Documentation
¶
Index ¶
- type AccessLevel
- func (r *AccessLevel) Basic() pulumi.Output
- func (r *AccessLevel) Description() pulumi.StringOutput
- func (r *AccessLevel) ID() pulumi.IDOutput
- func (r *AccessLevel) Name() pulumi.StringOutput
- func (r *AccessLevel) Parent() pulumi.StringOutput
- func (r *AccessLevel) Title() pulumi.StringOutput
- func (r *AccessLevel) URN() pulumi.URNOutput
- type AccessLevelArgs
- type AccessLevelState
- type AccessPolicy
- func (r *AccessPolicy) CreateTime() pulumi.StringOutput
- func (r *AccessPolicy) ID() pulumi.IDOutput
- func (r *AccessPolicy) Name() pulumi.StringOutput
- func (r *AccessPolicy) Parent() pulumi.StringOutput
- func (r *AccessPolicy) Title() pulumi.StringOutput
- func (r *AccessPolicy) URN() pulumi.URNOutput
- func (r *AccessPolicy) UpdateTime() pulumi.StringOutput
- type AccessPolicyArgs
- type AccessPolicyState
- type ServicePerimeter
- func (r *ServicePerimeter) CreateTime() pulumi.StringOutput
- func (r *ServicePerimeter) Description() pulumi.StringOutput
- func (r *ServicePerimeter) ID() pulumi.IDOutput
- func (r *ServicePerimeter) Name() pulumi.StringOutput
- func (r *ServicePerimeter) Parent() pulumi.StringOutput
- func (r *ServicePerimeter) PerimeterType() pulumi.StringOutput
- func (r *ServicePerimeter) Status() pulumi.Output
- func (r *ServicePerimeter) Title() pulumi.StringOutput
- func (r *ServicePerimeter) URN() pulumi.URNOutput
- func (r *ServicePerimeter) UpdateTime() pulumi.StringOutput
- type ServicePerimeterArgs
- type ServicePerimeterState
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AccessLevel ¶
type AccessLevel struct {
// contains filtered or unexported fields
}
An AccessLevel is a label that can be applied to requests to GCP services, along with a list of requirements necessary for the label to be applied.
To get more information about AccessLevel, see:
* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.accessLevels) * How-to Guides
- [Access Policy Quickstart](https://cloud.google.com/access-context-manager/docs/quickstart)
> This content is derived from https://github.com/terraform-providers/terraform-provider-google/blob/master/website/docs/r/access_context_manager_access_level.html.markdown.
func GetAccessLevel ¶
func GetAccessLevel(ctx *pulumi.Context, name string, id pulumi.ID, state *AccessLevelState, opts ...pulumi.ResourceOpt) (*AccessLevel, error)
GetAccessLevel gets an existing AccessLevel resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewAccessLevel ¶
func NewAccessLevel(ctx *pulumi.Context, name string, args *AccessLevelArgs, opts ...pulumi.ResourceOpt) (*AccessLevel, error)
NewAccessLevel registers a new resource with the given unique name, arguments, and options.
func (*AccessLevel) Basic ¶
func (r *AccessLevel) Basic() pulumi.Output
A set of predefined conditions for the access level and a combining function.
func (*AccessLevel) Description ¶
func (r *AccessLevel) Description() pulumi.StringOutput
Description of the AccessLevel and its use. Does not affect behavior.
func (*AccessLevel) ID ¶
func (r *AccessLevel) ID() pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*AccessLevel) Name ¶
func (r *AccessLevel) Name() pulumi.StringOutput
Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
func (*AccessLevel) Parent ¶
func (r *AccessLevel) Parent() pulumi.StringOutput
The AccessPolicy this AccessLevel lives in. Format: accessPolicies/{policy_id}
func (*AccessLevel) Title ¶
func (r *AccessLevel) Title() pulumi.StringOutput
Human readable title. Must be unique within the Policy.
func (*AccessLevel) URN ¶
func (r *AccessLevel) URN() pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
type AccessLevelArgs ¶
type AccessLevelArgs struct { // A set of predefined conditions for the access level and a combining function. Basic interface{} // Description of the AccessLevel and its use. Does not affect behavior. Description interface{} // Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and // '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name} Name interface{} // The AccessPolicy this AccessLevel lives in. Format: accessPolicies/{policy_id} Parent interface{} // Human readable title. Must be unique within the Policy. Title interface{} }
The set of arguments for constructing a AccessLevel resource.
type AccessLevelState ¶
type AccessLevelState struct { // A set of predefined conditions for the access level and a combining function. Basic interface{} // Description of the AccessLevel and its use. Does not affect behavior. Description interface{} // Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and // '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name} Name interface{} // The AccessPolicy this AccessLevel lives in. Format: accessPolicies/{policy_id} Parent interface{} // Human readable title. Must be unique within the Policy. Title interface{} }
Input properties used for looking up and filtering AccessLevel resources.
type AccessPolicy ¶
type AccessPolicy struct {
// contains filtered or unexported fields
}
AccessPolicy is a container for AccessLevels (which define the necessary attributes to use GCP services) and ServicePerimeters (which define regions of services able to freely pass data within a perimeter). An access policy is globally visible within an organization, and the restrictions it specifies apply to all projects within an organization.
To get more information about AccessPolicy, see:
* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies) * How-to Guides
- [Access Policy Quickstart](https://cloud.google.com/access-context-manager/docs/quickstart)
> This content is derived from https://github.com/terraform-providers/terraform-provider-google/blob/master/website/docs/r/access_context_manager_access_policy.html.markdown.
func GetAccessPolicy ¶
func GetAccessPolicy(ctx *pulumi.Context, name string, id pulumi.ID, state *AccessPolicyState, opts ...pulumi.ResourceOpt) (*AccessPolicy, error)
GetAccessPolicy gets an existing AccessPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewAccessPolicy ¶
func NewAccessPolicy(ctx *pulumi.Context, name string, args *AccessPolicyArgs, opts ...pulumi.ResourceOpt) (*AccessPolicy, error)
NewAccessPolicy registers a new resource with the given unique name, arguments, and options.
func (*AccessPolicy) CreateTime ¶
func (r *AccessPolicy) CreateTime() pulumi.StringOutput
Time the AccessPolicy was created in UTC.
func (*AccessPolicy) ID ¶
func (r *AccessPolicy) ID() pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*AccessPolicy) Name ¶
func (r *AccessPolicy) Name() pulumi.StringOutput
Resource name of the AccessPolicy. Format: {policy_id}
func (*AccessPolicy) Parent ¶
func (r *AccessPolicy) Parent() pulumi.StringOutput
The parent of this AccessPolicy in the Cloud Resource Hierarchy. Format: organizations/{organization_id}
func (*AccessPolicy) Title ¶
func (r *AccessPolicy) Title() pulumi.StringOutput
Human readable title. Does not affect behavior.
func (*AccessPolicy) URN ¶
func (r *AccessPolicy) URN() pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
func (*AccessPolicy) UpdateTime ¶
func (r *AccessPolicy) UpdateTime() pulumi.StringOutput
Time the AccessPolicy was updated in UTC.
type AccessPolicyArgs ¶
type AccessPolicyArgs struct { // The parent of this AccessPolicy in the Cloud Resource Hierarchy. Format: organizations/{organization_id} Parent interface{} // Human readable title. Does not affect behavior. Title interface{} }
The set of arguments for constructing a AccessPolicy resource.
type AccessPolicyState ¶
type AccessPolicyState struct { // Time the AccessPolicy was created in UTC. CreateTime interface{} // Resource name of the AccessPolicy. Format: {policy_id} Name interface{} // The parent of this AccessPolicy in the Cloud Resource Hierarchy. Format: organizations/{organization_id} Parent interface{} // Human readable title. Does not affect behavior. Title interface{} // Time the AccessPolicy was updated in UTC. UpdateTime interface{} }
Input properties used for looking up and filtering AccessPolicy resources.
type ServicePerimeter ¶
type ServicePerimeter struct {
// contains filtered or unexported fields
}
ServicePerimeter describes a set of GCP resources which can freely import and export data amongst themselves, but not export outside of the ServicePerimeter. If a request with a source within this ServicePerimeter has a target outside of the ServicePerimeter, the request will be blocked. Otherwise the request is allowed. There are two types of Service Perimeter - Regular and Bridge. Regular Service Perimeters cannot overlap, a single GCP project can only belong to a single regular Service Perimeter. Service Perimeter Bridges can contain only GCP projects as members, a single GCP project may belong to multiple Service Perimeter Bridges.
To get more information about ServicePerimeter, see:
* [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters) * How-to Guides
- [Service Perimeter Quickstart](https://cloud.google.com/vpc-service-controls/docs/quickstart)
> This content is derived from https://github.com/terraform-providers/terraform-provider-google/blob/master/website/docs/r/access_context_manager_service_perimeter.html.markdown.
func GetServicePerimeter ¶
func GetServicePerimeter(ctx *pulumi.Context, name string, id pulumi.ID, state *ServicePerimeterState, opts ...pulumi.ResourceOpt) (*ServicePerimeter, error)
GetServicePerimeter gets an existing ServicePerimeter resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewServicePerimeter ¶
func NewServicePerimeter(ctx *pulumi.Context, name string, args *ServicePerimeterArgs, opts ...pulumi.ResourceOpt) (*ServicePerimeter, error)
NewServicePerimeter registers a new resource with the given unique name, arguments, and options.
func (*ServicePerimeter) CreateTime ¶
func (r *ServicePerimeter) CreateTime() pulumi.StringOutput
Time the AccessPolicy was created in UTC.
func (*ServicePerimeter) Description ¶
func (r *ServicePerimeter) Description() pulumi.StringOutput
Description of the ServicePerimeter and its use. Does not affect behavior.
func (*ServicePerimeter) ID ¶
func (r *ServicePerimeter) ID() pulumi.IDOutput
ID is this resource's unique identifier assigned by its provider.
func (*ServicePerimeter) Name ¶
func (r *ServicePerimeter) Name() pulumi.StringOutput
Resource name for the ServicePerimeter. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/servicePerimeters/{short_name}
func (*ServicePerimeter) Parent ¶
func (r *ServicePerimeter) Parent() pulumi.StringOutput
The AccessPolicy this ServicePerimeter lives in. Format: accessPolicies/{policy_id}
func (*ServicePerimeter) PerimeterType ¶
func (r *ServicePerimeter) PerimeterType() pulumi.StringOutput
Specifies the type of the Perimeter. There are two types: regular and bridge. Regular Service Perimeter contains resources, access levels, and restricted services. Every resource can be in at most ONE regular Service Perimeter. In addition to being in a regular service perimeter, a resource can also be in zero or more perimeter bridges. A perimeter bridge only contains resources. Cross project operations are permitted if all effected resources share some perimeter (whether bridge or regular). Perimeter Bridge does not contain access levels or services: those are governed entirely by the regular perimeter that resource is in. Perimeter Bridges are typically useful when building more complex topologies with many independent perimeters that need to share some data with a common perimeter, but should not be able to share data among themselves.
func (*ServicePerimeter) Status ¶
func (r *ServicePerimeter) Status() pulumi.Output
ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries.
func (*ServicePerimeter) Title ¶
func (r *ServicePerimeter) Title() pulumi.StringOutput
Human readable title. Must be unique within the Policy.
func (*ServicePerimeter) URN ¶
func (r *ServicePerimeter) URN() pulumi.URNOutput
URN is this resource's unique name assigned by Pulumi.
func (*ServicePerimeter) UpdateTime ¶
func (r *ServicePerimeter) UpdateTime() pulumi.StringOutput
Time the AccessPolicy was updated in UTC.
type ServicePerimeterArgs ¶
type ServicePerimeterArgs struct { // Description of the ServicePerimeter and its use. Does not affect behavior. Description interface{} // Resource name for the ServicePerimeter. The short_name component must begin with a letter and only include alphanumeric // and '_'. Format: accessPolicies/{policy_id}/servicePerimeters/{short_name} Name interface{} // The AccessPolicy this ServicePerimeter lives in. Format: accessPolicies/{policy_id} Parent interface{} // Specifies the type of the Perimeter. There are two types: regular and bridge. Regular Service Perimeter contains // resources, access levels, and restricted services. Every resource can be in at most ONE regular Service Perimeter. In // addition to being in a regular service perimeter, a resource can also be in zero or more perimeter bridges. A perimeter // bridge only contains resources. Cross project operations are permitted if all effected resources share some perimeter // (whether bridge or regular). Perimeter Bridge does not contain access levels or services: those are governed entirely // by the regular perimeter that resource is in. Perimeter Bridges are typically useful when building more complex // topologies with many independent perimeters that need to share some data with a common perimeter, but should not be // able to share data among themselves. PerimeterType interface{} // ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine // perimeter content and boundaries. Status interface{} // Human readable title. Must be unique within the Policy. Title interface{} }
The set of arguments for constructing a ServicePerimeter resource.
type ServicePerimeterState ¶
type ServicePerimeterState struct { // Time the AccessPolicy was created in UTC. CreateTime interface{} // Description of the ServicePerimeter and its use. Does not affect behavior. Description interface{} // Resource name for the ServicePerimeter. The short_name component must begin with a letter and only include alphanumeric // and '_'. Format: accessPolicies/{policy_id}/servicePerimeters/{short_name} Name interface{} // The AccessPolicy this ServicePerimeter lives in. Format: accessPolicies/{policy_id} Parent interface{} // Specifies the type of the Perimeter. There are two types: regular and bridge. Regular Service Perimeter contains // resources, access levels, and restricted services. Every resource can be in at most ONE regular Service Perimeter. In // addition to being in a regular service perimeter, a resource can also be in zero or more perimeter bridges. A perimeter // bridge only contains resources. Cross project operations are permitted if all effected resources share some perimeter // (whether bridge or regular). Perimeter Bridge does not contain access levels or services: those are governed entirely // by the regular perimeter that resource is in. Perimeter Bridges are typically useful when building more complex // topologies with many independent perimeters that need to share some data with a common perimeter, but should not be // able to share data among themselves. PerimeterType interface{} // ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine // perimeter content and boundaries. Status interface{} // Human readable title. Must be unique within the Policy. Title interface{} // Time the AccessPolicy was updated in UTC. UpdateTime interface{} }
Input properties used for looking up and filtering ServicePerimeter resources.