name}}

Any variables not passed in the import command will be taken from the provider configuration.

Access Context Manager (VPC Service Controls) accesspolicy IAM resources can be imported using the resource identifiers, role, and member.

IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamPolicy:AccessPolicyIamPolicy editor "accessPolicies/{{access_policy}} roles/accesscontextmanager.policyAdmin user:jane@example.com" ```

IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamPolicy:AccessPolicyIamPolicy editor "accessPolicies/{{access_policy}} roles/accesscontextmanager.policyAdmin" ```

IAM policy imports use the identifier of the resource in question, e.g.

```sh $ pulumi import gcp:accesscontextmanager/accessPolicyIamPolicy:AccessPolicyIamPolicy editor accessPolicies/{{access_policy}} ```

-> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the 

full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.

func GetAccessPolicyIamPolicy 

func GetAccessPolicyIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessPolicyIamPolicyState, opts ...pulumi.ResourceOption) (*AccessPolicyIamPolicy, error)

GetAccessPolicyIamPolicy gets an existing AccessPolicyIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessPolicyIamPolicy 

func NewAccessPolicyIamPolicy(ctx *pulumi.Context,
	name string, args *AccessPolicyIamPolicyArgs, opts ...pulumi.ResourceOption) (*AccessPolicyIamPolicy, error)

NewAccessPolicyIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*AccessPolicyIamPolicy) ElementType 

func (*AccessPolicyIamPolicy) ElementType() reflect.Type

func (*AccessPolicyIamPolicy) ToAccessPolicyIamPolicyOutput 

func (i *AccessPolicyIamPolicy) ToAccessPolicyIamPolicyOutput() AccessPolicyIamPolicyOutput

func (*AccessPolicyIamPolicy) ToAccessPolicyIamPolicyOutputWithContext 

func (i *AccessPolicyIamPolicy) ToAccessPolicyIamPolicyOutputWithContext(ctx context.Context) AccessPolicyIamPolicyOutput

type AccessPolicyIamPolicyArgs 

type AccessPolicyIamPolicyArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringPtrInput
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringInput
}

The set of arguments for constructing a AccessPolicyIamPolicy resource.

func (AccessPolicyIamPolicyArgs) ElementType 

func (AccessPolicyIamPolicyArgs) ElementType() reflect.Type

type AccessPolicyIamPolicyArray 

type AccessPolicyIamPolicyArray []AccessPolicyIamPolicyInput

func (AccessPolicyIamPolicyArray) ElementType 

func (AccessPolicyIamPolicyArray) ElementType() reflect.Type

func (AccessPolicyIamPolicyArray) ToAccessPolicyIamPolicyArrayOutput 

func (i AccessPolicyIamPolicyArray) ToAccessPolicyIamPolicyArrayOutput() AccessPolicyIamPolicyArrayOutput

func (AccessPolicyIamPolicyArray) ToAccessPolicyIamPolicyArrayOutputWithContext 

func (i AccessPolicyIamPolicyArray) ToAccessPolicyIamPolicyArrayOutputWithContext(ctx context.Context) AccessPolicyIamPolicyArrayOutput

type AccessPolicyIamPolicyArrayInput 

type AccessPolicyIamPolicyArrayInput interface {
	pulumi.Input

	ToAccessPolicyIamPolicyArrayOutput() AccessPolicyIamPolicyArrayOutput
	ToAccessPolicyIamPolicyArrayOutputWithContext(context.Context) AccessPolicyIamPolicyArrayOutput
}

AccessPolicyIamPolicyArrayInput is an input type that accepts AccessPolicyIamPolicyArray and AccessPolicyIamPolicyArrayOutput values. You can construct a concrete instance of `AccessPolicyIamPolicyArrayInput` via: 

AccessPolicyIamPolicyArray{ AccessPolicyIamPolicyArgs{...} }

type AccessPolicyIamPolicyArrayOutput 

type AccessPolicyIamPolicyArrayOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamPolicyArrayOutput) ElementType 

func (AccessPolicyIamPolicyArrayOutput) ElementType() reflect.Type

func (AccessPolicyIamPolicyArrayOutput) Index 

func (o AccessPolicyIamPolicyArrayOutput) Index(i pulumi.IntInput) AccessPolicyIamPolicyOutput

func (AccessPolicyIamPolicyArrayOutput) ToAccessPolicyIamPolicyArrayOutput 

func (o AccessPolicyIamPolicyArrayOutput) ToAccessPolicyIamPolicyArrayOutput() AccessPolicyIamPolicyArrayOutput

func (AccessPolicyIamPolicyArrayOutput) ToAccessPolicyIamPolicyArrayOutputWithContext 

func (o AccessPolicyIamPolicyArrayOutput) ToAccessPolicyIamPolicyArrayOutputWithContext(ctx context.Context) AccessPolicyIamPolicyArrayOutput

type AccessPolicyIamPolicyInput 

type AccessPolicyIamPolicyInput interface {
	pulumi.Input

	ToAccessPolicyIamPolicyOutput() AccessPolicyIamPolicyOutput
	ToAccessPolicyIamPolicyOutputWithContext(ctx context.Context) AccessPolicyIamPolicyOutput
}

type AccessPolicyIamPolicyMap 

type AccessPolicyIamPolicyMap map[string]AccessPolicyIamPolicyInput

func (AccessPolicyIamPolicyMap) ElementType 

func (AccessPolicyIamPolicyMap) ElementType() reflect.Type

func (AccessPolicyIamPolicyMap) ToAccessPolicyIamPolicyMapOutput 

func (i AccessPolicyIamPolicyMap) ToAccessPolicyIamPolicyMapOutput() AccessPolicyIamPolicyMapOutput

func (AccessPolicyIamPolicyMap) ToAccessPolicyIamPolicyMapOutputWithContext 

func (i AccessPolicyIamPolicyMap) ToAccessPolicyIamPolicyMapOutputWithContext(ctx context.Context) AccessPolicyIamPolicyMapOutput

type AccessPolicyIamPolicyMapInput 

type AccessPolicyIamPolicyMapInput interface {
	pulumi.Input

	ToAccessPolicyIamPolicyMapOutput() AccessPolicyIamPolicyMapOutput
	ToAccessPolicyIamPolicyMapOutputWithContext(context.Context) AccessPolicyIamPolicyMapOutput
}

AccessPolicyIamPolicyMapInput is an input type that accepts AccessPolicyIamPolicyMap and AccessPolicyIamPolicyMapOutput values. You can construct a concrete instance of `AccessPolicyIamPolicyMapInput` via: 

AccessPolicyIamPolicyMap{ "key": AccessPolicyIamPolicyArgs{...} }

type AccessPolicyIamPolicyMapOutput 

type AccessPolicyIamPolicyMapOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamPolicyMapOutput) ElementType 

func (AccessPolicyIamPolicyMapOutput) ElementType() reflect.Type

func (AccessPolicyIamPolicyMapOutput) MapIndex 

func (o AccessPolicyIamPolicyMapOutput) MapIndex(k pulumi.StringInput) AccessPolicyIamPolicyOutput

func (AccessPolicyIamPolicyMapOutput) ToAccessPolicyIamPolicyMapOutput 

func (o AccessPolicyIamPolicyMapOutput) ToAccessPolicyIamPolicyMapOutput() AccessPolicyIamPolicyMapOutput

func (AccessPolicyIamPolicyMapOutput) ToAccessPolicyIamPolicyMapOutputWithContext 

func (o AccessPolicyIamPolicyMapOutput) ToAccessPolicyIamPolicyMapOutputWithContext(ctx context.Context) AccessPolicyIamPolicyMapOutput

type AccessPolicyIamPolicyOutput 

type AccessPolicyIamPolicyOutput struct{ *pulumi.OutputState }

func (AccessPolicyIamPolicyOutput) ElementType 

func (AccessPolicyIamPolicyOutput) ElementType() reflect.Type

func (AccessPolicyIamPolicyOutput) Etag 

func (o AccessPolicyIamPolicyOutput) Etag() pulumi.StringOutput

(Computed) The etag of the IAM policy.

func (AccessPolicyIamPolicyOutput) Name 

func (o AccessPolicyIamPolicyOutput) Name() pulumi.StringOutput

Used to find the parent resource to bind the IAM policy to

func (AccessPolicyIamPolicyOutput) PolicyData 

func (o AccessPolicyIamPolicyOutput) PolicyData() pulumi.StringOutput

The policy data generated by a `organizations.getIAMPolicy` data source.

func (AccessPolicyIamPolicyOutput) ToAccessPolicyIamPolicyOutput 

func (o AccessPolicyIamPolicyOutput) ToAccessPolicyIamPolicyOutput() AccessPolicyIamPolicyOutput

func (AccessPolicyIamPolicyOutput) ToAccessPolicyIamPolicyOutputWithContext 

func (o AccessPolicyIamPolicyOutput) ToAccessPolicyIamPolicyOutputWithContext(ctx context.Context) AccessPolicyIamPolicyOutput

type AccessPolicyIamPolicyState 

type AccessPolicyIamPolicyState struct {
	// (Computed) The etag of the IAM policy.
	Etag pulumi.StringPtrInput
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringPtrInput
	// The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData pulumi.StringPtrInput
}

func (AccessPolicyIamPolicyState) ElementType 

func (AccessPolicyIamPolicyState) ElementType() reflect.Type

type AccessPolicyInput 

type AccessPolicyInput interface {
	pulumi.Input

	ToAccessPolicyOutput() AccessPolicyOutput
	ToAccessPolicyOutputWithContext(ctx context.Context) AccessPolicyOutput
}

type AccessPolicyMap 

type AccessPolicyMap map[string]AccessPolicyInput

func (AccessPolicyMap) ElementType 

func (AccessPolicyMap) ElementType() reflect.Type

func (AccessPolicyMap) ToAccessPolicyMapOutput 

func (i AccessPolicyMap) ToAccessPolicyMapOutput() AccessPolicyMapOutput

func (AccessPolicyMap) ToAccessPolicyMapOutputWithContext 

func (i AccessPolicyMap) ToAccessPolicyMapOutputWithContext(ctx context.Context) AccessPolicyMapOutput

type AccessPolicyMapInput 

type AccessPolicyMapInput interface {
	pulumi.Input

	ToAccessPolicyMapOutput() AccessPolicyMapOutput
	ToAccessPolicyMapOutputWithContext(context.Context) AccessPolicyMapOutput
}

AccessPolicyMapInput is an input type that accepts AccessPolicyMap and AccessPolicyMapOutput values. You can construct a concrete instance of `AccessPolicyMapInput` via: 

AccessPolicyMap{ "key": AccessPolicyArgs{...} }

type AccessPolicyMapOutput 

type AccessPolicyMapOutput struct{ *pulumi.OutputState }

func (AccessPolicyMapOutput) ElementType 

func (AccessPolicyMapOutput) ElementType() reflect.Type

func (AccessPolicyMapOutput) MapIndex 

func (o AccessPolicyMapOutput) MapIndex(k pulumi.StringInput) AccessPolicyOutput

func (AccessPolicyMapOutput) ToAccessPolicyMapOutput 

func (o AccessPolicyMapOutput) ToAccessPolicyMapOutput() AccessPolicyMapOutput

func (AccessPolicyMapOutput) ToAccessPolicyMapOutputWithContext 

func (o AccessPolicyMapOutput) ToAccessPolicyMapOutputWithContext(ctx context.Context) AccessPolicyMapOutput

type AccessPolicyOutput 

type AccessPolicyOutput struct{ *pulumi.OutputState }

func (AccessPolicyOutput) CreateTime 

func (o AccessPolicyOutput) CreateTime() pulumi.StringOutput

Time the AccessPolicy was created in UTC.

func (AccessPolicyOutput) ElementType 

func (AccessPolicyOutput) ElementType() reflect.Type

func (AccessPolicyOutput) Name 

func (o AccessPolicyOutput) Name() pulumi.StringOutput

Resource name of the AccessPolicy. Format: '{{policy_id}}'

func (AccessPolicyOutput) Parent 

func (o AccessPolicyOutput) Parent() pulumi.StringOutput

The parent of this AccessPolicy in the Cloud Resource Hierarchy. Format: 'organizations/{{organization_id}}'

func (AccessPolicyOutput) Scopes 

func (o AccessPolicyOutput) Scopes() pulumi.StringPtrOutput

Folder or project on which this policy is applicable. Format: 'folders/{{folder_id}}' or 'projects/{{project_number}}'

func (AccessPolicyOutput) Title 

func (o AccessPolicyOutput) Title() pulumi.StringOutput

Human readable title. Does not affect behavior.

***

func (AccessPolicyOutput) ToAccessPolicyOutput 

func (o AccessPolicyOutput) ToAccessPolicyOutput() AccessPolicyOutput

func (AccessPolicyOutput) ToAccessPolicyOutputWithContext 

func (o AccessPolicyOutput) ToAccessPolicyOutputWithContext(ctx context.Context) AccessPolicyOutput

func (AccessPolicyOutput) UpdateTime 

func (o AccessPolicyOutput) UpdateTime() pulumi.StringOutput

Time the AccessPolicy was updated in UTC.

type AccessPolicyState 

type AccessPolicyState struct {
	// Time the AccessPolicy was created in UTC.
	CreateTime pulumi.StringPtrInput
	// Resource name of the AccessPolicy. Format: '{{policy_id}}'
	Name pulumi.StringPtrInput
	// The parent of this AccessPolicy in the Cloud Resource Hierarchy.
	// Format: 'organizations/{{organization_id}}'
	Parent pulumi.StringPtrInput
	// Folder or project on which this policy is applicable.
	// Format: 'folders/{{folder_id}}' or 'projects/{{project_number}}'
	Scopes pulumi.StringPtrInput
	// Human readable title. Does not affect behavior.
	//
	// ***
	Title pulumi.StringPtrInput
	// Time the AccessPolicy was updated in UTC.
	UpdateTime pulumi.StringPtrInput
}

func (AccessPolicyState) ElementType 

func (AccessPolicyState) ElementType() reflect.Type

type AuthorizedOrgsDesc 

type AuthorizedOrgsDesc struct {
	pulumi.CustomResourceState

	// The type of entities that need to use the authorization relationship during
	// evaluation, such as a device. Valid values are "ASSET_TYPE_DEVICE" and
	// "ASSET_TYPE_CREDENTIAL_STRENGTH".
	// Possible values are: `ASSET_TYPE_DEVICE`, `ASSET_TYPE_CREDENTIAL_STRENGTH`.
	AssetType pulumi.StringPtrOutput `pulumi:"assetType"`
	// The direction of the authorization relationship between this organization
	// and the organizations listed in the "orgs" field. The valid values for this
	// field include the following:
	// AUTHORIZATION_DIRECTION_FROM: Allows this organization to evaluate traffic
	// in the organizations listed in the `orgs` field.
	// AUTHORIZATION_DIRECTION_TO: Allows the organizations listed in the `orgs`
	// field to evaluate the traffic in this organization.
	// For the authorization relationship to take effect, all of the organizations
	// must authorize and specify the appropriate relationship direction. For
	// example, if organization A authorized organization B and C to evaluate its
	// traffic, by specifying "AUTHORIZATION_DIRECTION_TO" as the authorization
	// direction, organizations B and C must specify
	// "AUTHORIZATION_DIRECTION_FROM" as the authorization direction in their
	// "AuthorizedOrgsDesc" resource.
	// Possible values are: `AUTHORIZATION_DIRECTION_TO`, `AUTHORIZATION_DIRECTION_FROM`.
	AuthorizationDirection pulumi.StringPtrOutput `pulumi:"authorizationDirection"`
	// A granular control type for authorization levels. Valid value is "AUTHORIZATION_TYPE_TRUST".
	// Possible values are: `AUTHORIZATION_TYPE_TRUST`.
	AuthorizationType pulumi.StringPtrOutput `pulumi:"authorizationType"`
	// Time the AuthorizedOrgsDesc was created in UTC.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Resource name for the `AuthorizedOrgsDesc`. Format:
	// `accessPolicies/{access_policy}/authorizedOrgsDescs/{authorized_orgs_desc}`.
	// The `authorizedOrgsDesc` component must begin with a letter, followed by
	// alphanumeric characters or `_`.
	// After you create an `AuthorizedOrgsDesc`, you cannot change its `name`.
	//
	// ***
	Name pulumi.StringOutput `pulumi:"name"`
	// The list of organization ids in this AuthorizedOrgsDesc.
	// Format: `organizations/<org_number>`
	// Example: `organizations/123456`
	Orgs pulumi.StringArrayOutput `pulumi:"orgs"`
	// Required. Resource name for the access policy which owns this `AuthorizedOrgsDesc`.
	Parent pulumi.StringOutput `pulumi:"parent"`
	// Time the AuthorizedOrgsDesc was updated in UTC.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

An authorized organizations description describes a list of organizations (1) that have been authorized to use certain asset (for example, device) data owned by different organizations at the enforcement points, or (2) with certain asset (for example, device) have been authorized to access the resources in another organization at the enforcement points.

To get more information about AuthorizedOrgsDesc, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.authorizedOrgsDescs) * How-to Guides

> **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, you must specify a `billingProject` and set `userProjectOverride` to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the `serviceusage.services.use` permission on the `billingProject` you defined.

## Example Usage

### Access Context Manager Authorized Orgs Desc Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "test-access", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAuthorizedOrgsDesc(ctx, "authorized-orgs-desc", &accesscontextmanager.AuthorizedOrgsDescArgs{
			Parent: test_access.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: test_access.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/authorizedOrgsDescs/fakeDescName", name), nil
			}).(pulumi.StringOutput),
			AuthorizationType:      pulumi.String("AUTHORIZATION_TYPE_TRUST"),
			AssetType:              pulumi.String("ASSET_TYPE_CREDENTIAL_STRENGTH"),
			AuthorizationDirection: pulumi.String("AUTHORIZATION_DIRECTION_TO"),
			Orgs: pulumi.StringArray{
				pulumi.String("organizations/12345"),
				pulumi.String("organizations/98765"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

AuthorizedOrgsDesc can be imported using any of these accepted formats:

* `{{name}}`

When using the `pulumi import` command, AuthorizedOrgsDesc can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/authorizedOrgsDesc:AuthorizedOrgsDesc default {{name}} ```

func GetAuthorizedOrgsDesc 

func GetAuthorizedOrgsDesc(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AuthorizedOrgsDescState, opts ...pulumi.ResourceOption) (*AuthorizedOrgsDesc, error)

GetAuthorizedOrgsDesc gets an existing AuthorizedOrgsDesc resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAuthorizedOrgsDesc 

func NewAuthorizedOrgsDesc(ctx *pulumi.Context,
	name string, args *AuthorizedOrgsDescArgs, opts ...pulumi.ResourceOption) (*AuthorizedOrgsDesc, error)

NewAuthorizedOrgsDesc registers a new resource with the given unique name, arguments, and options.

func (*AuthorizedOrgsDesc) ElementType 

func (*AuthorizedOrgsDesc) ElementType() reflect.Type

func (*AuthorizedOrgsDesc) ToAuthorizedOrgsDescOutput 

func (i *AuthorizedOrgsDesc) ToAuthorizedOrgsDescOutput() AuthorizedOrgsDescOutput

func (*AuthorizedOrgsDesc) ToAuthorizedOrgsDescOutputWithContext 

func (i *AuthorizedOrgsDesc) ToAuthorizedOrgsDescOutputWithContext(ctx context.Context) AuthorizedOrgsDescOutput

type AuthorizedOrgsDescArgs 

type AuthorizedOrgsDescArgs struct {
	// The type of entities that need to use the authorization relationship during
	// evaluation, such as a device. Valid values are "ASSET_TYPE_DEVICE" and
	// "ASSET_TYPE_CREDENTIAL_STRENGTH".
	// Possible values are: `ASSET_TYPE_DEVICE`, `ASSET_TYPE_CREDENTIAL_STRENGTH`.
	AssetType pulumi.StringPtrInput
	// The direction of the authorization relationship between this organization
	// and the organizations listed in the "orgs" field. The valid values for this
	// field include the following:
	// AUTHORIZATION_DIRECTION_FROM: Allows this organization to evaluate traffic
	// in the organizations listed in the `orgs` field.
	// AUTHORIZATION_DIRECTION_TO: Allows the organizations listed in the `orgs`
	// field to evaluate the traffic in this organization.
	// For the authorization relationship to take effect, all of the organizations
	// must authorize and specify the appropriate relationship direction. For
	// example, if organization A authorized organization B and C to evaluate its
	// traffic, by specifying "AUTHORIZATION_DIRECTION_TO" as the authorization
	// direction, organizations B and C must specify
	// "AUTHORIZATION_DIRECTION_FROM" as the authorization direction in their
	// "AuthorizedOrgsDesc" resource.
	// Possible values are: `AUTHORIZATION_DIRECTION_TO`, `AUTHORIZATION_DIRECTION_FROM`.
	AuthorizationDirection pulumi.StringPtrInput
	// A granular control type for authorization levels. Valid value is "AUTHORIZATION_TYPE_TRUST".
	// Possible values are: `AUTHORIZATION_TYPE_TRUST`.
	AuthorizationType pulumi.StringPtrInput
	// Resource name for the `AuthorizedOrgsDesc`. Format:
	// `accessPolicies/{access_policy}/authorizedOrgsDescs/{authorized_orgs_desc}`.
	// The `authorizedOrgsDesc` component must begin with a letter, followed by
	// alphanumeric characters or `_`.
	// After you create an `AuthorizedOrgsDesc`, you cannot change its `name`.
	//
	// ***
	Name pulumi.StringPtrInput
	// The list of organization ids in this AuthorizedOrgsDesc.
	// Format: `organizations/<org_number>`
	// Example: `organizations/123456`
	Orgs pulumi.StringArrayInput
	// Required. Resource name for the access policy which owns this `AuthorizedOrgsDesc`.
	Parent pulumi.StringInput
}

The set of arguments for constructing a AuthorizedOrgsDesc resource.

func (AuthorizedOrgsDescArgs) ElementType 

func (AuthorizedOrgsDescArgs) ElementType() reflect.Type

type AuthorizedOrgsDescArray 

type AuthorizedOrgsDescArray []AuthorizedOrgsDescInput

func (AuthorizedOrgsDescArray) ElementType 

func (AuthorizedOrgsDescArray) ElementType() reflect.Type

func (AuthorizedOrgsDescArray) ToAuthorizedOrgsDescArrayOutput 

func (i AuthorizedOrgsDescArray) ToAuthorizedOrgsDescArrayOutput() AuthorizedOrgsDescArrayOutput

func (AuthorizedOrgsDescArray) ToAuthorizedOrgsDescArrayOutputWithContext 

func (i AuthorizedOrgsDescArray) ToAuthorizedOrgsDescArrayOutputWithContext(ctx context.Context) AuthorizedOrgsDescArrayOutput

type AuthorizedOrgsDescArrayInput 

type AuthorizedOrgsDescArrayInput interface {
	pulumi.Input

	ToAuthorizedOrgsDescArrayOutput() AuthorizedOrgsDescArrayOutput
	ToAuthorizedOrgsDescArrayOutputWithContext(context.Context) AuthorizedOrgsDescArrayOutput
}

AuthorizedOrgsDescArrayInput is an input type that accepts AuthorizedOrgsDescArray and AuthorizedOrgsDescArrayOutput values. You can construct a concrete instance of `AuthorizedOrgsDescArrayInput` via: 

AuthorizedOrgsDescArray{ AuthorizedOrgsDescArgs{...} }

type AuthorizedOrgsDescArrayOutput 

type AuthorizedOrgsDescArrayOutput struct{ *pulumi.OutputState }

func (AuthorizedOrgsDescArrayOutput) ElementType 

func (AuthorizedOrgsDescArrayOutput) ElementType() reflect.Type

func (AuthorizedOrgsDescArrayOutput) Index 

func (o AuthorizedOrgsDescArrayOutput) Index(i pulumi.IntInput) AuthorizedOrgsDescOutput

func (AuthorizedOrgsDescArrayOutput) ToAuthorizedOrgsDescArrayOutput 

func (o AuthorizedOrgsDescArrayOutput) ToAuthorizedOrgsDescArrayOutput() AuthorizedOrgsDescArrayOutput

func (AuthorizedOrgsDescArrayOutput) ToAuthorizedOrgsDescArrayOutputWithContext 

func (o AuthorizedOrgsDescArrayOutput) ToAuthorizedOrgsDescArrayOutputWithContext(ctx context.Context) AuthorizedOrgsDescArrayOutput

type AuthorizedOrgsDescInput 

type AuthorizedOrgsDescInput interface {
	pulumi.Input

	ToAuthorizedOrgsDescOutput() AuthorizedOrgsDescOutput
	ToAuthorizedOrgsDescOutputWithContext(ctx context.Context) AuthorizedOrgsDescOutput
}

type AuthorizedOrgsDescMap 

type AuthorizedOrgsDescMap map[string]AuthorizedOrgsDescInput

func (AuthorizedOrgsDescMap) ElementType 

func (AuthorizedOrgsDescMap) ElementType() reflect.Type

func (AuthorizedOrgsDescMap) ToAuthorizedOrgsDescMapOutput 

func (i AuthorizedOrgsDescMap) ToAuthorizedOrgsDescMapOutput() AuthorizedOrgsDescMapOutput

func (AuthorizedOrgsDescMap) ToAuthorizedOrgsDescMapOutputWithContext 

func (i AuthorizedOrgsDescMap) ToAuthorizedOrgsDescMapOutputWithContext(ctx context.Context) AuthorizedOrgsDescMapOutput

type AuthorizedOrgsDescMapInput 

type AuthorizedOrgsDescMapInput interface {
	pulumi.Input

	ToAuthorizedOrgsDescMapOutput() AuthorizedOrgsDescMapOutput
	ToAuthorizedOrgsDescMapOutputWithContext(context.Context) AuthorizedOrgsDescMapOutput
}

AuthorizedOrgsDescMapInput is an input type that accepts AuthorizedOrgsDescMap and AuthorizedOrgsDescMapOutput values. You can construct a concrete instance of `AuthorizedOrgsDescMapInput` via: 

AuthorizedOrgsDescMap{ "key": AuthorizedOrgsDescArgs{...} }

type AuthorizedOrgsDescMapOutput 

type AuthorizedOrgsDescMapOutput struct{ *pulumi.OutputState }

func (AuthorizedOrgsDescMapOutput) ElementType 

func (AuthorizedOrgsDescMapOutput) ElementType() reflect.Type

func (AuthorizedOrgsDescMapOutput) MapIndex 

func (o AuthorizedOrgsDescMapOutput) MapIndex(k pulumi.StringInput) AuthorizedOrgsDescOutput

func (AuthorizedOrgsDescMapOutput) ToAuthorizedOrgsDescMapOutput 

func (o AuthorizedOrgsDescMapOutput) ToAuthorizedOrgsDescMapOutput() AuthorizedOrgsDescMapOutput

func (AuthorizedOrgsDescMapOutput) ToAuthorizedOrgsDescMapOutputWithContext 

func (o AuthorizedOrgsDescMapOutput) ToAuthorizedOrgsDescMapOutputWithContext(ctx context.Context) AuthorizedOrgsDescMapOutput

type AuthorizedOrgsDescOutput 

type AuthorizedOrgsDescOutput struct{ *pulumi.OutputState }

func (AuthorizedOrgsDescOutput) AssetType 

func (o AuthorizedOrgsDescOutput) AssetType() pulumi.StringPtrOutput

The type of entities that need to use the authorization relationship during evaluation, such as a device. Valid values are "ASSET_TYPE_DEVICE" and "ASSET_TYPE_CREDENTIAL_STRENGTH". Possible values are: `ASSET_TYPE_DEVICE`, `ASSET_TYPE_CREDENTIAL_STRENGTH`.

func (AuthorizedOrgsDescOutput) AuthorizationDirection 

func (o AuthorizedOrgsDescOutput) AuthorizationDirection() pulumi.StringPtrOutput

The direction of the authorization relationship between this organization and the organizations listed in the "orgs" field. The valid values for this field include the following: AUTHORIZATION_DIRECTION_FROM: Allows this organization to evaluate traffic in the organizations listed in the `orgs` field. AUTHORIZATION_DIRECTION_TO: Allows the organizations listed in the `orgs` field to evaluate the traffic in this organization. For the authorization relationship to take effect, all of the organizations must authorize and specify the appropriate relationship direction. For example, if organization A authorized organization B and C to evaluate its traffic, by specifying "AUTHORIZATION_DIRECTION_TO" as the authorization direction, organizations B and C must specify "AUTHORIZATION_DIRECTION_FROM" as the authorization direction in their "AuthorizedOrgsDesc" resource. Possible values are: `AUTHORIZATION_DIRECTION_TO`, `AUTHORIZATION_DIRECTION_FROM`.

func (AuthorizedOrgsDescOutput) AuthorizationType 

func (o AuthorizedOrgsDescOutput) AuthorizationType() pulumi.StringPtrOutput

A granular control type for authorization levels. Valid value is "AUTHORIZATION_TYPE_TRUST". Possible values are: `AUTHORIZATION_TYPE_TRUST`.

func (AuthorizedOrgsDescOutput) CreateTime 

func (o AuthorizedOrgsDescOutput) CreateTime() pulumi.StringOutput

Time the AuthorizedOrgsDesc was created in UTC.

func (AuthorizedOrgsDescOutput) ElementType 

func (AuthorizedOrgsDescOutput) ElementType() reflect.Type

func (AuthorizedOrgsDescOutput) Name 

func (o AuthorizedOrgsDescOutput) Name() pulumi.StringOutput

Resource name for the `AuthorizedOrgsDesc`. Format: `accessPolicies/{access_policy}/authorizedOrgsDescs/{authorized_orgs_desc}`. The `authorizedOrgsDesc` component must begin with a letter, followed by alphanumeric characters or `_`. After you create an `AuthorizedOrgsDesc`, you cannot change its `name`.

***

func (AuthorizedOrgsDescOutput) Orgs 

func (o AuthorizedOrgsDescOutput) Orgs() pulumi.StringArrayOutput

The list of organization ids in this AuthorizedOrgsDesc. Format: `organizations/<org_number>` Example: `organizations/123456`

func (AuthorizedOrgsDescOutput) Parent 

func (o AuthorizedOrgsDescOutput) Parent() pulumi.StringOutput

Required. Resource name for the access policy which owns this `AuthorizedOrgsDesc`.

func (AuthorizedOrgsDescOutput) ToAuthorizedOrgsDescOutput 

func (o AuthorizedOrgsDescOutput) ToAuthorizedOrgsDescOutput() AuthorizedOrgsDescOutput

func (AuthorizedOrgsDescOutput) ToAuthorizedOrgsDescOutputWithContext 

func (o AuthorizedOrgsDescOutput) ToAuthorizedOrgsDescOutputWithContext(ctx context.Context) AuthorizedOrgsDescOutput

func (AuthorizedOrgsDescOutput) UpdateTime 

func (o AuthorizedOrgsDescOutput) UpdateTime() pulumi.StringOutput

Time the AuthorizedOrgsDesc was updated in UTC.

type AuthorizedOrgsDescState 

type AuthorizedOrgsDescState struct {
	// The type of entities that need to use the authorization relationship during
	// evaluation, such as a device. Valid values are "ASSET_TYPE_DEVICE" and
	// "ASSET_TYPE_CREDENTIAL_STRENGTH".
	// Possible values are: `ASSET_TYPE_DEVICE`, `ASSET_TYPE_CREDENTIAL_STRENGTH`.
	AssetType pulumi.StringPtrInput
	// The direction of the authorization relationship between this organization
	// and the organizations listed in the "orgs" field. The valid values for this
	// field include the following:
	// AUTHORIZATION_DIRECTION_FROM: Allows this organization to evaluate traffic
	// in the organizations listed in the `orgs` field.
	// AUTHORIZATION_DIRECTION_TO: Allows the organizations listed in the `orgs`
	// field to evaluate the traffic in this organization.
	// For the authorization relationship to take effect, all of the organizations
	// must authorize and specify the appropriate relationship direction. For
	// example, if organization A authorized organization B and C to evaluate its
	// traffic, by specifying "AUTHORIZATION_DIRECTION_TO" as the authorization
	// direction, organizations B and C must specify
	// "AUTHORIZATION_DIRECTION_FROM" as the authorization direction in their
	// "AuthorizedOrgsDesc" resource.
	// Possible values are: `AUTHORIZATION_DIRECTION_TO`, `AUTHORIZATION_DIRECTION_FROM`.
	AuthorizationDirection pulumi.StringPtrInput
	// A granular control type for authorization levels. Valid value is "AUTHORIZATION_TYPE_TRUST".
	// Possible values are: `AUTHORIZATION_TYPE_TRUST`.
	AuthorizationType pulumi.StringPtrInput
	// Time the AuthorizedOrgsDesc was created in UTC.
	CreateTime pulumi.StringPtrInput
	// Resource name for the `AuthorizedOrgsDesc`. Format:
	// `accessPolicies/{access_policy}/authorizedOrgsDescs/{authorized_orgs_desc}`.
	// The `authorizedOrgsDesc` component must begin with a letter, followed by
	// alphanumeric characters or `_`.
	// After you create an `AuthorizedOrgsDesc`, you cannot change its `name`.
	//
	// ***
	Name pulumi.StringPtrInput
	// The list of organization ids in this AuthorizedOrgsDesc.
	// Format: `organizations/<org_number>`
	// Example: `organizations/123456`
	Orgs pulumi.StringArrayInput
	// Required. Resource name for the access policy which owns this `AuthorizedOrgsDesc`.
	Parent pulumi.StringPtrInput
	// Time the AuthorizedOrgsDesc was updated in UTC.
	UpdateTime pulumi.StringPtrInput
}

func (AuthorizedOrgsDescState) ElementType 

func (AuthorizedOrgsDescState) ElementType() reflect.Type

type EgressPolicy 

type EgressPolicy struct {
	pulumi.CustomResourceState

	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	EgressPolicyName pulumi.StringOutput `pulumi:"egressPolicyName"`
	// A GCP resource that is inside of the service perimeter.
	Resource pulumi.StringOutput `pulumi:"resource"`
}

This resource has been deprecated, please refer to ServicePerimeterEgressPolicy.

To get more information about EgressPolicy, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#egresspolicy)

## Import

EgressPolicy can be imported using any of these accepted formats:

* `{{egress_policy_name}}/{{resource}}`

When using the `pulumi import` command, EgressPolicy can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/egressPolicy:EgressPolicy default {{egress_policy_name}}/{{resource}} ```

func GetEgressPolicy 

func GetEgressPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *EgressPolicyState, opts ...pulumi.ResourceOption) (*EgressPolicy, error)

GetEgressPolicy gets an existing EgressPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewEgressPolicy 

func NewEgressPolicy(ctx *pulumi.Context,
	name string, args *EgressPolicyArgs, opts ...pulumi.ResourceOption) (*EgressPolicy, error)

NewEgressPolicy registers a new resource with the given unique name, arguments, and options.

func (*EgressPolicy) ElementType 

func (*EgressPolicy) ElementType() reflect.Type

func (*EgressPolicy) ToEgressPolicyOutput 

func (i *EgressPolicy) ToEgressPolicyOutput() EgressPolicyOutput

func (*EgressPolicy) ToEgressPolicyOutputWithContext 

func (i *EgressPolicy) ToEgressPolicyOutputWithContext(ctx context.Context) EgressPolicyOutput

type EgressPolicyArgs 

type EgressPolicyArgs struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	EgressPolicyName pulumi.StringInput
	// A GCP resource that is inside of the service perimeter.
	Resource pulumi.StringInput
}

The set of arguments for constructing a EgressPolicy resource.

func (EgressPolicyArgs) ElementType 

func (EgressPolicyArgs) ElementType() reflect.Type

type EgressPolicyArray 

type EgressPolicyArray []EgressPolicyInput

func (EgressPolicyArray) ElementType 

func (EgressPolicyArray) ElementType() reflect.Type

func (EgressPolicyArray) ToEgressPolicyArrayOutput 

func (i EgressPolicyArray) ToEgressPolicyArrayOutput() EgressPolicyArrayOutput

func (EgressPolicyArray) ToEgressPolicyArrayOutputWithContext 

func (i EgressPolicyArray) ToEgressPolicyArrayOutputWithContext(ctx context.Context) EgressPolicyArrayOutput

type EgressPolicyArrayInput 

type EgressPolicyArrayInput interface {
	pulumi.Input

	ToEgressPolicyArrayOutput() EgressPolicyArrayOutput
	ToEgressPolicyArrayOutputWithContext(context.Context) EgressPolicyArrayOutput
}

EgressPolicyArrayInput is an input type that accepts EgressPolicyArray and EgressPolicyArrayOutput values. You can construct a concrete instance of `EgressPolicyArrayInput` via: 

EgressPolicyArray{ EgressPolicyArgs{...} }

type EgressPolicyArrayOutput 

type EgressPolicyArrayOutput struct{ *pulumi.OutputState }

func (EgressPolicyArrayOutput) ElementType 

func (EgressPolicyArrayOutput) ElementType() reflect.Type

func (EgressPolicyArrayOutput) Index 

func (o EgressPolicyArrayOutput) Index(i pulumi.IntInput) EgressPolicyOutput

func (EgressPolicyArrayOutput) ToEgressPolicyArrayOutput 

func (o EgressPolicyArrayOutput) ToEgressPolicyArrayOutput() EgressPolicyArrayOutput

func (EgressPolicyArrayOutput) ToEgressPolicyArrayOutputWithContext 

func (o EgressPolicyArrayOutput) ToEgressPolicyArrayOutputWithContext(ctx context.Context) EgressPolicyArrayOutput

type EgressPolicyInput 

type EgressPolicyInput interface {
	pulumi.Input

	ToEgressPolicyOutput() EgressPolicyOutput
	ToEgressPolicyOutputWithContext(ctx context.Context) EgressPolicyOutput
}

type EgressPolicyMap 

type EgressPolicyMap map[string]EgressPolicyInput

func (EgressPolicyMap) ElementType 

func (EgressPolicyMap) ElementType() reflect.Type

func (EgressPolicyMap) ToEgressPolicyMapOutput 

func (i EgressPolicyMap) ToEgressPolicyMapOutput() EgressPolicyMapOutput

func (EgressPolicyMap) ToEgressPolicyMapOutputWithContext 

func (i EgressPolicyMap) ToEgressPolicyMapOutputWithContext(ctx context.Context) EgressPolicyMapOutput

type EgressPolicyMapInput 

type EgressPolicyMapInput interface {
	pulumi.Input

	ToEgressPolicyMapOutput() EgressPolicyMapOutput
	ToEgressPolicyMapOutputWithContext(context.Context) EgressPolicyMapOutput
}

EgressPolicyMapInput is an input type that accepts EgressPolicyMap and EgressPolicyMapOutput values. You can construct a concrete instance of `EgressPolicyMapInput` via: 

EgressPolicyMap{ "key": EgressPolicyArgs{...} }

type EgressPolicyMapOutput 

type EgressPolicyMapOutput struct{ *pulumi.OutputState }

func (EgressPolicyMapOutput) ElementType 

func (EgressPolicyMapOutput) ElementType() reflect.Type

func (EgressPolicyMapOutput) MapIndex 

func (o EgressPolicyMapOutput) MapIndex(k pulumi.StringInput) EgressPolicyOutput

func (EgressPolicyMapOutput) ToEgressPolicyMapOutput 

func (o EgressPolicyMapOutput) ToEgressPolicyMapOutput() EgressPolicyMapOutput

func (EgressPolicyMapOutput) ToEgressPolicyMapOutputWithContext 

func (o EgressPolicyMapOutput) ToEgressPolicyMapOutputWithContext(ctx context.Context) EgressPolicyMapOutput

type EgressPolicyOutput 

type EgressPolicyOutput struct{ *pulumi.OutputState }

func (EgressPolicyOutput) EgressPolicyName 

func (o EgressPolicyOutput) EgressPolicyName() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (EgressPolicyOutput) ElementType 

func (EgressPolicyOutput) ElementType() reflect.Type

func (EgressPolicyOutput) Resource 

func (o EgressPolicyOutput) Resource() pulumi.StringOutput

A GCP resource that is inside of the service perimeter.

func (EgressPolicyOutput) ToEgressPolicyOutput 

func (o EgressPolicyOutput) ToEgressPolicyOutput() EgressPolicyOutput

func (EgressPolicyOutput) ToEgressPolicyOutputWithContext 

func (o EgressPolicyOutput) ToEgressPolicyOutputWithContext(ctx context.Context) EgressPolicyOutput

type EgressPolicyState 

type EgressPolicyState struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	EgressPolicyName pulumi.StringPtrInput
	// A GCP resource that is inside of the service perimeter.
	Resource pulumi.StringPtrInput
}

func (EgressPolicyState) ElementType 

func (EgressPolicyState) ElementType() reflect.Type

type GcpUserAccessBinding 

type GcpUserAccessBinding struct {
	pulumi.CustomResourceState

	// Required. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted"
	AccessLevels pulumi.StringOutput `pulumi:"accessLevels"`
	// Required. Immutable. Google Group id whose members are subject to this binding's restrictions. See "id" in the G Suite Directory API's Groups resource. If a group's email address/alias is changed, this resource will continue to point at the changed group. This field does not accept group email addresses or aliases. Example: "01d520gv4vjcrht"
	GroupKey pulumi.StringOutput `pulumi:"groupKey"`
	// Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by RFC 3986 Section 2.3). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"
	Name pulumi.StringOutput `pulumi:"name"`
	// Required. ID of the parent organization.
	//
	// ***
	OrganizationId pulumi.StringOutput `pulumi:"organizationId"`
}

Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access.

To get more information about GcpUserAccessBinding, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/organizations.gcpUserAccessBindings)

## Example Usage

### Access Context Manager Gcp User Access Binding Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudidentity"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		group, err := cloudidentity.NewGroup(ctx, "group", &cloudidentity.GroupArgs{
			DisplayName: pulumi.String("my-identity-group"),
			Parent:      pulumi.String("customers/A01b123xz"),
			GroupKey: &cloudidentity.GroupGroupKeyArgs{
				Id: pulumi.String("my-identity-group@example.com"),
			},
			Labels: pulumi.StringMap{
				"cloudidentity.googleapis.com/groups.discussion_forum": pulumi.String(""),
			},
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		accessLevelIdForUserAccessBinding, err := accesscontextmanager.NewAccessLevel(ctx, "access_level_id_for_user_access_binding", &accesscontextmanager.AccessLevelArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("chromeos_no_lock"),
			Basic: &accesscontextmanager.AccessLevelBasicArgs{
				Conditions: accesscontextmanager.AccessLevelBasicConditionArray{
					&accesscontextmanager.AccessLevelBasicConditionArgs{
						DevicePolicy: &accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs{
							RequireScreenLock: pulumi.Bool(true),
							OsConstraints: accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArray{
								&accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs{
									OsType: pulumi.String("DESKTOP_CHROME_OS"),
								},
							},
						},
						Regions: pulumi.StringArray{
							pulumi.String("US"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewGcpUserAccessBinding(ctx, "gcp_user_access_binding", &accesscontextmanager.GcpUserAccessBindingArgs{
			OrganizationId: pulumi.String("123456789"),
			GroupKey: pulumi.String(std.TrimprefixOutput(ctx, std.TrimprefixOutputArgs{
				Input:  group.ID(),
				Prefix: pulumi.String("groups/"),
			}, nil).ApplyT(func(invoke std.TrimprefixResult) (*string, error) {
				return invoke.Result, nil
			}).(pulumi.StringPtrOutput)),
			AccessLevels: accessLevelIdForUserAccessBinding.Name,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

GcpUserAccessBinding can be imported using any of these accepted formats:

* `{{name}}`

When using the `pulumi import` command, GcpUserAccessBinding can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/gcpUserAccessBinding:GcpUserAccessBinding default {{name}} ```

func GetGcpUserAccessBinding 

func GetGcpUserAccessBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GcpUserAccessBindingState, opts ...pulumi.ResourceOption) (*GcpUserAccessBinding, error)

GetGcpUserAccessBinding gets an existing GcpUserAccessBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGcpUserAccessBinding 

func NewGcpUserAccessBinding(ctx *pulumi.Context,
	name string, args *GcpUserAccessBindingArgs, opts ...pulumi.ResourceOption) (*GcpUserAccessBinding, error)

NewGcpUserAccessBinding registers a new resource with the given unique name, arguments, and options.

func (*GcpUserAccessBinding) ElementType 

func (*GcpUserAccessBinding) ElementType() reflect.Type

func (*GcpUserAccessBinding) ToGcpUserAccessBindingOutput 

func (i *GcpUserAccessBinding) ToGcpUserAccessBindingOutput() GcpUserAccessBindingOutput

func (*GcpUserAccessBinding) ToGcpUserAccessBindingOutputWithContext 

func (i *GcpUserAccessBinding) ToGcpUserAccessBindingOutputWithContext(ctx context.Context) GcpUserAccessBindingOutput

type GcpUserAccessBindingArgs 

type GcpUserAccessBindingArgs struct {
	// Required. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted"
	AccessLevels pulumi.StringInput
	// Required. Immutable. Google Group id whose members are subject to this binding's restrictions. See "id" in the G Suite Directory API's Groups resource. If a group's email address/alias is changed, this resource will continue to point at the changed group. This field does not accept group email addresses or aliases. Example: "01d520gv4vjcrht"
	GroupKey pulumi.StringInput
	// Required. ID of the parent organization.
	//
	// ***
	OrganizationId pulumi.StringInput
}

The set of arguments for constructing a GcpUserAccessBinding resource.

func (GcpUserAccessBindingArgs) ElementType 

func (GcpUserAccessBindingArgs) ElementType() reflect.Type

type GcpUserAccessBindingArray 

type GcpUserAccessBindingArray []GcpUserAccessBindingInput

func (GcpUserAccessBindingArray) ElementType 

func (GcpUserAccessBindingArray) ElementType() reflect.Type

func (GcpUserAccessBindingArray) ToGcpUserAccessBindingArrayOutput 

func (i GcpUserAccessBindingArray) ToGcpUserAccessBindingArrayOutput() GcpUserAccessBindingArrayOutput

func (GcpUserAccessBindingArray) ToGcpUserAccessBindingArrayOutputWithContext 

func (i GcpUserAccessBindingArray) ToGcpUserAccessBindingArrayOutputWithContext(ctx context.Context) GcpUserAccessBindingArrayOutput

type GcpUserAccessBindingArrayInput 

type GcpUserAccessBindingArrayInput interface {
	pulumi.Input

	ToGcpUserAccessBindingArrayOutput() GcpUserAccessBindingArrayOutput
	ToGcpUserAccessBindingArrayOutputWithContext(context.Context) GcpUserAccessBindingArrayOutput
}

GcpUserAccessBindingArrayInput is an input type that accepts GcpUserAccessBindingArray and GcpUserAccessBindingArrayOutput values. You can construct a concrete instance of `GcpUserAccessBindingArrayInput` via: 

GcpUserAccessBindingArray{ GcpUserAccessBindingArgs{...} }

type GcpUserAccessBindingArrayOutput 

type GcpUserAccessBindingArrayOutput struct{ *pulumi.OutputState }

func (GcpUserAccessBindingArrayOutput) ElementType 

func (GcpUserAccessBindingArrayOutput) ElementType() reflect.Type

func (GcpUserAccessBindingArrayOutput) Index 

func (o GcpUserAccessBindingArrayOutput) Index(i pulumi.IntInput) GcpUserAccessBindingOutput

func (GcpUserAccessBindingArrayOutput) ToGcpUserAccessBindingArrayOutput 

func (o GcpUserAccessBindingArrayOutput) ToGcpUserAccessBindingArrayOutput() GcpUserAccessBindingArrayOutput

func (GcpUserAccessBindingArrayOutput) ToGcpUserAccessBindingArrayOutputWithContext 

func (o GcpUserAccessBindingArrayOutput) ToGcpUserAccessBindingArrayOutputWithContext(ctx context.Context) GcpUserAccessBindingArrayOutput

type GcpUserAccessBindingInput 

type GcpUserAccessBindingInput interface {
	pulumi.Input

	ToGcpUserAccessBindingOutput() GcpUserAccessBindingOutput
	ToGcpUserAccessBindingOutputWithContext(ctx context.Context) GcpUserAccessBindingOutput
}

type GcpUserAccessBindingMap 

type GcpUserAccessBindingMap map[string]GcpUserAccessBindingInput

func (GcpUserAccessBindingMap) ElementType 

func (GcpUserAccessBindingMap) ElementType() reflect.Type

func (GcpUserAccessBindingMap) ToGcpUserAccessBindingMapOutput 

func (i GcpUserAccessBindingMap) ToGcpUserAccessBindingMapOutput() GcpUserAccessBindingMapOutput

func (GcpUserAccessBindingMap) ToGcpUserAccessBindingMapOutputWithContext 

func (i GcpUserAccessBindingMap) ToGcpUserAccessBindingMapOutputWithContext(ctx context.Context) GcpUserAccessBindingMapOutput

type GcpUserAccessBindingMapInput 

type GcpUserAccessBindingMapInput interface {
	pulumi.Input

	ToGcpUserAccessBindingMapOutput() GcpUserAccessBindingMapOutput
	ToGcpUserAccessBindingMapOutputWithContext(context.Context) GcpUserAccessBindingMapOutput
}

GcpUserAccessBindingMapInput is an input type that accepts GcpUserAccessBindingMap and GcpUserAccessBindingMapOutput values. You can construct a concrete instance of `GcpUserAccessBindingMapInput` via: 

GcpUserAccessBindingMap{ "key": GcpUserAccessBindingArgs{...} }

type GcpUserAccessBindingMapOutput 

type GcpUserAccessBindingMapOutput struct{ *pulumi.OutputState }

func (GcpUserAccessBindingMapOutput) ElementType 

func (GcpUserAccessBindingMapOutput) ElementType() reflect.Type

func (GcpUserAccessBindingMapOutput) MapIndex 

func (o GcpUserAccessBindingMapOutput) MapIndex(k pulumi.StringInput) GcpUserAccessBindingOutput

func (GcpUserAccessBindingMapOutput) ToGcpUserAccessBindingMapOutput 

func (o GcpUserAccessBindingMapOutput) ToGcpUserAccessBindingMapOutput() GcpUserAccessBindingMapOutput

func (GcpUserAccessBindingMapOutput) ToGcpUserAccessBindingMapOutputWithContext 

func (o GcpUserAccessBindingMapOutput) ToGcpUserAccessBindingMapOutputWithContext(ctx context.Context) GcpUserAccessBindingMapOutput

type GcpUserAccessBindingOutput 

type GcpUserAccessBindingOutput struct{ *pulumi.OutputState }

func (GcpUserAccessBindingOutput) AccessLevels 

func (o GcpUserAccessBindingOutput) AccessLevels() pulumi.StringOutput

Required. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted"

func (GcpUserAccessBindingOutput) ElementType 

func (GcpUserAccessBindingOutput) ElementType() reflect.Type

func (GcpUserAccessBindingOutput) GroupKey 

func (o GcpUserAccessBindingOutput) GroupKey() pulumi.StringOutput

Required. Immutable. Google Group id whose members are subject to this binding's restrictions. See "id" in the G Suite Directory API's Groups resource. If a group's email address/alias is changed, this resource will continue to point at the changed group. This field does not accept group email addresses or aliases. Example: "01d520gv4vjcrht"

func (GcpUserAccessBindingOutput) Name 

func (o GcpUserAccessBindingOutput) Name() pulumi.StringOutput

Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by RFC 3986 Section 2.3). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"

func (GcpUserAccessBindingOutput) OrganizationId 

func (o GcpUserAccessBindingOutput) OrganizationId() pulumi.StringOutput

Required. ID of the parent organization.

***

func (GcpUserAccessBindingOutput) ToGcpUserAccessBindingOutput 

func (o GcpUserAccessBindingOutput) ToGcpUserAccessBindingOutput() GcpUserAccessBindingOutput

func (GcpUserAccessBindingOutput) ToGcpUserAccessBindingOutputWithContext 

func (o GcpUserAccessBindingOutput) ToGcpUserAccessBindingOutputWithContext(ctx context.Context) GcpUserAccessBindingOutput

type GcpUserAccessBindingState 

type GcpUserAccessBindingState struct {
	// Required. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted"
	AccessLevels pulumi.StringPtrInput
	// Required. Immutable. Google Group id whose members are subject to this binding's restrictions. See "id" in the G Suite Directory API's Groups resource. If a group's email address/alias is changed, this resource will continue to point at the changed group. This field does not accept group email addresses or aliases. Example: "01d520gv4vjcrht"
	GroupKey pulumi.StringPtrInput
	// Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by RFC 3986 Section 2.3). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"
	Name pulumi.StringPtrInput
	// Required. ID of the parent organization.
	//
	// ***
	OrganizationId pulumi.StringPtrInput
}

func (GcpUserAccessBindingState) ElementType 

func (GcpUserAccessBindingState) ElementType() reflect.Type

type IngressPolicy 

type IngressPolicy struct {
	pulumi.CustomResourceState

	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	IngressPolicyName pulumi.StringOutput `pulumi:"ingressPolicyName"`
	// A GCP resource that is inside of the service perimeter.
	Resource pulumi.StringOutput `pulumi:"resource"`
}

This resource has been deprecated, please refer to ServicePerimeterIngressPolicy.

To get more information about IngressPolicy, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#ingresspolicy)

## Import

IngressPolicy can be imported using any of these accepted formats:

* `{{ingress_policy_name}}/{{resource}}`

When using the `pulumi import` command, IngressPolicy can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/ingressPolicy:IngressPolicy default {{ingress_policy_name}}/{{resource}} ```

func GetIngressPolicy 

func GetIngressPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IngressPolicyState, opts ...pulumi.ResourceOption) (*IngressPolicy, error)

GetIngressPolicy gets an existing IngressPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIngressPolicy 

func NewIngressPolicy(ctx *pulumi.Context,
	name string, args *IngressPolicyArgs, opts ...pulumi.ResourceOption) (*IngressPolicy, error)

NewIngressPolicy registers a new resource with the given unique name, arguments, and options.

func (*IngressPolicy) ElementType 

func (*IngressPolicy) ElementType() reflect.Type

func (*IngressPolicy) ToIngressPolicyOutput 

func (i *IngressPolicy) ToIngressPolicyOutput() IngressPolicyOutput

func (*IngressPolicy) ToIngressPolicyOutputWithContext 

func (i *IngressPolicy) ToIngressPolicyOutputWithContext(ctx context.Context) IngressPolicyOutput

type IngressPolicyArgs 

type IngressPolicyArgs struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	IngressPolicyName pulumi.StringInput
	// A GCP resource that is inside of the service perimeter.
	Resource pulumi.StringInput
}

The set of arguments for constructing a IngressPolicy resource.

func (IngressPolicyArgs) ElementType 

func (IngressPolicyArgs) ElementType() reflect.Type

type IngressPolicyArray 

type IngressPolicyArray []IngressPolicyInput

func (IngressPolicyArray) ElementType 

func (IngressPolicyArray) ElementType() reflect.Type

func (IngressPolicyArray) ToIngressPolicyArrayOutput 

func (i IngressPolicyArray) ToIngressPolicyArrayOutput() IngressPolicyArrayOutput

func (IngressPolicyArray) ToIngressPolicyArrayOutputWithContext 

func (i IngressPolicyArray) ToIngressPolicyArrayOutputWithContext(ctx context.Context) IngressPolicyArrayOutput

type IngressPolicyArrayInput 

type IngressPolicyArrayInput interface {
	pulumi.Input

	ToIngressPolicyArrayOutput() IngressPolicyArrayOutput
	ToIngressPolicyArrayOutputWithContext(context.Context) IngressPolicyArrayOutput
}

IngressPolicyArrayInput is an input type that accepts IngressPolicyArray and IngressPolicyArrayOutput values. You can construct a concrete instance of `IngressPolicyArrayInput` via: 

IngressPolicyArray{ IngressPolicyArgs{...} }

type IngressPolicyArrayOutput 

type IngressPolicyArrayOutput struct{ *pulumi.OutputState }

func (IngressPolicyArrayOutput) ElementType 

func (IngressPolicyArrayOutput) ElementType() reflect.Type

func (IngressPolicyArrayOutput) Index 

func (o IngressPolicyArrayOutput) Index(i pulumi.IntInput) IngressPolicyOutput

func (IngressPolicyArrayOutput) ToIngressPolicyArrayOutput 

func (o IngressPolicyArrayOutput) ToIngressPolicyArrayOutput() IngressPolicyArrayOutput

func (IngressPolicyArrayOutput) ToIngressPolicyArrayOutputWithContext 

func (o IngressPolicyArrayOutput) ToIngressPolicyArrayOutputWithContext(ctx context.Context) IngressPolicyArrayOutput

type IngressPolicyInput 

type IngressPolicyInput interface {
	pulumi.Input

	ToIngressPolicyOutput() IngressPolicyOutput
	ToIngressPolicyOutputWithContext(ctx context.Context) IngressPolicyOutput
}

type IngressPolicyMap 

type IngressPolicyMap map[string]IngressPolicyInput

func (IngressPolicyMap) ElementType 

func (IngressPolicyMap) ElementType() reflect.Type

func (IngressPolicyMap) ToIngressPolicyMapOutput 

func (i IngressPolicyMap) ToIngressPolicyMapOutput() IngressPolicyMapOutput

func (IngressPolicyMap) ToIngressPolicyMapOutputWithContext 

func (i IngressPolicyMap) ToIngressPolicyMapOutputWithContext(ctx context.Context) IngressPolicyMapOutput

type IngressPolicyMapInput 

type IngressPolicyMapInput interface {
	pulumi.Input

	ToIngressPolicyMapOutput() IngressPolicyMapOutput
	ToIngressPolicyMapOutputWithContext(context.Context) IngressPolicyMapOutput
}

IngressPolicyMapInput is an input type that accepts IngressPolicyMap and IngressPolicyMapOutput values. You can construct a concrete instance of `IngressPolicyMapInput` via: 

IngressPolicyMap{ "key": IngressPolicyArgs{...} }

type IngressPolicyMapOutput 

type IngressPolicyMapOutput struct{ *pulumi.OutputState }

func (IngressPolicyMapOutput) ElementType 

func (IngressPolicyMapOutput) ElementType() reflect.Type

func (IngressPolicyMapOutput) MapIndex 

func (o IngressPolicyMapOutput) MapIndex(k pulumi.StringInput) IngressPolicyOutput

func (IngressPolicyMapOutput) ToIngressPolicyMapOutput 

func (o IngressPolicyMapOutput) ToIngressPolicyMapOutput() IngressPolicyMapOutput

func (IngressPolicyMapOutput) ToIngressPolicyMapOutputWithContext 

func (o IngressPolicyMapOutput) ToIngressPolicyMapOutputWithContext(ctx context.Context) IngressPolicyMapOutput

type IngressPolicyOutput 

type IngressPolicyOutput struct{ *pulumi.OutputState }

func (IngressPolicyOutput) ElementType 

func (IngressPolicyOutput) ElementType() reflect.Type

func (IngressPolicyOutput) IngressPolicyName 

func (o IngressPolicyOutput) IngressPolicyName() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (IngressPolicyOutput) Resource 

func (o IngressPolicyOutput) Resource() pulumi.StringOutput

A GCP resource that is inside of the service perimeter.

func (IngressPolicyOutput) ToIngressPolicyOutput 

func (o IngressPolicyOutput) ToIngressPolicyOutput() IngressPolicyOutput

func (IngressPolicyOutput) ToIngressPolicyOutputWithContext 

func (o IngressPolicyOutput) ToIngressPolicyOutputWithContext(ctx context.Context) IngressPolicyOutput

type IngressPolicyState 

type IngressPolicyState struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	IngressPolicyName pulumi.StringPtrInput
	// A GCP resource that is inside of the service perimeter.
	Resource pulumi.StringPtrInput
}

func (IngressPolicyState) ElementType 

func (IngressPolicyState) ElementType() reflect.Type

type LookupAccessPolicyArgs added in v8.10.0 

type LookupAccessPolicyArgs struct {
	// The parent of this AccessPolicy in the Cloud Resource Hierarchy. Format: `organizations/{{organization_id}}`
	Parent string `pulumi:"parent"`
	// Folder or project on which this policy is applicable. Format: `folders/{{folder_id}}` or `projects/{{project_number}}`
	Scopes []string `pulumi:"scopes"`
}

A collection of arguments for invoking getAccessPolicy.

type LookupAccessPolicyIamPolicyArgs 

type LookupAccessPolicyIamPolicyArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	Name string `pulumi:"name"`
}

A collection of arguments for invoking getAccessPolicyIamPolicy.

type LookupAccessPolicyIamPolicyOutputArgs 

type LookupAccessPolicyIamPolicyOutputArgs struct {
	// Used to find the parent resource to bind the IAM policy to
	Name pulumi.StringInput `pulumi:"name"`
}

A collection of arguments for invoking getAccessPolicyIamPolicy.

func (LookupAccessPolicyIamPolicyOutputArgs) ElementType 

func (LookupAccessPolicyIamPolicyOutputArgs) ElementType() reflect.Type

type LookupAccessPolicyIamPolicyResult 

type LookupAccessPolicyIamPolicyResult struct {
	// (Computed) The etag of the IAM policy.
	Etag string `pulumi:"etag"`
	// The provider-assigned unique ID for this managed resource.
	Id   string `pulumi:"id"`
	Name string `pulumi:"name"`
	// (Required only by `accesscontextmanager.AccessPolicyIamPolicy`) The policy data generated by
	// a `organizations.getIAMPolicy` data source.
	PolicyData string `pulumi:"policyData"`
}

A collection of values returned by getAccessPolicyIamPolicy.

func LookupAccessPolicyIamPolicy 

func LookupAccessPolicyIamPolicy(ctx *pulumi.Context, args *LookupAccessPolicyIamPolicyArgs, opts ...pulumi.InvokeOption) (*LookupAccessPolicyIamPolicyResult, error)

Retrieves the current IAM policy data for accesspolicy

## example

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.LookupAccessPolicyIamPolicy(ctx, &accesscontextmanager.LookupAccessPolicyIamPolicyArgs{
			Name: access_policy.Name,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupAccessPolicyIamPolicyResultOutput 

type LookupAccessPolicyIamPolicyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getAccessPolicyIamPolicy.

func LookupAccessPolicyIamPolicyOutput 

func LookupAccessPolicyIamPolicyOutput(ctx *pulumi.Context, args LookupAccessPolicyIamPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupAccessPolicyIamPolicyResultOutput

func (LookupAccessPolicyIamPolicyResultOutput) ElementType 

func (LookupAccessPolicyIamPolicyResultOutput) ElementType() reflect.Type

func (LookupAccessPolicyIamPolicyResultOutput) Etag 

func (o LookupAccessPolicyIamPolicyResultOutput) Etag() pulumi.StringOutput

(Computed) The etag of the IAM policy.

func (LookupAccessPolicyIamPolicyResultOutput) Id 

func (o LookupAccessPolicyIamPolicyResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupAccessPolicyIamPolicyResultOutput) Name 

func (o LookupAccessPolicyIamPolicyResultOutput) Name() pulumi.StringOutput

func (LookupAccessPolicyIamPolicyResultOutput) PolicyData 

func (o LookupAccessPolicyIamPolicyResultOutput) PolicyData() pulumi.StringOutput

(Required only by `accesscontextmanager.AccessPolicyIamPolicy`) The policy data generated by a `organizations.getIAMPolicy` data source.

func (LookupAccessPolicyIamPolicyResultOutput) ToLookupAccessPolicyIamPolicyResultOutput 

func (o LookupAccessPolicyIamPolicyResultOutput) ToLookupAccessPolicyIamPolicyResultOutput() LookupAccessPolicyIamPolicyResultOutput

func (LookupAccessPolicyIamPolicyResultOutput) ToLookupAccessPolicyIamPolicyResultOutputWithContext 

func (o LookupAccessPolicyIamPolicyResultOutput) ToLookupAccessPolicyIamPolicyResultOutputWithContext(ctx context.Context) LookupAccessPolicyIamPolicyResultOutput

type LookupAccessPolicyOutputArgs added in v8.10.0 

type LookupAccessPolicyOutputArgs struct {
	// The parent of this AccessPolicy in the Cloud Resource Hierarchy. Format: `organizations/{{organization_id}}`
	Parent pulumi.StringInput `pulumi:"parent"`
	// Folder or project on which this policy is applicable. Format: `folders/{{folder_id}}` or `projects/{{project_number}}`
	Scopes pulumi.StringArrayInput `pulumi:"scopes"`
}

A collection of arguments for invoking getAccessPolicy.

func (LookupAccessPolicyOutputArgs) ElementType added in v8.10.0 

func (LookupAccessPolicyOutputArgs) ElementType() reflect.Type

type LookupAccessPolicyResult added in v8.10.0 

type LookupAccessPolicyResult struct {
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// Resource name of the AccessPolicy.
	Name   string   `pulumi:"name"`
	Parent string   `pulumi:"parent"`
	Scopes []string `pulumi:"scopes"`
	// Human readable title. Does not affect behavior.
	Title string `pulumi:"title"`
}

A collection of values returned by getAccessPolicy.

func LookupAccessPolicy added in v8.10.0 

func LookupAccessPolicy(ctx *pulumi.Context, args *LookupAccessPolicyArgs, opts ...pulumi.InvokeOption) (*LookupAccessPolicyResult, error)

Get information about an Access Context Manager AccessPolicy.

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.LookupAccessPolicy(ctx, &accesscontextmanager.LookupAccessPolicyArgs{
			Parent: "organizations/1234567",
		}, nil)
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.LookupAccessPolicy(ctx, &accesscontextmanager.LookupAccessPolicyArgs{
			Parent: "organizations/1234567",
			Scopes: []string{
				"projects/1234567",
			},
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupAccessPolicyResultOutput added in v8.10.0 

type LookupAccessPolicyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getAccessPolicy.

func LookupAccessPolicyOutput added in v8.10.0 

func LookupAccessPolicyOutput(ctx *pulumi.Context, args LookupAccessPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupAccessPolicyResultOutput

func (LookupAccessPolicyResultOutput) ElementType added in v8.10.0 

func (LookupAccessPolicyResultOutput) ElementType() reflect.Type

func (LookupAccessPolicyResultOutput) Id added in v8.10.0 

func (o LookupAccessPolicyResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupAccessPolicyResultOutput) Name added in v8.10.0 

func (o LookupAccessPolicyResultOutput) Name() pulumi.StringOutput

Resource name of the AccessPolicy.

func (LookupAccessPolicyResultOutput) Parent added in v8.10.0 

func (o LookupAccessPolicyResultOutput) Parent() pulumi.StringOutput

func (LookupAccessPolicyResultOutput) Scopes added in v8.10.0 

func (o LookupAccessPolicyResultOutput) Scopes() pulumi.StringArrayOutput

func (LookupAccessPolicyResultOutput) Title added in v8.10.0 

func (o LookupAccessPolicyResultOutput) Title() pulumi.StringOutput

Human readable title. Does not affect behavior.

func (LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutput added in v8.10.0 

func (o LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutput() LookupAccessPolicyResultOutput

func (LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutputWithContext added in v8.10.0 

func (o LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutputWithContext(ctx context.Context) LookupAccessPolicyResultOutput

type ServicePerimeter 

type ServicePerimeter struct {
	pulumi.CustomResourceState

	// Time the AccessPolicy was created in UTC.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Description of the ServicePerimeter and its use. Does not affect
	// behavior.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Resource name for the ServicePerimeter. The shortName component must
	// begin with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}
	//
	// ***
	Name pulumi.StringOutput `pulumi:"name"`
	// The AccessPolicy this ServicePerimeter lives in.
	// Format: accessPolicies/{policy_id}
	Parent pulumi.StringOutput `pulumi:"parent"`
	// Specifies the type of the Perimeter. There are two types: regular and
	// bridge. Regular Service Perimeter contains resources, access levels,
	// and restricted services. Every resource can be in at most
	// ONE regular Service Perimeter.
	// In addition to being in a regular service perimeter, a resource can also
	// be in zero or more perimeter bridges. A perimeter bridge only contains
	// resources. Cross project operations are permitted if all effected
	// resources share some perimeter (whether bridge or regular). Perimeter
	// Bridge does not contain access levels or services: those are governed
	// entirely by the regular perimeter that resource is in.
	// Perimeter Bridges are typically useful when building more complex
	// topologies with many independent perimeters that need to share some data
	// with a common perimeter, but should not be able to share data among
	// themselves.
	// Default value is `PERIMETER_TYPE_REGULAR`.
	// Possible values are: `PERIMETER_TYPE_REGULAR`, `PERIMETER_TYPE_BRIDGE`.
	PerimeterType pulumi.StringPtrOutput `pulumi:"perimeterType"`
	// Proposed (or dry run) ServicePerimeter configuration.
	// This configuration allows to specify and test ServicePerimeter configuration
	// without enforcing actual access restrictions. Only allowed to be set when
	// the `useExplicitDryRunSpec` flag is set.
	// Structure is documented below.
	Spec ServicePerimeterSpecPtrOutput `pulumi:"spec"`
	// ServicePerimeter configuration. Specifies sets of resources,
	// restricted services and access levels that determine
	// perimeter content and boundaries.
	// Structure is documented below.
	Status ServicePerimeterStatusPtrOutput `pulumi:"status"`
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringOutput `pulumi:"title"`
	// Time the AccessPolicy was updated in UTC.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
	// Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists
	// for all Service Perimeters, and that spec is identical to the status for those
	// Service Perimeters. When this flag is set, it inhibits the generation of the
	// implicit spec, thereby allowing the user to explicitly provide a
	// configuration ("spec") to use in a dry-run version of the Service Perimeter.
	// This allows the user to test changes to the enforced config ("status") without
	// actually enforcing them. This testing is done through analyzing the differences
	// between currently enforced and suggested restrictions. useExplicitDryRunSpec must
	// bet set to True if any of the fields in the spec are set to non-default values.
	UseExplicitDryRunSpec pulumi.BoolPtrOutput `pulumi:"useExplicitDryRunSpec"`
}

ServicePerimeter describes a set of GCP resources which can freely import and export data amongst themselves, but not export outside of the ServicePerimeter. If a request with a source within this ServicePerimeter has a target outside of the ServicePerimeter, the request will be blocked. Otherwise the request is allowed. There are two types of Service Perimeter

  • Regular and Bridge. Regular Service Perimeters cannot overlap, a single GCP project can only belong to a single regular Service Perimeter. Service Perimeter Bridges can contain only GCP projects as members, a single GCP project may belong to multiple Service Perimeter Bridges.

To get more information about ServicePerimeter, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters) * How-to Guides

> **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, you must specify a `billingProject` and set `userProjectOverride` to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the `serviceusage.services.use` permission on the `billingProject` you defined.

## Example Usage

### Access Context Manager Service Perimeter Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeter(ctx, "service-perimeter", &accesscontextmanager.ServicePerimeterArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/servicePerimeters/restrict_storage", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("restrict_storage"),
			Status: &accesscontextmanager.ServicePerimeterStatusArgs{
				RestrictedServices: pulumi.StringArray{
					pulumi.String("storage.googleapis.com"),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevel(ctx, "access-level", &accesscontextmanager.AccessLevelArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("chromeos_no_lock"),
			Basic: &accesscontextmanager.AccessLevelBasicArgs{
				Conditions: accesscontextmanager.AccessLevelBasicConditionArray{
					&accesscontextmanager.AccessLevelBasicConditionArgs{
						DevicePolicy: &accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs{
							RequireScreenLock: pulumi.Bool(false),
							OsConstraints: accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArray{
								&accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs{
									OsType: pulumi.String("DESKTOP_CHROME_OS"),
								},
							},
						},
						Regions: pulumi.StringArray{
							pulumi.String("CH"),
							pulumi.String("IT"),
							pulumi.String("US"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Access Context Manager Service Perimeter Secure Data Exchange

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeters(ctx, "secure-data-exchange", &accesscontextmanager.ServicePerimetersArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			ServicePerimeters: accesscontextmanager.ServicePerimetersServicePerimeterArray{
				&accesscontextmanager.ServicePerimetersServicePerimeterArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/servicePerimeters/", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String(""),
					Status: &accesscontextmanager.ServicePerimetersServicePerimeterStatusArgs{
						RestrictedServices: pulumi.StringArray{
							pulumi.String("storage.googleapis.com"),
						},
					},
				},
				&accesscontextmanager.ServicePerimetersServicePerimeterArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/servicePerimeters/", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String(""),
					Status: &accesscontextmanager.ServicePerimetersServicePerimeterStatusArgs{
						RestrictedServices: pulumi.StringArray{
							pulumi.String("bigtable.googleapis.com"),
						},
						VpcAccessibleServices: &accesscontextmanager.ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs{
							EnableRestriction: pulumi.Bool(true),
							AllowedServices: pulumi.StringArray{
								pulumi.String("bigquery.googleapis.com"),
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevel(ctx, "access-level", &accesscontextmanager.AccessLevelArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/accessLevels/secure_data_exchange", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("secure_data_exchange"),
			Basic: &accesscontextmanager.AccessLevelBasicArgs{
				Conditions: accesscontextmanager.AccessLevelBasicConditionArray{
					&accesscontextmanager.AccessLevelBasicConditionArgs{
						DevicePolicy: &accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs{
							RequireScreenLock: pulumi.Bool(false),
							OsConstraints: accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArray{
								&accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs{
									OsType: pulumi.String("DESKTOP_CHROME_OS"),
								},
							},
						},
						Regions: pulumi.StringArray{
							pulumi.String("CH"),
							pulumi.String("IT"),
							pulumi.String("US"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeter(ctx, "test-access", &accesscontextmanager.ServicePerimeterArgs{
			Parent:        pulumi.Sprintf("accessPolicies/%v", test_accessGoogleAccessContextManagerAccessPolicy.Name),
			Name:          pulumi.Sprintf("accessPolicies/%v%v", test_accessGoogleAccessContextManagerAccessPolicy.Name, "/servicePerimeters/%s"),
			Title:         pulumi.String("%s"),
			PerimeterType: pulumi.String("PERIMETER_TYPE_REGULAR"),
			Status: &accesscontextmanager.ServicePerimeterStatusArgs{
				RestrictedServices: pulumi.StringArray{
					pulumi.String("bigquery.googleapis.com"),
					pulumi.String("storage.googleapis.com"),
				},
				AccessLevels: pulumi.StringArray{
					access_level.Name,
				},
				VpcAccessibleServices: &accesscontextmanager.ServicePerimeterStatusVpcAccessibleServicesArgs{
					EnableRestriction: pulumi.Bool(true),
					AllowedServices: pulumi.StringArray{
						pulumi.String("bigquery.googleapis.com"),
						pulumi.String("storage.googleapis.com"),
					},
				},
				IngressPolicies: accesscontextmanager.ServicePerimeterStatusIngressPolicyArray{
					&accesscontextmanager.ServicePerimeterStatusIngressPolicyArgs{
						IngressFrom: &accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressFromArgs{
							Sources: accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressFromSourceArray{
								&accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressFromSourceArgs{
									AccessLevel: pulumi.Any(test_accessGoogleAccessContextManagerAccessLevel.Name),
								},
							},
							IdentityType: pulumi.String("ANY_IDENTITY"),
						},
						IngressTo: &accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToArgs{
							Resources: pulumi.StringArray{
								pulumi.String("*"),
							},
							Operations: accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationArray{
								&accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationArgs{
									ServiceName: pulumi.String("bigquery.googleapis.com"),
									MethodSelectors: accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray{
										&accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{
											Method: pulumi.String("BigQueryStorage.ReadRows"),
										},
										&accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{
											Method: pulumi.String("TableService.ListTables"),
										},
										&accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{
											Permission: pulumi.String("bigquery.jobs.get"),
										},
									},
								},
								&accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationArgs{
									ServiceName: pulumi.String("storage.googleapis.com"),
									MethodSelectors: accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray{
										&accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{
											Method: pulumi.String("google.storage.objects.create"),
										},
									},
								},
							},
						},
					},
				},
				EgressPolicies: accesscontextmanager.ServicePerimeterStatusEgressPolicyArray{
					&accesscontextmanager.ServicePerimeterStatusEgressPolicyArgs{
						EgressFrom: &accesscontextmanager.ServicePerimeterStatusEgressPolicyEgressFromArgs{
							IdentityType: pulumi.String("ANY_USER_ACCOUNT"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Access Context Manager Service Perimeter Dry-Run

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeter(ctx, "service-perimeter", &accesscontextmanager.ServicePerimeterArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/servicePerimeters/restrict_bigquery_dryrun_storage", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("restrict_bigquery_dryrun_storage"),
			Status: &accesscontextmanager.ServicePerimeterStatusArgs{
				RestrictedServices: pulumi.StringArray{
					pulumi.String("bigquery.googleapis.com"),
				},
			},
			Spec: &accesscontextmanager.ServicePerimeterSpecArgs{
				RestrictedServices: pulumi.StringArray{
					pulumi.String("storage.googleapis.com"),
				},
			},
			UseExplicitDryRunSpec: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

ServicePerimeter can be imported using any of these accepted formats:

* `{{name}}`

When using the `pulumi import` command, ServicePerimeter can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/servicePerimeter:ServicePerimeter default {{name}} ```

func GetServicePerimeter 

func GetServicePerimeter(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimeterState, opts ...pulumi.ResourceOption) (*ServicePerimeter, error)

GetServicePerimeter gets an existing ServicePerimeter resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeter 

func NewServicePerimeter(ctx *pulumi.Context,
	name string, args *ServicePerimeterArgs, opts ...pulumi.ResourceOption) (*ServicePerimeter, error)

NewServicePerimeter registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeter) ElementType 

func (*ServicePerimeter) ElementType() reflect.Type

func (*ServicePerimeter) ToServicePerimeterOutput 

func (i *ServicePerimeter) ToServicePerimeterOutput() ServicePerimeterOutput

func (*ServicePerimeter) ToServicePerimeterOutputWithContext 

func (i *ServicePerimeter) ToServicePerimeterOutputWithContext(ctx context.Context) ServicePerimeterOutput

type ServicePerimeterArgs 

type ServicePerimeterArgs struct {
	// Description of the ServicePerimeter and its use. Does not affect
	// behavior.
	Description pulumi.StringPtrInput
	// Resource name for the ServicePerimeter. The shortName component must
	// begin with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}
	//
	// ***
	Name pulumi.StringPtrInput
	// The AccessPolicy this ServicePerimeter lives in.
	// Format: accessPolicies/{policy_id}
	Parent pulumi.StringInput
	// Specifies the type of the Perimeter. There are two types: regular and
	// bridge. Regular Service Perimeter contains resources, access levels,
	// and restricted services. Every resource can be in at most
	// ONE regular Service Perimeter.
	// In addition to being in a regular service perimeter, a resource can also
	// be in zero or more perimeter bridges. A perimeter bridge only contains
	// resources. Cross project operations are permitted if all effected
	// resources share some perimeter (whether bridge or regular). Perimeter
	// Bridge does not contain access levels or services: those are governed
	// entirely by the regular perimeter that resource is in.
	// Perimeter Bridges are typically useful when building more complex
	// topologies with many independent perimeters that need to share some data
	// with a common perimeter, but should not be able to share data among
	// themselves.
	// Default value is `PERIMETER_TYPE_REGULAR`.
	// Possible values are: `PERIMETER_TYPE_REGULAR`, `PERIMETER_TYPE_BRIDGE`.
	PerimeterType pulumi.StringPtrInput
	// Proposed (or dry run) ServicePerimeter configuration.
	// This configuration allows to specify and test ServicePerimeter configuration
	// without enforcing actual access restrictions. Only allowed to be set when
	// the `useExplicitDryRunSpec` flag is set.
	// Structure is documented below.
	Spec ServicePerimeterSpecPtrInput
	// ServicePerimeter configuration. Specifies sets of resources,
	// restricted services and access levels that determine
	// perimeter content and boundaries.
	// Structure is documented below.
	Status ServicePerimeterStatusPtrInput
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringInput
	// Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists
	// for all Service Perimeters, and that spec is identical to the status for those
	// Service Perimeters. When this flag is set, it inhibits the generation of the
	// implicit spec, thereby allowing the user to explicitly provide a
	// configuration ("spec") to use in a dry-run version of the Service Perimeter.
	// This allows the user to test changes to the enforced config ("status") without
	// actually enforcing them. This testing is done through analyzing the differences
	// between currently enforced and suggested restrictions. useExplicitDryRunSpec must
	// bet set to True if any of the fields in the spec are set to non-default values.
	UseExplicitDryRunSpec pulumi.BoolPtrInput
}

The set of arguments for constructing a ServicePerimeter resource.

func (ServicePerimeterArgs) ElementType 

func (ServicePerimeterArgs) ElementType() reflect.Type

type ServicePerimeterArray 

type ServicePerimeterArray []ServicePerimeterInput

func (ServicePerimeterArray) ElementType 

func (ServicePerimeterArray) ElementType() reflect.Type

func (ServicePerimeterArray) ToServicePerimeterArrayOutput 

func (i ServicePerimeterArray) ToServicePerimeterArrayOutput() ServicePerimeterArrayOutput

func (ServicePerimeterArray) ToServicePerimeterArrayOutputWithContext 

func (i ServicePerimeterArray) ToServicePerimeterArrayOutputWithContext(ctx context.Context) ServicePerimeterArrayOutput

type ServicePerimeterArrayInput 

type ServicePerimeterArrayInput interface {
	pulumi.Input

	ToServicePerimeterArrayOutput() ServicePerimeterArrayOutput
	ToServicePerimeterArrayOutputWithContext(context.Context) ServicePerimeterArrayOutput
}

ServicePerimeterArrayInput is an input type that accepts ServicePerimeterArray and ServicePerimeterArrayOutput values. You can construct a concrete instance of `ServicePerimeterArrayInput` via: 

ServicePerimeterArray{ ServicePerimeterArgs{...} }

type ServicePerimeterArrayOutput 

type ServicePerimeterArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterArrayOutput) ElementType 

func (ServicePerimeterArrayOutput) ElementType() reflect.Type

func (ServicePerimeterArrayOutput) Index 

func (o ServicePerimeterArrayOutput) Index(i pulumi.IntInput) ServicePerimeterOutput

func (ServicePerimeterArrayOutput) ToServicePerimeterArrayOutput 

func (o ServicePerimeterArrayOutput) ToServicePerimeterArrayOutput() ServicePerimeterArrayOutput

func (ServicePerimeterArrayOutput) ToServicePerimeterArrayOutputWithContext 

func (o ServicePerimeterArrayOutput) ToServicePerimeterArrayOutputWithContext(ctx context.Context) ServicePerimeterArrayOutput

type ServicePerimeterDryRunEgressPolicy 

type ServicePerimeterDryRunEgressPolicy struct {
	pulumi.CustomResourceState

	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterDryRunEgressPolicyEgressToPtrOutput `pulumi:"egressTo"`
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringOutput `pulumi:"perimeter"`
}

Manage a single EgressPolicy in the spec (dry-run) configuration for a service perimeter. EgressPolicies match requests based on egressFrom and egressTo stanzas. For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched. If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter boundary. For example, an EgressPolicy can be used to allow VMs on networks within the ServicePerimeter to access a defined set of projects outside the perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket or query against a BigQuery dataset).

> **Note:** By default, updates to this resource will remove the EgressPolicy from the from the perimeter and add it back in a non-atomic manner. To ensure that the new EgressPolicy is added before the old one is removed, add a `lifecycle` block with `createBeforeDestroy = true` to this resource.

To get more information about ServicePerimeterDryRunEgressPolicy, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#egresspolicy) * How-to Guides

## Example Usage

func GetServicePerimeterDryRunEgressPolicy 

func GetServicePerimeterDryRunEgressPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimeterDryRunEgressPolicyState, opts ...pulumi.ResourceOption) (*ServicePerimeterDryRunEgressPolicy, error)

GetServicePerimeterDryRunEgressPolicy gets an existing ServicePerimeterDryRunEgressPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeterDryRunEgressPolicy 

func NewServicePerimeterDryRunEgressPolicy(ctx *pulumi.Context,
	name string, args *ServicePerimeterDryRunEgressPolicyArgs, opts ...pulumi.ResourceOption) (*ServicePerimeterDryRunEgressPolicy, error)

NewServicePerimeterDryRunEgressPolicy registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeterDryRunEgressPolicy) ElementType 

func (*ServicePerimeterDryRunEgressPolicy) ElementType() reflect.Type

func (*ServicePerimeterDryRunEgressPolicy) ToServicePerimeterDryRunEgressPolicyOutput 

func (i *ServicePerimeterDryRunEgressPolicy) ToServicePerimeterDryRunEgressPolicyOutput() ServicePerimeterDryRunEgressPolicyOutput

func (*ServicePerimeterDryRunEgressPolicy) ToServicePerimeterDryRunEgressPolicyOutputWithContext 

func (i *ServicePerimeterDryRunEgressPolicy) ToServicePerimeterDryRunEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyOutput

type ServicePerimeterDryRunEgressPolicyArgs 

type ServicePerimeterDryRunEgressPolicyArgs struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterDryRunEgressPolicyEgressFromPtrInput
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterDryRunEgressPolicyEgressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringInput
}

The set of arguments for constructing a ServicePerimeterDryRunEgressPolicy resource.

func (ServicePerimeterDryRunEgressPolicyArgs) ElementType 

func (ServicePerimeterDryRunEgressPolicyArgs) ElementType() reflect.Type

type ServicePerimeterDryRunEgressPolicyArray 

type ServicePerimeterDryRunEgressPolicyArray []ServicePerimeterDryRunEgressPolicyInput

func (ServicePerimeterDryRunEgressPolicyArray) ElementType 

func (ServicePerimeterDryRunEgressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyArray) ToServicePerimeterDryRunEgressPolicyArrayOutput 

func (i ServicePerimeterDryRunEgressPolicyArray) ToServicePerimeterDryRunEgressPolicyArrayOutput() ServicePerimeterDryRunEgressPolicyArrayOutput

func (ServicePerimeterDryRunEgressPolicyArray) ToServicePerimeterDryRunEgressPolicyArrayOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyArray) ToServicePerimeterDryRunEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyArrayOutput

type ServicePerimeterDryRunEgressPolicyArrayInput 

type ServicePerimeterDryRunEgressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyArrayOutput() ServicePerimeterDryRunEgressPolicyArrayOutput
	ToServicePerimeterDryRunEgressPolicyArrayOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyArrayOutput
}

ServicePerimeterDryRunEgressPolicyArrayInput is an input type that accepts ServicePerimeterDryRunEgressPolicyArray and ServicePerimeterDryRunEgressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyArrayInput` via: 

ServicePerimeterDryRunEgressPolicyArray{ ServicePerimeterDryRunEgressPolicyArgs{...} }

type ServicePerimeterDryRunEgressPolicyArrayOutput 

type ServicePerimeterDryRunEgressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyArrayOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyArrayOutput) Index 

func (o ServicePerimeterDryRunEgressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunEgressPolicyOutput

func (ServicePerimeterDryRunEgressPolicyArrayOutput) ToServicePerimeterDryRunEgressPolicyArrayOutput 

func (o ServicePerimeterDryRunEgressPolicyArrayOutput) ToServicePerimeterDryRunEgressPolicyArrayOutput() ServicePerimeterDryRunEgressPolicyArrayOutput

func (ServicePerimeterDryRunEgressPolicyArrayOutput) ToServicePerimeterDryRunEgressPolicyArrayOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyArrayOutput) ToServicePerimeterDryRunEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyArrayOutput

type ServicePerimeterDryRunEgressPolicyEgressFrom 

type ServicePerimeterDryRunEgressPolicyEgressFrom struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction *string `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterDryRunEgressPolicyEgressFromSource `pulumi:"sources"`
}

type ServicePerimeterDryRunEgressPolicyEgressFromArgs 

type ServicePerimeterDryRunEgressPolicyEgressFromArgs struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction pulumi.StringPtrInput `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterDryRunEgressPolicyEgressFromArgs) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressFromArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromOutput() ServicePerimeterDryRunEgressPolicyEgressFromOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutput() ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressFromArgs) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput

type ServicePerimeterDryRunEgressPolicyEgressFromInput 

type ServicePerimeterDryRunEgressPolicyEgressFromInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressFromOutput() ServicePerimeterDryRunEgressPolicyEgressFromOutput
	ToServicePerimeterDryRunEgressPolicyEgressFromOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressFromOutput
}

ServicePerimeterDryRunEgressPolicyEgressFromInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressFromArgs and ServicePerimeterDryRunEgressPolicyEgressFromOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressFromInput` via: 

ServicePerimeterDryRunEgressPolicyEgressFromArgs{...}

type ServicePerimeterDryRunEgressPolicyEgressFromOutput 

type ServicePerimeterDryRunEgressPolicyEgressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) Identities 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) IdentityType 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) SourceRestriction 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) Sources 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) Sources() ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromOutput() ServicePerimeterDryRunEgressPolicyEgressFromOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutput() ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressFromOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput

type ServicePerimeterDryRunEgressPolicyEgressFromPtrInput 

type ServicePerimeterDryRunEgressPolicyEgressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutput() ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput
	ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput
}

ServicePerimeterDryRunEgressPolicyEgressFromPtrInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressFromArgs, ServicePerimeterDryRunEgressPolicyEgressFromPtr and ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressFromPtrInput` via: 

        ServicePerimeterDryRunEgressPolicyEgressFromArgs{...}

or:

        nil

func ServicePerimeterDryRunEgressPolicyEgressFromPtr 

func ServicePerimeterDryRunEgressPolicyEgressFromPtr(v *ServicePerimeterDryRunEgressPolicyEgressFromArgs) ServicePerimeterDryRunEgressPolicyEgressFromPtrInput

type ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput 

type ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) Elem 

func (o ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) Elem() ServicePerimeterDryRunEgressPolicyEgressFromOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) Identities 

func (o ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) IdentityType 

func (o ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) SourceRestriction 

func (o ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) Sources 

func (o ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) Sources() ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutput() ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput

type ServicePerimeterDryRunEgressPolicyEgressFromSource 

type ServicePerimeterDryRunEgressPolicyEgressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
}

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs 

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
}

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutput() ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArray 

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArray []ServicePerimeterDryRunEgressPolicyEgressFromSourceInput

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArray) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArray) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressFromSourceArray) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArray) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressFromSourceArray) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayInput 

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput
	ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput
}

ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressFromSourceArray and ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayInput` via: 

ServicePerimeterDryRunEgressPolicyEgressFromSourceArray{ ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs{...} }

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput 

type ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) Index 

func (o ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterDryRunEgressPolicyEgressFromSourceInput 

type ServicePerimeterDryRunEgressPolicyEgressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutput() ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput
	ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput
}

ServicePerimeterDryRunEgressPolicyEgressFromSourceInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs and ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressFromSourceInput` via: 

ServicePerimeterDryRunEgressPolicyEgressFromSourceArgs{...}

type ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput 

type ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) AccessLevel 

func (o ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutput() ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput

func (ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput) ToServicePerimeterDryRunEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressFromSourceOutput

type ServicePerimeterDryRunEgressPolicyEgressTo 

type ServicePerimeterDryRunEgressPolicyEgressTo struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources []string `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations []ServicePerimeterDryRunEgressPolicyEgressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterDryRunEgressPolicyEgressToArgs 

type ServicePerimeterDryRunEgressPolicyEgressToArgs struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources pulumi.StringArrayInput `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations ServicePerimeterDryRunEgressPolicyEgressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterDryRunEgressPolicyEgressToArgs) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToOutput() ServicePerimeterDryRunEgressPolicyEgressToOutput

func (ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOutput

func (ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutput() ServicePerimeterDryRunEgressPolicyEgressToPtrOutput

func (ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressToArgs) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToPtrOutput

type ServicePerimeterDryRunEgressPolicyEgressToInput 

type ServicePerimeterDryRunEgressPolicyEgressToInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressToOutput() ServicePerimeterDryRunEgressPolicyEgressToOutput
	ToServicePerimeterDryRunEgressPolicyEgressToOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressToOutput
}

ServicePerimeterDryRunEgressPolicyEgressToInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressToArgs and ServicePerimeterDryRunEgressPolicyEgressToOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressToInput` via: 

ServicePerimeterDryRunEgressPolicyEgressToArgs{...}

type ServicePerimeterDryRunEgressPolicyEgressToOperation 

type ServicePerimeterDryRunEgressPolicyEgressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterDryRunEgressPolicyEgressToOperationArgs 

type ServicePerimeterDryRunEgressPolicyEgressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArgs) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationOutput

type ServicePerimeterDryRunEgressPolicyEgressToOperationArray 

type ServicePerimeterDryRunEgressPolicyEgressToOperationArray []ServicePerimeterDryRunEgressPolicyEgressToOperationInput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArray) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterDryRunEgressPolicyEgressToOperationArrayInput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput
	ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput
}

ServicePerimeterDryRunEgressPolicyEgressToOperationArrayInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressToOperationArray and ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressToOperationArrayInput` via: 

ServicePerimeterDryRunEgressPolicyEgressToOperationArray{ ServicePerimeterDryRunEgressPolicyEgressToOperationArgs{...} }

type ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) Index 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunEgressPolicyEgressToOperationOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterDryRunEgressPolicyEgressToOperationInput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressToOperationOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationOutput
	ToServicePerimeterDryRunEgressPolicyEgressToOperationOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationOutput
}

ServicePerimeterDryRunEgressPolicyEgressToOperationInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressToOperationArgs and ServicePerimeterDryRunEgressPolicyEgressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressToOperationInput` via: 

ServicePerimeterDryRunEgressPolicyEgressToOperationArgs{...}

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelector 

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs 

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray 

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray []ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorInput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayInput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput
	ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput
}

ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray and ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArray{ ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs{...} }

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorInput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput
	ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput
}

ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs and ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorInput` via: 

ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArgs{...}

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterDryRunEgressPolicyEgressToOperationOutput 

type ServicePerimeterDryRunEgressPolicyEgressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) MethodSelectors 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) MethodSelectors() ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ServiceName 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutput() ServicePerimeterDryRunEgressPolicyEgressToOperationOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressToOperationOutput) ToServicePerimeterDryRunEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOperationOutput

type ServicePerimeterDryRunEgressPolicyEgressToOutput 

type ServicePerimeterDryRunEgressPolicyEgressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) ExternalResources 

func (o ServicePerimeterDryRunEgressPolicyEgressToOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) Operations 

func (o ServicePerimeterDryRunEgressPolicyEgressToOutput) Operations() ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) Resources 

func (o ServicePerimeterDryRunEgressPolicyEgressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToOutput() ServicePerimeterDryRunEgressPolicyEgressToOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutput() ServicePerimeterDryRunEgressPolicyEgressToPtrOutput

func (ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressToOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToPtrOutput

type ServicePerimeterDryRunEgressPolicyEgressToPtrInput 

type ServicePerimeterDryRunEgressPolicyEgressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyEgressToPtrOutput() ServicePerimeterDryRunEgressPolicyEgressToPtrOutput
	ToServicePerimeterDryRunEgressPolicyEgressToPtrOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyEgressToPtrOutput
}

ServicePerimeterDryRunEgressPolicyEgressToPtrInput is an input type that accepts ServicePerimeterDryRunEgressPolicyEgressToArgs, ServicePerimeterDryRunEgressPolicyEgressToPtr and ServicePerimeterDryRunEgressPolicyEgressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyEgressToPtrInput` via: 

        ServicePerimeterDryRunEgressPolicyEgressToArgs{...}

or:

        nil

func ServicePerimeterDryRunEgressPolicyEgressToPtr 

func ServicePerimeterDryRunEgressPolicyEgressToPtr(v *ServicePerimeterDryRunEgressPolicyEgressToArgs) ServicePerimeterDryRunEgressPolicyEgressToPtrInput

type ServicePerimeterDryRunEgressPolicyEgressToPtrOutput 

type ServicePerimeterDryRunEgressPolicyEgressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) Elem 

func (o ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) Elem() ServicePerimeterDryRunEgressPolicyEgressToOutput

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ExternalResources 

func (o ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) Operations 

func (o ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) Operations() ServicePerimeterDryRunEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) Resources 

func (o ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutput() ServicePerimeterDryRunEgressPolicyEgressToPtrOutput

func (ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyEgressToPtrOutput) ToServicePerimeterDryRunEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyEgressToPtrOutput

type ServicePerimeterDryRunEgressPolicyInput 

type ServicePerimeterDryRunEgressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyOutput() ServicePerimeterDryRunEgressPolicyOutput
	ToServicePerimeterDryRunEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyOutput
}

type ServicePerimeterDryRunEgressPolicyMap 

type ServicePerimeterDryRunEgressPolicyMap map[string]ServicePerimeterDryRunEgressPolicyInput

func (ServicePerimeterDryRunEgressPolicyMap) ElementType 

func (ServicePerimeterDryRunEgressPolicyMap) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyMap) ToServicePerimeterDryRunEgressPolicyMapOutput 

func (i ServicePerimeterDryRunEgressPolicyMap) ToServicePerimeterDryRunEgressPolicyMapOutput() ServicePerimeterDryRunEgressPolicyMapOutput

func (ServicePerimeterDryRunEgressPolicyMap) ToServicePerimeterDryRunEgressPolicyMapOutputWithContext 

func (i ServicePerimeterDryRunEgressPolicyMap) ToServicePerimeterDryRunEgressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyMapOutput

type ServicePerimeterDryRunEgressPolicyMapInput 

type ServicePerimeterDryRunEgressPolicyMapInput interface {
	pulumi.Input

	ToServicePerimeterDryRunEgressPolicyMapOutput() ServicePerimeterDryRunEgressPolicyMapOutput
	ToServicePerimeterDryRunEgressPolicyMapOutputWithContext(context.Context) ServicePerimeterDryRunEgressPolicyMapOutput
}

ServicePerimeterDryRunEgressPolicyMapInput is an input type that accepts ServicePerimeterDryRunEgressPolicyMap and ServicePerimeterDryRunEgressPolicyMapOutput values. You can construct a concrete instance of `ServicePerimeterDryRunEgressPolicyMapInput` via: 

ServicePerimeterDryRunEgressPolicyMap{ "key": ServicePerimeterDryRunEgressPolicyArgs{...} }

type ServicePerimeterDryRunEgressPolicyMapOutput 

type ServicePerimeterDryRunEgressPolicyMapOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyMapOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyMapOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyMapOutput) MapIndex 

func (o ServicePerimeterDryRunEgressPolicyMapOutput) MapIndex(k pulumi.StringInput) ServicePerimeterDryRunEgressPolicyOutput

func (ServicePerimeterDryRunEgressPolicyMapOutput) ToServicePerimeterDryRunEgressPolicyMapOutput 

func (o ServicePerimeterDryRunEgressPolicyMapOutput) ToServicePerimeterDryRunEgressPolicyMapOutput() ServicePerimeterDryRunEgressPolicyMapOutput

func (ServicePerimeterDryRunEgressPolicyMapOutput) ToServicePerimeterDryRunEgressPolicyMapOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyMapOutput) ToServicePerimeterDryRunEgressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyMapOutput

type ServicePerimeterDryRunEgressPolicyOutput 

type ServicePerimeterDryRunEgressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunEgressPolicyOutput) EgressFrom 

func (o ServicePerimeterDryRunEgressPolicyOutput) EgressFrom() ServicePerimeterDryRunEgressPolicyEgressFromPtrOutput

Defines conditions on the source of a request causing this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterDryRunEgressPolicyOutput) EgressTo 

func (o ServicePerimeterDryRunEgressPolicyOutput) EgressTo() ServicePerimeterDryRunEgressPolicyEgressToPtrOutput

Defines the conditions on the `ApiOperation` and destination resources that cause this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterDryRunEgressPolicyOutput) ElementType 

func (ServicePerimeterDryRunEgressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunEgressPolicyOutput) Perimeter 

func (o ServicePerimeterDryRunEgressPolicyOutput) Perimeter() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (ServicePerimeterDryRunEgressPolicyOutput) ToServicePerimeterDryRunEgressPolicyOutput 

func (o ServicePerimeterDryRunEgressPolicyOutput) ToServicePerimeterDryRunEgressPolicyOutput() ServicePerimeterDryRunEgressPolicyOutput

func (ServicePerimeterDryRunEgressPolicyOutput) ToServicePerimeterDryRunEgressPolicyOutputWithContext 

func (o ServicePerimeterDryRunEgressPolicyOutput) ToServicePerimeterDryRunEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterDryRunEgressPolicyOutput

type ServicePerimeterDryRunEgressPolicyState 

type ServicePerimeterDryRunEgressPolicyState struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterDryRunEgressPolicyEgressFromPtrInput
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterDryRunEgressPolicyEgressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringPtrInput
}

func (ServicePerimeterDryRunEgressPolicyState) ElementType 

func (ServicePerimeterDryRunEgressPolicyState) ElementType() reflect.Type

type ServicePerimeterDryRunIngressPolicy 

type ServicePerimeterDryRunIngressPolicy struct {
	pulumi.CustomResourceState

	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterDryRunIngressPolicyIngressToPtrOutput `pulumi:"ingressTo"`
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringOutput `pulumi:"perimeter"`
}

Manage a single IngressPolicy in the spec (dry-run) configuration for a service perimeter. IngressPolicies match requests based on ingressFrom and ingressTo stanzas. For an ingress policy to match, both the ingressFrom and ingressTo stanzas must be matched. If an IngressPolicy matches a request, the request is allowed through the perimeter boundary from outside the perimeter. For example, access from the internet can be allowed either based on an AccessLevel or, for traffic hosted on Google Cloud, the project of the source network. For access from private networks, using the project of the hosting network is required. Individual ingress policies can be limited by restricting which services and/ or actions they match using the ingressTo field.

> **Note:** By default, updates to this resource will remove the IngressPolicy from the from the perimeter and add it back in a non-atomic manner. To ensure that the new IngressPolicy is added before the old one is removed, add a `lifecycle` block with `createBeforeDestroy = true` to this resource.

To get more information about ServicePerimeterDryRunIngressPolicy, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#ingresspolicy) * How-to Guides

## Example Usage

func GetServicePerimeterDryRunIngressPolicy 

func GetServicePerimeterDryRunIngressPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimeterDryRunIngressPolicyState, opts ...pulumi.ResourceOption) (*ServicePerimeterDryRunIngressPolicy, error)

GetServicePerimeterDryRunIngressPolicy gets an existing ServicePerimeterDryRunIngressPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeterDryRunIngressPolicy 

func NewServicePerimeterDryRunIngressPolicy(ctx *pulumi.Context,
	name string, args *ServicePerimeterDryRunIngressPolicyArgs, opts ...pulumi.ResourceOption) (*ServicePerimeterDryRunIngressPolicy, error)

NewServicePerimeterDryRunIngressPolicy registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeterDryRunIngressPolicy) ElementType 

func (*ServicePerimeterDryRunIngressPolicy) ElementType() reflect.Type

func (*ServicePerimeterDryRunIngressPolicy) ToServicePerimeterDryRunIngressPolicyOutput 

func (i *ServicePerimeterDryRunIngressPolicy) ToServicePerimeterDryRunIngressPolicyOutput() ServicePerimeterDryRunIngressPolicyOutput

func (*ServicePerimeterDryRunIngressPolicy) ToServicePerimeterDryRunIngressPolicyOutputWithContext 

func (i *ServicePerimeterDryRunIngressPolicy) ToServicePerimeterDryRunIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyOutput

type ServicePerimeterDryRunIngressPolicyArgs 

type ServicePerimeterDryRunIngressPolicyArgs struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterDryRunIngressPolicyIngressFromPtrInput
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterDryRunIngressPolicyIngressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringInput
}

The set of arguments for constructing a ServicePerimeterDryRunIngressPolicy resource.

func (ServicePerimeterDryRunIngressPolicyArgs) ElementType 

func (ServicePerimeterDryRunIngressPolicyArgs) ElementType() reflect.Type

type ServicePerimeterDryRunIngressPolicyArray 

type ServicePerimeterDryRunIngressPolicyArray []ServicePerimeterDryRunIngressPolicyInput

func (ServicePerimeterDryRunIngressPolicyArray) ElementType 

func (ServicePerimeterDryRunIngressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyArray) ToServicePerimeterDryRunIngressPolicyArrayOutput 

func (i ServicePerimeterDryRunIngressPolicyArray) ToServicePerimeterDryRunIngressPolicyArrayOutput() ServicePerimeterDryRunIngressPolicyArrayOutput

func (ServicePerimeterDryRunIngressPolicyArray) ToServicePerimeterDryRunIngressPolicyArrayOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyArray) ToServicePerimeterDryRunIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyArrayOutput

type ServicePerimeterDryRunIngressPolicyArrayInput 

type ServicePerimeterDryRunIngressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyArrayOutput() ServicePerimeterDryRunIngressPolicyArrayOutput
	ToServicePerimeterDryRunIngressPolicyArrayOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyArrayOutput
}

ServicePerimeterDryRunIngressPolicyArrayInput is an input type that accepts ServicePerimeterDryRunIngressPolicyArray and ServicePerimeterDryRunIngressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyArrayInput` via: 

ServicePerimeterDryRunIngressPolicyArray{ ServicePerimeterDryRunIngressPolicyArgs{...} }

type ServicePerimeterDryRunIngressPolicyArrayOutput 

type ServicePerimeterDryRunIngressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyArrayOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyArrayOutput) Index 

func (o ServicePerimeterDryRunIngressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunIngressPolicyOutput

func (ServicePerimeterDryRunIngressPolicyArrayOutput) ToServicePerimeterDryRunIngressPolicyArrayOutput 

func (o ServicePerimeterDryRunIngressPolicyArrayOutput) ToServicePerimeterDryRunIngressPolicyArrayOutput() ServicePerimeterDryRunIngressPolicyArrayOutput

func (ServicePerimeterDryRunIngressPolicyArrayOutput) ToServicePerimeterDryRunIngressPolicyArrayOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyArrayOutput) ToServicePerimeterDryRunIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyArrayOutput

type ServicePerimeterDryRunIngressPolicyIngressFrom 

type ServicePerimeterDryRunIngressPolicyIngressFrom struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterDryRunIngressPolicyIngressFromSource `pulumi:"sources"`
}

type ServicePerimeterDryRunIngressPolicyIngressFromArgs 

type ServicePerimeterDryRunIngressPolicyIngressFromArgs struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterDryRunIngressPolicyIngressFromArgs) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressFromArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromOutput() ServicePerimeterDryRunIngressPolicyIngressFromOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutput() ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressFromArgs) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput

type ServicePerimeterDryRunIngressPolicyIngressFromInput 

type ServicePerimeterDryRunIngressPolicyIngressFromInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressFromOutput() ServicePerimeterDryRunIngressPolicyIngressFromOutput
	ToServicePerimeterDryRunIngressPolicyIngressFromOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressFromOutput
}

ServicePerimeterDryRunIngressPolicyIngressFromInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressFromArgs and ServicePerimeterDryRunIngressPolicyIngressFromOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressFromInput` via: 

ServicePerimeterDryRunIngressPolicyIngressFromArgs{...}

type ServicePerimeterDryRunIngressPolicyIngressFromOutput 

type ServicePerimeterDryRunIngressPolicyIngressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) Identities 

func (o ServicePerimeterDryRunIngressPolicyIngressFromOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) IdentityType 

func (o ServicePerimeterDryRunIngressPolicyIngressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) Sources 

func (o ServicePerimeterDryRunIngressPolicyIngressFromOutput) Sources() ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromOutput() ServicePerimeterDryRunIngressPolicyIngressFromOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutput() ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressFromOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput

type ServicePerimeterDryRunIngressPolicyIngressFromPtrInput 

type ServicePerimeterDryRunIngressPolicyIngressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutput() ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput
	ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput
}

ServicePerimeterDryRunIngressPolicyIngressFromPtrInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressFromArgs, ServicePerimeterDryRunIngressPolicyIngressFromPtr and ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressFromPtrInput` via: 

        ServicePerimeterDryRunIngressPolicyIngressFromArgs{...}

or:

        nil

func ServicePerimeterDryRunIngressPolicyIngressFromPtr 

func ServicePerimeterDryRunIngressPolicyIngressFromPtr(v *ServicePerimeterDryRunIngressPolicyIngressFromArgs) ServicePerimeterDryRunIngressPolicyIngressFromPtrInput

type ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput 

type ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) Elem 

func (o ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) Elem() ServicePerimeterDryRunIngressPolicyIngressFromOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) Identities 

func (o ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) IdentityType 

func (o ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) Sources 

func (o ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) Sources() ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutput() ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput

type ServicePerimeterDryRunIngressPolicyIngressFromSource 

type ServicePerimeterDryRunIngressPolicyIngressFromSource struct {
	// An `AccessLevel` resource name that allow resources within the
	// `ServicePerimeters` to be accessed from the internet. `AccessLevels` listed
	// must be in the same policy as this `ServicePerimeter`. Referencing a nonexistent
	// `AccessLevel` will cause an error. If no `AccessLevel` names are listed,
	// resources within the perimeter can only be accessed via Google Cloud calls
	// with request origins within the perimeter.
	// Example `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL.`
	// If * is specified, then all IngressSources will be allowed.
	AccessLevel *string `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource *string `pulumi:"resource"`
}

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs 

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs struct {
	// An `AccessLevel` resource name that allow resources within the
	// `ServicePerimeters` to be accessed from the internet. `AccessLevels` listed
	// must be in the same policy as this `ServicePerimeter`. Referencing a nonexistent
	// `AccessLevel` will cause an error. If no `AccessLevel` names are listed,
	// resources within the perimeter can only be accessed via Google Cloud calls
	// with request origins within the perimeter.
	// Example `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL.`
	// If * is specified, then all IngressSources will be allowed.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
}

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutput() ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArray 

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArray []ServicePerimeterDryRunIngressPolicyIngressFromSourceInput

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArray) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArray) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressFromSourceArray) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArray) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressFromSourceArray) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayInput 

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput
	ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput
}

ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressFromSourceArray and ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayInput` via: 

ServicePerimeterDryRunIngressPolicyIngressFromSourceArray{ ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs{...} }

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput 

type ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) Index 

func (o ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterDryRunIngressPolicyIngressFromSourceInput 

type ServicePerimeterDryRunIngressPolicyIngressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutput() ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput
	ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput
}

ServicePerimeterDryRunIngressPolicyIngressFromSourceInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs and ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressFromSourceInput` via: 

ServicePerimeterDryRunIngressPolicyIngressFromSourceArgs{...}

type ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput 

type ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) AccessLevel 

func (o ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An `AccessLevel` resource name that allow resources within the `ServicePerimeters` to be accessed from the internet. `AccessLevels` listed must be in the same policy as this `ServicePerimeter`. Referencing a nonexistent `AccessLevel` will cause an error. If no `AccessLevel` names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL.` If * is specified, then all IngressSources will be allowed.

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) Resource 

func (o ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) Resource() pulumi.StringPtrOutput

A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects are allowed. Format `projects/{project_number}` The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutput() ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput

func (ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput) ToServicePerimeterDryRunIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressFromSourceOutput

type ServicePerimeterDryRunIngressPolicyIngressTo 

type ServicePerimeterDryRunIngressPolicyIngressTo struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations []ServicePerimeterDryRunIngressPolicyIngressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterDryRunIngressPolicyIngressToArgs 

type ServicePerimeterDryRunIngressPolicyIngressToArgs struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations ServicePerimeterDryRunIngressPolicyIngressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterDryRunIngressPolicyIngressToArgs) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToOutput() ServicePerimeterDryRunIngressPolicyIngressToOutput

func (ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOutput

func (ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutput() ServicePerimeterDryRunIngressPolicyIngressToPtrOutput

func (ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressToArgs) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToPtrOutput

type ServicePerimeterDryRunIngressPolicyIngressToInput 

type ServicePerimeterDryRunIngressPolicyIngressToInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressToOutput() ServicePerimeterDryRunIngressPolicyIngressToOutput
	ToServicePerimeterDryRunIngressPolicyIngressToOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressToOutput
}

ServicePerimeterDryRunIngressPolicyIngressToInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressToArgs and ServicePerimeterDryRunIngressPolicyIngressToOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressToInput` via: 

ServicePerimeterDryRunIngressPolicyIngressToArgs{...}

type ServicePerimeterDryRunIngressPolicyIngressToOperation 

type ServicePerimeterDryRunIngressPolicyIngressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong to
	// the service specified by serviceName field. A single `MethodSelector` entry
	// with `*` specified for the method field will allow all methods AND
	// permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with `serviceName`
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterDryRunIngressPolicyIngressToOperationArgs 

type ServicePerimeterDryRunIngressPolicyIngressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong to
	// the service specified by serviceName field. A single `MethodSelector` entry
	// with `*` specified for the method field will allow all methods AND
	// permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with `serviceName`
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArgs) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationOutput

type ServicePerimeterDryRunIngressPolicyIngressToOperationArray 

type ServicePerimeterDryRunIngressPolicyIngressToOperationArray []ServicePerimeterDryRunIngressPolicyIngressToOperationInput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArray) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterDryRunIngressPolicyIngressToOperationArrayInput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput
	ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput
}

ServicePerimeterDryRunIngressPolicyIngressToOperationArrayInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressToOperationArray and ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressToOperationArrayInput` via: 

ServicePerimeterDryRunIngressPolicyIngressToOperationArray{ ServicePerimeterDryRunIngressPolicyIngressToOperationArgs{...} }

type ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) Index 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunIngressPolicyIngressToOperationOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterDryRunIngressPolicyIngressToOperationInput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressToOperationOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationOutput
	ToServicePerimeterDryRunIngressPolicyIngressToOperationOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationOutput
}

ServicePerimeterDryRunIngressPolicyIngressToOperationInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressToOperationArgs and ServicePerimeterDryRunIngressPolicyIngressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressToOperationInput` via: 

ServicePerimeterDryRunIngressPolicyIngressToOperationArgs{...}

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelector 

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelector struct {
	// Value for method should be a valid method name for the corresponding
	// serviceName in `ApiOperation`. If `*` used as value for `method`, then
	// ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs 

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs struct {
	// Value for method should be a valid method name for the corresponding
	// serviceName in `ApiOperation`. If `*` used as value for `method`, then
	// ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray 

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray []ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorInput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayInput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput
	ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput
}

ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray and ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArray{ ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs{...} }

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorInput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput
	ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput
}

ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs and ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorInput` via: 

ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArgs{...}

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for method should be a valid method name for the corresponding serviceName in `ApiOperation`. If `*` used as value for `method`, then ALL methods and permissions are allowed.

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterDryRunIngressPolicyIngressToOperationOutput 

type ServicePerimeterDryRunIngressPolicyIngressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) MethodSelectors 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) MethodSelectors() ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by serviceName field. A single `MethodSelector` entry with `*` specified for the method field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ServiceName 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with `serviceName` field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutput() ServicePerimeterDryRunIngressPolicyIngressToOperationOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressToOperationOutput) ToServicePerimeterDryRunIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOperationOutput

type ServicePerimeterDryRunIngressPolicyIngressToOutput 

type ServicePerimeterDryRunIngressPolicyIngressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) Operations 

func (o ServicePerimeterDryRunIngressPolicyIngressToOutput) Operations() ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) Resources 

func (o ServicePerimeterDryRunIngressPolicyIngressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToOutput() ServicePerimeterDryRunIngressPolicyIngressToOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutput() ServicePerimeterDryRunIngressPolicyIngressToPtrOutput

func (ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressToOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToPtrOutput

type ServicePerimeterDryRunIngressPolicyIngressToPtrInput 

type ServicePerimeterDryRunIngressPolicyIngressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyIngressToPtrOutput() ServicePerimeterDryRunIngressPolicyIngressToPtrOutput
	ToServicePerimeterDryRunIngressPolicyIngressToPtrOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyIngressToPtrOutput
}

ServicePerimeterDryRunIngressPolicyIngressToPtrInput is an input type that accepts ServicePerimeterDryRunIngressPolicyIngressToArgs, ServicePerimeterDryRunIngressPolicyIngressToPtr and ServicePerimeterDryRunIngressPolicyIngressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyIngressToPtrInput` via: 

        ServicePerimeterDryRunIngressPolicyIngressToArgs{...}

or:

        nil

func ServicePerimeterDryRunIngressPolicyIngressToPtr 

func ServicePerimeterDryRunIngressPolicyIngressToPtr(v *ServicePerimeterDryRunIngressPolicyIngressToArgs) ServicePerimeterDryRunIngressPolicyIngressToPtrInput

type ServicePerimeterDryRunIngressPolicyIngressToPtrOutput 

type ServicePerimeterDryRunIngressPolicyIngressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) Elem 

func (o ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) Elem() ServicePerimeterDryRunIngressPolicyIngressToOutput

func (ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) Operations 

func (o ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) Operations() ServicePerimeterDryRunIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) Resources 

func (o ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutput() ServicePerimeterDryRunIngressPolicyIngressToPtrOutput

func (ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyIngressToPtrOutput) ToServicePerimeterDryRunIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyIngressToPtrOutput

type ServicePerimeterDryRunIngressPolicyInput 

type ServicePerimeterDryRunIngressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyOutput() ServicePerimeterDryRunIngressPolicyOutput
	ToServicePerimeterDryRunIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyOutput
}

type ServicePerimeterDryRunIngressPolicyMap 

type ServicePerimeterDryRunIngressPolicyMap map[string]ServicePerimeterDryRunIngressPolicyInput

func (ServicePerimeterDryRunIngressPolicyMap) ElementType 

func (ServicePerimeterDryRunIngressPolicyMap) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyMap) ToServicePerimeterDryRunIngressPolicyMapOutput 

func (i ServicePerimeterDryRunIngressPolicyMap) ToServicePerimeterDryRunIngressPolicyMapOutput() ServicePerimeterDryRunIngressPolicyMapOutput

func (ServicePerimeterDryRunIngressPolicyMap) ToServicePerimeterDryRunIngressPolicyMapOutputWithContext 

func (i ServicePerimeterDryRunIngressPolicyMap) ToServicePerimeterDryRunIngressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyMapOutput

type ServicePerimeterDryRunIngressPolicyMapInput 

type ServicePerimeterDryRunIngressPolicyMapInput interface {
	pulumi.Input

	ToServicePerimeterDryRunIngressPolicyMapOutput() ServicePerimeterDryRunIngressPolicyMapOutput
	ToServicePerimeterDryRunIngressPolicyMapOutputWithContext(context.Context) ServicePerimeterDryRunIngressPolicyMapOutput
}

ServicePerimeterDryRunIngressPolicyMapInput is an input type that accepts ServicePerimeterDryRunIngressPolicyMap and ServicePerimeterDryRunIngressPolicyMapOutput values. You can construct a concrete instance of `ServicePerimeterDryRunIngressPolicyMapInput` via: 

ServicePerimeterDryRunIngressPolicyMap{ "key": ServicePerimeterDryRunIngressPolicyArgs{...} }

type ServicePerimeterDryRunIngressPolicyMapOutput 

type ServicePerimeterDryRunIngressPolicyMapOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyMapOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyMapOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyMapOutput) MapIndex 

func (o ServicePerimeterDryRunIngressPolicyMapOutput) MapIndex(k pulumi.StringInput) ServicePerimeterDryRunIngressPolicyOutput

func (ServicePerimeterDryRunIngressPolicyMapOutput) ToServicePerimeterDryRunIngressPolicyMapOutput 

func (o ServicePerimeterDryRunIngressPolicyMapOutput) ToServicePerimeterDryRunIngressPolicyMapOutput() ServicePerimeterDryRunIngressPolicyMapOutput

func (ServicePerimeterDryRunIngressPolicyMapOutput) ToServicePerimeterDryRunIngressPolicyMapOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyMapOutput) ToServicePerimeterDryRunIngressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyMapOutput

type ServicePerimeterDryRunIngressPolicyOutput 

type ServicePerimeterDryRunIngressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunIngressPolicyOutput) ElementType 

func (ServicePerimeterDryRunIngressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunIngressPolicyOutput) IngressFrom 

func (o ServicePerimeterDryRunIngressPolicyOutput) IngressFrom() ServicePerimeterDryRunIngressPolicyIngressFromPtrOutput

Defines the conditions on the source of a request causing this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterDryRunIngressPolicyOutput) IngressTo 

func (o ServicePerimeterDryRunIngressPolicyOutput) IngressTo() ServicePerimeterDryRunIngressPolicyIngressToPtrOutput

Defines the conditions on the `ApiOperation` and request destination that cause this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterDryRunIngressPolicyOutput) Perimeter 

func (o ServicePerimeterDryRunIngressPolicyOutput) Perimeter() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (ServicePerimeterDryRunIngressPolicyOutput) ToServicePerimeterDryRunIngressPolicyOutput 

func (o ServicePerimeterDryRunIngressPolicyOutput) ToServicePerimeterDryRunIngressPolicyOutput() ServicePerimeterDryRunIngressPolicyOutput

func (ServicePerimeterDryRunIngressPolicyOutput) ToServicePerimeterDryRunIngressPolicyOutputWithContext 

func (o ServicePerimeterDryRunIngressPolicyOutput) ToServicePerimeterDryRunIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterDryRunIngressPolicyOutput

type ServicePerimeterDryRunIngressPolicyState 

type ServicePerimeterDryRunIngressPolicyState struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterDryRunIngressPolicyIngressFromPtrInput
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterDryRunIngressPolicyIngressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringPtrInput
}

func (ServicePerimeterDryRunIngressPolicyState) ElementType 

func (ServicePerimeterDryRunIngressPolicyState) ElementType() reflect.Type

type ServicePerimeterDryRunResource 

type ServicePerimeterDryRunResource struct {
	pulumi.CustomResourceState

	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	PerimeterName pulumi.StringOutput `pulumi:"perimeterName"`
	// A GCP resource that is inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resource pulumi.StringOutput `pulumi:"resource"`
}

Allows configuring a single GCP resource that should be inside of the `spec` block of a dry run service perimeter. This resource is intended to be used in cases where it is not possible to compile a full list of projects to include in a `accesscontextmanager.ServicePerimeter` resource, to enable them to be added separately. If your perimeter is NOT in dry-run mode use `accesscontextmanager.ServicePerimeterResource` instead.

> **Note:** If this resource is used alongside a `accesscontextmanager.ServicePerimeter` resource, the service perimeter resource must have a `lifecycle` block with `ignoreChanges = [spec[0].resources]` so they don't fight over which resources should be in the policy.

To get more information about ServicePerimeterDryRunResource, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters) * How-to Guides

> **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, you must specify a `billingProject` and set `userProjectOverride` to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the `serviceusage.services.use` permission on the `billingProject` you defined.

## Example Usage

### Access Context Manager Service Perimeter Dry Run Resource Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeter(ctx, "service-perimeter-dry-run-resource", &accesscontextmanager.ServicePerimeterArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/servicePerimeters/restrict_all", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("restrict_all"),
			Spec: &accesscontextmanager.ServicePerimeterSpecArgs{
				RestrictedServices: pulumi.StringArray{
					pulumi.String("storage.googleapis.com"),
				},
			},
			UseExplicitDryRunSpec: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeterDryRunResource(ctx, "service-perimeter-dry-run-resource", &accesscontextmanager.ServicePerimeterDryRunResourceArgs{
			PerimeterName: service_perimeter_dry_run_resourceServicePerimeter.Name,
			Resource:      pulumi.String("projects/987654321"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

ServicePerimeterDryRunResource can be imported using any of these accepted formats:

* `{{perimeter_name}}/{{resource}}`

When using the `pulumi import` command, ServicePerimeterDryRunResource can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/servicePerimeterDryRunResource:ServicePerimeterDryRunResource default {{perimeter_name}}/{{resource}} ```

func GetServicePerimeterDryRunResource 

func GetServicePerimeterDryRunResource(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimeterDryRunResourceState, opts ...pulumi.ResourceOption) (*ServicePerimeterDryRunResource, error)

GetServicePerimeterDryRunResource gets an existing ServicePerimeterDryRunResource resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeterDryRunResource 

func NewServicePerimeterDryRunResource(ctx *pulumi.Context,
	name string, args *ServicePerimeterDryRunResourceArgs, opts ...pulumi.ResourceOption) (*ServicePerimeterDryRunResource, error)

NewServicePerimeterDryRunResource registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeterDryRunResource) ElementType 

func (*ServicePerimeterDryRunResource) ElementType() reflect.Type

func (*ServicePerimeterDryRunResource) ToServicePerimeterDryRunResourceOutput 

func (i *ServicePerimeterDryRunResource) ToServicePerimeterDryRunResourceOutput() ServicePerimeterDryRunResourceOutput

func (*ServicePerimeterDryRunResource) ToServicePerimeterDryRunResourceOutputWithContext 

func (i *ServicePerimeterDryRunResource) ToServicePerimeterDryRunResourceOutputWithContext(ctx context.Context) ServicePerimeterDryRunResourceOutput

type ServicePerimeterDryRunResourceArgs 

type ServicePerimeterDryRunResourceArgs struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	PerimeterName pulumi.StringInput
	// A GCP resource that is inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resource pulumi.StringInput
}

The set of arguments for constructing a ServicePerimeterDryRunResource resource.

func (ServicePerimeterDryRunResourceArgs) ElementType 

func (ServicePerimeterDryRunResourceArgs) ElementType() reflect.Type

type ServicePerimeterDryRunResourceArray 

type ServicePerimeterDryRunResourceArray []ServicePerimeterDryRunResourceInput

func (ServicePerimeterDryRunResourceArray) ElementType 

func (ServicePerimeterDryRunResourceArray) ElementType() reflect.Type

func (ServicePerimeterDryRunResourceArray) ToServicePerimeterDryRunResourceArrayOutput 

func (i ServicePerimeterDryRunResourceArray) ToServicePerimeterDryRunResourceArrayOutput() ServicePerimeterDryRunResourceArrayOutput

func (ServicePerimeterDryRunResourceArray) ToServicePerimeterDryRunResourceArrayOutputWithContext 

func (i ServicePerimeterDryRunResourceArray) ToServicePerimeterDryRunResourceArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunResourceArrayOutput

type ServicePerimeterDryRunResourceArrayInput 

type ServicePerimeterDryRunResourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterDryRunResourceArrayOutput() ServicePerimeterDryRunResourceArrayOutput
	ToServicePerimeterDryRunResourceArrayOutputWithContext(context.Context) ServicePerimeterDryRunResourceArrayOutput
}

ServicePerimeterDryRunResourceArrayInput is an input type that accepts ServicePerimeterDryRunResourceArray and ServicePerimeterDryRunResourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterDryRunResourceArrayInput` via: 

ServicePerimeterDryRunResourceArray{ ServicePerimeterDryRunResourceArgs{...} }

type ServicePerimeterDryRunResourceArrayOutput 

type ServicePerimeterDryRunResourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunResourceArrayOutput) ElementType 

func (ServicePerimeterDryRunResourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunResourceArrayOutput) Index 

func (o ServicePerimeterDryRunResourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterDryRunResourceOutput

func (ServicePerimeterDryRunResourceArrayOutput) ToServicePerimeterDryRunResourceArrayOutput 

func (o ServicePerimeterDryRunResourceArrayOutput) ToServicePerimeterDryRunResourceArrayOutput() ServicePerimeterDryRunResourceArrayOutput

func (ServicePerimeterDryRunResourceArrayOutput) ToServicePerimeterDryRunResourceArrayOutputWithContext 

func (o ServicePerimeterDryRunResourceArrayOutput) ToServicePerimeterDryRunResourceArrayOutputWithContext(ctx context.Context) ServicePerimeterDryRunResourceArrayOutput

type ServicePerimeterDryRunResourceInput 

type ServicePerimeterDryRunResourceInput interface {
	pulumi.Input

	ToServicePerimeterDryRunResourceOutput() ServicePerimeterDryRunResourceOutput
	ToServicePerimeterDryRunResourceOutputWithContext(ctx context.Context) ServicePerimeterDryRunResourceOutput
}

type ServicePerimeterDryRunResourceMap 

type ServicePerimeterDryRunResourceMap map[string]ServicePerimeterDryRunResourceInput

func (ServicePerimeterDryRunResourceMap) ElementType 

func (ServicePerimeterDryRunResourceMap) ElementType() reflect.Type

func (ServicePerimeterDryRunResourceMap) ToServicePerimeterDryRunResourceMapOutput 

func (i ServicePerimeterDryRunResourceMap) ToServicePerimeterDryRunResourceMapOutput() ServicePerimeterDryRunResourceMapOutput

func (ServicePerimeterDryRunResourceMap) ToServicePerimeterDryRunResourceMapOutputWithContext 

func (i ServicePerimeterDryRunResourceMap) ToServicePerimeterDryRunResourceMapOutputWithContext(ctx context.Context) ServicePerimeterDryRunResourceMapOutput

type ServicePerimeterDryRunResourceMapInput 

type ServicePerimeterDryRunResourceMapInput interface {
	pulumi.Input

	ToServicePerimeterDryRunResourceMapOutput() ServicePerimeterDryRunResourceMapOutput
	ToServicePerimeterDryRunResourceMapOutputWithContext(context.Context) ServicePerimeterDryRunResourceMapOutput
}

ServicePerimeterDryRunResourceMapInput is an input type that accepts ServicePerimeterDryRunResourceMap and ServicePerimeterDryRunResourceMapOutput values. You can construct a concrete instance of `ServicePerimeterDryRunResourceMapInput` via: 

ServicePerimeterDryRunResourceMap{ "key": ServicePerimeterDryRunResourceArgs{...} }

type ServicePerimeterDryRunResourceMapOutput 

type ServicePerimeterDryRunResourceMapOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunResourceMapOutput) ElementType 

func (ServicePerimeterDryRunResourceMapOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunResourceMapOutput) MapIndex 

func (o ServicePerimeterDryRunResourceMapOutput) MapIndex(k pulumi.StringInput) ServicePerimeterDryRunResourceOutput

func (ServicePerimeterDryRunResourceMapOutput) ToServicePerimeterDryRunResourceMapOutput 

func (o ServicePerimeterDryRunResourceMapOutput) ToServicePerimeterDryRunResourceMapOutput() ServicePerimeterDryRunResourceMapOutput

func (ServicePerimeterDryRunResourceMapOutput) ToServicePerimeterDryRunResourceMapOutputWithContext 

func (o ServicePerimeterDryRunResourceMapOutput) ToServicePerimeterDryRunResourceMapOutputWithContext(ctx context.Context) ServicePerimeterDryRunResourceMapOutput

type ServicePerimeterDryRunResourceOutput 

type ServicePerimeterDryRunResourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterDryRunResourceOutput) ElementType 

func (ServicePerimeterDryRunResourceOutput) ElementType() reflect.Type

func (ServicePerimeterDryRunResourceOutput) PerimeterName 

func (o ServicePerimeterDryRunResourceOutput) PerimeterName() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (ServicePerimeterDryRunResourceOutput) Resource 

func (o ServicePerimeterDryRunResourceOutput) Resource() pulumi.StringOutput

A GCP resource that is inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimeterDryRunResourceOutput) ToServicePerimeterDryRunResourceOutput 

func (o ServicePerimeterDryRunResourceOutput) ToServicePerimeterDryRunResourceOutput() ServicePerimeterDryRunResourceOutput

func (ServicePerimeterDryRunResourceOutput) ToServicePerimeterDryRunResourceOutputWithContext 

func (o ServicePerimeterDryRunResourceOutput) ToServicePerimeterDryRunResourceOutputWithContext(ctx context.Context) ServicePerimeterDryRunResourceOutput

type ServicePerimeterDryRunResourceState 

type ServicePerimeterDryRunResourceState struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	PerimeterName pulumi.StringPtrInput
	// A GCP resource that is inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resource pulumi.StringPtrInput
}

func (ServicePerimeterDryRunResourceState) ElementType 

func (ServicePerimeterDryRunResourceState) ElementType() reflect.Type

type ServicePerimeterEgressPolicy 

type ServicePerimeterEgressPolicy struct {
	pulumi.CustomResourceState

	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterEgressPolicyEgressFromPtrOutput `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterEgressPolicyEgressToPtrOutput `pulumi:"egressTo"`
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringOutput `pulumi:"perimeter"`
}

Manage a single EgressPolicy in the status (enforced) configuration for a service perimeter. EgressPolicies match requests based on egressFrom and egressTo stanzas. For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched. If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter boundary. For example, an EgressPolicy can be used to allow VMs on networks within the ServicePerimeter to access a defined set of projects outside the perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket or query against a BigQuery dataset).

> **Note:** By default, updates to this resource will remove the EgressPolicy from the from the perimeter and add it back in a non-atomic manner. To ensure that the new EgressPolicy is added before the old one is removed, add a `lifecycle` block with `createBeforeDestroy = true` to this resource.

To get more information about ServicePerimeterEgressPolicy, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#egresspolicy) * How-to Guides

## Example Usage

func GetServicePerimeterEgressPolicy 

func GetServicePerimeterEgressPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimeterEgressPolicyState, opts ...pulumi.ResourceOption) (*ServicePerimeterEgressPolicy, error)

GetServicePerimeterEgressPolicy gets an existing ServicePerimeterEgressPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeterEgressPolicy 

func NewServicePerimeterEgressPolicy(ctx *pulumi.Context,
	name string, args *ServicePerimeterEgressPolicyArgs, opts ...pulumi.ResourceOption) (*ServicePerimeterEgressPolicy, error)

NewServicePerimeterEgressPolicy registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeterEgressPolicy) ElementType 

func (*ServicePerimeterEgressPolicy) ElementType() reflect.Type

func (*ServicePerimeterEgressPolicy) ToServicePerimeterEgressPolicyOutput 

func (i *ServicePerimeterEgressPolicy) ToServicePerimeterEgressPolicyOutput() ServicePerimeterEgressPolicyOutput

func (*ServicePerimeterEgressPolicy) ToServicePerimeterEgressPolicyOutputWithContext 

func (i *ServicePerimeterEgressPolicy) ToServicePerimeterEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyOutput

type ServicePerimeterEgressPolicyArgs 

type ServicePerimeterEgressPolicyArgs struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterEgressPolicyEgressFromPtrInput
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterEgressPolicyEgressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringInput
}

The set of arguments for constructing a ServicePerimeterEgressPolicy resource.

func (ServicePerimeterEgressPolicyArgs) ElementType 

func (ServicePerimeterEgressPolicyArgs) ElementType() reflect.Type

type ServicePerimeterEgressPolicyArray 

type ServicePerimeterEgressPolicyArray []ServicePerimeterEgressPolicyInput

func (ServicePerimeterEgressPolicyArray) ElementType 

func (ServicePerimeterEgressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyArray) ToServicePerimeterEgressPolicyArrayOutput 

func (i ServicePerimeterEgressPolicyArray) ToServicePerimeterEgressPolicyArrayOutput() ServicePerimeterEgressPolicyArrayOutput

func (ServicePerimeterEgressPolicyArray) ToServicePerimeterEgressPolicyArrayOutputWithContext 

func (i ServicePerimeterEgressPolicyArray) ToServicePerimeterEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyArrayOutput

type ServicePerimeterEgressPolicyArrayInput 

type ServicePerimeterEgressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyArrayOutput() ServicePerimeterEgressPolicyArrayOutput
	ToServicePerimeterEgressPolicyArrayOutputWithContext(context.Context) ServicePerimeterEgressPolicyArrayOutput
}

ServicePerimeterEgressPolicyArrayInput is an input type that accepts ServicePerimeterEgressPolicyArray and ServicePerimeterEgressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyArrayInput` via: 

ServicePerimeterEgressPolicyArray{ ServicePerimeterEgressPolicyArgs{...} }

type ServicePerimeterEgressPolicyArrayOutput 

type ServicePerimeterEgressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyArrayOutput) ElementType 

func (ServicePerimeterEgressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyArrayOutput) Index 

func (o ServicePerimeterEgressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterEgressPolicyOutput

func (ServicePerimeterEgressPolicyArrayOutput) ToServicePerimeterEgressPolicyArrayOutput 

func (o ServicePerimeterEgressPolicyArrayOutput) ToServicePerimeterEgressPolicyArrayOutput() ServicePerimeterEgressPolicyArrayOutput

func (ServicePerimeterEgressPolicyArrayOutput) ToServicePerimeterEgressPolicyArrayOutputWithContext 

func (o ServicePerimeterEgressPolicyArrayOutput) ToServicePerimeterEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyArrayOutput

type ServicePerimeterEgressPolicyEgressFrom 

type ServicePerimeterEgressPolicyEgressFrom struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction *string `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterEgressPolicyEgressFromSource `pulumi:"sources"`
}

type ServicePerimeterEgressPolicyEgressFromArgs 

type ServicePerimeterEgressPolicyEgressFromArgs struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction pulumi.StringPtrInput `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterEgressPolicyEgressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterEgressPolicyEgressFromArgs) ElementType 

func (ServicePerimeterEgressPolicyEgressFromArgs) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromOutput 

func (i ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromOutput() ServicePerimeterEgressPolicyEgressFromOutput

func (ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromOutput

func (ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromPtrOutput 

func (i ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromPtrOutput() ServicePerimeterEgressPolicyEgressFromPtrOutput

func (ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromPtrOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressFromArgs) ToServicePerimeterEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromPtrOutput

type ServicePerimeterEgressPolicyEgressFromInput 

type ServicePerimeterEgressPolicyEgressFromInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressFromOutput() ServicePerimeterEgressPolicyEgressFromOutput
	ToServicePerimeterEgressPolicyEgressFromOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressFromOutput
}

ServicePerimeterEgressPolicyEgressFromInput is an input type that accepts ServicePerimeterEgressPolicyEgressFromArgs and ServicePerimeterEgressPolicyEgressFromOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressFromInput` via: 

ServicePerimeterEgressPolicyEgressFromArgs{...}

type ServicePerimeterEgressPolicyEgressFromOutput 

type ServicePerimeterEgressPolicyEgressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressFromOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressFromOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressFromOutput) Identities 

func (o ServicePerimeterEgressPolicyEgressFromOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterEgressPolicyEgressFromOutput) IdentityType 

func (o ServicePerimeterEgressPolicyEgressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterEgressPolicyEgressFromOutput) SourceRestriction 

func (o ServicePerimeterEgressPolicyEgressFromOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterEgressPolicyEgressFromOutput) Sources 

func (o ServicePerimeterEgressPolicyEgressFromOutput) Sources() ServicePerimeterEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromOutput 

func (o ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromOutput() ServicePerimeterEgressPolicyEgressFromOutput

func (ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromOutput

func (ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutput() ServicePerimeterEgressPolicyEgressFromPtrOutput

func (ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressFromOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromPtrOutput

type ServicePerimeterEgressPolicyEgressFromPtrInput 

type ServicePerimeterEgressPolicyEgressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressFromPtrOutput() ServicePerimeterEgressPolicyEgressFromPtrOutput
	ToServicePerimeterEgressPolicyEgressFromPtrOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressFromPtrOutput
}

ServicePerimeterEgressPolicyEgressFromPtrInput is an input type that accepts ServicePerimeterEgressPolicyEgressFromArgs, ServicePerimeterEgressPolicyEgressFromPtr and ServicePerimeterEgressPolicyEgressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressFromPtrInput` via: 

        ServicePerimeterEgressPolicyEgressFromArgs{...}

or:

        nil

func ServicePerimeterEgressPolicyEgressFromPtr 

func ServicePerimeterEgressPolicyEgressFromPtr(v *ServicePerimeterEgressPolicyEgressFromArgs) ServicePerimeterEgressPolicyEgressFromPtrInput

type ServicePerimeterEgressPolicyEgressFromPtrOutput 

type ServicePerimeterEgressPolicyEgressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) Elem 

func (o ServicePerimeterEgressPolicyEgressFromPtrOutput) Elem() ServicePerimeterEgressPolicyEgressFromOutput

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) Identities 

func (o ServicePerimeterEgressPolicyEgressFromPtrOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) IdentityType 

func (o ServicePerimeterEgressPolicyEgressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) SourceRestriction 

func (o ServicePerimeterEgressPolicyEgressFromPtrOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) Sources 

func (o ServicePerimeterEgressPolicyEgressFromPtrOutput) Sources() ServicePerimeterEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterEgressPolicyEgressFromPtrOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutput() ServicePerimeterEgressPolicyEgressFromPtrOutput

func (ServicePerimeterEgressPolicyEgressFromPtrOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressFromPtrOutput) ToServicePerimeterEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromPtrOutput

type ServicePerimeterEgressPolicyEgressFromSource 

type ServicePerimeterEgressPolicyEgressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
}

type ServicePerimeterEgressPolicyEgressFromSourceArgs 

type ServicePerimeterEgressPolicyEgressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
}

func (ServicePerimeterEgressPolicyEgressFromSourceArgs) ElementType 

func (ServicePerimeterEgressPolicyEgressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressFromSourceArgs) ToServicePerimeterEgressPolicyEgressFromSourceOutput 

func (i ServicePerimeterEgressPolicyEgressFromSourceArgs) ToServicePerimeterEgressPolicyEgressFromSourceOutput() ServicePerimeterEgressPolicyEgressFromSourceOutput

func (ServicePerimeterEgressPolicyEgressFromSourceArgs) ToServicePerimeterEgressPolicyEgressFromSourceOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressFromSourceArgs) ToServicePerimeterEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromSourceOutput

type ServicePerimeterEgressPolicyEgressFromSourceArray 

type ServicePerimeterEgressPolicyEgressFromSourceArray []ServicePerimeterEgressPolicyEgressFromSourceInput

func (ServicePerimeterEgressPolicyEgressFromSourceArray) ElementType 

func (ServicePerimeterEgressPolicyEgressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressFromSourceArray) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutput 

func (i ServicePerimeterEgressPolicyEgressFromSourceArray) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterEgressPolicyEgressFromSourceArray) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressFromSourceArray) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterEgressPolicyEgressFromSourceArrayInput 

type ServicePerimeterEgressPolicyEgressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterEgressPolicyEgressFromSourceArrayOutput
	ToServicePerimeterEgressPolicyEgressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressFromSourceArrayOutput
}

ServicePerimeterEgressPolicyEgressFromSourceArrayInput is an input type that accepts ServicePerimeterEgressPolicyEgressFromSourceArray and ServicePerimeterEgressPolicyEgressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressFromSourceArrayInput` via: 

ServicePerimeterEgressPolicyEgressFromSourceArray{ ServicePerimeterEgressPolicyEgressFromSourceArgs{...} }

type ServicePerimeterEgressPolicyEgressFromSourceArrayOutput 

type ServicePerimeterEgressPolicyEgressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) Index 

func (o ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterEgressPolicyEgressFromSourceOutput

func (ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutput 

func (o ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterEgressPolicyEgressFromSourceInput 

type ServicePerimeterEgressPolicyEgressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressFromSourceOutput() ServicePerimeterEgressPolicyEgressFromSourceOutput
	ToServicePerimeterEgressPolicyEgressFromSourceOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressFromSourceOutput
}

ServicePerimeterEgressPolicyEgressFromSourceInput is an input type that accepts ServicePerimeterEgressPolicyEgressFromSourceArgs and ServicePerimeterEgressPolicyEgressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressFromSourceInput` via: 

ServicePerimeterEgressPolicyEgressFromSourceArgs{...}

type ServicePerimeterEgressPolicyEgressFromSourceOutput 

type ServicePerimeterEgressPolicyEgressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressFromSourceOutput) AccessLevel 

func (o ServicePerimeterEgressPolicyEgressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimeterEgressPolicyEgressFromSourceOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressFromSourceOutput) ToServicePerimeterEgressPolicyEgressFromSourceOutput 

func (o ServicePerimeterEgressPolicyEgressFromSourceOutput) ToServicePerimeterEgressPolicyEgressFromSourceOutput() ServicePerimeterEgressPolicyEgressFromSourceOutput

func (ServicePerimeterEgressPolicyEgressFromSourceOutput) ToServicePerimeterEgressPolicyEgressFromSourceOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressFromSourceOutput) ToServicePerimeterEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressFromSourceOutput

type ServicePerimeterEgressPolicyEgressTo 

type ServicePerimeterEgressPolicyEgressTo struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources []string `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations []ServicePerimeterEgressPolicyEgressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterEgressPolicyEgressToArgs 

type ServicePerimeterEgressPolicyEgressToArgs struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources pulumi.StringArrayInput `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations ServicePerimeterEgressPolicyEgressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterEgressPolicyEgressToArgs) ElementType 

func (ServicePerimeterEgressPolicyEgressToArgs) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToOutput 

func (i ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToOutput() ServicePerimeterEgressPolicyEgressToOutput

func (ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOutput

func (ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToPtrOutput 

func (i ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToPtrOutput() ServicePerimeterEgressPolicyEgressToPtrOutput

func (ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToPtrOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressToArgs) ToServicePerimeterEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToPtrOutput

type ServicePerimeterEgressPolicyEgressToInput 

type ServicePerimeterEgressPolicyEgressToInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressToOutput() ServicePerimeterEgressPolicyEgressToOutput
	ToServicePerimeterEgressPolicyEgressToOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressToOutput
}

ServicePerimeterEgressPolicyEgressToInput is an input type that accepts ServicePerimeterEgressPolicyEgressToArgs and ServicePerimeterEgressPolicyEgressToOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressToInput` via: 

ServicePerimeterEgressPolicyEgressToArgs{...}

type ServicePerimeterEgressPolicyEgressToOperation 

type ServicePerimeterEgressPolicyEgressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterEgressPolicyEgressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterEgressPolicyEgressToOperationArgs 

type ServicePerimeterEgressPolicyEgressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterEgressPolicyEgressToOperationArgs) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationArgs) ToServicePerimeterEgressPolicyEgressToOperationOutput 

func (i ServicePerimeterEgressPolicyEgressToOperationArgs) ToServicePerimeterEgressPolicyEgressToOperationOutput() ServicePerimeterEgressPolicyEgressToOperationOutput

func (ServicePerimeterEgressPolicyEgressToOperationArgs) ToServicePerimeterEgressPolicyEgressToOperationOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressToOperationArgs) ToServicePerimeterEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationOutput

type ServicePerimeterEgressPolicyEgressToOperationArray 

type ServicePerimeterEgressPolicyEgressToOperationArray []ServicePerimeterEgressPolicyEgressToOperationInput

func (ServicePerimeterEgressPolicyEgressToOperationArray) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationArray) ToServicePerimeterEgressPolicyEgressToOperationArrayOutput 

func (i ServicePerimeterEgressPolicyEgressToOperationArray) ToServicePerimeterEgressPolicyEgressToOperationArrayOutput() ServicePerimeterEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterEgressPolicyEgressToOperationArray) ToServicePerimeterEgressPolicyEgressToOperationArrayOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressToOperationArray) ToServicePerimeterEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterEgressPolicyEgressToOperationArrayInput 

type ServicePerimeterEgressPolicyEgressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressToOperationArrayOutput() ServicePerimeterEgressPolicyEgressToOperationArrayOutput
	ToServicePerimeterEgressPolicyEgressToOperationArrayOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressToOperationArrayOutput
}

ServicePerimeterEgressPolicyEgressToOperationArrayInput is an input type that accepts ServicePerimeterEgressPolicyEgressToOperationArray and ServicePerimeterEgressPolicyEgressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressToOperationArrayInput` via: 

ServicePerimeterEgressPolicyEgressToOperationArray{ ServicePerimeterEgressPolicyEgressToOperationArgs{...} }

type ServicePerimeterEgressPolicyEgressToOperationArrayOutput 

type ServicePerimeterEgressPolicyEgressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressToOperationArrayOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationArrayOutput) Index 

func (o ServicePerimeterEgressPolicyEgressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterEgressPolicyEgressToOperationOutput

func (ServicePerimeterEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationArrayOutput 

func (o ServicePerimeterEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationArrayOutput() ServicePerimeterEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationArrayOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterEgressPolicyEgressToOperationInput 

type ServicePerimeterEgressPolicyEgressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressToOperationOutput() ServicePerimeterEgressPolicyEgressToOperationOutput
	ToServicePerimeterEgressPolicyEgressToOperationOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressToOperationOutput
}

ServicePerimeterEgressPolicyEgressToOperationInput is an input type that accepts ServicePerimeterEgressPolicyEgressToOperationArgs and ServicePerimeterEgressPolicyEgressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressToOperationInput` via: 

ServicePerimeterEgressPolicyEgressToOperationArgs{...}

type ServicePerimeterEgressPolicyEgressToOperationMethodSelector 

type ServicePerimeterEgressPolicyEgressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs 

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput 

func (i ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray 

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray []ServicePerimeterEgressPolicyEgressToOperationMethodSelectorInput

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayInput 

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput
	ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput
}

ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray and ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArray{ ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs{...} }

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput 

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorInput 

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput
	ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput
}

ServicePerimeterEgressPolicyEgressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs and ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressToOperationMethodSelectorInput` via: 

ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArgs{...}

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput 

type ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput 

func (o ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterEgressPolicyEgressToOperationOutput 

type ServicePerimeterEgressPolicyEgressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressToOperationOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOperationOutput) MethodSelectors 

func (o ServicePerimeterEgressPolicyEgressToOperationOutput) MethodSelectors() ServicePerimeterEgressPolicyEgressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterEgressPolicyEgressToOperationOutput) ServiceName 

func (o ServicePerimeterEgressPolicyEgressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterEgressPolicyEgressToOperationOutput) ToServicePerimeterEgressPolicyEgressToOperationOutput 

func (o ServicePerimeterEgressPolicyEgressToOperationOutput) ToServicePerimeterEgressPolicyEgressToOperationOutput() ServicePerimeterEgressPolicyEgressToOperationOutput

func (ServicePerimeterEgressPolicyEgressToOperationOutput) ToServicePerimeterEgressPolicyEgressToOperationOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressToOperationOutput) ToServicePerimeterEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOperationOutput

type ServicePerimeterEgressPolicyEgressToOutput 

type ServicePerimeterEgressPolicyEgressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressToOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressToOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToOutput) ExternalResources 

func (o ServicePerimeterEgressPolicyEgressToOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterEgressPolicyEgressToOutput) Operations 

func (o ServicePerimeterEgressPolicyEgressToOutput) Operations() ServicePerimeterEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterEgressPolicyEgressToOutput) Resources 

func (o ServicePerimeterEgressPolicyEgressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToOutput 

func (o ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToOutput() ServicePerimeterEgressPolicyEgressToOutput

func (ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToOutput

func (ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToPtrOutput() ServicePerimeterEgressPolicyEgressToPtrOutput

func (ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressToOutput) ToServicePerimeterEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToPtrOutput

type ServicePerimeterEgressPolicyEgressToPtrInput 

type ServicePerimeterEgressPolicyEgressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyEgressToPtrOutput() ServicePerimeterEgressPolicyEgressToPtrOutput
	ToServicePerimeterEgressPolicyEgressToPtrOutputWithContext(context.Context) ServicePerimeterEgressPolicyEgressToPtrOutput
}

ServicePerimeterEgressPolicyEgressToPtrInput is an input type that accepts ServicePerimeterEgressPolicyEgressToArgs, ServicePerimeterEgressPolicyEgressToPtr and ServicePerimeterEgressPolicyEgressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyEgressToPtrInput` via: 

        ServicePerimeterEgressPolicyEgressToArgs{...}

or:

        nil

func ServicePerimeterEgressPolicyEgressToPtr 

func ServicePerimeterEgressPolicyEgressToPtr(v *ServicePerimeterEgressPolicyEgressToArgs) ServicePerimeterEgressPolicyEgressToPtrInput

type ServicePerimeterEgressPolicyEgressToPtrOutput 

type ServicePerimeterEgressPolicyEgressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyEgressToPtrOutput) Elem 

func (o ServicePerimeterEgressPolicyEgressToPtrOutput) Elem() ServicePerimeterEgressPolicyEgressToOutput

func (ServicePerimeterEgressPolicyEgressToPtrOutput) ElementType 

func (ServicePerimeterEgressPolicyEgressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyEgressToPtrOutput) ExternalResources 

func (o ServicePerimeterEgressPolicyEgressToPtrOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterEgressPolicyEgressToPtrOutput) Operations 

func (o ServicePerimeterEgressPolicyEgressToPtrOutput) Operations() ServicePerimeterEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterEgressPolicyEgressToPtrOutput) Resources 

func (o ServicePerimeterEgressPolicyEgressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterEgressPolicyEgressToPtrOutput) ToServicePerimeterEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterEgressPolicyEgressToPtrOutput) ToServicePerimeterEgressPolicyEgressToPtrOutput() ServicePerimeterEgressPolicyEgressToPtrOutput

func (ServicePerimeterEgressPolicyEgressToPtrOutput) ToServicePerimeterEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterEgressPolicyEgressToPtrOutput) ToServicePerimeterEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyEgressToPtrOutput

type ServicePerimeterEgressPolicyInput 

type ServicePerimeterEgressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyOutput() ServicePerimeterEgressPolicyOutput
	ToServicePerimeterEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyOutput
}

type ServicePerimeterEgressPolicyMap 

type ServicePerimeterEgressPolicyMap map[string]ServicePerimeterEgressPolicyInput

func (ServicePerimeterEgressPolicyMap) ElementType 

func (ServicePerimeterEgressPolicyMap) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyMap) ToServicePerimeterEgressPolicyMapOutput 

func (i ServicePerimeterEgressPolicyMap) ToServicePerimeterEgressPolicyMapOutput() ServicePerimeterEgressPolicyMapOutput

func (ServicePerimeterEgressPolicyMap) ToServicePerimeterEgressPolicyMapOutputWithContext 

func (i ServicePerimeterEgressPolicyMap) ToServicePerimeterEgressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyMapOutput

type ServicePerimeterEgressPolicyMapInput 

type ServicePerimeterEgressPolicyMapInput interface {
	pulumi.Input

	ToServicePerimeterEgressPolicyMapOutput() ServicePerimeterEgressPolicyMapOutput
	ToServicePerimeterEgressPolicyMapOutputWithContext(context.Context) ServicePerimeterEgressPolicyMapOutput
}

ServicePerimeterEgressPolicyMapInput is an input type that accepts ServicePerimeterEgressPolicyMap and ServicePerimeterEgressPolicyMapOutput values. You can construct a concrete instance of `ServicePerimeterEgressPolicyMapInput` via: 

ServicePerimeterEgressPolicyMap{ "key": ServicePerimeterEgressPolicyArgs{...} }

type ServicePerimeterEgressPolicyMapOutput 

type ServicePerimeterEgressPolicyMapOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyMapOutput) ElementType 

func (ServicePerimeterEgressPolicyMapOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyMapOutput) MapIndex 

func (o ServicePerimeterEgressPolicyMapOutput) MapIndex(k pulumi.StringInput) ServicePerimeterEgressPolicyOutput

func (ServicePerimeterEgressPolicyMapOutput) ToServicePerimeterEgressPolicyMapOutput 

func (o ServicePerimeterEgressPolicyMapOutput) ToServicePerimeterEgressPolicyMapOutput() ServicePerimeterEgressPolicyMapOutput

func (ServicePerimeterEgressPolicyMapOutput) ToServicePerimeterEgressPolicyMapOutputWithContext 

func (o ServicePerimeterEgressPolicyMapOutput) ToServicePerimeterEgressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyMapOutput

type ServicePerimeterEgressPolicyOutput 

type ServicePerimeterEgressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterEgressPolicyOutput) EgressFrom 

func (o ServicePerimeterEgressPolicyOutput) EgressFrom() ServicePerimeterEgressPolicyEgressFromPtrOutput

Defines conditions on the source of a request causing this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterEgressPolicyOutput) EgressTo 

func (o ServicePerimeterEgressPolicyOutput) EgressTo() ServicePerimeterEgressPolicyEgressToPtrOutput

Defines the conditions on the `ApiOperation` and destination resources that cause this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterEgressPolicyOutput) ElementType 

func (ServicePerimeterEgressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterEgressPolicyOutput) Perimeter 

func (o ServicePerimeterEgressPolicyOutput) Perimeter() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (ServicePerimeterEgressPolicyOutput) ToServicePerimeterEgressPolicyOutput 

func (o ServicePerimeterEgressPolicyOutput) ToServicePerimeterEgressPolicyOutput() ServicePerimeterEgressPolicyOutput

func (ServicePerimeterEgressPolicyOutput) ToServicePerimeterEgressPolicyOutputWithContext 

func (o ServicePerimeterEgressPolicyOutput) ToServicePerimeterEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterEgressPolicyOutput

type ServicePerimeterEgressPolicyState 

type ServicePerimeterEgressPolicyState struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterEgressPolicyEgressFromPtrInput
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterEgressPolicyEgressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringPtrInput
}

func (ServicePerimeterEgressPolicyState) ElementType 

func (ServicePerimeterEgressPolicyState) ElementType() reflect.Type

type ServicePerimeterIngressPolicy 

type ServicePerimeterIngressPolicy struct {
	pulumi.CustomResourceState

	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterIngressPolicyIngressFromPtrOutput `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterIngressPolicyIngressToPtrOutput `pulumi:"ingressTo"`
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringOutput `pulumi:"perimeter"`
}

Manage a single IngressPolicy in the status (enforced) configuration for a service perimeter. IngressPolicies match requests based on ingressFrom and ingressTo stanzas. For an ingress policy to match, both the ingressFrom and ingressTo stanzas must be matched. If an IngressPolicy matches a request, the request is allowed through the perimeter boundary from outside the perimeter. For example, access from the internet can be allowed either based on an AccessLevel or, for traffic hosted on Google Cloud, the project of the source network. For access from private networks, using the project of the hosting network is required. Individual ingress policies can be limited by restricting which services and/ or actions they match using the ingressTo field.

> **Note:** By default, updates to this resource will remove the IngressPolicy from the from the perimeter and add it back in a non-atomic manner. To ensure that the new IngressPolicy is added before the old one is removed, add a `lifecycle` block with `createBeforeDestroy = true` to this resource.

To get more information about ServicePerimeterIngressPolicy, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#ingresspolicy) * How-to Guides

## Example Usage

func GetServicePerimeterIngressPolicy 

func GetServicePerimeterIngressPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimeterIngressPolicyState, opts ...pulumi.ResourceOption) (*ServicePerimeterIngressPolicy, error)

GetServicePerimeterIngressPolicy gets an existing ServicePerimeterIngressPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeterIngressPolicy 

func NewServicePerimeterIngressPolicy(ctx *pulumi.Context,
	name string, args *ServicePerimeterIngressPolicyArgs, opts ...pulumi.ResourceOption) (*ServicePerimeterIngressPolicy, error)

NewServicePerimeterIngressPolicy registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeterIngressPolicy) ElementType 

func (*ServicePerimeterIngressPolicy) ElementType() reflect.Type

func (*ServicePerimeterIngressPolicy) ToServicePerimeterIngressPolicyOutput 

func (i *ServicePerimeterIngressPolicy) ToServicePerimeterIngressPolicyOutput() ServicePerimeterIngressPolicyOutput

func (*ServicePerimeterIngressPolicy) ToServicePerimeterIngressPolicyOutputWithContext 

func (i *ServicePerimeterIngressPolicy) ToServicePerimeterIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyOutput

type ServicePerimeterIngressPolicyArgs 

type ServicePerimeterIngressPolicyArgs struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterIngressPolicyIngressFromPtrInput
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterIngressPolicyIngressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringInput
}

The set of arguments for constructing a ServicePerimeterIngressPolicy resource.

func (ServicePerimeterIngressPolicyArgs) ElementType 

func (ServicePerimeterIngressPolicyArgs) ElementType() reflect.Type

type ServicePerimeterIngressPolicyArray 

type ServicePerimeterIngressPolicyArray []ServicePerimeterIngressPolicyInput

func (ServicePerimeterIngressPolicyArray) ElementType 

func (ServicePerimeterIngressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyArray) ToServicePerimeterIngressPolicyArrayOutput 

func (i ServicePerimeterIngressPolicyArray) ToServicePerimeterIngressPolicyArrayOutput() ServicePerimeterIngressPolicyArrayOutput

func (ServicePerimeterIngressPolicyArray) ToServicePerimeterIngressPolicyArrayOutputWithContext 

func (i ServicePerimeterIngressPolicyArray) ToServicePerimeterIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyArrayOutput

type ServicePerimeterIngressPolicyArrayInput 

type ServicePerimeterIngressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyArrayOutput() ServicePerimeterIngressPolicyArrayOutput
	ToServicePerimeterIngressPolicyArrayOutputWithContext(context.Context) ServicePerimeterIngressPolicyArrayOutput
}

ServicePerimeterIngressPolicyArrayInput is an input type that accepts ServicePerimeterIngressPolicyArray and ServicePerimeterIngressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyArrayInput` via: 

ServicePerimeterIngressPolicyArray{ ServicePerimeterIngressPolicyArgs{...} }

type ServicePerimeterIngressPolicyArrayOutput 

type ServicePerimeterIngressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyArrayOutput) ElementType 

func (ServicePerimeterIngressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyArrayOutput) Index 

func (o ServicePerimeterIngressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterIngressPolicyOutput

func (ServicePerimeterIngressPolicyArrayOutput) ToServicePerimeterIngressPolicyArrayOutput 

func (o ServicePerimeterIngressPolicyArrayOutput) ToServicePerimeterIngressPolicyArrayOutput() ServicePerimeterIngressPolicyArrayOutput

func (ServicePerimeterIngressPolicyArrayOutput) ToServicePerimeterIngressPolicyArrayOutputWithContext 

func (o ServicePerimeterIngressPolicyArrayOutput) ToServicePerimeterIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyArrayOutput

type ServicePerimeterIngressPolicyIngressFrom 

type ServicePerimeterIngressPolicyIngressFrom struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterIngressPolicyIngressFromSource `pulumi:"sources"`
}

type ServicePerimeterIngressPolicyIngressFromArgs 

type ServicePerimeterIngressPolicyIngressFromArgs struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterIngressPolicyIngressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterIngressPolicyIngressFromArgs) ElementType 

func (ServicePerimeterIngressPolicyIngressFromArgs) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromOutput 

func (i ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromOutput() ServicePerimeterIngressPolicyIngressFromOutput

func (ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromOutput

func (ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromPtrOutput 

func (i ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromPtrOutput() ServicePerimeterIngressPolicyIngressFromPtrOutput

func (ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromPtrOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressFromArgs) ToServicePerimeterIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromPtrOutput

type ServicePerimeterIngressPolicyIngressFromInput 

type ServicePerimeterIngressPolicyIngressFromInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressFromOutput() ServicePerimeterIngressPolicyIngressFromOutput
	ToServicePerimeterIngressPolicyIngressFromOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressFromOutput
}

ServicePerimeterIngressPolicyIngressFromInput is an input type that accepts ServicePerimeterIngressPolicyIngressFromArgs and ServicePerimeterIngressPolicyIngressFromOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressFromInput` via: 

ServicePerimeterIngressPolicyIngressFromArgs{...}

type ServicePerimeterIngressPolicyIngressFromOutput 

type ServicePerimeterIngressPolicyIngressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressFromOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressFromOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressFromOutput) Identities 

func (o ServicePerimeterIngressPolicyIngressFromOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterIngressPolicyIngressFromOutput) IdentityType 

func (o ServicePerimeterIngressPolicyIngressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterIngressPolicyIngressFromOutput) Sources 

func (o ServicePerimeterIngressPolicyIngressFromOutput) Sources() ServicePerimeterIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromOutput 

func (o ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromOutput() ServicePerimeterIngressPolicyIngressFromOutput

func (ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromOutput

func (ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutput() ServicePerimeterIngressPolicyIngressFromPtrOutput

func (ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressFromOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromPtrOutput

type ServicePerimeterIngressPolicyIngressFromPtrInput 

type ServicePerimeterIngressPolicyIngressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressFromPtrOutput() ServicePerimeterIngressPolicyIngressFromPtrOutput
	ToServicePerimeterIngressPolicyIngressFromPtrOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressFromPtrOutput
}

ServicePerimeterIngressPolicyIngressFromPtrInput is an input type that accepts ServicePerimeterIngressPolicyIngressFromArgs, ServicePerimeterIngressPolicyIngressFromPtr and ServicePerimeterIngressPolicyIngressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressFromPtrInput` via: 

        ServicePerimeterIngressPolicyIngressFromArgs{...}

or:

        nil

func ServicePerimeterIngressPolicyIngressFromPtr 

func ServicePerimeterIngressPolicyIngressFromPtr(v *ServicePerimeterIngressPolicyIngressFromArgs) ServicePerimeterIngressPolicyIngressFromPtrInput

type ServicePerimeterIngressPolicyIngressFromPtrOutput 

type ServicePerimeterIngressPolicyIngressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) Elem 

func (o ServicePerimeterIngressPolicyIngressFromPtrOutput) Elem() ServicePerimeterIngressPolicyIngressFromOutput

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) Identities 

func (o ServicePerimeterIngressPolicyIngressFromPtrOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) IdentityType 

func (o ServicePerimeterIngressPolicyIngressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) Sources 

func (o ServicePerimeterIngressPolicyIngressFromPtrOutput) Sources() ServicePerimeterIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterIngressPolicyIngressFromPtrOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutput() ServicePerimeterIngressPolicyIngressFromPtrOutput

func (ServicePerimeterIngressPolicyIngressFromPtrOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressFromPtrOutput) ToServicePerimeterIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromPtrOutput

type ServicePerimeterIngressPolicyIngressFromSource 

type ServicePerimeterIngressPolicyIngressFromSource struct {
	// An `AccessLevel` resource name that allow resources within the
	// `ServicePerimeters` to be accessed from the internet. `AccessLevels` listed
	// must be in the same policy as this `ServicePerimeter`. Referencing a nonexistent
	// `AccessLevel` will cause an error. If no `AccessLevel` names are listed,
	// resources within the perimeter can only be accessed via Google Cloud calls
	// with request origins within the perimeter.
	// Example `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL.`
	// If * is specified, then all IngressSources will be allowed.
	AccessLevel *string `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects and VPCs are allowed.
	// Project format: `projects/{projectNumber}`
	// VPC network format:
	// `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource *string `pulumi:"resource"`
}

type ServicePerimeterIngressPolicyIngressFromSourceArgs 

type ServicePerimeterIngressPolicyIngressFromSourceArgs struct {
	// An `AccessLevel` resource name that allow resources within the
	// `ServicePerimeters` to be accessed from the internet. `AccessLevels` listed
	// must be in the same policy as this `ServicePerimeter`. Referencing a nonexistent
	// `AccessLevel` will cause an error. If no `AccessLevel` names are listed,
	// resources within the perimeter can only be accessed via Google Cloud calls
	// with request origins within the perimeter.
	// Example `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL.`
	// If * is specified, then all IngressSources will be allowed.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects and VPCs are allowed.
	// Project format: `projects/{projectNumber}`
	// VPC network format:
	// `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
}

func (ServicePerimeterIngressPolicyIngressFromSourceArgs) ElementType 

func (ServicePerimeterIngressPolicyIngressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressFromSourceArgs) ToServicePerimeterIngressPolicyIngressFromSourceOutput 

func (i ServicePerimeterIngressPolicyIngressFromSourceArgs) ToServicePerimeterIngressPolicyIngressFromSourceOutput() ServicePerimeterIngressPolicyIngressFromSourceOutput

func (ServicePerimeterIngressPolicyIngressFromSourceArgs) ToServicePerimeterIngressPolicyIngressFromSourceOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressFromSourceArgs) ToServicePerimeterIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromSourceOutput

type ServicePerimeterIngressPolicyIngressFromSourceArray 

type ServicePerimeterIngressPolicyIngressFromSourceArray []ServicePerimeterIngressPolicyIngressFromSourceInput

func (ServicePerimeterIngressPolicyIngressFromSourceArray) ElementType 

func (ServicePerimeterIngressPolicyIngressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressFromSourceArray) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutput 

func (i ServicePerimeterIngressPolicyIngressFromSourceArray) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterIngressPolicyIngressFromSourceArray) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressFromSourceArray) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterIngressPolicyIngressFromSourceArrayInput 

type ServicePerimeterIngressPolicyIngressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterIngressPolicyIngressFromSourceArrayOutput
	ToServicePerimeterIngressPolicyIngressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressFromSourceArrayOutput
}

ServicePerimeterIngressPolicyIngressFromSourceArrayInput is an input type that accepts ServicePerimeterIngressPolicyIngressFromSourceArray and ServicePerimeterIngressPolicyIngressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressFromSourceArrayInput` via: 

ServicePerimeterIngressPolicyIngressFromSourceArray{ ServicePerimeterIngressPolicyIngressFromSourceArgs{...} }

type ServicePerimeterIngressPolicyIngressFromSourceArrayOutput 

type ServicePerimeterIngressPolicyIngressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) Index 

func (o ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterIngressPolicyIngressFromSourceOutput

func (ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutput 

func (o ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterIngressPolicyIngressFromSourceInput 

type ServicePerimeterIngressPolicyIngressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressFromSourceOutput() ServicePerimeterIngressPolicyIngressFromSourceOutput
	ToServicePerimeterIngressPolicyIngressFromSourceOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressFromSourceOutput
}

ServicePerimeterIngressPolicyIngressFromSourceInput is an input type that accepts ServicePerimeterIngressPolicyIngressFromSourceArgs and ServicePerimeterIngressPolicyIngressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressFromSourceInput` via: 

ServicePerimeterIngressPolicyIngressFromSourceArgs{...}

type ServicePerimeterIngressPolicyIngressFromSourceOutput 

type ServicePerimeterIngressPolicyIngressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressFromSourceOutput) AccessLevel 

func (o ServicePerimeterIngressPolicyIngressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An `AccessLevel` resource name that allow resources within the `ServicePerimeters` to be accessed from the internet. `AccessLevels` listed must be in the same policy as this `ServicePerimeter`. Referencing a nonexistent `AccessLevel` will cause an error. If no `AccessLevel` names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL.` If * is specified, then all IngressSources will be allowed.

func (ServicePerimeterIngressPolicyIngressFromSourceOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressFromSourceOutput) Resource 

func (o ServicePerimeterIngressPolicyIngressFromSourceOutput) Resource() pulumi.StringPtrOutput

A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project format: `projects/{projectNumber}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.

func (ServicePerimeterIngressPolicyIngressFromSourceOutput) ToServicePerimeterIngressPolicyIngressFromSourceOutput 

func (o ServicePerimeterIngressPolicyIngressFromSourceOutput) ToServicePerimeterIngressPolicyIngressFromSourceOutput() ServicePerimeterIngressPolicyIngressFromSourceOutput

func (ServicePerimeterIngressPolicyIngressFromSourceOutput) ToServicePerimeterIngressPolicyIngressFromSourceOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressFromSourceOutput) ToServicePerimeterIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressFromSourceOutput

type ServicePerimeterIngressPolicyIngressTo 

type ServicePerimeterIngressPolicyIngressTo struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations []ServicePerimeterIngressPolicyIngressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterIngressPolicyIngressToArgs 

type ServicePerimeterIngressPolicyIngressToArgs struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations ServicePerimeterIngressPolicyIngressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterIngressPolicyIngressToArgs) ElementType 

func (ServicePerimeterIngressPolicyIngressToArgs) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToOutput 

func (i ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToOutput() ServicePerimeterIngressPolicyIngressToOutput

func (ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOutput

func (ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToPtrOutput 

func (i ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToPtrOutput() ServicePerimeterIngressPolicyIngressToPtrOutput

func (ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToPtrOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressToArgs) ToServicePerimeterIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToPtrOutput

type ServicePerimeterIngressPolicyIngressToInput 

type ServicePerimeterIngressPolicyIngressToInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressToOutput() ServicePerimeterIngressPolicyIngressToOutput
	ToServicePerimeterIngressPolicyIngressToOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressToOutput
}

ServicePerimeterIngressPolicyIngressToInput is an input type that accepts ServicePerimeterIngressPolicyIngressToArgs and ServicePerimeterIngressPolicyIngressToOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressToInput` via: 

ServicePerimeterIngressPolicyIngressToArgs{...}

type ServicePerimeterIngressPolicyIngressToOperation 

type ServicePerimeterIngressPolicyIngressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong to
	// the service specified by serviceName field. A single `MethodSelector` entry
	// with `*` specified for the method field will allow all methods AND
	// permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterIngressPolicyIngressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with `serviceName`
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterIngressPolicyIngressToOperationArgs 

type ServicePerimeterIngressPolicyIngressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong to
	// the service specified by serviceName field. A single `MethodSelector` entry
	// with `*` specified for the method field will allow all methods AND
	// permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with `serviceName`
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterIngressPolicyIngressToOperationArgs) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationArgs) ToServicePerimeterIngressPolicyIngressToOperationOutput 

func (i ServicePerimeterIngressPolicyIngressToOperationArgs) ToServicePerimeterIngressPolicyIngressToOperationOutput() ServicePerimeterIngressPolicyIngressToOperationOutput

func (ServicePerimeterIngressPolicyIngressToOperationArgs) ToServicePerimeterIngressPolicyIngressToOperationOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressToOperationArgs) ToServicePerimeterIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationOutput

type ServicePerimeterIngressPolicyIngressToOperationArray 

type ServicePerimeterIngressPolicyIngressToOperationArray []ServicePerimeterIngressPolicyIngressToOperationInput

func (ServicePerimeterIngressPolicyIngressToOperationArray) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationArray) ToServicePerimeterIngressPolicyIngressToOperationArrayOutput 

func (i ServicePerimeterIngressPolicyIngressToOperationArray) ToServicePerimeterIngressPolicyIngressToOperationArrayOutput() ServicePerimeterIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterIngressPolicyIngressToOperationArray) ToServicePerimeterIngressPolicyIngressToOperationArrayOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressToOperationArray) ToServicePerimeterIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterIngressPolicyIngressToOperationArrayInput 

type ServicePerimeterIngressPolicyIngressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressToOperationArrayOutput() ServicePerimeterIngressPolicyIngressToOperationArrayOutput
	ToServicePerimeterIngressPolicyIngressToOperationArrayOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressToOperationArrayOutput
}

ServicePerimeterIngressPolicyIngressToOperationArrayInput is an input type that accepts ServicePerimeterIngressPolicyIngressToOperationArray and ServicePerimeterIngressPolicyIngressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressToOperationArrayInput` via: 

ServicePerimeterIngressPolicyIngressToOperationArray{ ServicePerimeterIngressPolicyIngressToOperationArgs{...} }

type ServicePerimeterIngressPolicyIngressToOperationArrayOutput 

type ServicePerimeterIngressPolicyIngressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressToOperationArrayOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationArrayOutput) Index 

func (o ServicePerimeterIngressPolicyIngressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterIngressPolicyIngressToOperationOutput

func (ServicePerimeterIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationArrayOutput 

func (o ServicePerimeterIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationArrayOutput() ServicePerimeterIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationArrayOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterIngressPolicyIngressToOperationInput 

type ServicePerimeterIngressPolicyIngressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressToOperationOutput() ServicePerimeterIngressPolicyIngressToOperationOutput
	ToServicePerimeterIngressPolicyIngressToOperationOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressToOperationOutput
}

ServicePerimeterIngressPolicyIngressToOperationInput is an input type that accepts ServicePerimeterIngressPolicyIngressToOperationArgs and ServicePerimeterIngressPolicyIngressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressToOperationInput` via: 

ServicePerimeterIngressPolicyIngressToOperationArgs{...}

type ServicePerimeterIngressPolicyIngressToOperationMethodSelector 

type ServicePerimeterIngressPolicyIngressToOperationMethodSelector struct {
	// Value for method should be a valid method name for the corresponding
	// serviceName in `ApiOperation`. If `*` used as value for `method`, then
	// ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs 

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs struct {
	// Value for method should be a valid method name for the corresponding
	// serviceName in `ApiOperation`. If `*` used as value for `method`, then
	// ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput 

func (i ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray 

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray []ServicePerimeterIngressPolicyIngressToOperationMethodSelectorInput

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayInput 

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput
	ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput
}

ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray and ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArray{ ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs{...} }

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput 

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorInput 

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput
	ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput
}

ServicePerimeterIngressPolicyIngressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs and ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressToOperationMethodSelectorInput` via: 

ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArgs{...}

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput 

type ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for method should be a valid method name for the corresponding serviceName in `ApiOperation`. If `*` used as value for `method`, then ALL methods and permissions are allowed.

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput 

func (o ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterIngressPolicyIngressToOperationOutput 

type ServicePerimeterIngressPolicyIngressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressToOperationOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOperationOutput) MethodSelectors 

func (o ServicePerimeterIngressPolicyIngressToOperationOutput) MethodSelectors() ServicePerimeterIngressPolicyIngressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by serviceName field. A single `MethodSelector` entry with `*` specified for the method field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterIngressPolicyIngressToOperationOutput) ServiceName 

func (o ServicePerimeterIngressPolicyIngressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with `serviceName` field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterIngressPolicyIngressToOperationOutput) ToServicePerimeterIngressPolicyIngressToOperationOutput 

func (o ServicePerimeterIngressPolicyIngressToOperationOutput) ToServicePerimeterIngressPolicyIngressToOperationOutput() ServicePerimeterIngressPolicyIngressToOperationOutput

func (ServicePerimeterIngressPolicyIngressToOperationOutput) ToServicePerimeterIngressPolicyIngressToOperationOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressToOperationOutput) ToServicePerimeterIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOperationOutput

type ServicePerimeterIngressPolicyIngressToOutput 

type ServicePerimeterIngressPolicyIngressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressToOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressToOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToOutput) Operations 

func (o ServicePerimeterIngressPolicyIngressToOutput) Operations() ServicePerimeterIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterIngressPolicyIngressToOutput) Resources 

func (o ServicePerimeterIngressPolicyIngressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToOutput 

func (o ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToOutput() ServicePerimeterIngressPolicyIngressToOutput

func (ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToOutput

func (ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToPtrOutput() ServicePerimeterIngressPolicyIngressToPtrOutput

func (ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressToOutput) ToServicePerimeterIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToPtrOutput

type ServicePerimeterIngressPolicyIngressToPtrInput 

type ServicePerimeterIngressPolicyIngressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyIngressToPtrOutput() ServicePerimeterIngressPolicyIngressToPtrOutput
	ToServicePerimeterIngressPolicyIngressToPtrOutputWithContext(context.Context) ServicePerimeterIngressPolicyIngressToPtrOutput
}

ServicePerimeterIngressPolicyIngressToPtrInput is an input type that accepts ServicePerimeterIngressPolicyIngressToArgs, ServicePerimeterIngressPolicyIngressToPtr and ServicePerimeterIngressPolicyIngressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyIngressToPtrInput` via: 

        ServicePerimeterIngressPolicyIngressToArgs{...}

or:

        nil

func ServicePerimeterIngressPolicyIngressToPtr 

func ServicePerimeterIngressPolicyIngressToPtr(v *ServicePerimeterIngressPolicyIngressToArgs) ServicePerimeterIngressPolicyIngressToPtrInput

type ServicePerimeterIngressPolicyIngressToPtrOutput 

type ServicePerimeterIngressPolicyIngressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyIngressToPtrOutput) Elem 

func (o ServicePerimeterIngressPolicyIngressToPtrOutput) Elem() ServicePerimeterIngressPolicyIngressToOutput

func (ServicePerimeterIngressPolicyIngressToPtrOutput) ElementType 

func (ServicePerimeterIngressPolicyIngressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyIngressToPtrOutput) Operations 

func (o ServicePerimeterIngressPolicyIngressToPtrOutput) Operations() ServicePerimeterIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterIngressPolicyIngressToPtrOutput) Resources 

func (o ServicePerimeterIngressPolicyIngressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterIngressPolicyIngressToPtrOutput) ToServicePerimeterIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterIngressPolicyIngressToPtrOutput) ToServicePerimeterIngressPolicyIngressToPtrOutput() ServicePerimeterIngressPolicyIngressToPtrOutput

func (ServicePerimeterIngressPolicyIngressToPtrOutput) ToServicePerimeterIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterIngressPolicyIngressToPtrOutput) ToServicePerimeterIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyIngressToPtrOutput

type ServicePerimeterIngressPolicyInput 

type ServicePerimeterIngressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyOutput() ServicePerimeterIngressPolicyOutput
	ToServicePerimeterIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyOutput
}

type ServicePerimeterIngressPolicyMap 

type ServicePerimeterIngressPolicyMap map[string]ServicePerimeterIngressPolicyInput

func (ServicePerimeterIngressPolicyMap) ElementType 

func (ServicePerimeterIngressPolicyMap) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyMap) ToServicePerimeterIngressPolicyMapOutput 

func (i ServicePerimeterIngressPolicyMap) ToServicePerimeterIngressPolicyMapOutput() ServicePerimeterIngressPolicyMapOutput

func (ServicePerimeterIngressPolicyMap) ToServicePerimeterIngressPolicyMapOutputWithContext 

func (i ServicePerimeterIngressPolicyMap) ToServicePerimeterIngressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyMapOutput

type ServicePerimeterIngressPolicyMapInput 

type ServicePerimeterIngressPolicyMapInput interface {
	pulumi.Input

	ToServicePerimeterIngressPolicyMapOutput() ServicePerimeterIngressPolicyMapOutput
	ToServicePerimeterIngressPolicyMapOutputWithContext(context.Context) ServicePerimeterIngressPolicyMapOutput
}

ServicePerimeterIngressPolicyMapInput is an input type that accepts ServicePerimeterIngressPolicyMap and ServicePerimeterIngressPolicyMapOutput values. You can construct a concrete instance of `ServicePerimeterIngressPolicyMapInput` via: 

ServicePerimeterIngressPolicyMap{ "key": ServicePerimeterIngressPolicyArgs{...} }

type ServicePerimeterIngressPolicyMapOutput 

type ServicePerimeterIngressPolicyMapOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyMapOutput) ElementType 

func (ServicePerimeterIngressPolicyMapOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyMapOutput) MapIndex 

func (o ServicePerimeterIngressPolicyMapOutput) MapIndex(k pulumi.StringInput) ServicePerimeterIngressPolicyOutput

func (ServicePerimeterIngressPolicyMapOutput) ToServicePerimeterIngressPolicyMapOutput 

func (o ServicePerimeterIngressPolicyMapOutput) ToServicePerimeterIngressPolicyMapOutput() ServicePerimeterIngressPolicyMapOutput

func (ServicePerimeterIngressPolicyMapOutput) ToServicePerimeterIngressPolicyMapOutputWithContext 

func (o ServicePerimeterIngressPolicyMapOutput) ToServicePerimeterIngressPolicyMapOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyMapOutput

type ServicePerimeterIngressPolicyOutput 

type ServicePerimeterIngressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterIngressPolicyOutput) ElementType 

func (ServicePerimeterIngressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterIngressPolicyOutput) IngressFrom 

func (o ServicePerimeterIngressPolicyOutput) IngressFrom() ServicePerimeterIngressPolicyIngressFromPtrOutput

Defines the conditions on the source of a request causing this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterIngressPolicyOutput) IngressTo 

func (o ServicePerimeterIngressPolicyOutput) IngressTo() ServicePerimeterIngressPolicyIngressToPtrOutput

Defines the conditions on the `ApiOperation` and request destination that cause this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterIngressPolicyOutput) Perimeter 

func (o ServicePerimeterIngressPolicyOutput) Perimeter() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (ServicePerimeterIngressPolicyOutput) ToServicePerimeterIngressPolicyOutput 

func (o ServicePerimeterIngressPolicyOutput) ToServicePerimeterIngressPolicyOutput() ServicePerimeterIngressPolicyOutput

func (ServicePerimeterIngressPolicyOutput) ToServicePerimeterIngressPolicyOutputWithContext 

func (o ServicePerimeterIngressPolicyOutput) ToServicePerimeterIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterIngressPolicyOutput

type ServicePerimeterIngressPolicyState 

type ServicePerimeterIngressPolicyState struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterIngressPolicyIngressFromPtrInput
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterIngressPolicyIngressToPtrInput
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	Perimeter pulumi.StringPtrInput
}

func (ServicePerimeterIngressPolicyState) ElementType 

func (ServicePerimeterIngressPolicyState) ElementType() reflect.Type

type ServicePerimeterInput 

type ServicePerimeterInput interface {
	pulumi.Input

	ToServicePerimeterOutput() ServicePerimeterOutput
	ToServicePerimeterOutputWithContext(ctx context.Context) ServicePerimeterOutput
}

type ServicePerimeterMap 

type ServicePerimeterMap map[string]ServicePerimeterInput

func (ServicePerimeterMap) ElementType 

func (ServicePerimeterMap) ElementType() reflect.Type

func (ServicePerimeterMap) ToServicePerimeterMapOutput 

func (i ServicePerimeterMap) ToServicePerimeterMapOutput() ServicePerimeterMapOutput

func (ServicePerimeterMap) ToServicePerimeterMapOutputWithContext 

func (i ServicePerimeterMap) ToServicePerimeterMapOutputWithContext(ctx context.Context) ServicePerimeterMapOutput

type ServicePerimeterMapInput 

type ServicePerimeterMapInput interface {
	pulumi.Input

	ToServicePerimeterMapOutput() ServicePerimeterMapOutput
	ToServicePerimeterMapOutputWithContext(context.Context) ServicePerimeterMapOutput
}

ServicePerimeterMapInput is an input type that accepts ServicePerimeterMap and ServicePerimeterMapOutput values. You can construct a concrete instance of `ServicePerimeterMapInput` via: 

ServicePerimeterMap{ "key": ServicePerimeterArgs{...} }

type ServicePerimeterMapOutput 

type ServicePerimeterMapOutput struct{ *pulumi.OutputState }

func (ServicePerimeterMapOutput) ElementType 

func (ServicePerimeterMapOutput) ElementType() reflect.Type

func (ServicePerimeterMapOutput) MapIndex 

func (o ServicePerimeterMapOutput) MapIndex(k pulumi.StringInput) ServicePerimeterOutput

func (ServicePerimeterMapOutput) ToServicePerimeterMapOutput 

func (o ServicePerimeterMapOutput) ToServicePerimeterMapOutput() ServicePerimeterMapOutput

func (ServicePerimeterMapOutput) ToServicePerimeterMapOutputWithContext 

func (o ServicePerimeterMapOutput) ToServicePerimeterMapOutputWithContext(ctx context.Context) ServicePerimeterMapOutput

type ServicePerimeterOutput 

type ServicePerimeterOutput struct{ *pulumi.OutputState }

func (ServicePerimeterOutput) CreateTime 

func (o ServicePerimeterOutput) CreateTime() pulumi.StringOutput

Time the AccessPolicy was created in UTC.

func (ServicePerimeterOutput) Description 

func (o ServicePerimeterOutput) Description() pulumi.StringPtrOutput

Description of the ServicePerimeter and its use. Does not affect behavior.

func (ServicePerimeterOutput) ElementType 

func (ServicePerimeterOutput) ElementType() reflect.Type

func (ServicePerimeterOutput) Name 

func (o ServicePerimeterOutput) Name() pulumi.StringOutput

Resource name for the ServicePerimeter. The shortName component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}

***

func (ServicePerimeterOutput) Parent 

func (o ServicePerimeterOutput) Parent() pulumi.StringOutput

The AccessPolicy this ServicePerimeter lives in. Format: accessPolicies/{policy_id}

func (ServicePerimeterOutput) PerimeterType 

func (o ServicePerimeterOutput) PerimeterType() pulumi.StringPtrOutput

Specifies the type of the Perimeter. There are two types: regular and bridge. Regular Service Perimeter contains resources, access levels, and restricted services. Every resource can be in at most ONE regular Service Perimeter. In addition to being in a regular service perimeter, a resource can also be in zero or more perimeter bridges. A perimeter bridge only contains resources. Cross project operations are permitted if all effected resources share some perimeter (whether bridge or regular). Perimeter Bridge does not contain access levels or services: those are governed entirely by the regular perimeter that resource is in. Perimeter Bridges are typically useful when building more complex topologies with many independent perimeters that need to share some data with a common perimeter, but should not be able to share data among themselves. Default value is `PERIMETER_TYPE_REGULAR`. Possible values are: `PERIMETER_TYPE_REGULAR`, `PERIMETER_TYPE_BRIDGE`.

func (ServicePerimeterOutput) Spec 

func (o ServicePerimeterOutput) Spec() ServicePerimeterSpecPtrOutput

Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the `useExplicitDryRunSpec` flag is set. Structure is documented below.

func (ServicePerimeterOutput) Status 

func (o ServicePerimeterOutput) Status() ServicePerimeterStatusPtrOutput

ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. Structure is documented below.

func (ServicePerimeterOutput) Title 

func (o ServicePerimeterOutput) Title() pulumi.StringOutput

Human readable title. Must be unique within the Policy.

func (ServicePerimeterOutput) ToServicePerimeterOutput 

func (o ServicePerimeterOutput) ToServicePerimeterOutput() ServicePerimeterOutput

func (ServicePerimeterOutput) ToServicePerimeterOutputWithContext 

func (o ServicePerimeterOutput) ToServicePerimeterOutputWithContext(ctx context.Context) ServicePerimeterOutput

func (ServicePerimeterOutput) UpdateTime 

func (o ServicePerimeterOutput) UpdateTime() pulumi.StringOutput

Time the AccessPolicy was updated in UTC.

func (ServicePerimeterOutput) UseExplicitDryRunSpec 

func (o ServicePerimeterOutput) UseExplicitDryRunSpec() pulumi.BoolPtrOutput

Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences between currently enforced and suggested restrictions. useExplicitDryRunSpec must bet set to True if any of the fields in the spec are set to non-default values.

type ServicePerimeterResource 

type ServicePerimeterResource struct {
	pulumi.CustomResourceState

	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	PerimeterName pulumi.StringOutput `pulumi:"perimeterName"`
	// A GCP resource that is inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resource pulumi.StringOutput `pulumi:"resource"`
}

Allows configuring a single GCP resource that should be inside the `status` block of a service perimeter. This resource is intended to be used in cases where it is not possible to compile a full list of projects to include in a `accesscontextmanager.ServicePerimeter` resource, to enable them to be added separately. If your perimeter is in dry-run mode use `accesscontextmanager.ServicePerimeterDryRunResource` instead.

> **Note:** If this resource is used alongside a `accesscontextmanager.ServicePerimeter` resource, the service perimeter resource must have a `lifecycle` block with `ignoreChanges = [status[0].resources]` so they don't fight over which resources should be in the policy.

To get more information about ServicePerimeterResource, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters) * How-to Guides

> **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, you must specify a `billingProject` and set `userProjectOverride` to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the `serviceusage.services.use` permission on the `billingProject` you defined.

## Example Usage

### Access Context Manager Service Perimeter Resource Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeter(ctx, "service-perimeter-resource", &accesscontextmanager.ServicePerimeterArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/servicePerimeters/restrict_all", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("restrict_all"),
			Status: &accesscontextmanager.ServicePerimeterStatusArgs{
				RestrictedServices: pulumi.StringArray{
					pulumi.String("storage.googleapis.com"),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeterResource(ctx, "service-perimeter-resource", &accesscontextmanager.ServicePerimeterResourceArgs{
			PerimeterName: service_perimeter_resourceServicePerimeter.Name,
			Resource:      pulumi.String("projects/987654321"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

ServicePerimeterResource can be imported using any of these accepted formats:

* `{{perimeter_name}}/{{resource}}`

When using the `pulumi import` command, ServicePerimeterResource can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/servicePerimeterResource:ServicePerimeterResource default {{perimeter_name}}/{{resource}} ```

func GetServicePerimeterResource 

func GetServicePerimeterResource(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimeterResourceState, opts ...pulumi.ResourceOption) (*ServicePerimeterResource, error)

GetServicePerimeterResource gets an existing ServicePerimeterResource resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeterResource 

func NewServicePerimeterResource(ctx *pulumi.Context,
	name string, args *ServicePerimeterResourceArgs, opts ...pulumi.ResourceOption) (*ServicePerimeterResource, error)

NewServicePerimeterResource registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeterResource) ElementType 

func (*ServicePerimeterResource) ElementType() reflect.Type

func (*ServicePerimeterResource) ToServicePerimeterResourceOutput 

func (i *ServicePerimeterResource) ToServicePerimeterResourceOutput() ServicePerimeterResourceOutput

func (*ServicePerimeterResource) ToServicePerimeterResourceOutputWithContext 

func (i *ServicePerimeterResource) ToServicePerimeterResourceOutputWithContext(ctx context.Context) ServicePerimeterResourceOutput

type ServicePerimeterResourceArgs 

type ServicePerimeterResourceArgs struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	PerimeterName pulumi.StringInput
	// A GCP resource that is inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resource pulumi.StringInput
}

The set of arguments for constructing a ServicePerimeterResource resource.

func (ServicePerimeterResourceArgs) ElementType 

func (ServicePerimeterResourceArgs) ElementType() reflect.Type

type ServicePerimeterResourceArray 

type ServicePerimeterResourceArray []ServicePerimeterResourceInput

func (ServicePerimeterResourceArray) ElementType 

func (ServicePerimeterResourceArray) ElementType() reflect.Type

func (ServicePerimeterResourceArray) ToServicePerimeterResourceArrayOutput 

func (i ServicePerimeterResourceArray) ToServicePerimeterResourceArrayOutput() ServicePerimeterResourceArrayOutput

func (ServicePerimeterResourceArray) ToServicePerimeterResourceArrayOutputWithContext 

func (i ServicePerimeterResourceArray) ToServicePerimeterResourceArrayOutputWithContext(ctx context.Context) ServicePerimeterResourceArrayOutput

type ServicePerimeterResourceArrayInput 

type ServicePerimeterResourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterResourceArrayOutput() ServicePerimeterResourceArrayOutput
	ToServicePerimeterResourceArrayOutputWithContext(context.Context) ServicePerimeterResourceArrayOutput
}

ServicePerimeterResourceArrayInput is an input type that accepts ServicePerimeterResourceArray and ServicePerimeterResourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterResourceArrayInput` via: 

ServicePerimeterResourceArray{ ServicePerimeterResourceArgs{...} }

type ServicePerimeterResourceArrayOutput 

type ServicePerimeterResourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterResourceArrayOutput) ElementType 

func (ServicePerimeterResourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterResourceArrayOutput) Index 

func (o ServicePerimeterResourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterResourceOutput

func (ServicePerimeterResourceArrayOutput) ToServicePerimeterResourceArrayOutput 

func (o ServicePerimeterResourceArrayOutput) ToServicePerimeterResourceArrayOutput() ServicePerimeterResourceArrayOutput

func (ServicePerimeterResourceArrayOutput) ToServicePerimeterResourceArrayOutputWithContext 

func (o ServicePerimeterResourceArrayOutput) ToServicePerimeterResourceArrayOutputWithContext(ctx context.Context) ServicePerimeterResourceArrayOutput

type ServicePerimeterResourceInput 

type ServicePerimeterResourceInput interface {
	pulumi.Input

	ToServicePerimeterResourceOutput() ServicePerimeterResourceOutput
	ToServicePerimeterResourceOutputWithContext(ctx context.Context) ServicePerimeterResourceOutput
}

type ServicePerimeterResourceMap 

type ServicePerimeterResourceMap map[string]ServicePerimeterResourceInput

func (ServicePerimeterResourceMap) ElementType 

func (ServicePerimeterResourceMap) ElementType() reflect.Type

func (ServicePerimeterResourceMap) ToServicePerimeterResourceMapOutput 

func (i ServicePerimeterResourceMap) ToServicePerimeterResourceMapOutput() ServicePerimeterResourceMapOutput

func (ServicePerimeterResourceMap) ToServicePerimeterResourceMapOutputWithContext 

func (i ServicePerimeterResourceMap) ToServicePerimeterResourceMapOutputWithContext(ctx context.Context) ServicePerimeterResourceMapOutput

type ServicePerimeterResourceMapInput 

type ServicePerimeterResourceMapInput interface {
	pulumi.Input

	ToServicePerimeterResourceMapOutput() ServicePerimeterResourceMapOutput
	ToServicePerimeterResourceMapOutputWithContext(context.Context) ServicePerimeterResourceMapOutput
}

ServicePerimeterResourceMapInput is an input type that accepts ServicePerimeterResourceMap and ServicePerimeterResourceMapOutput values. You can construct a concrete instance of `ServicePerimeterResourceMapInput` via: 

ServicePerimeterResourceMap{ "key": ServicePerimeterResourceArgs{...} }

type ServicePerimeterResourceMapOutput 

type ServicePerimeterResourceMapOutput struct{ *pulumi.OutputState }

func (ServicePerimeterResourceMapOutput) ElementType 

func (ServicePerimeterResourceMapOutput) ElementType() reflect.Type

func (ServicePerimeterResourceMapOutput) MapIndex 

func (o ServicePerimeterResourceMapOutput) MapIndex(k pulumi.StringInput) ServicePerimeterResourceOutput

func (ServicePerimeterResourceMapOutput) ToServicePerimeterResourceMapOutput 

func (o ServicePerimeterResourceMapOutput) ToServicePerimeterResourceMapOutput() ServicePerimeterResourceMapOutput

func (ServicePerimeterResourceMapOutput) ToServicePerimeterResourceMapOutputWithContext 

func (o ServicePerimeterResourceMapOutput) ToServicePerimeterResourceMapOutputWithContext(ctx context.Context) ServicePerimeterResourceMapOutput

type ServicePerimeterResourceOutput 

type ServicePerimeterResourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterResourceOutput) ElementType 

func (ServicePerimeterResourceOutput) ElementType() reflect.Type

func (ServicePerimeterResourceOutput) PerimeterName 

func (o ServicePerimeterResourceOutput) PerimeterName() pulumi.StringOutput

The name of the Service Perimeter to add this resource to.

***

func (ServicePerimeterResourceOutput) Resource 

func (o ServicePerimeterResourceOutput) Resource() pulumi.StringOutput

A GCP resource that is inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimeterResourceOutput) ToServicePerimeterResourceOutput 

func (o ServicePerimeterResourceOutput) ToServicePerimeterResourceOutput() ServicePerimeterResourceOutput

func (ServicePerimeterResourceOutput) ToServicePerimeterResourceOutputWithContext 

func (o ServicePerimeterResourceOutput) ToServicePerimeterResourceOutputWithContext(ctx context.Context) ServicePerimeterResourceOutput

type ServicePerimeterResourceState 

type ServicePerimeterResourceState struct {
	// The name of the Service Perimeter to add this resource to.
	//
	// ***
	PerimeterName pulumi.StringPtrInput
	// A GCP resource that is inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resource pulumi.StringPtrInput
}

func (ServicePerimeterResourceState) ElementType 

func (ServicePerimeterResourceState) ElementType() reflect.Type

type ServicePerimeterSpec 

type ServicePerimeterSpec struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels []string `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies []ServicePerimeterSpecEgressPolicy `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies []ServicePerimeterSpecIngressPolicy `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources []string `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices []string `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices *ServicePerimeterSpecVpcAccessibleServices `pulumi:"vpcAccessibleServices"`
}

type ServicePerimeterSpecArgs 

type ServicePerimeterSpecArgs struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels pulumi.StringArrayInput `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies ServicePerimeterSpecEgressPolicyArrayInput `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies ServicePerimeterSpecIngressPolicyArrayInput `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices pulumi.StringArrayInput `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices ServicePerimeterSpecVpcAccessibleServicesPtrInput `pulumi:"vpcAccessibleServices"`
}

func (ServicePerimeterSpecArgs) ElementType 

func (ServicePerimeterSpecArgs) ElementType() reflect.Type

func (ServicePerimeterSpecArgs) ToServicePerimeterSpecOutput 

func (i ServicePerimeterSpecArgs) ToServicePerimeterSpecOutput() ServicePerimeterSpecOutput

func (ServicePerimeterSpecArgs) ToServicePerimeterSpecOutputWithContext 

func (i ServicePerimeterSpecArgs) ToServicePerimeterSpecOutputWithContext(ctx context.Context) ServicePerimeterSpecOutput

func (ServicePerimeterSpecArgs) ToServicePerimeterSpecPtrOutput 

func (i ServicePerimeterSpecArgs) ToServicePerimeterSpecPtrOutput() ServicePerimeterSpecPtrOutput

func (ServicePerimeterSpecArgs) ToServicePerimeterSpecPtrOutputWithContext 

func (i ServicePerimeterSpecArgs) ToServicePerimeterSpecPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecPtrOutput

type ServicePerimeterSpecEgressPolicy 

type ServicePerimeterSpecEgressPolicy struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom *ServicePerimeterSpecEgressPolicyEgressFrom `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo *ServicePerimeterSpecEgressPolicyEgressTo `pulumi:"egressTo"`
}

type ServicePerimeterSpecEgressPolicyArgs 

type ServicePerimeterSpecEgressPolicyArgs struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterSpecEgressPolicyEgressFromPtrInput `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterSpecEgressPolicyEgressToPtrInput `pulumi:"egressTo"`
}

func (ServicePerimeterSpecEgressPolicyArgs) ElementType 

func (ServicePerimeterSpecEgressPolicyArgs) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyArgs) ToServicePerimeterSpecEgressPolicyOutput 

func (i ServicePerimeterSpecEgressPolicyArgs) ToServicePerimeterSpecEgressPolicyOutput() ServicePerimeterSpecEgressPolicyOutput

func (ServicePerimeterSpecEgressPolicyArgs) ToServicePerimeterSpecEgressPolicyOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyArgs) ToServicePerimeterSpecEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyOutput

type ServicePerimeterSpecEgressPolicyArray 

type ServicePerimeterSpecEgressPolicyArray []ServicePerimeterSpecEgressPolicyInput

func (ServicePerimeterSpecEgressPolicyArray) ElementType 

func (ServicePerimeterSpecEgressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyArray) ToServicePerimeterSpecEgressPolicyArrayOutput 

func (i ServicePerimeterSpecEgressPolicyArray) ToServicePerimeterSpecEgressPolicyArrayOutput() ServicePerimeterSpecEgressPolicyArrayOutput

func (ServicePerimeterSpecEgressPolicyArray) ToServicePerimeterSpecEgressPolicyArrayOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyArray) ToServicePerimeterSpecEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyArrayOutput

type ServicePerimeterSpecEgressPolicyArrayInput 

type ServicePerimeterSpecEgressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyArrayOutput() ServicePerimeterSpecEgressPolicyArrayOutput
	ToServicePerimeterSpecEgressPolicyArrayOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyArrayOutput
}

ServicePerimeterSpecEgressPolicyArrayInput is an input type that accepts ServicePerimeterSpecEgressPolicyArray and ServicePerimeterSpecEgressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyArrayInput` via: 

ServicePerimeterSpecEgressPolicyArray{ ServicePerimeterSpecEgressPolicyArgs{...} }

type ServicePerimeterSpecEgressPolicyArrayOutput 

type ServicePerimeterSpecEgressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyArrayOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyArrayOutput) Index 

func (o ServicePerimeterSpecEgressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecEgressPolicyOutput

func (ServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimeterSpecEgressPolicyArrayOutput 

func (o ServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimeterSpecEgressPolicyArrayOutput() ServicePerimeterSpecEgressPolicyArrayOutput

func (ServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimeterSpecEgressPolicyArrayOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimeterSpecEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyArrayOutput

type ServicePerimeterSpecEgressPolicyEgressFrom 

type ServicePerimeterSpecEgressPolicyEgressFrom struct {
	// A list of identities that are allowed access through this `EgressPolicy`.
	// Should be in the format of email address. The email address should
	// represent individual user or service account only.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction *string `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterSpecEgressPolicyEgressFromSource `pulumi:"sources"`
}

type ServicePerimeterSpecEgressPolicyEgressFromArgs 

type ServicePerimeterSpecEgressPolicyEgressFromArgs struct {
	// A list of identities that are allowed access through this `EgressPolicy`.
	// Should be in the format of email address. The email address should
	// represent individual user or service account only.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction pulumi.StringPtrInput `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterSpecEgressPolicyEgressFromArgs) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressFromArgs) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromOutput 

func (i ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromOutput() ServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

func (i ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimeterSpecEgressPolicyEgressFromPtrOutput

func (ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromPtrOutput

type ServicePerimeterSpecEgressPolicyEgressFromInput 

type ServicePerimeterSpecEgressPolicyEgressFromInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressFromOutput() ServicePerimeterSpecEgressPolicyEgressFromOutput
	ToServicePerimeterSpecEgressPolicyEgressFromOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressFromOutput
}

ServicePerimeterSpecEgressPolicyEgressFromInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressFromArgs and ServicePerimeterSpecEgressPolicyEgressFromOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressFromInput` via: 

ServicePerimeterSpecEgressPolicyEgressFromArgs{...}

type ServicePerimeterSpecEgressPolicyEgressFromOutput 

type ServicePerimeterSpecEgressPolicyEgressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) Identities 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this `EgressPolicy`. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) IdentityType 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) SourceRestriction 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) Sources 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) Sources() ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromOutput 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromOutput() ServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimeterSpecEgressPolicyEgressFromPtrOutput

func (ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromPtrOutput

type ServicePerimeterSpecEgressPolicyEgressFromPtrInput 

type ServicePerimeterSpecEgressPolicyEgressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimeterSpecEgressPolicyEgressFromPtrOutput
	ToServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressFromPtrOutput
}

ServicePerimeterSpecEgressPolicyEgressFromPtrInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressFromArgs, ServicePerimeterSpecEgressPolicyEgressFromPtr and ServicePerimeterSpecEgressPolicyEgressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressFromPtrInput` via: 

        ServicePerimeterSpecEgressPolicyEgressFromArgs{...}

or:

        nil

func ServicePerimeterSpecEgressPolicyEgressFromPtr 

func ServicePerimeterSpecEgressPolicyEgressFromPtr(v *ServicePerimeterSpecEgressPolicyEgressFromArgs) ServicePerimeterSpecEgressPolicyEgressFromPtrInput

type ServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

type ServicePerimeterSpecEgressPolicyEgressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Elem 

func (o ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Elem() ServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Identities 

func (o ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this `EgressPolicy`. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) IdentityType 

func (o ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) SourceRestriction 

func (o ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Sources 

func (o ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Sources() ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimeterSpecEgressPolicyEgressFromPtrOutput

func (ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromPtrOutput

type ServicePerimeterSpecEgressPolicyEgressFromSource 

type ServicePerimeterSpecEgressPolicyEgressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
}

type ServicePerimeterSpecEgressPolicyEgressFromSourceArgs 

type ServicePerimeterSpecEgressPolicyEgressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
}

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutput 

func (i ServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutput() ServicePerimeterSpecEgressPolicyEgressFromSourceOutput

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromSourceOutput

type ServicePerimeterSpecEgressPolicyEgressFromSourceArray 

type ServicePerimeterSpecEgressPolicyEgressFromSourceArray []ServicePerimeterSpecEgressPolicyEgressFromSourceInput

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArray) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput 

func (i ServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput 

type ServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput
	ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput
}

ServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressFromSourceArray and ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput` via: 

ServicePerimeterSpecEgressPolicyEgressFromSourceArray{ ServicePerimeterSpecEgressPolicyEgressFromSourceArgs{...} }

type ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput 

type ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) Index 

func (o ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecEgressPolicyEgressFromSourceOutput

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput 

func (o ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterSpecEgressPolicyEgressFromSourceInput 

type ServicePerimeterSpecEgressPolicyEgressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressFromSourceOutput() ServicePerimeterSpecEgressPolicyEgressFromSourceOutput
	ToServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressFromSourceOutput
}

ServicePerimeterSpecEgressPolicyEgressFromSourceInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressFromSourceArgs and ServicePerimeterSpecEgressPolicyEgressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressFromSourceInput` via: 

ServicePerimeterSpecEgressPolicyEgressFromSourceArgs{...}

type ServicePerimeterSpecEgressPolicyEgressFromSourceOutput 

type ServicePerimeterSpecEgressPolicyEgressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) AccessLevel 

func (o ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutput 

func (o ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutput() ServicePerimeterSpecEgressPolicyEgressFromSourceOutput

func (ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressFromSourceOutput

type ServicePerimeterSpecEgressPolicyEgressTo 

type ServicePerimeterSpecEgressPolicyEgressTo struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources []string `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations []ServicePerimeterSpecEgressPolicyEgressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterSpecEgressPolicyEgressToArgs 

type ServicePerimeterSpecEgressPolicyEgressToArgs struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources pulumi.StringArrayInput `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations ServicePerimeterSpecEgressPolicyEgressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterSpecEgressPolicyEgressToArgs) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToArgs) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToOutput 

func (i ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToOutput() ServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToPtrOutput 

func (i ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimeterSpecEgressPolicyEgressToPtrOutput

func (ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToPtrOutput

type ServicePerimeterSpecEgressPolicyEgressToInput 

type ServicePerimeterSpecEgressPolicyEgressToInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressToOutput() ServicePerimeterSpecEgressPolicyEgressToOutput
	ToServicePerimeterSpecEgressPolicyEgressToOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressToOutput
}

ServicePerimeterSpecEgressPolicyEgressToInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressToArgs and ServicePerimeterSpecEgressPolicyEgressToOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressToInput` via: 

ServicePerimeterSpecEgressPolicyEgressToArgs{...}

type ServicePerimeterSpecEgressPolicyEgressToOperation 

type ServicePerimeterSpecEgressPolicyEgressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterSpecEgressPolicyEgressToOperationArgs 

type ServicePerimeterSpecEgressPolicyEgressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterSpecEgressPolicyEgressToOperationArgs) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationOutput 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationOutput() ServicePerimeterSpecEgressPolicyEgressToOperationOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationOutput

type ServicePerimeterSpecEgressPolicyEgressToOperationArray 

type ServicePerimeterSpecEgressPolicyEgressToOperationArray []ServicePerimeterSpecEgressPolicyEgressToOperationInput

func (ServicePerimeterSpecEgressPolicyEgressToOperationArray) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput() ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterSpecEgressPolicyEgressToOperationArrayInput 

type ServicePerimeterSpecEgressPolicyEgressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput() ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput
	ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput
}

ServicePerimeterSpecEgressPolicyEgressToOperationArrayInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressToOperationArray and ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressToOperationArrayInput` via: 

ServicePerimeterSpecEgressPolicyEgressToOperationArray{ ServicePerimeterSpecEgressPolicyEgressToOperationArgs{...} }

type ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput 

type ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) Index 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecEgressPolicyEgressToOperationOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput() ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterSpecEgressPolicyEgressToOperationInput 

type ServicePerimeterSpecEgressPolicyEgressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressToOperationOutput() ServicePerimeterSpecEgressPolicyEgressToOperationOutput
	ToServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationOutput
}

ServicePerimeterSpecEgressPolicyEgressToOperationInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressToOperationArgs and ServicePerimeterSpecEgressPolicyEgressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressToOperationInput` via: 

ServicePerimeterSpecEgressPolicyEgressToOperationArgs{...}

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelector 

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs 

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray 

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray []ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput 

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput
	ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput
}

ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray and ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray{ ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs{...} }

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput 

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput 

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput
	ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput
}

ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs and ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput` via: 

ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs{...}

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput 

type ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterSpecEgressPolicyEgressToOperationOutput 

type ServicePerimeterSpecEgressPolicyEgressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOperationOutput) MethodSelectors 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationOutput) MethodSelectors() ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ServiceName 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationOutput 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationOutput() ServicePerimeterSpecEgressPolicyEgressToOperationOutput

func (ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOperationOutput

type ServicePerimeterSpecEgressPolicyEgressToOutput 

type ServicePerimeterSpecEgressPolicyEgressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressToOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToOutput) ExternalResources 

func (o ServicePerimeterSpecEgressPolicyEgressToOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterSpecEgressPolicyEgressToOutput) Operations 

func (o ServicePerimeterSpecEgressPolicyEgressToOutput) Operations() ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterSpecEgressPolicyEgressToOutput) Resources 

func (o ServicePerimeterSpecEgressPolicyEgressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToOutput 

func (o ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToOutput() ServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimeterSpecEgressPolicyEgressToPtrOutput

func (ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToPtrOutput

type ServicePerimeterSpecEgressPolicyEgressToPtrInput 

type ServicePerimeterSpecEgressPolicyEgressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimeterSpecEgressPolicyEgressToPtrOutput
	ToServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyEgressToPtrOutput
}

ServicePerimeterSpecEgressPolicyEgressToPtrInput is an input type that accepts ServicePerimeterSpecEgressPolicyEgressToArgs, ServicePerimeterSpecEgressPolicyEgressToPtr and ServicePerimeterSpecEgressPolicyEgressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyEgressToPtrInput` via: 

        ServicePerimeterSpecEgressPolicyEgressToArgs{...}

or:

        nil

func ServicePerimeterSpecEgressPolicyEgressToPtr 

func ServicePerimeterSpecEgressPolicyEgressToPtr(v *ServicePerimeterSpecEgressPolicyEgressToArgs) ServicePerimeterSpecEgressPolicyEgressToPtrInput

type ServicePerimeterSpecEgressPolicyEgressToPtrOutput 

type ServicePerimeterSpecEgressPolicyEgressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) Elem 

func (o ServicePerimeterSpecEgressPolicyEgressToPtrOutput) Elem() ServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ExternalResources 

func (o ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) Operations 

func (o ServicePerimeterSpecEgressPolicyEgressToPtrOutput) Operations() ServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) Resources 

func (o ServicePerimeterSpecEgressPolicyEgressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimeterSpecEgressPolicyEgressToPtrOutput

func (ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyEgressToPtrOutput

type ServicePerimeterSpecEgressPolicyInput 

type ServicePerimeterSpecEgressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterSpecEgressPolicyOutput() ServicePerimeterSpecEgressPolicyOutput
	ToServicePerimeterSpecEgressPolicyOutputWithContext(context.Context) ServicePerimeterSpecEgressPolicyOutput
}

ServicePerimeterSpecEgressPolicyInput is an input type that accepts ServicePerimeterSpecEgressPolicyArgs and ServicePerimeterSpecEgressPolicyOutput values. You can construct a concrete instance of `ServicePerimeterSpecEgressPolicyInput` via: 

ServicePerimeterSpecEgressPolicyArgs{...}

type ServicePerimeterSpecEgressPolicyOutput 

type ServicePerimeterSpecEgressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecEgressPolicyOutput) EgressFrom 

func (o ServicePerimeterSpecEgressPolicyOutput) EgressFrom() ServicePerimeterSpecEgressPolicyEgressFromPtrOutput

Defines conditions on the source of a request causing this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterSpecEgressPolicyOutput) EgressTo 

func (o ServicePerimeterSpecEgressPolicyOutput) EgressTo() ServicePerimeterSpecEgressPolicyEgressToPtrOutput

Defines the conditions on the `ApiOperation` and destination resources that cause this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterSpecEgressPolicyOutput) ElementType 

func (ServicePerimeterSpecEgressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterSpecEgressPolicyOutput) ToServicePerimeterSpecEgressPolicyOutput 

func (o ServicePerimeterSpecEgressPolicyOutput) ToServicePerimeterSpecEgressPolicyOutput() ServicePerimeterSpecEgressPolicyOutput

func (ServicePerimeterSpecEgressPolicyOutput) ToServicePerimeterSpecEgressPolicyOutputWithContext 

func (o ServicePerimeterSpecEgressPolicyOutput) ToServicePerimeterSpecEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterSpecEgressPolicyOutput

type ServicePerimeterSpecIngressPolicy 

type ServicePerimeterSpecIngressPolicy struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom *ServicePerimeterSpecIngressPolicyIngressFrom `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo *ServicePerimeterSpecIngressPolicyIngressTo `pulumi:"ingressTo"`
}

type ServicePerimeterSpecIngressPolicyArgs 

type ServicePerimeterSpecIngressPolicyArgs struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterSpecIngressPolicyIngressFromPtrInput `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterSpecIngressPolicyIngressToPtrInput `pulumi:"ingressTo"`
}

func (ServicePerimeterSpecIngressPolicyArgs) ElementType 

func (ServicePerimeterSpecIngressPolicyArgs) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyArgs) ToServicePerimeterSpecIngressPolicyOutput 

func (i ServicePerimeterSpecIngressPolicyArgs) ToServicePerimeterSpecIngressPolicyOutput() ServicePerimeterSpecIngressPolicyOutput

func (ServicePerimeterSpecIngressPolicyArgs) ToServicePerimeterSpecIngressPolicyOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyArgs) ToServicePerimeterSpecIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyOutput

type ServicePerimeterSpecIngressPolicyArray 

type ServicePerimeterSpecIngressPolicyArray []ServicePerimeterSpecIngressPolicyInput

func (ServicePerimeterSpecIngressPolicyArray) ElementType 

func (ServicePerimeterSpecIngressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyArray) ToServicePerimeterSpecIngressPolicyArrayOutput 

func (i ServicePerimeterSpecIngressPolicyArray) ToServicePerimeterSpecIngressPolicyArrayOutput() ServicePerimeterSpecIngressPolicyArrayOutput

func (ServicePerimeterSpecIngressPolicyArray) ToServicePerimeterSpecIngressPolicyArrayOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyArray) ToServicePerimeterSpecIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyArrayOutput

type ServicePerimeterSpecIngressPolicyArrayInput 

type ServicePerimeterSpecIngressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyArrayOutput() ServicePerimeterSpecIngressPolicyArrayOutput
	ToServicePerimeterSpecIngressPolicyArrayOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyArrayOutput
}

ServicePerimeterSpecIngressPolicyArrayInput is an input type that accepts ServicePerimeterSpecIngressPolicyArray and ServicePerimeterSpecIngressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyArrayInput` via: 

ServicePerimeterSpecIngressPolicyArray{ ServicePerimeterSpecIngressPolicyArgs{...} }

type ServicePerimeterSpecIngressPolicyArrayOutput 

type ServicePerimeterSpecIngressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyArrayOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyArrayOutput) Index 

func (o ServicePerimeterSpecIngressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecIngressPolicyOutput

func (ServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimeterSpecIngressPolicyArrayOutput 

func (o ServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimeterSpecIngressPolicyArrayOutput() ServicePerimeterSpecIngressPolicyArrayOutput

func (ServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimeterSpecIngressPolicyArrayOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimeterSpecIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyArrayOutput

type ServicePerimeterSpecIngressPolicyIngressFrom 

type ServicePerimeterSpecIngressPolicyIngressFrom struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterSpecIngressPolicyIngressFromSource `pulumi:"sources"`
}

type ServicePerimeterSpecIngressPolicyIngressFromArgs 

type ServicePerimeterSpecIngressPolicyIngressFromArgs struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterSpecIngressPolicyIngressFromArgs) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressFromArgs) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromOutput 

func (i ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromOutput() ServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

func (i ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimeterSpecIngressPolicyIngressFromPtrOutput

func (ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromPtrOutput

type ServicePerimeterSpecIngressPolicyIngressFromInput 

type ServicePerimeterSpecIngressPolicyIngressFromInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressFromOutput() ServicePerimeterSpecIngressPolicyIngressFromOutput
	ToServicePerimeterSpecIngressPolicyIngressFromOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressFromOutput
}

ServicePerimeterSpecIngressPolicyIngressFromInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressFromArgs and ServicePerimeterSpecIngressPolicyIngressFromOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressFromInput` via: 

ServicePerimeterSpecIngressPolicyIngressFromArgs{...}

type ServicePerimeterSpecIngressPolicyIngressFromOutput 

type ServicePerimeterSpecIngressPolicyIngressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) Identities 

func (o ServicePerimeterSpecIngressPolicyIngressFromOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) IdentityType 

func (o ServicePerimeterSpecIngressPolicyIngressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) Sources 

func (o ServicePerimeterSpecIngressPolicyIngressFromOutput) Sources() ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromOutput 

func (o ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromOutput() ServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimeterSpecIngressPolicyIngressFromPtrOutput

func (ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromPtrOutput

type ServicePerimeterSpecIngressPolicyIngressFromPtrInput 

type ServicePerimeterSpecIngressPolicyIngressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimeterSpecIngressPolicyIngressFromPtrOutput
	ToServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressFromPtrOutput
}

ServicePerimeterSpecIngressPolicyIngressFromPtrInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressFromArgs, ServicePerimeterSpecIngressPolicyIngressFromPtr and ServicePerimeterSpecIngressPolicyIngressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressFromPtrInput` via: 

        ServicePerimeterSpecIngressPolicyIngressFromArgs{...}

or:

        nil

func ServicePerimeterSpecIngressPolicyIngressFromPtr 

func ServicePerimeterSpecIngressPolicyIngressFromPtr(v *ServicePerimeterSpecIngressPolicyIngressFromArgs) ServicePerimeterSpecIngressPolicyIngressFromPtrInput

type ServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

type ServicePerimeterSpecIngressPolicyIngressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Elem 

func (o ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Elem() ServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Identities 

func (o ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) IdentityType 

func (o ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Sources 

func (o ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Sources() ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimeterSpecIngressPolicyIngressFromPtrOutput

func (ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromPtrOutput

type ServicePerimeterSpecIngressPolicyIngressFromSource 

type ServicePerimeterSpecIngressPolicyIngressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource *string `pulumi:"resource"`
}

type ServicePerimeterSpecIngressPolicyIngressFromSourceArgs 

type ServicePerimeterSpecIngressPolicyIngressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
}

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutput 

func (i ServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutput() ServicePerimeterSpecIngressPolicyIngressFromSourceOutput

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromSourceOutput

type ServicePerimeterSpecIngressPolicyIngressFromSourceArray 

type ServicePerimeterSpecIngressPolicyIngressFromSourceArray []ServicePerimeterSpecIngressPolicyIngressFromSourceInput

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArray) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput 

func (i ServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput 

type ServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput
	ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput
}

ServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressFromSourceArray and ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput` via: 

ServicePerimeterSpecIngressPolicyIngressFromSourceArray{ ServicePerimeterSpecIngressPolicyIngressFromSourceArgs{...} }

type ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput 

type ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) Index 

func (o ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecIngressPolicyIngressFromSourceOutput

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput 

func (o ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterSpecIngressPolicyIngressFromSourceInput 

type ServicePerimeterSpecIngressPolicyIngressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressFromSourceOutput() ServicePerimeterSpecIngressPolicyIngressFromSourceOutput
	ToServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressFromSourceOutput
}

ServicePerimeterSpecIngressPolicyIngressFromSourceInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressFromSourceArgs and ServicePerimeterSpecIngressPolicyIngressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressFromSourceInput` via: 

ServicePerimeterSpecIngressPolicyIngressFromSourceArgs{...}

type ServicePerimeterSpecIngressPolicyIngressFromSourceOutput 

type ServicePerimeterSpecIngressPolicyIngressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) AccessLevel 

func (o ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) Resource 

func (o ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) Resource() pulumi.StringPtrOutput

A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects are allowed. Format `projects/{project_number}` The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.

func (ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutput 

func (o ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutput() ServicePerimeterSpecIngressPolicyIngressFromSourceOutput

func (ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressFromSourceOutput

type ServicePerimeterSpecIngressPolicyIngressTo 

type ServicePerimeterSpecIngressPolicyIngressTo struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations []ServicePerimeterSpecIngressPolicyIngressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterSpecIngressPolicyIngressToArgs 

type ServicePerimeterSpecIngressPolicyIngressToArgs struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations ServicePerimeterSpecIngressPolicyIngressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterSpecIngressPolicyIngressToArgs) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToArgs) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToOutput 

func (i ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToOutput() ServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToPtrOutput 

func (i ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimeterSpecIngressPolicyIngressToPtrOutput

func (ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToPtrOutput

type ServicePerimeterSpecIngressPolicyIngressToInput 

type ServicePerimeterSpecIngressPolicyIngressToInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressToOutput() ServicePerimeterSpecIngressPolicyIngressToOutput
	ToServicePerimeterSpecIngressPolicyIngressToOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressToOutput
}

ServicePerimeterSpecIngressPolicyIngressToInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressToArgs and ServicePerimeterSpecIngressPolicyIngressToOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressToInput` via: 

ServicePerimeterSpecIngressPolicyIngressToArgs{...}

type ServicePerimeterSpecIngressPolicyIngressToOperation 

type ServicePerimeterSpecIngressPolicyIngressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterSpecIngressPolicyIngressToOperationArgs 

type ServicePerimeterSpecIngressPolicyIngressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterSpecIngressPolicyIngressToOperationArgs) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationOutput 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationOutput() ServicePerimeterSpecIngressPolicyIngressToOperationOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationOutput

type ServicePerimeterSpecIngressPolicyIngressToOperationArray 

type ServicePerimeterSpecIngressPolicyIngressToOperationArray []ServicePerimeterSpecIngressPolicyIngressToOperationInput

func (ServicePerimeterSpecIngressPolicyIngressToOperationArray) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput() ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterSpecIngressPolicyIngressToOperationArrayInput 

type ServicePerimeterSpecIngressPolicyIngressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput() ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput
	ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput
}

ServicePerimeterSpecIngressPolicyIngressToOperationArrayInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressToOperationArray and ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressToOperationArrayInput` via: 

ServicePerimeterSpecIngressPolicyIngressToOperationArray{ ServicePerimeterSpecIngressPolicyIngressToOperationArgs{...} }

type ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput 

type ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) Index 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecIngressPolicyIngressToOperationOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput() ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterSpecIngressPolicyIngressToOperationInput 

type ServicePerimeterSpecIngressPolicyIngressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressToOperationOutput() ServicePerimeterSpecIngressPolicyIngressToOperationOutput
	ToServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationOutput
}

ServicePerimeterSpecIngressPolicyIngressToOperationInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressToOperationArgs and ServicePerimeterSpecIngressPolicyIngressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressToOperationInput` via: 

ServicePerimeterSpecIngressPolicyIngressToOperationArgs{...}

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelector 

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs 

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray 

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray []ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput 

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput
	ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput
}

ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray and ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray{ ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs{...} }

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput 

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput 

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput
	ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput
}

ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs and ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput` via: 

ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs{...}

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput 

type ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterSpecIngressPolicyIngressToOperationOutput 

type ServicePerimeterSpecIngressPolicyIngressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOperationOutput) MethodSelectors 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationOutput) MethodSelectors() ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ServiceName 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationOutput 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationOutput() ServicePerimeterSpecIngressPolicyIngressToOperationOutput

func (ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOperationOutput

type ServicePerimeterSpecIngressPolicyIngressToOutput 

type ServicePerimeterSpecIngressPolicyIngressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressToOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToOutput) Operations 

func (o ServicePerimeterSpecIngressPolicyIngressToOutput) Operations() ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterSpecIngressPolicyIngressToOutput) Resources 

func (o ServicePerimeterSpecIngressPolicyIngressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToOutput 

func (o ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToOutput() ServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimeterSpecIngressPolicyIngressToPtrOutput

func (ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToPtrOutput

type ServicePerimeterSpecIngressPolicyIngressToPtrInput 

type ServicePerimeterSpecIngressPolicyIngressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimeterSpecIngressPolicyIngressToPtrOutput
	ToServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyIngressToPtrOutput
}

ServicePerimeterSpecIngressPolicyIngressToPtrInput is an input type that accepts ServicePerimeterSpecIngressPolicyIngressToArgs, ServicePerimeterSpecIngressPolicyIngressToPtr and ServicePerimeterSpecIngressPolicyIngressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyIngressToPtrInput` via: 

        ServicePerimeterSpecIngressPolicyIngressToArgs{...}

or:

        nil

func ServicePerimeterSpecIngressPolicyIngressToPtr 

func ServicePerimeterSpecIngressPolicyIngressToPtr(v *ServicePerimeterSpecIngressPolicyIngressToArgs) ServicePerimeterSpecIngressPolicyIngressToPtrInput

type ServicePerimeterSpecIngressPolicyIngressToPtrOutput 

type ServicePerimeterSpecIngressPolicyIngressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyIngressToPtrOutput) Elem 

func (o ServicePerimeterSpecIngressPolicyIngressToPtrOutput) Elem() ServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimeterSpecIngressPolicyIngressToPtrOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyIngressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyIngressToPtrOutput) Operations 

func (o ServicePerimeterSpecIngressPolicyIngressToPtrOutput) Operations() ServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterSpecIngressPolicyIngressToPtrOutput) Resources 

func (o ServicePerimeterSpecIngressPolicyIngressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimeterSpecIngressPolicyIngressToPtrOutput

func (ServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyIngressToPtrOutput

type ServicePerimeterSpecIngressPolicyInput 

type ServicePerimeterSpecIngressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterSpecIngressPolicyOutput() ServicePerimeterSpecIngressPolicyOutput
	ToServicePerimeterSpecIngressPolicyOutputWithContext(context.Context) ServicePerimeterSpecIngressPolicyOutput
}

ServicePerimeterSpecIngressPolicyInput is an input type that accepts ServicePerimeterSpecIngressPolicyArgs and ServicePerimeterSpecIngressPolicyOutput values. You can construct a concrete instance of `ServicePerimeterSpecIngressPolicyInput` via: 

ServicePerimeterSpecIngressPolicyArgs{...}

type ServicePerimeterSpecIngressPolicyOutput 

type ServicePerimeterSpecIngressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecIngressPolicyOutput) ElementType 

func (ServicePerimeterSpecIngressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterSpecIngressPolicyOutput) IngressFrom 

func (o ServicePerimeterSpecIngressPolicyOutput) IngressFrom() ServicePerimeterSpecIngressPolicyIngressFromPtrOutput

Defines the conditions on the source of a request causing this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterSpecIngressPolicyOutput) IngressTo 

func (o ServicePerimeterSpecIngressPolicyOutput) IngressTo() ServicePerimeterSpecIngressPolicyIngressToPtrOutput

Defines the conditions on the `ApiOperation` and request destination that cause this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterSpecIngressPolicyOutput) ToServicePerimeterSpecIngressPolicyOutput 

func (o ServicePerimeterSpecIngressPolicyOutput) ToServicePerimeterSpecIngressPolicyOutput() ServicePerimeterSpecIngressPolicyOutput

func (ServicePerimeterSpecIngressPolicyOutput) ToServicePerimeterSpecIngressPolicyOutputWithContext 

func (o ServicePerimeterSpecIngressPolicyOutput) ToServicePerimeterSpecIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterSpecIngressPolicyOutput

type ServicePerimeterSpecInput 

type ServicePerimeterSpecInput interface {
	pulumi.Input

	ToServicePerimeterSpecOutput() ServicePerimeterSpecOutput
	ToServicePerimeterSpecOutputWithContext(context.Context) ServicePerimeterSpecOutput
}

ServicePerimeterSpecInput is an input type that accepts ServicePerimeterSpecArgs and ServicePerimeterSpecOutput values. You can construct a concrete instance of `ServicePerimeterSpecInput` via: 

ServicePerimeterSpecArgs{...}

type ServicePerimeterSpecOutput 

type ServicePerimeterSpecOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecOutput) AccessLevels 

func (o ServicePerimeterSpecOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimeterSpecOutput) EgressPolicies 

func (o ServicePerimeterSpecOutput) EgressPolicies() ServicePerimeterSpecEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterSpecOutput) ElementType 

func (ServicePerimeterSpecOutput) ElementType() reflect.Type

func (ServicePerimeterSpecOutput) IngressPolicies 

func (o ServicePerimeterSpecOutput) IngressPolicies() ServicePerimeterSpecIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterSpecOutput) Resources 

func (o ServicePerimeterSpecOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimeterSpecOutput) RestrictedServices 

func (o ServicePerimeterSpecOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimeterSpecOutput) ToServicePerimeterSpecOutput 

func (o ServicePerimeterSpecOutput) ToServicePerimeterSpecOutput() ServicePerimeterSpecOutput

func (ServicePerimeterSpecOutput) ToServicePerimeterSpecOutputWithContext 

func (o ServicePerimeterSpecOutput) ToServicePerimeterSpecOutputWithContext(ctx context.Context) ServicePerimeterSpecOutput

func (ServicePerimeterSpecOutput) ToServicePerimeterSpecPtrOutput 

func (o ServicePerimeterSpecOutput) ToServicePerimeterSpecPtrOutput() ServicePerimeterSpecPtrOutput

func (ServicePerimeterSpecOutput) ToServicePerimeterSpecPtrOutputWithContext 

func (o ServicePerimeterSpecOutput) ToServicePerimeterSpecPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecPtrOutput

func (ServicePerimeterSpecOutput) VpcAccessibleServices 

func (o ServicePerimeterSpecOutput) VpcAccessibleServices() ServicePerimeterSpecVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimeterSpecPtrInput 

type ServicePerimeterSpecPtrInput interface {
	pulumi.Input

	ToServicePerimeterSpecPtrOutput() ServicePerimeterSpecPtrOutput
	ToServicePerimeterSpecPtrOutputWithContext(context.Context) ServicePerimeterSpecPtrOutput
}

ServicePerimeterSpecPtrInput is an input type that accepts ServicePerimeterSpecArgs, ServicePerimeterSpecPtr and ServicePerimeterSpecPtrOutput values. You can construct a concrete instance of `ServicePerimeterSpecPtrInput` via: 

        ServicePerimeterSpecArgs{...}

or:

        nil

func ServicePerimeterSpecPtr 

func ServicePerimeterSpecPtr(v *ServicePerimeterSpecArgs) ServicePerimeterSpecPtrInput

type ServicePerimeterSpecPtrOutput 

type ServicePerimeterSpecPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecPtrOutput) AccessLevels 

func (o ServicePerimeterSpecPtrOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimeterSpecPtrOutput) EgressPolicies 

func (o ServicePerimeterSpecPtrOutput) EgressPolicies() ServicePerimeterSpecEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterSpecPtrOutput) Elem 

func (o ServicePerimeterSpecPtrOutput) Elem() ServicePerimeterSpecOutput

func (ServicePerimeterSpecPtrOutput) ElementType 

func (ServicePerimeterSpecPtrOutput) ElementType() reflect.Type

func (ServicePerimeterSpecPtrOutput) IngressPolicies 

func (o ServicePerimeterSpecPtrOutput) IngressPolicies() ServicePerimeterSpecIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterSpecPtrOutput) Resources 

func (o ServicePerimeterSpecPtrOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimeterSpecPtrOutput) RestrictedServices 

func (o ServicePerimeterSpecPtrOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimeterSpecPtrOutput) ToServicePerimeterSpecPtrOutput 

func (o ServicePerimeterSpecPtrOutput) ToServicePerimeterSpecPtrOutput() ServicePerimeterSpecPtrOutput

func (ServicePerimeterSpecPtrOutput) ToServicePerimeterSpecPtrOutputWithContext 

func (o ServicePerimeterSpecPtrOutput) ToServicePerimeterSpecPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecPtrOutput

func (ServicePerimeterSpecPtrOutput) VpcAccessibleServices 

func (o ServicePerimeterSpecPtrOutput) VpcAccessibleServices() ServicePerimeterSpecVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimeterSpecVpcAccessibleServices 

type ServicePerimeterSpecVpcAccessibleServices struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices []string `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction *bool `pulumi:"enableRestriction"`
}

type ServicePerimeterSpecVpcAccessibleServicesArgs 

type ServicePerimeterSpecVpcAccessibleServicesArgs struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices pulumi.StringArrayInput `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction pulumi.BoolPtrInput `pulumi:"enableRestriction"`
}

func (ServicePerimeterSpecVpcAccessibleServicesArgs) ElementType 

func (ServicePerimeterSpecVpcAccessibleServicesArgs) ElementType() reflect.Type

func (ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesOutput 

func (i ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesOutput() ServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesOutputWithContext 

func (i ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesPtrOutput 

func (i ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimeterSpecVpcAccessibleServicesPtrOutput

func (ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext 

func (i ServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecVpcAccessibleServicesPtrOutput

type ServicePerimeterSpecVpcAccessibleServicesInput 

type ServicePerimeterSpecVpcAccessibleServicesInput interface {
	pulumi.Input

	ToServicePerimeterSpecVpcAccessibleServicesOutput() ServicePerimeterSpecVpcAccessibleServicesOutput
	ToServicePerimeterSpecVpcAccessibleServicesOutputWithContext(context.Context) ServicePerimeterSpecVpcAccessibleServicesOutput
}

ServicePerimeterSpecVpcAccessibleServicesInput is an input type that accepts ServicePerimeterSpecVpcAccessibleServicesArgs and ServicePerimeterSpecVpcAccessibleServicesOutput values. You can construct a concrete instance of `ServicePerimeterSpecVpcAccessibleServicesInput` via: 

ServicePerimeterSpecVpcAccessibleServicesArgs{...}

type ServicePerimeterSpecVpcAccessibleServicesOutput 

type ServicePerimeterSpecVpcAccessibleServicesOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecVpcAccessibleServicesOutput) AllowedServices 

func (o ServicePerimeterSpecVpcAccessibleServicesOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimeterSpecVpcAccessibleServicesOutput) ElementType 

func (ServicePerimeterSpecVpcAccessibleServicesOutput) ElementType() reflect.Type

func (ServicePerimeterSpecVpcAccessibleServicesOutput) EnableRestriction 

func (o ServicePerimeterSpecVpcAccessibleServicesOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesOutput 

func (o ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesOutput() ServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesOutputWithContext 

func (o ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutput 

func (o ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimeterSpecVpcAccessibleServicesPtrOutput

func (ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecVpcAccessibleServicesPtrOutput

type ServicePerimeterSpecVpcAccessibleServicesPtrInput 

type ServicePerimeterSpecVpcAccessibleServicesPtrInput interface {
	pulumi.Input

	ToServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimeterSpecVpcAccessibleServicesPtrOutput
	ToServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(context.Context) ServicePerimeterSpecVpcAccessibleServicesPtrOutput
}

ServicePerimeterSpecVpcAccessibleServicesPtrInput is an input type that accepts ServicePerimeterSpecVpcAccessibleServicesArgs, ServicePerimeterSpecVpcAccessibleServicesPtr and ServicePerimeterSpecVpcAccessibleServicesPtrOutput values. You can construct a concrete instance of `ServicePerimeterSpecVpcAccessibleServicesPtrInput` via: 

        ServicePerimeterSpecVpcAccessibleServicesArgs{...}

or:

        nil

func ServicePerimeterSpecVpcAccessibleServicesPtr 

func ServicePerimeterSpecVpcAccessibleServicesPtr(v *ServicePerimeterSpecVpcAccessibleServicesArgs) ServicePerimeterSpecVpcAccessibleServicesPtrInput

type ServicePerimeterSpecVpcAccessibleServicesPtrOutput 

type ServicePerimeterSpecVpcAccessibleServicesPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterSpecVpcAccessibleServicesPtrOutput) AllowedServices 

func (o ServicePerimeterSpecVpcAccessibleServicesPtrOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimeterSpecVpcAccessibleServicesPtrOutput) Elem 

func (o ServicePerimeterSpecVpcAccessibleServicesPtrOutput) Elem() ServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimeterSpecVpcAccessibleServicesPtrOutput) ElementType 

func (ServicePerimeterSpecVpcAccessibleServicesPtrOutput) ElementType() reflect.Type

func (ServicePerimeterSpecVpcAccessibleServicesPtrOutput) EnableRestriction 

func (o ServicePerimeterSpecVpcAccessibleServicesPtrOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutput 

func (o ServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimeterSpecVpcAccessibleServicesPtrOutput

func (ServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimeterSpecVpcAccessibleServicesPtrOutput

type ServicePerimeterState 

type ServicePerimeterState struct {
	// Time the AccessPolicy was created in UTC.
	CreateTime pulumi.StringPtrInput
	// Description of the ServicePerimeter and its use. Does not affect
	// behavior.
	Description pulumi.StringPtrInput
	// Resource name for the ServicePerimeter. The shortName component must
	// begin with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}
	//
	// ***
	Name pulumi.StringPtrInput
	// The AccessPolicy this ServicePerimeter lives in.
	// Format: accessPolicies/{policy_id}
	Parent pulumi.StringPtrInput
	// Specifies the type of the Perimeter. There are two types: regular and
	// bridge. Regular Service Perimeter contains resources, access levels,
	// and restricted services. Every resource can be in at most
	// ONE regular Service Perimeter.
	// In addition to being in a regular service perimeter, a resource can also
	// be in zero or more perimeter bridges. A perimeter bridge only contains
	// resources. Cross project operations are permitted if all effected
	// resources share some perimeter (whether bridge or regular). Perimeter
	// Bridge does not contain access levels or services: those are governed
	// entirely by the regular perimeter that resource is in.
	// Perimeter Bridges are typically useful when building more complex
	// topologies with many independent perimeters that need to share some data
	// with a common perimeter, but should not be able to share data among
	// themselves.
	// Default value is `PERIMETER_TYPE_REGULAR`.
	// Possible values are: `PERIMETER_TYPE_REGULAR`, `PERIMETER_TYPE_BRIDGE`.
	PerimeterType pulumi.StringPtrInput
	// Proposed (or dry run) ServicePerimeter configuration.
	// This configuration allows to specify and test ServicePerimeter configuration
	// without enforcing actual access restrictions. Only allowed to be set when
	// the `useExplicitDryRunSpec` flag is set.
	// Structure is documented below.
	Spec ServicePerimeterSpecPtrInput
	// ServicePerimeter configuration. Specifies sets of resources,
	// restricted services and access levels that determine
	// perimeter content and boundaries.
	// Structure is documented below.
	Status ServicePerimeterStatusPtrInput
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringPtrInput
	// Time the AccessPolicy was updated in UTC.
	UpdateTime pulumi.StringPtrInput
	// Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists
	// for all Service Perimeters, and that spec is identical to the status for those
	// Service Perimeters. When this flag is set, it inhibits the generation of the
	// implicit spec, thereby allowing the user to explicitly provide a
	// configuration ("spec") to use in a dry-run version of the Service Perimeter.
	// This allows the user to test changes to the enforced config ("status") without
	// actually enforcing them. This testing is done through analyzing the differences
	// between currently enforced and suggested restrictions. useExplicitDryRunSpec must
	// bet set to True if any of the fields in the spec are set to non-default values.
	UseExplicitDryRunSpec pulumi.BoolPtrInput
}

func (ServicePerimeterState) ElementType 

func (ServicePerimeterState) ElementType() reflect.Type

type ServicePerimeterStatus 

type ServicePerimeterStatus struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels []string `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies []ServicePerimeterStatusEgressPolicy `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies []ServicePerimeterStatusIngressPolicy `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources []string `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices []string `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices *ServicePerimeterStatusVpcAccessibleServices `pulumi:"vpcAccessibleServices"`
}

type ServicePerimeterStatusArgs 

type ServicePerimeterStatusArgs struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels pulumi.StringArrayInput `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies ServicePerimeterStatusEgressPolicyArrayInput `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies ServicePerimeterStatusIngressPolicyArrayInput `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices pulumi.StringArrayInput `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices ServicePerimeterStatusVpcAccessibleServicesPtrInput `pulumi:"vpcAccessibleServices"`
}

func (ServicePerimeterStatusArgs) ElementType 

func (ServicePerimeterStatusArgs) ElementType() reflect.Type

func (ServicePerimeterStatusArgs) ToServicePerimeterStatusOutput 

func (i ServicePerimeterStatusArgs) ToServicePerimeterStatusOutput() ServicePerimeterStatusOutput

func (ServicePerimeterStatusArgs) ToServicePerimeterStatusOutputWithContext 

func (i ServicePerimeterStatusArgs) ToServicePerimeterStatusOutputWithContext(ctx context.Context) ServicePerimeterStatusOutput

func (ServicePerimeterStatusArgs) ToServicePerimeterStatusPtrOutput 

func (i ServicePerimeterStatusArgs) ToServicePerimeterStatusPtrOutput() ServicePerimeterStatusPtrOutput

func (ServicePerimeterStatusArgs) ToServicePerimeterStatusPtrOutputWithContext 

func (i ServicePerimeterStatusArgs) ToServicePerimeterStatusPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusPtrOutput

type ServicePerimeterStatusEgressPolicy 

type ServicePerimeterStatusEgressPolicy struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom *ServicePerimeterStatusEgressPolicyEgressFrom `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo *ServicePerimeterStatusEgressPolicyEgressTo `pulumi:"egressTo"`
}

type ServicePerimeterStatusEgressPolicyArgs 

type ServicePerimeterStatusEgressPolicyArgs struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimeterStatusEgressPolicyEgressFromPtrInput `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimeterStatusEgressPolicyEgressToPtrInput `pulumi:"egressTo"`
}

func (ServicePerimeterStatusEgressPolicyArgs) ElementType 

func (ServicePerimeterStatusEgressPolicyArgs) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyArgs) ToServicePerimeterStatusEgressPolicyOutput 

func (i ServicePerimeterStatusEgressPolicyArgs) ToServicePerimeterStatusEgressPolicyOutput() ServicePerimeterStatusEgressPolicyOutput

func (ServicePerimeterStatusEgressPolicyArgs) ToServicePerimeterStatusEgressPolicyOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyArgs) ToServicePerimeterStatusEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyOutput

type ServicePerimeterStatusEgressPolicyArray 

type ServicePerimeterStatusEgressPolicyArray []ServicePerimeterStatusEgressPolicyInput

func (ServicePerimeterStatusEgressPolicyArray) ElementType 

func (ServicePerimeterStatusEgressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyArray) ToServicePerimeterStatusEgressPolicyArrayOutput 

func (i ServicePerimeterStatusEgressPolicyArray) ToServicePerimeterStatusEgressPolicyArrayOutput() ServicePerimeterStatusEgressPolicyArrayOutput

func (ServicePerimeterStatusEgressPolicyArray) ToServicePerimeterStatusEgressPolicyArrayOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyArray) ToServicePerimeterStatusEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyArrayOutput

type ServicePerimeterStatusEgressPolicyArrayInput 

type ServicePerimeterStatusEgressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyArrayOutput() ServicePerimeterStatusEgressPolicyArrayOutput
	ToServicePerimeterStatusEgressPolicyArrayOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyArrayOutput
}

ServicePerimeterStatusEgressPolicyArrayInput is an input type that accepts ServicePerimeterStatusEgressPolicyArray and ServicePerimeterStatusEgressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyArrayInput` via: 

ServicePerimeterStatusEgressPolicyArray{ ServicePerimeterStatusEgressPolicyArgs{...} }

type ServicePerimeterStatusEgressPolicyArrayOutput 

type ServicePerimeterStatusEgressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyArrayOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyArrayOutput) Index 

func (o ServicePerimeterStatusEgressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusEgressPolicyOutput

func (ServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimeterStatusEgressPolicyArrayOutput 

func (o ServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimeterStatusEgressPolicyArrayOutput() ServicePerimeterStatusEgressPolicyArrayOutput

func (ServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimeterStatusEgressPolicyArrayOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimeterStatusEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyArrayOutput

type ServicePerimeterStatusEgressPolicyEgressFrom 

type ServicePerimeterStatusEgressPolicyEgressFrom struct {
	// A list of identities that are allowed access through this `EgressPolicy`.
	// Should be in the format of email address. The email address should
	// represent individual user or service account only.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction *string `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterStatusEgressPolicyEgressFromSource `pulumi:"sources"`
}

type ServicePerimeterStatusEgressPolicyEgressFromArgs 

type ServicePerimeterStatusEgressPolicyEgressFromArgs struct {
	// A list of identities that are allowed access through this `EgressPolicy`.
	// Should be in the format of email address. The email address should
	// represent individual user or service account only.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction pulumi.StringPtrInput `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterStatusEgressPolicyEgressFromArgs) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressFromArgs) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromOutput 

func (i ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromOutput() ServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

func (i ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimeterStatusEgressPolicyEgressFromPtrOutput

func (ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromPtrOutput

type ServicePerimeterStatusEgressPolicyEgressFromInput 

type ServicePerimeterStatusEgressPolicyEgressFromInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressFromOutput() ServicePerimeterStatusEgressPolicyEgressFromOutput
	ToServicePerimeterStatusEgressPolicyEgressFromOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressFromOutput
}

ServicePerimeterStatusEgressPolicyEgressFromInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressFromArgs and ServicePerimeterStatusEgressPolicyEgressFromOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressFromInput` via: 

ServicePerimeterStatusEgressPolicyEgressFromArgs{...}

type ServicePerimeterStatusEgressPolicyEgressFromOutput 

type ServicePerimeterStatusEgressPolicyEgressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) Identities 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this `EgressPolicy`. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) IdentityType 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) SourceRestriction 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) Sources 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) Sources() ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromOutput 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromOutput() ServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimeterStatusEgressPolicyEgressFromPtrOutput

func (ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromPtrOutput

type ServicePerimeterStatusEgressPolicyEgressFromPtrInput 

type ServicePerimeterStatusEgressPolicyEgressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimeterStatusEgressPolicyEgressFromPtrOutput
	ToServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressFromPtrOutput
}

ServicePerimeterStatusEgressPolicyEgressFromPtrInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressFromArgs, ServicePerimeterStatusEgressPolicyEgressFromPtr and ServicePerimeterStatusEgressPolicyEgressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressFromPtrInput` via: 

        ServicePerimeterStatusEgressPolicyEgressFromArgs{...}

or:

        nil

func ServicePerimeterStatusEgressPolicyEgressFromPtr 

func ServicePerimeterStatusEgressPolicyEgressFromPtr(v *ServicePerimeterStatusEgressPolicyEgressFromArgs) ServicePerimeterStatusEgressPolicyEgressFromPtrInput

type ServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

type ServicePerimeterStatusEgressPolicyEgressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Elem 

func (o ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Elem() ServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Identities 

func (o ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this `EgressPolicy`. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) IdentityType 

func (o ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) SourceRestriction 

func (o ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Sources 

func (o ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Sources() ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

func (o ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimeterStatusEgressPolicyEgressFromPtrOutput

func (ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromPtrOutput

type ServicePerimeterStatusEgressPolicyEgressFromSource 

type ServicePerimeterStatusEgressPolicyEgressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
}

type ServicePerimeterStatusEgressPolicyEgressFromSourceArgs 

type ServicePerimeterStatusEgressPolicyEgressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
}

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutput 

func (i ServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutput() ServicePerimeterStatusEgressPolicyEgressFromSourceOutput

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromSourceOutput

type ServicePerimeterStatusEgressPolicyEgressFromSourceArray 

type ServicePerimeterStatusEgressPolicyEgressFromSourceArray []ServicePerimeterStatusEgressPolicyEgressFromSourceInput

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArray) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput 

func (i ServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput 

type ServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput
	ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput
}

ServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressFromSourceArray and ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput` via: 

ServicePerimeterStatusEgressPolicyEgressFromSourceArray{ ServicePerimeterStatusEgressPolicyEgressFromSourceArgs{...} }

type ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput 

type ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) Index 

func (o ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusEgressPolicyEgressFromSourceOutput

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput 

func (o ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput() ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

type ServicePerimeterStatusEgressPolicyEgressFromSourceInput 

type ServicePerimeterStatusEgressPolicyEgressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressFromSourceOutput() ServicePerimeterStatusEgressPolicyEgressFromSourceOutput
	ToServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressFromSourceOutput
}

ServicePerimeterStatusEgressPolicyEgressFromSourceInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressFromSourceArgs and ServicePerimeterStatusEgressPolicyEgressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressFromSourceInput` via: 

ServicePerimeterStatusEgressPolicyEgressFromSourceArgs{...}

type ServicePerimeterStatusEgressPolicyEgressFromSourceOutput 

type ServicePerimeterStatusEgressPolicyEgressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) AccessLevel 

func (o ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutput 

func (o ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutput() ServicePerimeterStatusEgressPolicyEgressFromSourceOutput

func (ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressFromSourceOutput

type ServicePerimeterStatusEgressPolicyEgressTo 

type ServicePerimeterStatusEgressPolicyEgressTo struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources []string `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations []ServicePerimeterStatusEgressPolicyEgressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterStatusEgressPolicyEgressToArgs 

type ServicePerimeterStatusEgressPolicyEgressToArgs struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources pulumi.StringArrayInput `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations ServicePerimeterStatusEgressPolicyEgressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterStatusEgressPolicyEgressToArgs) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToArgs) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToOutput 

func (i ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToOutput() ServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToPtrOutput 

func (i ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimeterStatusEgressPolicyEgressToPtrOutput

func (ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToPtrOutput

type ServicePerimeterStatusEgressPolicyEgressToInput 

type ServicePerimeterStatusEgressPolicyEgressToInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressToOutput() ServicePerimeterStatusEgressPolicyEgressToOutput
	ToServicePerimeterStatusEgressPolicyEgressToOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressToOutput
}

ServicePerimeterStatusEgressPolicyEgressToInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressToArgs and ServicePerimeterStatusEgressPolicyEgressToOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressToInput` via: 

ServicePerimeterStatusEgressPolicyEgressToArgs{...}

type ServicePerimeterStatusEgressPolicyEgressToOperation 

type ServicePerimeterStatusEgressPolicyEgressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterStatusEgressPolicyEgressToOperationArgs 

type ServicePerimeterStatusEgressPolicyEgressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterStatusEgressPolicyEgressToOperationArgs) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationOutput 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationOutput() ServicePerimeterStatusEgressPolicyEgressToOperationOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationOutput

type ServicePerimeterStatusEgressPolicyEgressToOperationArray 

type ServicePerimeterStatusEgressPolicyEgressToOperationArray []ServicePerimeterStatusEgressPolicyEgressToOperationInput

func (ServicePerimeterStatusEgressPolicyEgressToOperationArray) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput() ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterStatusEgressPolicyEgressToOperationArrayInput 

type ServicePerimeterStatusEgressPolicyEgressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput() ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput
	ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput
}

ServicePerimeterStatusEgressPolicyEgressToOperationArrayInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressToOperationArray and ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressToOperationArrayInput` via: 

ServicePerimeterStatusEgressPolicyEgressToOperationArray{ ServicePerimeterStatusEgressPolicyEgressToOperationArgs{...} }

type ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput 

type ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) Index 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusEgressPolicyEgressToOperationOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput() ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

type ServicePerimeterStatusEgressPolicyEgressToOperationInput 

type ServicePerimeterStatusEgressPolicyEgressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressToOperationOutput() ServicePerimeterStatusEgressPolicyEgressToOperationOutput
	ToServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationOutput
}

ServicePerimeterStatusEgressPolicyEgressToOperationInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressToOperationArgs and ServicePerimeterStatusEgressPolicyEgressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressToOperationInput` via: 

ServicePerimeterStatusEgressPolicyEgressToOperationArgs{...}

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelector 

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs 

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray 

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray []ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput 

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput
	ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput
}

ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray and ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray{ ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs{...} }

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput 

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput 

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput
	ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput
}

ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs and ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput` via: 

ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs{...}

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput 

type ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimeterStatusEgressPolicyEgressToOperationOutput 

type ServicePerimeterStatusEgressPolicyEgressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOperationOutput) MethodSelectors 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationOutput) MethodSelectors() ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ServiceName 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationOutput 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationOutput() ServicePerimeterStatusEgressPolicyEgressToOperationOutput

func (ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOperationOutput

type ServicePerimeterStatusEgressPolicyEgressToOutput 

type ServicePerimeterStatusEgressPolicyEgressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressToOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToOutput) ExternalResources 

func (o ServicePerimeterStatusEgressPolicyEgressToOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterStatusEgressPolicyEgressToOutput) Operations 

func (o ServicePerimeterStatusEgressPolicyEgressToOutput) Operations() ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterStatusEgressPolicyEgressToOutput) Resources 

func (o ServicePerimeterStatusEgressPolicyEgressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToOutput 

func (o ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToOutput() ServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimeterStatusEgressPolicyEgressToPtrOutput

func (ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToPtrOutput

type ServicePerimeterStatusEgressPolicyEgressToPtrInput 

type ServicePerimeterStatusEgressPolicyEgressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimeterStatusEgressPolicyEgressToPtrOutput
	ToServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyEgressToPtrOutput
}

ServicePerimeterStatusEgressPolicyEgressToPtrInput is an input type that accepts ServicePerimeterStatusEgressPolicyEgressToArgs, ServicePerimeterStatusEgressPolicyEgressToPtr and ServicePerimeterStatusEgressPolicyEgressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyEgressToPtrInput` via: 

        ServicePerimeterStatusEgressPolicyEgressToArgs{...}

or:

        nil

func ServicePerimeterStatusEgressPolicyEgressToPtr 

func ServicePerimeterStatusEgressPolicyEgressToPtr(v *ServicePerimeterStatusEgressPolicyEgressToArgs) ServicePerimeterStatusEgressPolicyEgressToPtrInput

type ServicePerimeterStatusEgressPolicyEgressToPtrOutput 

type ServicePerimeterStatusEgressPolicyEgressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) Elem 

func (o ServicePerimeterStatusEgressPolicyEgressToPtrOutput) Elem() ServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ExternalResources 

func (o ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) Operations 

func (o ServicePerimeterStatusEgressPolicyEgressToPtrOutput) Operations() ServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) Resources 

func (o ServicePerimeterStatusEgressPolicyEgressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutput 

func (o ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimeterStatusEgressPolicyEgressToPtrOutput

func (ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyEgressToPtrOutput

type ServicePerimeterStatusEgressPolicyInput 

type ServicePerimeterStatusEgressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterStatusEgressPolicyOutput() ServicePerimeterStatusEgressPolicyOutput
	ToServicePerimeterStatusEgressPolicyOutputWithContext(context.Context) ServicePerimeterStatusEgressPolicyOutput
}

ServicePerimeterStatusEgressPolicyInput is an input type that accepts ServicePerimeterStatusEgressPolicyArgs and ServicePerimeterStatusEgressPolicyOutput values. You can construct a concrete instance of `ServicePerimeterStatusEgressPolicyInput` via: 

ServicePerimeterStatusEgressPolicyArgs{...}

type ServicePerimeterStatusEgressPolicyOutput 

type ServicePerimeterStatusEgressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusEgressPolicyOutput) EgressFrom 

func (o ServicePerimeterStatusEgressPolicyOutput) EgressFrom() ServicePerimeterStatusEgressPolicyEgressFromPtrOutput

Defines conditions on the source of a request causing this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterStatusEgressPolicyOutput) EgressTo 

func (o ServicePerimeterStatusEgressPolicyOutput) EgressTo() ServicePerimeterStatusEgressPolicyEgressToPtrOutput

Defines the conditions on the `ApiOperation` and destination resources that cause this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimeterStatusEgressPolicyOutput) ElementType 

func (ServicePerimeterStatusEgressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterStatusEgressPolicyOutput) ToServicePerimeterStatusEgressPolicyOutput 

func (o ServicePerimeterStatusEgressPolicyOutput) ToServicePerimeterStatusEgressPolicyOutput() ServicePerimeterStatusEgressPolicyOutput

func (ServicePerimeterStatusEgressPolicyOutput) ToServicePerimeterStatusEgressPolicyOutputWithContext 

func (o ServicePerimeterStatusEgressPolicyOutput) ToServicePerimeterStatusEgressPolicyOutputWithContext(ctx context.Context) ServicePerimeterStatusEgressPolicyOutput

type ServicePerimeterStatusIngressPolicy 

type ServicePerimeterStatusIngressPolicy struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom *ServicePerimeterStatusIngressPolicyIngressFrom `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo *ServicePerimeterStatusIngressPolicyIngressTo `pulumi:"ingressTo"`
}

type ServicePerimeterStatusIngressPolicyArgs 

type ServicePerimeterStatusIngressPolicyArgs struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimeterStatusIngressPolicyIngressFromPtrInput `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimeterStatusIngressPolicyIngressToPtrInput `pulumi:"ingressTo"`
}

func (ServicePerimeterStatusIngressPolicyArgs) ElementType 

func (ServicePerimeterStatusIngressPolicyArgs) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyArgs) ToServicePerimeterStatusIngressPolicyOutput 

func (i ServicePerimeterStatusIngressPolicyArgs) ToServicePerimeterStatusIngressPolicyOutput() ServicePerimeterStatusIngressPolicyOutput

func (ServicePerimeterStatusIngressPolicyArgs) ToServicePerimeterStatusIngressPolicyOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyArgs) ToServicePerimeterStatusIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyOutput

type ServicePerimeterStatusIngressPolicyArray 

type ServicePerimeterStatusIngressPolicyArray []ServicePerimeterStatusIngressPolicyInput

func (ServicePerimeterStatusIngressPolicyArray) ElementType 

func (ServicePerimeterStatusIngressPolicyArray) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyArray) ToServicePerimeterStatusIngressPolicyArrayOutput 

func (i ServicePerimeterStatusIngressPolicyArray) ToServicePerimeterStatusIngressPolicyArrayOutput() ServicePerimeterStatusIngressPolicyArrayOutput

func (ServicePerimeterStatusIngressPolicyArray) ToServicePerimeterStatusIngressPolicyArrayOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyArray) ToServicePerimeterStatusIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyArrayOutput

type ServicePerimeterStatusIngressPolicyArrayInput 

type ServicePerimeterStatusIngressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyArrayOutput() ServicePerimeterStatusIngressPolicyArrayOutput
	ToServicePerimeterStatusIngressPolicyArrayOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyArrayOutput
}

ServicePerimeterStatusIngressPolicyArrayInput is an input type that accepts ServicePerimeterStatusIngressPolicyArray and ServicePerimeterStatusIngressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyArrayInput` via: 

ServicePerimeterStatusIngressPolicyArray{ ServicePerimeterStatusIngressPolicyArgs{...} }

type ServicePerimeterStatusIngressPolicyArrayOutput 

type ServicePerimeterStatusIngressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyArrayOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyArrayOutput) Index 

func (o ServicePerimeterStatusIngressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusIngressPolicyOutput

func (ServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimeterStatusIngressPolicyArrayOutput 

func (o ServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimeterStatusIngressPolicyArrayOutput() ServicePerimeterStatusIngressPolicyArrayOutput

func (ServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimeterStatusIngressPolicyArrayOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimeterStatusIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyArrayOutput

type ServicePerimeterStatusIngressPolicyIngressFrom 

type ServicePerimeterStatusIngressPolicyIngressFrom struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimeterStatusIngressPolicyIngressFromSource `pulumi:"sources"`
}

type ServicePerimeterStatusIngressPolicyIngressFromArgs 

type ServicePerimeterStatusIngressPolicyIngressFromArgs struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources ServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimeterStatusIngressPolicyIngressFromArgs) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressFromArgs) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromOutput 

func (i ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromOutput() ServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

func (i ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimeterStatusIngressPolicyIngressFromPtrOutput

func (ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromPtrOutput

type ServicePerimeterStatusIngressPolicyIngressFromInput 

type ServicePerimeterStatusIngressPolicyIngressFromInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressFromOutput() ServicePerimeterStatusIngressPolicyIngressFromOutput
	ToServicePerimeterStatusIngressPolicyIngressFromOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressFromOutput
}

ServicePerimeterStatusIngressPolicyIngressFromInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressFromArgs and ServicePerimeterStatusIngressPolicyIngressFromOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressFromInput` via: 

ServicePerimeterStatusIngressPolicyIngressFromArgs{...}

type ServicePerimeterStatusIngressPolicyIngressFromOutput 

type ServicePerimeterStatusIngressPolicyIngressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) Identities 

func (o ServicePerimeterStatusIngressPolicyIngressFromOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) IdentityType 

func (o ServicePerimeterStatusIngressPolicyIngressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) Sources 

func (o ServicePerimeterStatusIngressPolicyIngressFromOutput) Sources() ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromOutput 

func (o ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromOutput() ServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimeterStatusIngressPolicyIngressFromPtrOutput

func (ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromPtrOutput

type ServicePerimeterStatusIngressPolicyIngressFromPtrInput 

type ServicePerimeterStatusIngressPolicyIngressFromPtrInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimeterStatusIngressPolicyIngressFromPtrOutput
	ToServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressFromPtrOutput
}

ServicePerimeterStatusIngressPolicyIngressFromPtrInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressFromArgs, ServicePerimeterStatusIngressPolicyIngressFromPtr and ServicePerimeterStatusIngressPolicyIngressFromPtrOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressFromPtrInput` via: 

        ServicePerimeterStatusIngressPolicyIngressFromArgs{...}

or:

        nil

func ServicePerimeterStatusIngressPolicyIngressFromPtr 

func ServicePerimeterStatusIngressPolicyIngressFromPtr(v *ServicePerimeterStatusIngressPolicyIngressFromArgs) ServicePerimeterStatusIngressPolicyIngressFromPtrInput

type ServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

type ServicePerimeterStatusIngressPolicyIngressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Elem 

func (o ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Elem() ServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Identities 

func (o ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) IdentityType 

func (o ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Sources 

func (o ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Sources() ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

func (o ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimeterStatusIngressPolicyIngressFromPtrOutput

func (ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromPtrOutput

type ServicePerimeterStatusIngressPolicyIngressFromSource 

type ServicePerimeterStatusIngressPolicyIngressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource *string `pulumi:"resource"`
}

type ServicePerimeterStatusIngressPolicyIngressFromSourceArgs 

type ServicePerimeterStatusIngressPolicyIngressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
}

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutput 

func (i ServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutput() ServicePerimeterStatusIngressPolicyIngressFromSourceOutput

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromSourceOutput

type ServicePerimeterStatusIngressPolicyIngressFromSourceArray 

type ServicePerimeterStatusIngressPolicyIngressFromSourceArray []ServicePerimeterStatusIngressPolicyIngressFromSourceInput

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArray) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArray) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput 

func (i ServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput 

type ServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput
	ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput
}

ServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressFromSourceArray and ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput` via: 

ServicePerimeterStatusIngressPolicyIngressFromSourceArray{ ServicePerimeterStatusIngressPolicyIngressFromSourceArgs{...} }

type ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput 

type ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) Index 

func (o ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusIngressPolicyIngressFromSourceOutput

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput 

func (o ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput() ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

type ServicePerimeterStatusIngressPolicyIngressFromSourceInput 

type ServicePerimeterStatusIngressPolicyIngressFromSourceInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressFromSourceOutput() ServicePerimeterStatusIngressPolicyIngressFromSourceOutput
	ToServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressFromSourceOutput
}

ServicePerimeterStatusIngressPolicyIngressFromSourceInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressFromSourceArgs and ServicePerimeterStatusIngressPolicyIngressFromSourceOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressFromSourceInput` via: 

ServicePerimeterStatusIngressPolicyIngressFromSourceArgs{...}

type ServicePerimeterStatusIngressPolicyIngressFromSourceOutput 

type ServicePerimeterStatusIngressPolicyIngressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) AccessLevel 

func (o ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) Resource 

func (o ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) Resource() pulumi.StringPtrOutput

A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects are allowed. Format `projects/{project_number}` The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.

func (ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutput 

func (o ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutput() ServicePerimeterStatusIngressPolicyIngressFromSourceOutput

func (ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressFromSourceOutput

type ServicePerimeterStatusIngressPolicyIngressTo 

type ServicePerimeterStatusIngressPolicyIngressTo struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations []ServicePerimeterStatusIngressPolicyIngressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources []string `pulumi:"resources"`
}

type ServicePerimeterStatusIngressPolicyIngressToArgs 

type ServicePerimeterStatusIngressPolicyIngressToArgs struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations ServicePerimeterStatusIngressPolicyIngressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimeterStatusIngressPolicyIngressToArgs) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToArgs) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToOutput 

func (i ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToOutput() ServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToPtrOutput 

func (i ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimeterStatusIngressPolicyIngressToPtrOutput

func (ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToPtrOutput

type ServicePerimeterStatusIngressPolicyIngressToInput 

type ServicePerimeterStatusIngressPolicyIngressToInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressToOutput() ServicePerimeterStatusIngressPolicyIngressToOutput
	ToServicePerimeterStatusIngressPolicyIngressToOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressToOutput
}

ServicePerimeterStatusIngressPolicyIngressToInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressToArgs and ServicePerimeterStatusIngressPolicyIngressToOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressToInput` via: 

ServicePerimeterStatusIngressPolicyIngressToArgs{...}

type ServicePerimeterStatusIngressPolicyIngressToOperation 

type ServicePerimeterStatusIngressPolicyIngressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimeterStatusIngressPolicyIngressToOperationArgs 

type ServicePerimeterStatusIngressPolicyIngressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimeterStatusIngressPolicyIngressToOperationArgs) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationArgs) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationOutput 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationOutput() ServicePerimeterStatusIngressPolicyIngressToOperationOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationOutput

type ServicePerimeterStatusIngressPolicyIngressToOperationArray 

type ServicePerimeterStatusIngressPolicyIngressToOperationArray []ServicePerimeterStatusIngressPolicyIngressToOperationInput

func (ServicePerimeterStatusIngressPolicyIngressToOperationArray) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationArray) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput() ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterStatusIngressPolicyIngressToOperationArrayInput 

type ServicePerimeterStatusIngressPolicyIngressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput() ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput
	ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput
}

ServicePerimeterStatusIngressPolicyIngressToOperationArrayInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressToOperationArray and ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressToOperationArrayInput` via: 

ServicePerimeterStatusIngressPolicyIngressToOperationArray{ ServicePerimeterStatusIngressPolicyIngressToOperationArgs{...} }

type ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput 

type ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) Index 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusIngressPolicyIngressToOperationOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput() ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

type ServicePerimeterStatusIngressPolicyIngressToOperationInput 

type ServicePerimeterStatusIngressPolicyIngressToOperationInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressToOperationOutput() ServicePerimeterStatusIngressPolicyIngressToOperationOutput
	ToServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationOutput
}

ServicePerimeterStatusIngressPolicyIngressToOperationInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressToOperationArgs and ServicePerimeterStatusIngressPolicyIngressToOperationOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressToOperationInput` via: 

ServicePerimeterStatusIngressPolicyIngressToOperationArgs{...}

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelector 

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs 

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray 

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray []ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput 

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput
	ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput
}

ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray and ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput` via: 

ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray{ ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{...} }

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput 

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput 

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput
	ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput
}

ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs and ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput` via: 

ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{...}

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput 

type ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Method 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimeterStatusIngressPolicyIngressToOperationOutput 

type ServicePerimeterStatusIngressPolicyIngressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOperationOutput) MethodSelectors 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationOutput) MethodSelectors() ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ServiceName 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationOutput 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationOutput() ServicePerimeterStatusIngressPolicyIngressToOperationOutput

func (ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOperationOutput

type ServicePerimeterStatusIngressPolicyIngressToOutput 

type ServicePerimeterStatusIngressPolicyIngressToOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressToOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToOutput) Operations 

func (o ServicePerimeterStatusIngressPolicyIngressToOutput) Operations() ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterStatusIngressPolicyIngressToOutput) Resources 

func (o ServicePerimeterStatusIngressPolicyIngressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToOutput 

func (o ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToOutput() ServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimeterStatusIngressPolicyIngressToPtrOutput

func (ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToPtrOutput

type ServicePerimeterStatusIngressPolicyIngressToPtrInput 

type ServicePerimeterStatusIngressPolicyIngressToPtrInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimeterStatusIngressPolicyIngressToPtrOutput
	ToServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyIngressToPtrOutput
}

ServicePerimeterStatusIngressPolicyIngressToPtrInput is an input type that accepts ServicePerimeterStatusIngressPolicyIngressToArgs, ServicePerimeterStatusIngressPolicyIngressToPtr and ServicePerimeterStatusIngressPolicyIngressToPtrOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyIngressToPtrInput` via: 

        ServicePerimeterStatusIngressPolicyIngressToArgs{...}

or:

        nil

func ServicePerimeterStatusIngressPolicyIngressToPtr 

func ServicePerimeterStatusIngressPolicyIngressToPtr(v *ServicePerimeterStatusIngressPolicyIngressToArgs) ServicePerimeterStatusIngressPolicyIngressToPtrInput

type ServicePerimeterStatusIngressPolicyIngressToPtrOutput 

type ServicePerimeterStatusIngressPolicyIngressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyIngressToPtrOutput) Elem 

func (o ServicePerimeterStatusIngressPolicyIngressToPtrOutput) Elem() ServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimeterStatusIngressPolicyIngressToPtrOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyIngressToPtrOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyIngressToPtrOutput) Operations 

func (o ServicePerimeterStatusIngressPolicyIngressToPtrOutput) Operations() ServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimeterStatusIngressPolicyIngressToPtrOutput) Resources 

func (o ServicePerimeterStatusIngressPolicyIngressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutput 

func (o ServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimeterStatusIngressPolicyIngressToPtrOutput

func (ServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyIngressToPtrOutput

type ServicePerimeterStatusIngressPolicyInput 

type ServicePerimeterStatusIngressPolicyInput interface {
	pulumi.Input

	ToServicePerimeterStatusIngressPolicyOutput() ServicePerimeterStatusIngressPolicyOutput
	ToServicePerimeterStatusIngressPolicyOutputWithContext(context.Context) ServicePerimeterStatusIngressPolicyOutput
}

ServicePerimeterStatusIngressPolicyInput is an input type that accepts ServicePerimeterStatusIngressPolicyArgs and ServicePerimeterStatusIngressPolicyOutput values. You can construct a concrete instance of `ServicePerimeterStatusIngressPolicyInput` via: 

ServicePerimeterStatusIngressPolicyArgs{...}

type ServicePerimeterStatusIngressPolicyOutput 

type ServicePerimeterStatusIngressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusIngressPolicyOutput) ElementType 

func (ServicePerimeterStatusIngressPolicyOutput) ElementType() reflect.Type

func (ServicePerimeterStatusIngressPolicyOutput) IngressFrom 

func (o ServicePerimeterStatusIngressPolicyOutput) IngressFrom() ServicePerimeterStatusIngressPolicyIngressFromPtrOutput

Defines the conditions on the source of a request causing this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterStatusIngressPolicyOutput) IngressTo 

func (o ServicePerimeterStatusIngressPolicyOutput) IngressTo() ServicePerimeterStatusIngressPolicyIngressToPtrOutput

Defines the conditions on the `ApiOperation` and request destination that cause this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimeterStatusIngressPolicyOutput) ToServicePerimeterStatusIngressPolicyOutput 

func (o ServicePerimeterStatusIngressPolicyOutput) ToServicePerimeterStatusIngressPolicyOutput() ServicePerimeterStatusIngressPolicyOutput

func (ServicePerimeterStatusIngressPolicyOutput) ToServicePerimeterStatusIngressPolicyOutputWithContext 

func (o ServicePerimeterStatusIngressPolicyOutput) ToServicePerimeterStatusIngressPolicyOutputWithContext(ctx context.Context) ServicePerimeterStatusIngressPolicyOutput

type ServicePerimeterStatusInput 

type ServicePerimeterStatusInput interface {
	pulumi.Input

	ToServicePerimeterStatusOutput() ServicePerimeterStatusOutput
	ToServicePerimeterStatusOutputWithContext(context.Context) ServicePerimeterStatusOutput
}

ServicePerimeterStatusInput is an input type that accepts ServicePerimeterStatusArgs and ServicePerimeterStatusOutput values. You can construct a concrete instance of `ServicePerimeterStatusInput` via: 

ServicePerimeterStatusArgs{...}

type ServicePerimeterStatusOutput 

type ServicePerimeterStatusOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusOutput) AccessLevels 

func (o ServicePerimeterStatusOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimeterStatusOutput) EgressPolicies 

func (o ServicePerimeterStatusOutput) EgressPolicies() ServicePerimeterStatusEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterStatusOutput) ElementType 

func (ServicePerimeterStatusOutput) ElementType() reflect.Type

func (ServicePerimeterStatusOutput) IngressPolicies 

func (o ServicePerimeterStatusOutput) IngressPolicies() ServicePerimeterStatusIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterStatusOutput) Resources 

func (o ServicePerimeterStatusOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimeterStatusOutput) RestrictedServices 

func (o ServicePerimeterStatusOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimeterStatusOutput) ToServicePerimeterStatusOutput 

func (o ServicePerimeterStatusOutput) ToServicePerimeterStatusOutput() ServicePerimeterStatusOutput

func (ServicePerimeterStatusOutput) ToServicePerimeterStatusOutputWithContext 

func (o ServicePerimeterStatusOutput) ToServicePerimeterStatusOutputWithContext(ctx context.Context) ServicePerimeterStatusOutput

func (ServicePerimeterStatusOutput) ToServicePerimeterStatusPtrOutput 

func (o ServicePerimeterStatusOutput) ToServicePerimeterStatusPtrOutput() ServicePerimeterStatusPtrOutput

func (ServicePerimeterStatusOutput) ToServicePerimeterStatusPtrOutputWithContext 

func (o ServicePerimeterStatusOutput) ToServicePerimeterStatusPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusPtrOutput

func (ServicePerimeterStatusOutput) VpcAccessibleServices 

func (o ServicePerimeterStatusOutput) VpcAccessibleServices() ServicePerimeterStatusVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimeterStatusPtrInput 

type ServicePerimeterStatusPtrInput interface {
	pulumi.Input

	ToServicePerimeterStatusPtrOutput() ServicePerimeterStatusPtrOutput
	ToServicePerimeterStatusPtrOutputWithContext(context.Context) ServicePerimeterStatusPtrOutput
}

ServicePerimeterStatusPtrInput is an input type that accepts ServicePerimeterStatusArgs, ServicePerimeterStatusPtr and ServicePerimeterStatusPtrOutput values. You can construct a concrete instance of `ServicePerimeterStatusPtrInput` via: 

        ServicePerimeterStatusArgs{...}

or:

        nil

func ServicePerimeterStatusPtr 

func ServicePerimeterStatusPtr(v *ServicePerimeterStatusArgs) ServicePerimeterStatusPtrInput

type ServicePerimeterStatusPtrOutput 

type ServicePerimeterStatusPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusPtrOutput) AccessLevels 

func (o ServicePerimeterStatusPtrOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimeterStatusPtrOutput) EgressPolicies 

func (o ServicePerimeterStatusPtrOutput) EgressPolicies() ServicePerimeterStatusEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterStatusPtrOutput) Elem 

func (o ServicePerimeterStatusPtrOutput) Elem() ServicePerimeterStatusOutput

func (ServicePerimeterStatusPtrOutput) ElementType 

func (ServicePerimeterStatusPtrOutput) ElementType() reflect.Type

func (ServicePerimeterStatusPtrOutput) IngressPolicies 

func (o ServicePerimeterStatusPtrOutput) IngressPolicies() ServicePerimeterStatusIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimeterStatusPtrOutput) Resources 

func (o ServicePerimeterStatusPtrOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimeterStatusPtrOutput) RestrictedServices 

func (o ServicePerimeterStatusPtrOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimeterStatusPtrOutput) ToServicePerimeterStatusPtrOutput 

func (o ServicePerimeterStatusPtrOutput) ToServicePerimeterStatusPtrOutput() ServicePerimeterStatusPtrOutput

func (ServicePerimeterStatusPtrOutput) ToServicePerimeterStatusPtrOutputWithContext 

func (o ServicePerimeterStatusPtrOutput) ToServicePerimeterStatusPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusPtrOutput

func (ServicePerimeterStatusPtrOutput) VpcAccessibleServices 

func (o ServicePerimeterStatusPtrOutput) VpcAccessibleServices() ServicePerimeterStatusVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimeterStatusVpcAccessibleServices 

type ServicePerimeterStatusVpcAccessibleServices struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices []string `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction *bool `pulumi:"enableRestriction"`
}

type ServicePerimeterStatusVpcAccessibleServicesArgs 

type ServicePerimeterStatusVpcAccessibleServicesArgs struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices pulumi.StringArrayInput `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction pulumi.BoolPtrInput `pulumi:"enableRestriction"`
}

func (ServicePerimeterStatusVpcAccessibleServicesArgs) ElementType 

func (ServicePerimeterStatusVpcAccessibleServicesArgs) ElementType() reflect.Type

func (ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesOutput 

func (i ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesOutput() ServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesOutputWithContext 

func (i ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesPtrOutput 

func (i ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimeterStatusVpcAccessibleServicesPtrOutput

func (ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext 

func (i ServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusVpcAccessibleServicesPtrOutput

type ServicePerimeterStatusVpcAccessibleServicesInput 

type ServicePerimeterStatusVpcAccessibleServicesInput interface {
	pulumi.Input

	ToServicePerimeterStatusVpcAccessibleServicesOutput() ServicePerimeterStatusVpcAccessibleServicesOutput
	ToServicePerimeterStatusVpcAccessibleServicesOutputWithContext(context.Context) ServicePerimeterStatusVpcAccessibleServicesOutput
}

ServicePerimeterStatusVpcAccessibleServicesInput is an input type that accepts ServicePerimeterStatusVpcAccessibleServicesArgs and ServicePerimeterStatusVpcAccessibleServicesOutput values. You can construct a concrete instance of `ServicePerimeterStatusVpcAccessibleServicesInput` via: 

ServicePerimeterStatusVpcAccessibleServicesArgs{...}

type ServicePerimeterStatusVpcAccessibleServicesOutput 

type ServicePerimeterStatusVpcAccessibleServicesOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusVpcAccessibleServicesOutput) AllowedServices 

func (o ServicePerimeterStatusVpcAccessibleServicesOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimeterStatusVpcAccessibleServicesOutput) ElementType 

func (ServicePerimeterStatusVpcAccessibleServicesOutput) ElementType() reflect.Type

func (ServicePerimeterStatusVpcAccessibleServicesOutput) EnableRestriction 

func (o ServicePerimeterStatusVpcAccessibleServicesOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesOutput 

func (o ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesOutput() ServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesOutputWithContext 

func (o ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutput 

func (o ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimeterStatusVpcAccessibleServicesPtrOutput

func (ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusVpcAccessibleServicesPtrOutput

type ServicePerimeterStatusVpcAccessibleServicesPtrInput 

type ServicePerimeterStatusVpcAccessibleServicesPtrInput interface {
	pulumi.Input

	ToServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimeterStatusVpcAccessibleServicesPtrOutput
	ToServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(context.Context) ServicePerimeterStatusVpcAccessibleServicesPtrOutput
}

ServicePerimeterStatusVpcAccessibleServicesPtrInput is an input type that accepts ServicePerimeterStatusVpcAccessibleServicesArgs, ServicePerimeterStatusVpcAccessibleServicesPtr and ServicePerimeterStatusVpcAccessibleServicesPtrOutput values. You can construct a concrete instance of `ServicePerimeterStatusVpcAccessibleServicesPtrInput` via: 

        ServicePerimeterStatusVpcAccessibleServicesArgs{...}

or:

        nil

func ServicePerimeterStatusVpcAccessibleServicesPtr 

func ServicePerimeterStatusVpcAccessibleServicesPtr(v *ServicePerimeterStatusVpcAccessibleServicesArgs) ServicePerimeterStatusVpcAccessibleServicesPtrInput

type ServicePerimeterStatusVpcAccessibleServicesPtrOutput 

type ServicePerimeterStatusVpcAccessibleServicesPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimeterStatusVpcAccessibleServicesPtrOutput) AllowedServices 

func (o ServicePerimeterStatusVpcAccessibleServicesPtrOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimeterStatusVpcAccessibleServicesPtrOutput) Elem 

func (o ServicePerimeterStatusVpcAccessibleServicesPtrOutput) Elem() ServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimeterStatusVpcAccessibleServicesPtrOutput) ElementType 

func (ServicePerimeterStatusVpcAccessibleServicesPtrOutput) ElementType() reflect.Type

func (ServicePerimeterStatusVpcAccessibleServicesPtrOutput) EnableRestriction 

func (o ServicePerimeterStatusVpcAccessibleServicesPtrOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutput 

func (o ServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimeterStatusVpcAccessibleServicesPtrOutput

func (ServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimeterStatusVpcAccessibleServicesPtrOutput

type ServicePerimeters 

type ServicePerimeters struct {
	pulumi.CustomResourceState

	// The AccessPolicy this ServicePerimeter lives in.
	// Format: accessPolicies/{policy_id}
	//
	// ***
	Parent pulumi.StringOutput `pulumi:"parent"`
	// The desired Service Perimeters that should replace all existing Service Perimeters in the Access Policy.
	// Structure is documented below.
	ServicePerimeters ServicePerimetersServicePerimeterArrayOutput `pulumi:"servicePerimeters"`
}

Replace all existing Service Perimeters in an Access Policy with the Service Perimeters provided. This is done atomically. This is a bulk edit of all Service Perimeters and may override existing Service Perimeters created by `accesscontextmanager.ServicePerimeter`, thus causing a permadiff if used alongside `accesscontextmanager.ServicePerimeter` on the same parent.

To get more information about ServicePerimeters, see:

* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters) * How-to Guides

## Example Usage

### Access Context Manager Service Perimeters Basic

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewServicePerimeters(ctx, "service-perimeter", &accesscontextmanager.ServicePerimetersArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			ServicePerimeters: accesscontextmanager.ServicePerimetersServicePerimeterArray{
				&accesscontextmanager.ServicePerimetersServicePerimeterArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/servicePerimeters/", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String(""),
					Status: &accesscontextmanager.ServicePerimetersServicePerimeterStatusArgs{
						RestrictedServices: pulumi.StringArray{
							pulumi.String("storage.googleapis.com"),
						},
					},
				},
				&accesscontextmanager.ServicePerimetersServicePerimeterArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/servicePerimeters/", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String(""),
					Status: &accesscontextmanager.ServicePerimetersServicePerimeterStatusArgs{
						RestrictedServices: pulumi.StringArray{
							pulumi.String("bigtable.googleapis.com"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevel(ctx, "access-level", &accesscontextmanager.AccessLevelArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			Name: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
			}).(pulumi.StringOutput),
			Title: pulumi.String("chromeos_no_lock"),
			Basic: &accesscontextmanager.AccessLevelBasicArgs{
				Conditions: accesscontextmanager.AccessLevelBasicConditionArray{
					&accesscontextmanager.AccessLevelBasicConditionArgs{
						DevicePolicy: &accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs{
							RequireScreenLock: pulumi.Bool(false),
							OsConstraints: accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArray{
								&accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs{
									OsType: pulumi.String("DESKTOP_CHROME_OS"),
								},
							},
						},
						Regions: pulumi.StringArray{
							pulumi.String("CH"),
							pulumi.String("IT"),
							pulumi.String("US"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

ServicePerimeters can be imported using any of these accepted formats:

* `{{parent}}/servicePerimeters`

* `{{parent}}`

When using the `pulumi import` command, ServicePerimeters can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:accesscontextmanager/servicePerimeters:ServicePerimeters default {{parent}}/servicePerimeters ```

```sh $ pulumi import gcp:accesscontextmanager/servicePerimeters:ServicePerimeters default {{parent}} ```

func GetServicePerimeters 

func GetServicePerimeters(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePerimetersState, opts ...pulumi.ResourceOption) (*ServicePerimeters, error)

GetServicePerimeters gets an existing ServicePerimeters resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePerimeters 

func NewServicePerimeters(ctx *pulumi.Context,
	name string, args *ServicePerimetersArgs, opts ...pulumi.ResourceOption) (*ServicePerimeters, error)

NewServicePerimeters registers a new resource with the given unique name, arguments, and options.

func (*ServicePerimeters) ElementType 

func (*ServicePerimeters) ElementType() reflect.Type

func (*ServicePerimeters) ToServicePerimetersOutput 

func (i *ServicePerimeters) ToServicePerimetersOutput() ServicePerimetersOutput

func (*ServicePerimeters) ToServicePerimetersOutputWithContext 

func (i *ServicePerimeters) ToServicePerimetersOutputWithContext(ctx context.Context) ServicePerimetersOutput

type ServicePerimetersArgs 

type ServicePerimetersArgs struct {
	// The AccessPolicy this ServicePerimeter lives in.
	// Format: accessPolicies/{policy_id}
	//
	// ***
	Parent pulumi.StringInput
	// The desired Service Perimeters that should replace all existing Service Perimeters in the Access Policy.
	// Structure is documented below.
	ServicePerimeters ServicePerimetersServicePerimeterArrayInput
}

The set of arguments for constructing a ServicePerimeters resource.

func (ServicePerimetersArgs) ElementType 

func (ServicePerimetersArgs) ElementType() reflect.Type

type ServicePerimetersArray 

type ServicePerimetersArray []ServicePerimetersInput

func (ServicePerimetersArray) ElementType 

func (ServicePerimetersArray) ElementType() reflect.Type

func (ServicePerimetersArray) ToServicePerimetersArrayOutput 

func (i ServicePerimetersArray) ToServicePerimetersArrayOutput() ServicePerimetersArrayOutput

func (ServicePerimetersArray) ToServicePerimetersArrayOutputWithContext 

func (i ServicePerimetersArray) ToServicePerimetersArrayOutputWithContext(ctx context.Context) ServicePerimetersArrayOutput

type ServicePerimetersArrayInput 

type ServicePerimetersArrayInput interface {
	pulumi.Input

	ToServicePerimetersArrayOutput() ServicePerimetersArrayOutput
	ToServicePerimetersArrayOutputWithContext(context.Context) ServicePerimetersArrayOutput
}

ServicePerimetersArrayInput is an input type that accepts ServicePerimetersArray and ServicePerimetersArrayOutput values. You can construct a concrete instance of `ServicePerimetersArrayInput` via: 

ServicePerimetersArray{ ServicePerimetersArgs{...} }

type ServicePerimetersArrayOutput 

type ServicePerimetersArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersArrayOutput) ElementType 

func (ServicePerimetersArrayOutput) ElementType() reflect.Type

func (ServicePerimetersArrayOutput) Index 

func (o ServicePerimetersArrayOutput) Index(i pulumi.IntInput) ServicePerimetersOutput

func (ServicePerimetersArrayOutput) ToServicePerimetersArrayOutput 

func (o ServicePerimetersArrayOutput) ToServicePerimetersArrayOutput() ServicePerimetersArrayOutput

func (ServicePerimetersArrayOutput) ToServicePerimetersArrayOutputWithContext 

func (o ServicePerimetersArrayOutput) ToServicePerimetersArrayOutputWithContext(ctx context.Context) ServicePerimetersArrayOutput

type ServicePerimetersInput 

type ServicePerimetersInput interface {
	pulumi.Input

	ToServicePerimetersOutput() ServicePerimetersOutput
	ToServicePerimetersOutputWithContext(ctx context.Context) ServicePerimetersOutput
}

type ServicePerimetersMap 

type ServicePerimetersMap map[string]ServicePerimetersInput

func (ServicePerimetersMap) ElementType 

func (ServicePerimetersMap) ElementType() reflect.Type

func (ServicePerimetersMap) ToServicePerimetersMapOutput 

func (i ServicePerimetersMap) ToServicePerimetersMapOutput() ServicePerimetersMapOutput

func (ServicePerimetersMap) ToServicePerimetersMapOutputWithContext 

func (i ServicePerimetersMap) ToServicePerimetersMapOutputWithContext(ctx context.Context) ServicePerimetersMapOutput

type ServicePerimetersMapInput 

type ServicePerimetersMapInput interface {
	pulumi.Input

	ToServicePerimetersMapOutput() ServicePerimetersMapOutput
	ToServicePerimetersMapOutputWithContext(context.Context) ServicePerimetersMapOutput
}

ServicePerimetersMapInput is an input type that accepts ServicePerimetersMap and ServicePerimetersMapOutput values. You can construct a concrete instance of `ServicePerimetersMapInput` via: 

ServicePerimetersMap{ "key": ServicePerimetersArgs{...} }

type ServicePerimetersMapOutput 

type ServicePerimetersMapOutput struct{ *pulumi.OutputState }

func (ServicePerimetersMapOutput) ElementType 

func (ServicePerimetersMapOutput) ElementType() reflect.Type

func (ServicePerimetersMapOutput) MapIndex 

func (o ServicePerimetersMapOutput) MapIndex(k pulumi.StringInput) ServicePerimetersOutput

func (ServicePerimetersMapOutput) ToServicePerimetersMapOutput 

func (o ServicePerimetersMapOutput) ToServicePerimetersMapOutput() ServicePerimetersMapOutput

func (ServicePerimetersMapOutput) ToServicePerimetersMapOutputWithContext 

func (o ServicePerimetersMapOutput) ToServicePerimetersMapOutputWithContext(ctx context.Context) ServicePerimetersMapOutput

type ServicePerimetersOutput 

type ServicePerimetersOutput struct{ *pulumi.OutputState }

func (ServicePerimetersOutput) ElementType 

func (ServicePerimetersOutput) ElementType() reflect.Type

func (ServicePerimetersOutput) Parent 

func (o ServicePerimetersOutput) Parent() pulumi.StringOutput

The AccessPolicy this ServicePerimeter lives in. Format: accessPolicies/{policy_id}

***

func (ServicePerimetersOutput) ServicePerimeters 

func (o ServicePerimetersOutput) ServicePerimeters() ServicePerimetersServicePerimeterArrayOutput

The desired Service Perimeters that should replace all existing Service Perimeters in the Access Policy. Structure is documented below.

func (ServicePerimetersOutput) ToServicePerimetersOutput 

func (o ServicePerimetersOutput) ToServicePerimetersOutput() ServicePerimetersOutput

func (ServicePerimetersOutput) ToServicePerimetersOutputWithContext 

func (o ServicePerimetersOutput) ToServicePerimetersOutputWithContext(ctx context.Context) ServicePerimetersOutput

type ServicePerimetersServicePerimeter 

type ServicePerimetersServicePerimeter struct {
	// (Output)
	// Time the AccessPolicy was created in UTC.
	CreateTime *string `pulumi:"createTime"`
	// Description of the ServicePerimeter and its use. Does not affect
	// behavior.
	Description *string `pulumi:"description"`
	// Resource name for the ServicePerimeter. The shortName component must
	// begin with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}
	Name string `pulumi:"name"`
	// Specifies the type of the Perimeter. There are two types: regular and
	// bridge. Regular Service Perimeter contains resources, access levels,
	// and restricted services. Every resource can be in at most
	// ONE regular Service Perimeter.
	// In addition to being in a regular service perimeter, a resource can also
	// be in zero or more perimeter bridges. A perimeter bridge only contains
	// resources. Cross project operations are permitted if all effected
	// resources share some perimeter (whether bridge or regular). Perimeter
	// Bridge does not contain access levels or services: those are governed
	// entirely by the regular perimeter that resource is in.
	// Perimeter Bridges are typically useful when building more complex
	// topologies with many independent perimeters that need to share some data
	// with a common perimeter, but should not be able to share data among
	// themselves.
	// Default value is `PERIMETER_TYPE_REGULAR`.
	// Possible values are: `PERIMETER_TYPE_REGULAR`, `PERIMETER_TYPE_BRIDGE`.
	PerimeterType *string `pulumi:"perimeterType"`
	// Proposed (or dry run) ServicePerimeter configuration.
	// This configuration allows to specify and test ServicePerimeter configuration
	// without enforcing actual access restrictions. Only allowed to be set when
	// the `useExplicitDryRunSpec` flag is set.
	// Structure is documented below.
	Spec *ServicePerimetersServicePerimeterSpec `pulumi:"spec"`
	// ServicePerimeter configuration. Specifies sets of resources,
	// restricted services and access levels that determine
	// perimeter content and boundaries.
	// Structure is documented below.
	Status *ServicePerimetersServicePerimeterStatus `pulumi:"status"`
	// Human readable title. Must be unique within the Policy.
	Title string `pulumi:"title"`
	// (Output)
	// Time the AccessPolicy was updated in UTC.
	UpdateTime *string `pulumi:"updateTime"`
	// Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists
	// for all Service Perimeters, and that spec is identical to the status for those
	// Service Perimeters. When this flag is set, it inhibits the generation of the
	// implicit spec, thereby allowing the user to explicitly provide a
	// configuration ("spec") to use in a dry-run version of the Service Perimeter.
	// This allows the user to test changes to the enforced config ("status") without
	// actually enforcing them. This testing is done through analyzing the differences
	// between currently enforced and suggested restrictions. useExplicitDryRunSpec must
	// bet set to True if any of the fields in the spec are set to non-default values.
	UseExplicitDryRunSpec *bool `pulumi:"useExplicitDryRunSpec"`
}

type ServicePerimetersServicePerimeterArgs 

type ServicePerimetersServicePerimeterArgs struct {
	// (Output)
	// Time the AccessPolicy was created in UTC.
	CreateTime pulumi.StringPtrInput `pulumi:"createTime"`
	// Description of the ServicePerimeter and its use. Does not affect
	// behavior.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Resource name for the ServicePerimeter. The shortName component must
	// begin with a letter and only include alphanumeric and '_'.
	// Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}
	Name pulumi.StringInput `pulumi:"name"`
	// Specifies the type of the Perimeter. There are two types: regular and
	// bridge. Regular Service Perimeter contains resources, access levels,
	// and restricted services. Every resource can be in at most
	// ONE regular Service Perimeter.
	// In addition to being in a regular service perimeter, a resource can also
	// be in zero or more perimeter bridges. A perimeter bridge only contains
	// resources. Cross project operations are permitted if all effected
	// resources share some perimeter (whether bridge or regular). Perimeter
	// Bridge does not contain access levels or services: those are governed
	// entirely by the regular perimeter that resource is in.
	// Perimeter Bridges are typically useful when building more complex
	// topologies with many independent perimeters that need to share some data
	// with a common perimeter, but should not be able to share data among
	// themselves.
	// Default value is `PERIMETER_TYPE_REGULAR`.
	// Possible values are: `PERIMETER_TYPE_REGULAR`, `PERIMETER_TYPE_BRIDGE`.
	PerimeterType pulumi.StringPtrInput `pulumi:"perimeterType"`
	// Proposed (or dry run) ServicePerimeter configuration.
	// This configuration allows to specify and test ServicePerimeter configuration
	// without enforcing actual access restrictions. Only allowed to be set when
	// the `useExplicitDryRunSpec` flag is set.
	// Structure is documented below.
	Spec ServicePerimetersServicePerimeterSpecPtrInput `pulumi:"spec"`
	// ServicePerimeter configuration. Specifies sets of resources,
	// restricted services and access levels that determine
	// perimeter content and boundaries.
	// Structure is documented below.
	Status ServicePerimetersServicePerimeterStatusPtrInput `pulumi:"status"`
	// Human readable title. Must be unique within the Policy.
	Title pulumi.StringInput `pulumi:"title"`
	// (Output)
	// Time the AccessPolicy was updated in UTC.
	UpdateTime pulumi.StringPtrInput `pulumi:"updateTime"`
	// Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists
	// for all Service Perimeters, and that spec is identical to the status for those
	// Service Perimeters. When this flag is set, it inhibits the generation of the
	// implicit spec, thereby allowing the user to explicitly provide a
	// configuration ("spec") to use in a dry-run version of the Service Perimeter.
	// This allows the user to test changes to the enforced config ("status") without
	// actually enforcing them. This testing is done through analyzing the differences
	// between currently enforced and suggested restrictions. useExplicitDryRunSpec must
	// bet set to True if any of the fields in the spec are set to non-default values.
	UseExplicitDryRunSpec pulumi.BoolPtrInput `pulumi:"useExplicitDryRunSpec"`
}

func (ServicePerimetersServicePerimeterArgs) ElementType 

func (ServicePerimetersServicePerimeterArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterArgs) ToServicePerimetersServicePerimeterOutput 

func (i ServicePerimetersServicePerimeterArgs) ToServicePerimetersServicePerimeterOutput() ServicePerimetersServicePerimeterOutput

func (ServicePerimetersServicePerimeterArgs) ToServicePerimetersServicePerimeterOutputWithContext 

func (i ServicePerimetersServicePerimeterArgs) ToServicePerimetersServicePerimeterOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterOutput

type ServicePerimetersServicePerimeterArray 

type ServicePerimetersServicePerimeterArray []ServicePerimetersServicePerimeterInput

func (ServicePerimetersServicePerimeterArray) ElementType 

func (ServicePerimetersServicePerimeterArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterArray) ToServicePerimetersServicePerimeterArrayOutput 

func (i ServicePerimetersServicePerimeterArray) ToServicePerimetersServicePerimeterArrayOutput() ServicePerimetersServicePerimeterArrayOutput

func (ServicePerimetersServicePerimeterArray) ToServicePerimetersServicePerimeterArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterArray) ToServicePerimetersServicePerimeterArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterArrayOutput

type ServicePerimetersServicePerimeterArrayInput 

type ServicePerimetersServicePerimeterArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterArrayOutput() ServicePerimetersServicePerimeterArrayOutput
	ToServicePerimetersServicePerimeterArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterArrayOutput
}

ServicePerimetersServicePerimeterArrayInput is an input type that accepts ServicePerimetersServicePerimeterArray and ServicePerimetersServicePerimeterArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterArrayInput` via: 

ServicePerimetersServicePerimeterArray{ ServicePerimetersServicePerimeterArgs{...} }

type ServicePerimetersServicePerimeterArrayOutput 

type ServicePerimetersServicePerimeterArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterArrayOutput) Index 

func (o ServicePerimetersServicePerimeterArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterOutput

func (ServicePerimetersServicePerimeterArrayOutput) ToServicePerimetersServicePerimeterArrayOutput 

func (o ServicePerimetersServicePerimeterArrayOutput) ToServicePerimetersServicePerimeterArrayOutput() ServicePerimetersServicePerimeterArrayOutput

func (ServicePerimetersServicePerimeterArrayOutput) ToServicePerimetersServicePerimeterArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterArrayOutput) ToServicePerimetersServicePerimeterArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterArrayOutput

type ServicePerimetersServicePerimeterInput 

type ServicePerimetersServicePerimeterInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterOutput() ServicePerimetersServicePerimeterOutput
	ToServicePerimetersServicePerimeterOutputWithContext(context.Context) ServicePerimetersServicePerimeterOutput
}

ServicePerimetersServicePerimeterInput is an input type that accepts ServicePerimetersServicePerimeterArgs and ServicePerimetersServicePerimeterOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterInput` via: 

ServicePerimetersServicePerimeterArgs{...}

type ServicePerimetersServicePerimeterOutput 

type ServicePerimetersServicePerimeterOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterOutput) CreateTime 

func (o ServicePerimetersServicePerimeterOutput) CreateTime() pulumi.StringPtrOutput

(Output) Time the AccessPolicy was created in UTC.

func (ServicePerimetersServicePerimeterOutput) Description 

func (o ServicePerimetersServicePerimeterOutput) Description() pulumi.StringPtrOutput

Description of the ServicePerimeter and its use. Does not affect behavior.

func (ServicePerimetersServicePerimeterOutput) ElementType 

func (ServicePerimetersServicePerimeterOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterOutput) Name 

func (o ServicePerimetersServicePerimeterOutput) Name() pulumi.StringOutput

Resource name for the ServicePerimeter. The shortName component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}

func (ServicePerimetersServicePerimeterOutput) PerimeterType 

func (o ServicePerimetersServicePerimeterOutput) PerimeterType() pulumi.StringPtrOutput

Specifies the type of the Perimeter. There are two types: regular and bridge. Regular Service Perimeter contains resources, access levels, and restricted services. Every resource can be in at most ONE regular Service Perimeter. In addition to being in a regular service perimeter, a resource can also be in zero or more perimeter bridges. A perimeter bridge only contains resources. Cross project operations are permitted if all effected resources share some perimeter (whether bridge or regular). Perimeter Bridge does not contain access levels or services: those are governed entirely by the regular perimeter that resource is in. Perimeter Bridges are typically useful when building more complex topologies with many independent perimeters that need to share some data with a common perimeter, but should not be able to share data among themselves. Default value is `PERIMETER_TYPE_REGULAR`. Possible values are: `PERIMETER_TYPE_REGULAR`, `PERIMETER_TYPE_BRIDGE`.

func (ServicePerimetersServicePerimeterOutput) Spec 

func (o ServicePerimetersServicePerimeterOutput) Spec() ServicePerimetersServicePerimeterSpecPtrOutput

Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the `useExplicitDryRunSpec` flag is set. Structure is documented below.

func (ServicePerimetersServicePerimeterOutput) Status 

func (o ServicePerimetersServicePerimeterOutput) Status() ServicePerimetersServicePerimeterStatusPtrOutput

ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. Structure is documented below.

func (ServicePerimetersServicePerimeterOutput) Title 

func (o ServicePerimetersServicePerimeterOutput) Title() pulumi.StringOutput

Human readable title. Must be unique within the Policy.

func (ServicePerimetersServicePerimeterOutput) ToServicePerimetersServicePerimeterOutput 

func (o ServicePerimetersServicePerimeterOutput) ToServicePerimetersServicePerimeterOutput() ServicePerimetersServicePerimeterOutput

func (ServicePerimetersServicePerimeterOutput) ToServicePerimetersServicePerimeterOutputWithContext 

func (o ServicePerimetersServicePerimeterOutput) ToServicePerimetersServicePerimeterOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterOutput

func (ServicePerimetersServicePerimeterOutput) UpdateTime 

func (o ServicePerimetersServicePerimeterOutput) UpdateTime() pulumi.StringPtrOutput

(Output) Time the AccessPolicy was updated in UTC.

func (ServicePerimetersServicePerimeterOutput) UseExplicitDryRunSpec 

func (o ServicePerimetersServicePerimeterOutput) UseExplicitDryRunSpec() pulumi.BoolPtrOutput

Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences between currently enforced and suggested restrictions. useExplicitDryRunSpec must bet set to True if any of the fields in the spec are set to non-default values.

type ServicePerimetersServicePerimeterSpec 

type ServicePerimetersServicePerimeterSpec struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels []string `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies []ServicePerimetersServicePerimeterSpecEgressPolicy `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies []ServicePerimetersServicePerimeterSpecIngressPolicy `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources []string `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices []string `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices *ServicePerimetersServicePerimeterSpecVpcAccessibleServices `pulumi:"vpcAccessibleServices"`
}

type ServicePerimetersServicePerimeterSpecArgs 

type ServicePerimetersServicePerimeterSpecArgs struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels pulumi.StringArrayInput `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies ServicePerimetersServicePerimeterSpecEgressPolicyArrayInput `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies ServicePerimetersServicePerimeterSpecIngressPolicyArrayInput `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices pulumi.StringArrayInput `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrInput `pulumi:"vpcAccessibleServices"`
}

func (ServicePerimetersServicePerimeterSpecArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecOutput 

func (i ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecOutput() ServicePerimetersServicePerimeterSpecOutput

func (ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecOutput

func (ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecPtrOutput 

func (i ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecPtrOutput() ServicePerimetersServicePerimeterSpecPtrOutput

func (ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecArgs) ToServicePerimetersServicePerimeterSpecPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecPtrOutput

type ServicePerimetersServicePerimeterSpecEgressPolicy 

type ServicePerimetersServicePerimeterSpecEgressPolicy struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom *ServicePerimetersServicePerimeterSpecEgressPolicyEgressFrom `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo *ServicePerimetersServicePerimeterSpecEgressPolicyEgressTo `pulumi:"egressTo"`
}

type ServicePerimetersServicePerimeterSpecEgressPolicyArgs 

type ServicePerimetersServicePerimeterSpecEgressPolicyArgs struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrInput `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrInput `pulumi:"egressTo"`
}

func (ServicePerimetersServicePerimeterSpecEgressPolicyArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyOutput() ServicePerimetersServicePerimeterSpecEgressPolicyOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyArray 

type ServicePerimetersServicePerimeterSpecEgressPolicyArray []ServicePerimetersServicePerimeterSpecEgressPolicyInput

func (ServicePerimetersServicePerimeterSpecEgressPolicyArray) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyArray) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyArray) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyArray) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyArray) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyArrayInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyArray and ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyArrayInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyArray{ ServicePerimetersServicePerimeterSpecEgressPolicyArgs{...} }

type ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecEgressPolicyOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFrom 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFrom struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction *string `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSource `pulumi:"sources"`
}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction pulumi.StringPtrInput `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs and ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs{...}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) Identities 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) IdentityType 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) SourceRestriction 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) Sources 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) Sources() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs, ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtr and ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrInput` via: 

        ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtr 

func ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtr(v *ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrInput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Elem() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Identities 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) IdentityType 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) SourceRestriction 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Sources 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) Sources() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSource 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
}

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray []ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceInput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray and ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArray{ ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs{...} }

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs and ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs{...}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) AccessLevel 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressTo 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressTo struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources []string `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations []ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources []string `pulumi:"resources"`
}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources pulumi.StringArrayInput `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs and ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressToInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs{...}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperation 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray []ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationInput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray and ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArray{ ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs{...} }

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs and ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArgs{...}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelector 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray []ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray and ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArray{ ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs{...} }

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs and ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArgs{...}

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Method 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) MethodSelectors 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) MethodSelectors() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ServiceName 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ExternalResources 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) Operations 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) Operations() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) Resources 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs, ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtr and ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrInput` via: 

        ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtr 

func ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtr(v *ServicePerimetersServicePerimeterSpecEgressPolicyEgressToArgs) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrInput

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) Elem() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ExternalResources 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) Operations 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) Operations() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) Resources 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput

type ServicePerimetersServicePerimeterSpecEgressPolicyInput 

type ServicePerimetersServicePerimeterSpecEgressPolicyInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecEgressPolicyOutput() ServicePerimetersServicePerimeterSpecEgressPolicyOutput
	ToServicePerimetersServicePerimeterSpecEgressPolicyOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyOutput
}

ServicePerimetersServicePerimeterSpecEgressPolicyInput is an input type that accepts ServicePerimetersServicePerimeterSpecEgressPolicyArgs and ServicePerimetersServicePerimeterSpecEgressPolicyOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecEgressPolicyInput` via: 

ServicePerimetersServicePerimeterSpecEgressPolicyArgs{...}

type ServicePerimetersServicePerimeterSpecEgressPolicyOutput 

type ServicePerimetersServicePerimeterSpecEgressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecEgressPolicyOutput) EgressFrom 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyOutput) EgressFrom() ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromPtrOutput

Defines conditions on the source of a request causing this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecEgressPolicyOutput) EgressTo 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyOutput) EgressTo() ServicePerimetersServicePerimeterSpecEgressPolicyEgressToPtrOutput

Defines the conditions on the `ApiOperation` and destination resources that cause this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecEgressPolicyOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecEgressPolicyOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecEgressPolicyOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyOutput 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyOutput() ServicePerimetersServicePerimeterSpecEgressPolicyOutput

func (ServicePerimetersServicePerimeterSpecEgressPolicyOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecEgressPolicyOutput) ToServicePerimetersServicePerimeterSpecEgressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecEgressPolicyOutput

type ServicePerimetersServicePerimeterSpecIngressPolicy 

type ServicePerimetersServicePerimeterSpecIngressPolicy struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom *ServicePerimetersServicePerimeterSpecIngressPolicyIngressFrom `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo *ServicePerimetersServicePerimeterSpecIngressPolicyIngressTo `pulumi:"ingressTo"`
}

type ServicePerimetersServicePerimeterSpecIngressPolicyArgs 

type ServicePerimetersServicePerimeterSpecIngressPolicyArgs struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrInput `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrInput `pulumi:"ingressTo"`
}

func (ServicePerimetersServicePerimeterSpecIngressPolicyArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyOutput() ServicePerimetersServicePerimeterSpecIngressPolicyOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyArray 

type ServicePerimetersServicePerimeterSpecIngressPolicyArray []ServicePerimetersServicePerimeterSpecIngressPolicyInput

func (ServicePerimetersServicePerimeterSpecIngressPolicyArray) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyArray) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyArray) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyArray) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyArray) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyArrayInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyArray and ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyArrayInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyArray{ ServicePerimetersServicePerimeterSpecIngressPolicyArgs{...} }

type ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecIngressPolicyOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFrom 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFrom struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSource `pulumi:"sources"`
}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs and ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs{...}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) Identities 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) IdentityType 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) Sources 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) Sources() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs, ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtr and ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrInput` via: 

        ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtr 

func ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtr(v *ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrInput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Elem() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Identities 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) IdentityType 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Sources 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) Sources() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSource 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource *string `pulumi:"resource"`
}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
}

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray []ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceInput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray and ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArray{ ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs{...} }

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs and ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs{...}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) AccessLevel 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) Resource 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) Resource() pulumi.StringPtrOutput

A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects are allowed. Format `projects/{project_number}` The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressTo 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressTo struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations []ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources []string `pulumi:"resources"`
}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs and ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressToInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs{...}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperation 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray []ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationInput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray and ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArray{ ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs{...} }

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs and ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArgs{...}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelector 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray []ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray and ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArray{ ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs{...} }

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs and ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArgs{...}

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Method 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) MethodSelectors 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) MethodSelectors() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ServiceName 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) Operations 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) Operations() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) Resources 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs, ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtr and ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrInput` via: 

        ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtr 

func ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtr(v *ServicePerimetersServicePerimeterSpecIngressPolicyIngressToArgs) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrInput

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) Elem() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) Operations 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) Operations() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) Resources 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput

type ServicePerimetersServicePerimeterSpecIngressPolicyInput 

type ServicePerimetersServicePerimeterSpecIngressPolicyInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecIngressPolicyOutput() ServicePerimetersServicePerimeterSpecIngressPolicyOutput
	ToServicePerimetersServicePerimeterSpecIngressPolicyOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyOutput
}

ServicePerimetersServicePerimeterSpecIngressPolicyInput is an input type that accepts ServicePerimetersServicePerimeterSpecIngressPolicyArgs and ServicePerimetersServicePerimeterSpecIngressPolicyOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecIngressPolicyInput` via: 

ServicePerimetersServicePerimeterSpecIngressPolicyArgs{...}

type ServicePerimetersServicePerimeterSpecIngressPolicyOutput 

type ServicePerimetersServicePerimeterSpecIngressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecIngressPolicyOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecIngressPolicyOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecIngressPolicyOutput) IngressFrom 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyOutput) IngressFrom() ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromPtrOutput

Defines the conditions on the source of a request causing this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecIngressPolicyOutput) IngressTo 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyOutput) IngressTo() ServicePerimetersServicePerimeterSpecIngressPolicyIngressToPtrOutput

Defines the conditions on the `ApiOperation` and request destination that cause this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecIngressPolicyOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyOutput 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyOutput() ServicePerimetersServicePerimeterSpecIngressPolicyOutput

func (ServicePerimetersServicePerimeterSpecIngressPolicyOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecIngressPolicyOutput) ToServicePerimetersServicePerimeterSpecIngressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecIngressPolicyOutput

type ServicePerimetersServicePerimeterSpecInput 

type ServicePerimetersServicePerimeterSpecInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecOutput() ServicePerimetersServicePerimeterSpecOutput
	ToServicePerimetersServicePerimeterSpecOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecOutput
}

ServicePerimetersServicePerimeterSpecInput is an input type that accepts ServicePerimetersServicePerimeterSpecArgs and ServicePerimetersServicePerimeterSpecOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecInput` via: 

ServicePerimetersServicePerimeterSpecArgs{...}

type ServicePerimetersServicePerimeterSpecOutput 

type ServicePerimetersServicePerimeterSpecOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecOutput) AccessLevels 

func (o ServicePerimetersServicePerimeterSpecOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimetersServicePerimeterSpecOutput) EgressPolicies 

func (o ServicePerimetersServicePerimeterSpecOutput) EgressPolicies() ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecOutput) IngressPolicies 

func (o ServicePerimetersServicePerimeterSpecOutput) IngressPolicies() ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecOutput) Resources 

func (o ServicePerimetersServicePerimeterSpecOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimetersServicePerimeterSpecOutput) RestrictedServices 

func (o ServicePerimetersServicePerimeterSpecOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecOutput 

func (o ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecOutput() ServicePerimetersServicePerimeterSpecOutput

func (ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecOutput

func (ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecPtrOutput 

func (o ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecPtrOutput() ServicePerimetersServicePerimeterSpecPtrOutput

func (ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecOutput) ToServicePerimetersServicePerimeterSpecPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecPtrOutput

func (ServicePerimetersServicePerimeterSpecOutput) VpcAccessibleServices 

func (o ServicePerimetersServicePerimeterSpecOutput) VpcAccessibleServices() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimetersServicePerimeterSpecPtrInput 

type ServicePerimetersServicePerimeterSpecPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecPtrOutput() ServicePerimetersServicePerimeterSpecPtrOutput
	ToServicePerimetersServicePerimeterSpecPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecPtrOutput
}

ServicePerimetersServicePerimeterSpecPtrInput is an input type that accepts ServicePerimetersServicePerimeterSpecArgs, ServicePerimetersServicePerimeterSpecPtr and ServicePerimetersServicePerimeterSpecPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecPtrInput` via: 

        ServicePerimetersServicePerimeterSpecArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterSpecPtr 

func ServicePerimetersServicePerimeterSpecPtr(v *ServicePerimetersServicePerimeterSpecArgs) ServicePerimetersServicePerimeterSpecPtrInput

type ServicePerimetersServicePerimeterSpecPtrOutput 

type ServicePerimetersServicePerimeterSpecPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecPtrOutput) AccessLevels 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimetersServicePerimeterSpecPtrOutput) EgressPolicies 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) EgressPolicies() ServicePerimetersServicePerimeterSpecEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) Elem() ServicePerimetersServicePerimeterSpecOutput

func (ServicePerimetersServicePerimeterSpecPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecPtrOutput) IngressPolicies 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) IngressPolicies() ServicePerimetersServicePerimeterSpecIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterSpecPtrOutput) Resources 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimetersServicePerimeterSpecPtrOutput) RestrictedServices 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimetersServicePerimeterSpecPtrOutput) ToServicePerimetersServicePerimeterSpecPtrOutput 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) ToServicePerimetersServicePerimeterSpecPtrOutput() ServicePerimetersServicePerimeterSpecPtrOutput

func (ServicePerimetersServicePerimeterSpecPtrOutput) ToServicePerimetersServicePerimeterSpecPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) ToServicePerimetersServicePerimeterSpecPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecPtrOutput

func (ServicePerimetersServicePerimeterSpecPtrOutput) VpcAccessibleServices 

func (o ServicePerimetersServicePerimeterSpecPtrOutput) VpcAccessibleServices() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimetersServicePerimeterSpecVpcAccessibleServices 

type ServicePerimetersServicePerimeterSpecVpcAccessibleServices struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices []string `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction *bool `pulumi:"enableRestriction"`
}

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs 

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices pulumi.StringArrayInput `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction pulumi.BoolPtrInput `pulumi:"enableRestriction"`
}

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ElementType 

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput 

func (i ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput 

func (i ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesInput 

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput
	ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput
}

ServicePerimetersServicePerimeterSpecVpcAccessibleServicesInput is an input type that accepts ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs and ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecVpcAccessibleServicesInput` via: 

ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs{...}

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput 

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) AllowedServices 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) EnableRestriction 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrInput 

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput
	ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput
}

ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrInput is an input type that accepts ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs, ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtr and ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrInput` via: 

        ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtr 

func ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtr(v *ServicePerimetersServicePerimeterSpecVpcAccessibleServicesArgs) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrInput

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput 

type ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) AllowedServices 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) Elem() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) EnableRestriction 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

func (ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterSpecVpcAccessibleServicesPtrOutput

type ServicePerimetersServicePerimeterStatus 

type ServicePerimetersServicePerimeterStatus struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels []string `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies []ServicePerimetersServicePerimeterStatusEgressPolicy `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies []ServicePerimetersServicePerimeterStatusIngressPolicy `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources []string `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices []string `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices *ServicePerimetersServicePerimeterStatusVpcAccessibleServices `pulumi:"vpcAccessibleServices"`
}

type ServicePerimetersServicePerimeterStatusArgs 

type ServicePerimetersServicePerimeterStatusArgs struct {
	// A list of AccessLevel resource names that allow resources within
	// the ServicePerimeter to be accessed from the internet.
	// AccessLevels listed must be in the same policy as this
	// ServicePerimeter. Referencing a nonexistent AccessLevel is a
	// syntax error. If no AccessLevel names are listed, resources within
	// the perimeter can only be accessed via GCP calls with request
	// origins within the perimeter. For Service Perimeter Bridge, must
	// be empty.
	// Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
	AccessLevels pulumi.StringArrayInput `pulumi:"accessLevels"`
	// List of EgressPolicies to apply to the perimeter. A perimeter may
	// have multiple EgressPolicies, each of which is evaluated separately.
	// Access is granted if any EgressPolicy grants it. Must be empty for
	// a perimeter bridge.
	// Structure is documented below.
	EgressPolicies ServicePerimetersServicePerimeterStatusEgressPolicyArrayInput `pulumi:"egressPolicies"`
	// List of `IngressPolicies` to apply to the perimeter. A perimeter may
	// have multiple `IngressPolicies`, each of which is evaluated
	// separately. Access is granted if any `Ingress Policy` grants it.
	// Must be empty for a perimeter bridge.
	// Structure is documented below.
	IngressPolicies ServicePerimetersServicePerimeterStatusIngressPolicyArrayInput `pulumi:"ingressPolicies"`
	// A list of GCP resources that are inside of the service perimeter.
	// Currently only projects are allowed.
	// Format: projects/{project_number}
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// GCP services that are subject to the Service Perimeter
	// restrictions. Must contain a list of services. For example, if
	// `storage.googleapis.com` is specified, access to the storage
	// buckets inside the perimeter must meet the perimeter's access
	// restrictions.
	RestrictedServices pulumi.StringArrayInput `pulumi:"restrictedServices"`
	// Specifies how APIs are allowed to communicate within the Service
	// Perimeter.
	// Structure is documented below.
	VpcAccessibleServices ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrInput `pulumi:"vpcAccessibleServices"`
}

func (ServicePerimetersServicePerimeterStatusArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusOutput 

func (i ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusOutput() ServicePerimetersServicePerimeterStatusOutput

func (ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusOutput

func (ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusPtrOutput 

func (i ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusPtrOutput() ServicePerimetersServicePerimeterStatusPtrOutput

func (ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusArgs) ToServicePerimetersServicePerimeterStatusPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusPtrOutput

type ServicePerimetersServicePerimeterStatusEgressPolicy 

type ServicePerimetersServicePerimeterStatusEgressPolicy struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom *ServicePerimetersServicePerimeterStatusEgressPolicyEgressFrom `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo *ServicePerimetersServicePerimeterStatusEgressPolicyEgressTo `pulumi:"egressTo"`
}

type ServicePerimetersServicePerimeterStatusEgressPolicyArgs 

type ServicePerimetersServicePerimeterStatusEgressPolicyArgs struct {
	// Defines conditions on the source of a request causing this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressFrom ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrInput `pulumi:"egressFrom"`
	// Defines the conditions on the `ApiOperation` and destination resources that
	// cause this `EgressPolicy` to apply.
	// Structure is documented below.
	EgressTo ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrInput `pulumi:"egressTo"`
}

func (ServicePerimetersServicePerimeterStatusEgressPolicyArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyOutput() ServicePerimetersServicePerimeterStatusEgressPolicyOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyArray 

type ServicePerimetersServicePerimeterStatusEgressPolicyArray []ServicePerimetersServicePerimeterStatusEgressPolicyInput

func (ServicePerimetersServicePerimeterStatusEgressPolicyArray) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyArray) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyArray) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyArray) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyArray) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyArrayInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyArray and ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyArrayInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyArray{ ServicePerimetersServicePerimeterStatusEgressPolicyArgs{...} }

type ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusEgressPolicyOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFrom 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFrom struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction *string `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSource `pulumi:"sources"`
}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs struct {
	// Identities can be an individual user, service account, Google group,
	// or third-party identity. For third-party identity, only single identities
	// are supported and other identity types are not supported.The v1 identities
	// that have the prefix user, group and serviceAccount in
	// https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access to outside the
	// perimeter. If left unspecified, then members of `identities` field will
	// be allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
	// Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.
	SourceRestriction pulumi.StringPtrInput `pulumi:"sourceRestriction"`
	// Sources that this EgressPolicy authorizes access from.
	// Structure is documented below.
	Sources ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs and ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs{...}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) Identities 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) IdentityType 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) SourceRestriction 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) Sources 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) Sources() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs, ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtr and ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrInput` via: 

        ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtr 

func ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtr(v *ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrInput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Elem() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Identities 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Identities() pulumi.StringArrayOutput

Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported.The v1 identities that have the prefix user, group and serviceAccount in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) IdentityType 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) SourceRestriction 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) SourceRestriction() pulumi.StringPtrOutput

Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. Possible values are: `SOURCE_RESTRICTION_UNSPECIFIED`, `SOURCE_RESTRICTION_ENABLED`, `SOURCE_RESTRICTION_DISABLED`.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Sources 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) Sources() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

Sources that this EgressPolicy authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSource 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
}

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray []ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceInput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray and ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArray{ ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs{...} }

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs and ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs{...}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) AccessLevel 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressTo 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressTo struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources []string `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations []ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources []string `pulumi:"resources"`
}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs struct {
	// A list of external resources that are allowed to be accessed. A request
	// matches if it contains an external resource in this list (Example:
	// s3://bucket/path). Currently '*' is not allowed.
	ExternalResources pulumi.StringArrayInput `pulumi:"externalResources"`
	// A list of `ApiOperations` that this egress rule applies to. A request matches
	// if it contains an operation/service in this list.
	// Structure is documented below.
	Operations ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, that match this to stanza. A request matches
	// if it contains a resource in this list. If * is specified for resources,
	// then this `EgressTo` rule will authorize access to all resources outside
	// the perimeter.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs and ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressToInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs{...}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperation 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray []ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationInput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray and ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArray{ ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs{...} }

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs and ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArgs{...}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelector 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray []ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray and ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArray{ ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs{...} }

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs and ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArgs{...}

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Method 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) MethodSelectors 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) MethodSelectors() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ServiceName 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ExternalResources 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) Operations 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) Operations() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) Resources 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs, ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtr and ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrInput` via: 

        ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtr 

func ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtr(v *ServicePerimetersServicePerimeterStatusEgressPolicyEgressToArgs) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrInput

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) Elem() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ExternalResources 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ExternalResources() pulumi.StringArrayOutput

A list of external resources that are allowed to be accessed. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) Operations 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) Operations() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToOperationArrayOutput

A list of `ApiOperations` that this egress rule applies to. A request matches if it contains an operation/service in this list. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) Resources 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, that match this to stanza. A request matches if it contains a resource in this list. If * is specified for resources, then this `EgressTo` rule will authorize access to all resources outside the perimeter.

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput

type ServicePerimetersServicePerimeterStatusEgressPolicyInput 

type ServicePerimetersServicePerimeterStatusEgressPolicyInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusEgressPolicyOutput() ServicePerimetersServicePerimeterStatusEgressPolicyOutput
	ToServicePerimetersServicePerimeterStatusEgressPolicyOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyOutput
}

ServicePerimetersServicePerimeterStatusEgressPolicyInput is an input type that accepts ServicePerimetersServicePerimeterStatusEgressPolicyArgs and ServicePerimetersServicePerimeterStatusEgressPolicyOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusEgressPolicyInput` via: 

ServicePerimetersServicePerimeterStatusEgressPolicyArgs{...}

type ServicePerimetersServicePerimeterStatusEgressPolicyOutput 

type ServicePerimetersServicePerimeterStatusEgressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusEgressPolicyOutput) EgressFrom 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyOutput) EgressFrom() ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromPtrOutput

Defines conditions on the source of a request causing this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusEgressPolicyOutput) EgressTo 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyOutput) EgressTo() ServicePerimetersServicePerimeterStatusEgressPolicyEgressToPtrOutput

Defines the conditions on the `ApiOperation` and destination resources that cause this `EgressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusEgressPolicyOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusEgressPolicyOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusEgressPolicyOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyOutput 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyOutput() ServicePerimetersServicePerimeterStatusEgressPolicyOutput

func (ServicePerimetersServicePerimeterStatusEgressPolicyOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusEgressPolicyOutput) ToServicePerimetersServicePerimeterStatusEgressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusEgressPolicyOutput

type ServicePerimetersServicePerimeterStatusIngressPolicy 

type ServicePerimetersServicePerimeterStatusIngressPolicy struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom *ServicePerimetersServicePerimeterStatusIngressPolicyIngressFrom `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo *ServicePerimetersServicePerimeterStatusIngressPolicyIngressTo `pulumi:"ingressTo"`
}

type ServicePerimetersServicePerimeterStatusIngressPolicyArgs 

type ServicePerimetersServicePerimeterStatusIngressPolicyArgs struct {
	// Defines the conditions on the source of a request causing this `IngressPolicy`
	// to apply.
	// Structure is documented below.
	IngressFrom ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrInput `pulumi:"ingressFrom"`
	// Defines the conditions on the `ApiOperation` and request destination that cause
	// this `IngressPolicy` to apply.
	// Structure is documented below.
	IngressTo ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrInput `pulumi:"ingressTo"`
}

func (ServicePerimetersServicePerimeterStatusIngressPolicyArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyOutput() ServicePerimetersServicePerimeterStatusIngressPolicyOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyArray 

type ServicePerimetersServicePerimeterStatusIngressPolicyArray []ServicePerimetersServicePerimeterStatusIngressPolicyInput

func (ServicePerimetersServicePerimeterStatusIngressPolicyArray) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyArray) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyArray) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyArray) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyArray) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyArrayInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyArray and ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyArrayInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyArray{ ServicePerimetersServicePerimeterStatusIngressPolicyArgs{...} }

type ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusIngressPolicyOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFrom 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFrom struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities []string `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType *string `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources []ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSource `pulumi:"sources"`
}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs struct {
	// A list of identities that are allowed access through this ingress policy.
	// Should be in the format of email address. The email address should represent
	// individual user or service account only.
	Identities pulumi.StringArrayInput `pulumi:"identities"`
	// Specifies the type of identities that are allowed access from outside the
	// perimeter. If left unspecified, then members of `identities` field will be
	// allowed access.
	// Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.
	IdentityType pulumi.StringPtrInput `pulumi:"identityType"`
	// Sources that this `IngressPolicy` authorizes access from.
	// Structure is documented below.
	Sources ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput `pulumi:"sources"`
}

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs and ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs{...}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) Identities 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) IdentityType 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) Sources 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) Sources() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs, ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtr and ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrInput` via: 

        ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtr 

func ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtr(v *ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrInput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Elem() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Identities 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Identities() pulumi.StringArrayOutput

A list of identities that are allowed access through this ingress policy. Should be in the format of email address. The email address should represent individual user or service account only.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) IdentityType 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) IdentityType() pulumi.StringPtrOutput

Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. Possible values are: `IDENTITY_TYPE_UNSPECIFIED`, `ANY_IDENTITY`, `ANY_USER_ACCOUNT`, `ANY_SERVICE_ACCOUNT`.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Sources 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) Sources() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

Sources that this `IngressPolicy` authorizes access from. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSource 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSource struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel *string `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource *string `pulumi:"resource"`
}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs struct {
	// An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
	AccessLevel pulumi.StringPtrInput `pulumi:"accessLevel"`
	// A Google Cloud resource that is allowed to ingress the perimeter.
	// Requests from these resources will be allowed to access perimeter data.
	// Currently only projects are allowed. Format `projects/{project_number}`
	// The project may be in any Google Cloud organization, not just the
	// organization that the perimeter is defined in. `*` is not allowed, the case
	// of allowing all Google Cloud resources only is not supported.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
}

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray []ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceInput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray and ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArray{ ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs{...} }

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs and ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs{...}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) AccessLevel 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) AccessLevel() pulumi.StringPtrOutput

An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) Resource 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) Resource() pulumi.StringPtrOutput

A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects are allowed. Format `projects/{project_number}` The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressTo 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressTo struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations []ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperation `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources []string `pulumi:"resources"`
}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs struct {
	// A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
	// are allowed to perform in this `ServicePerimeter`.
	// Structure is documented below.
	Operations ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayInput `pulumi:"operations"`
	// A list of resources, currently only projects in the form
	// `projects/<projectnumber>`, protected by this `ServicePerimeter`
	// that are allowed to be accessed by sources defined in the
	// corresponding `IngressFrom`. A request matches if it contains
	// a resource in this list. If `*` is specified for resources,
	// then this `IngressTo` rule will authorize access to all
	// resources inside the perimeter, provided that the request
	// also matches the `operations` field.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
}

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs and ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressToInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs{...}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperation 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperation struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors []ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelector `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName *string `pulumi:"serviceName"`
}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs struct {
	// API methods or permissions to allow. Method or permission must belong
	// to the service specified by `serviceName` field. A single MethodSelector
	// entry with `*` specified for the `method` field will allow all methods
	// AND permissions for the service specified in `serviceName`.
	// Structure is documented below.
	MethodSelectors ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput `pulumi:"methodSelectors"`
	// The name of the API whose methods or permissions the `IngressPolicy` or
	// `EgressPolicy` want to allow. A single `ApiOperation` with serviceName
	// field set to `*` will allow all methods AND permissions for all services.
	ServiceName pulumi.StringPtrInput `pulumi:"serviceName"`
}

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray []ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationInput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray and ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArray{ ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs{...} }

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs and ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArgs{...}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelector 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelector struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method *string `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission *string `pulumi:"permission"`
}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs struct {
	// Value for `method` should be a valid method name for the corresponding
	// `serviceName` in `ApiOperation`. If `*` used as value for method,
	// then ALL methods and permissions are allowed.
	Method pulumi.StringPtrInput `pulumi:"method"`
	// Value for permission should be a valid Cloud IAM permission for the
	// corresponding `serviceName` in `ApiOperation`.
	Permission pulumi.StringPtrInput `pulumi:"permission"`
}

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray []ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray and ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArray{ ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{...} }

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) Index(i pulumi.IntInput) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs and ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArgs{...}

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Method 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Method() pulumi.StringPtrOutput

Value for `method` should be a valid method name for the corresponding `serviceName` in `ApiOperation`. If `*` used as value for method, then ALL methods and permissions are allowed.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Permission 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) Permission() pulumi.StringPtrOutput

Value for permission should be a valid Cloud IAM permission for the corresponding `serviceName` in `ApiOperation`.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) MethodSelectors 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) MethodSelectors() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationMethodSelectorArrayOutput

API methods or permissions to allow. Method or permission must belong to the service specified by `serviceName` field. A single MethodSelector entry with `*` specified for the `method` field will allow all methods AND permissions for the service specified in `serviceName`. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ServiceName 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ServiceName() pulumi.StringPtrOutput

The name of the API whose methods or permissions the `IngressPolicy` or `EgressPolicy` want to allow. A single `ApiOperation` with serviceName field set to `*` will allow all methods AND permissions for all services.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) Operations 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) Operations() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) Resources 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs, ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtr and ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrInput` via: 

        ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtr 

func ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtr(v *ServicePerimetersServicePerimeterStatusIngressPolicyIngressToArgs) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrInput

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) Elem() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) Operations 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) Operations() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToOperationArrayOutput

A list of `ApiOperations` the sources specified in corresponding `IngressFrom` are allowed to perform in this `ServicePerimeter`. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) Resources 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) Resources() pulumi.StringArrayOutput

A list of resources, currently only projects in the form `projects/<projectnumber>`, protected by this `ServicePerimeter` that are allowed to be accessed by sources defined in the corresponding `IngressFrom`. A request matches if it contains a resource in this list. If `*` is specified for resources, then this `IngressTo` rule will authorize access to all resources inside the perimeter, provided that the request also matches the `operations` field.

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput

type ServicePerimetersServicePerimeterStatusIngressPolicyInput 

type ServicePerimetersServicePerimeterStatusIngressPolicyInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusIngressPolicyOutput() ServicePerimetersServicePerimeterStatusIngressPolicyOutput
	ToServicePerimetersServicePerimeterStatusIngressPolicyOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyOutput
}

ServicePerimetersServicePerimeterStatusIngressPolicyInput is an input type that accepts ServicePerimetersServicePerimeterStatusIngressPolicyArgs and ServicePerimetersServicePerimeterStatusIngressPolicyOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusIngressPolicyInput` via: 

ServicePerimetersServicePerimeterStatusIngressPolicyArgs{...}

type ServicePerimetersServicePerimeterStatusIngressPolicyOutput 

type ServicePerimetersServicePerimeterStatusIngressPolicyOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusIngressPolicyOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusIngressPolicyOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusIngressPolicyOutput) IngressFrom 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyOutput) IngressFrom() ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromPtrOutput

Defines the conditions on the source of a request causing this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusIngressPolicyOutput) IngressTo 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyOutput) IngressTo() ServicePerimetersServicePerimeterStatusIngressPolicyIngressToPtrOutput

Defines the conditions on the `ApiOperation` and request destination that cause this `IngressPolicy` to apply. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusIngressPolicyOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyOutput 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyOutput() ServicePerimetersServicePerimeterStatusIngressPolicyOutput

func (ServicePerimetersServicePerimeterStatusIngressPolicyOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusIngressPolicyOutput) ToServicePerimetersServicePerimeterStatusIngressPolicyOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusIngressPolicyOutput

type ServicePerimetersServicePerimeterStatusInput 

type ServicePerimetersServicePerimeterStatusInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusOutput() ServicePerimetersServicePerimeterStatusOutput
	ToServicePerimetersServicePerimeterStatusOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusOutput
}

ServicePerimetersServicePerimeterStatusInput is an input type that accepts ServicePerimetersServicePerimeterStatusArgs and ServicePerimetersServicePerimeterStatusOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusInput` via: 

ServicePerimetersServicePerimeterStatusArgs{...}

type ServicePerimetersServicePerimeterStatusOutput 

type ServicePerimetersServicePerimeterStatusOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusOutput) AccessLevels 

func (o ServicePerimetersServicePerimeterStatusOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimetersServicePerimeterStatusOutput) EgressPolicies 

func (o ServicePerimetersServicePerimeterStatusOutput) EgressPolicies() ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusOutput) IngressPolicies 

func (o ServicePerimetersServicePerimeterStatusOutput) IngressPolicies() ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusOutput) Resources 

func (o ServicePerimetersServicePerimeterStatusOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimetersServicePerimeterStatusOutput) RestrictedServices 

func (o ServicePerimetersServicePerimeterStatusOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusOutput 

func (o ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusOutput() ServicePerimetersServicePerimeterStatusOutput

func (ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusOutput

func (ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusPtrOutput 

func (o ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusPtrOutput() ServicePerimetersServicePerimeterStatusPtrOutput

func (ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusOutput) ToServicePerimetersServicePerimeterStatusPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusPtrOutput

func (ServicePerimetersServicePerimeterStatusOutput) VpcAccessibleServices 

func (o ServicePerimetersServicePerimeterStatusOutput) VpcAccessibleServices() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimetersServicePerimeterStatusPtrInput 

type ServicePerimetersServicePerimeterStatusPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusPtrOutput() ServicePerimetersServicePerimeterStatusPtrOutput
	ToServicePerimetersServicePerimeterStatusPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusPtrOutput
}

ServicePerimetersServicePerimeterStatusPtrInput is an input type that accepts ServicePerimetersServicePerimeterStatusArgs, ServicePerimetersServicePerimeterStatusPtr and ServicePerimetersServicePerimeterStatusPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusPtrInput` via: 

        ServicePerimetersServicePerimeterStatusArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterStatusPtr 

func ServicePerimetersServicePerimeterStatusPtr(v *ServicePerimetersServicePerimeterStatusArgs) ServicePerimetersServicePerimeterStatusPtrInput

type ServicePerimetersServicePerimeterStatusPtrOutput 

type ServicePerimetersServicePerimeterStatusPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusPtrOutput) AccessLevels 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) AccessLevels() pulumi.StringArrayOutput

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. For Service Perimeter Bridge, must be empty. Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}

func (ServicePerimetersServicePerimeterStatusPtrOutput) EgressPolicies 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) EgressPolicies() ServicePerimetersServicePerimeterStatusEgressPolicyArrayOutput

List of EgressPolicies to apply to the perimeter. A perimeter may have multiple EgressPolicies, each of which is evaluated separately. Access is granted if any EgressPolicy grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) Elem() ServicePerimetersServicePerimeterStatusOutput

func (ServicePerimetersServicePerimeterStatusPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusPtrOutput) IngressPolicies 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) IngressPolicies() ServicePerimetersServicePerimeterStatusIngressPolicyArrayOutput

List of `IngressPolicies` to apply to the perimeter. A perimeter may have multiple `IngressPolicies`, each of which is evaluated separately. Access is granted if any `Ingress Policy` grants it. Must be empty for a perimeter bridge. Structure is documented below.

func (ServicePerimetersServicePerimeterStatusPtrOutput) Resources 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) Resources() pulumi.StringArrayOutput

A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

func (ServicePerimetersServicePerimeterStatusPtrOutput) RestrictedServices 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) RestrictedServices() pulumi.StringArrayOutput

GCP services that are subject to the Service Perimeter restrictions. Must contain a list of services. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

func (ServicePerimetersServicePerimeterStatusPtrOutput) ToServicePerimetersServicePerimeterStatusPtrOutput 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) ToServicePerimetersServicePerimeterStatusPtrOutput() ServicePerimetersServicePerimeterStatusPtrOutput

func (ServicePerimetersServicePerimeterStatusPtrOutput) ToServicePerimetersServicePerimeterStatusPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) ToServicePerimetersServicePerimeterStatusPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusPtrOutput

func (ServicePerimetersServicePerimeterStatusPtrOutput) VpcAccessibleServices 

func (o ServicePerimetersServicePerimeterStatusPtrOutput) VpcAccessibleServices() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

Specifies how APIs are allowed to communicate within the Service Perimeter. Structure is documented below.

type ServicePerimetersServicePerimeterStatusVpcAccessibleServices 

type ServicePerimetersServicePerimeterStatusVpcAccessibleServices struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices []string `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction *bool `pulumi:"enableRestriction"`
}

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs 

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs struct {
	// The list of APIs usable within the Service Perimeter.
	// Must be empty unless `enableRestriction` is True.
	AllowedServices pulumi.StringArrayInput `pulumi:"allowedServices"`
	// Whether to restrict API calls within the Service Perimeter to the
	// list of APIs specified in 'allowedServices'.
	EnableRestriction pulumi.BoolPtrInput `pulumi:"enableRestriction"`
}

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ElementType 

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput 

func (i ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput 

func (i ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext 

func (i ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesInput 

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput
	ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput
}

ServicePerimetersServicePerimeterStatusVpcAccessibleServicesInput is an input type that accepts ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs and ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusVpcAccessibleServicesInput` via: 

ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs{...}

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput 

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) AllowedServices 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) EnableRestriction 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrInput 

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrInput interface {
	pulumi.Input

	ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput
	ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(context.Context) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput
}

ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrInput is an input type that accepts ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs, ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtr and ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput values. You can construct a concrete instance of `ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrInput` via: 

        ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs{...}

or:

        nil

func ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtr 

func ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtr(v *ServicePerimetersServicePerimeterStatusVpcAccessibleServicesArgs) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrInput

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput 

type ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput struct{ *pulumi.OutputState }

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) AllowedServices 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) AllowedServices() pulumi.StringArrayOutput

The list of APIs usable within the Service Perimeter. Must be empty unless `enableRestriction` is True.

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) Elem 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) Elem() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) ElementType 

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) ElementType() reflect.Type

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) EnableRestriction 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) EnableRestriction() pulumi.BoolPtrOutput

Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowedServices'.

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput() ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

func (ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext 

func (o ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput) ToServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutputWithContext(ctx context.Context) ServicePerimetersServicePerimeterStatusVpcAccessibleServicesPtrOutput

type ServicePerimetersState 

type ServicePerimetersState struct {
	// The AccessPolicy this ServicePerimeter lives in.
	// Format: accessPolicies/{policy_id}
	//
	// ***
	Parent pulumi.StringPtrInput
	// The desired Service Perimeters that should replace all existing Service Perimeters in the Access Policy.
	// Structure is documented below.
	ServicePerimeters ServicePerimetersServicePerimeterArrayInput
}

func (ServicePerimetersState) ElementType 

func (ServicePerimetersState) ElementType() reflect.Type

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.