accesscontextmanager
library
Classes
-
AccessLevel
-
An AccessLevel is a label that can be applied to requests to GCP services,
along with a list of requirements necessary for the label to be applied.
-
AccessLevelArgs
-
The set of arguments for AccessLevel.
The set of arguments for AccessLevel.
-
AccessLevelBasic
-
-
AccessLevelBasicCondition
-
-
AccessLevelBasicConditionDevicePolicy
-
-
AccessLevelBasicConditionDevicePolicyOsConstraint
-
-
AccessLevelBasicConditionVpcNetworkSource
-
-
AccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork
-
-
AccessLevelCondition
-
Allows configuring a single access level condition to be appended to an access level's conditions.
This resource is intended to be used in cases where it is not possible to compile a full list
of conditions to include in a
gcp.accesscontextmanager.AccessLevel resource,
to enable them to be added separately.
-
AccessLevelConditionArgs
-
The set of arguments for AccessLevelCondition.
The set of arguments for AccessLevelCondition.
-
AccessLevelConditionDevicePolicy
-
-
AccessLevelConditionDevicePolicyOsConstraint
-
-
AccessLevelConditionState
-
Input properties used for looking up and filtering AccessLevelCondition resources.
-
AccessLevelConditionVpcNetworkSource
-
-
AccessLevelConditionVpcNetworkSourceVpcSubnetwork
-
-
AccessLevelCustom
-
-
AccessLevelCustomExpr
-
-
AccessLevels
-
Replace all existing Access Levels in an Access Policy with the Access Levels provided. This is done atomically.
This is a bulk edit of all Access Levels and may override existing Access Levels created by
gcp.accesscontextmanager.AccessLevel,
thus causing a permadiff if used alongside gcp.accesscontextmanager.AccessLevel on the same parent.
-
AccessLevelsAccessLevel
-
-
AccessLevelsAccessLevelBasic
-
-
AccessLevelsAccessLevelBasicCondition
-
-
AccessLevelsAccessLevelBasicConditionDevicePolicy
-
-
AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraint
-
-
AccessLevelsAccessLevelBasicConditionVpcNetworkSource
-
-
AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork
-
-
AccessLevelsAccessLevelCustom
-
-
AccessLevelsAccessLevelCustomExpr
-
-
AccessLevelsArgs
-
The set of arguments for AccessLevels.
The set of arguments for AccessLevels.
-
AccessLevelsState
-
Input properties used for looking up and filtering AccessLevels resources.
-
AccessLevelState
-
Input properties used for looking up and filtering AccessLevel resources.
-
AccessPolicy
-
AccessPolicy is a container for AccessLevels (which define the necessary
attributes to use GCP services) and ServicePerimeters (which define
regions of services able to freely pass data within a perimeter). An
access policy is globally visible within an organization, and the
restrictions it specifies apply to all projects within an organization.
-
AccessPolicyArgs
-
The set of arguments for AccessPolicy.
The set of arguments for AccessPolicy.
-
AccessPolicyIamBinding
-
Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:
-
AccessPolicyIamBindingArgs
-
The set of arguments for AccessPolicyIamBinding.
The set of arguments for AccessPolicyIamBinding.
-
AccessPolicyIamBindingCondition
-
-
AccessPolicyIamBindingState
-
Input properties used for looking up and filtering AccessPolicyIamBinding resources.
-
AccessPolicyIamMember
-
Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:
-
AccessPolicyIamMemberArgs
-
The set of arguments for AccessPolicyIamMember.
The set of arguments for AccessPolicyIamMember.
-
AccessPolicyIamMemberCondition
-
-
AccessPolicyIamMemberState
-
Input properties used for looking up and filtering AccessPolicyIamMember resources.
-
AccessPolicyIamPolicy
-
Three different resources help you manage your IAM policy for Access Context Manager (VPC Service Controls) AccessPolicy. Each of these resources serves a different use case:
-
AccessPolicyIamPolicyArgs
-
The set of arguments for AccessPolicyIamPolicy.
The set of arguments for AccessPolicyIamPolicy.
-
AccessPolicyIamPolicyState
-
Input properties used for looking up and filtering AccessPolicyIamPolicy resources.
-
AccessPolicyState
-
Input properties used for looking up and filtering AccessPolicy resources.
-
AuthorizedOrgsDesc
-
An authorized organizations description describes a list of organizations
(1) that have been authorized to use certain asset (for example, device) data
owned by different organizations at the enforcement points, or (2) with certain
asset (for example, device) have been authorized to access the resources in
another organization at the enforcement points.
-
AuthorizedOrgsDescArgs
-
The set of arguments for AuthorizedOrgsDesc.
The set of arguments for AuthorizedOrgsDesc.
-
AuthorizedOrgsDescState
-
Input properties used for looking up and filtering AuthorizedOrgsDesc resources.
-
EgressPolicy
-
This resource has been deprecated, please refer to ServicePerimeterEgressPolicy.
-
EgressPolicyArgs
-
The set of arguments for EgressPolicy.
The set of arguments for EgressPolicy.
-
EgressPolicyState
-
Input properties used for looking up and filtering EgressPolicy resources.
-
GcpUserAccessBinding
-
Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access.
-
GcpUserAccessBindingArgs
-
The set of arguments for GcpUserAccessBinding.
The set of arguments for GcpUserAccessBinding.
-
GcpUserAccessBindingPrincipal
-
-
GcpUserAccessBindingScopedAccessSetting
-
-
GcpUserAccessBindingScopedAccessSettingActiveSettings
-
-
GcpUserAccessBindingScopedAccessSettingActiveSettingsSessionSettings
-
-
GcpUserAccessBindingScopedAccessSettingDryRunSettings
-
-
GcpUserAccessBindingScopedAccessSettingScope
-
-
GcpUserAccessBindingScopedAccessSettingScopeClientScope
-
-
GcpUserAccessBindingScopedAccessSettingScopeClientScopeRestrictedClientApplication
-
-
GcpUserAccessBindingSessionSettings
-
-
GcpUserAccessBindingState
-
Input properties used for looking up and filtering GcpUserAccessBinding resources.
-
GetAccessPolicyArgs
-
Arguments for getAccessPolicy.
Arguments for getAccessPolicy.
-
GetAccessPolicyIamPolicyArgs
-
Arguments for getAccessPolicyIamPolicy.
Arguments for getAccessPolicyIamPolicy.
-
GetAccessPolicyIamPolicyResult
-
Result data returned by getAccessPolicyIamPolicy.
-
GetAccessPolicyResult
-
Result data returned by getAccessPolicy.
-
GetSupportedServiceArgs
-
Arguments for getSupportedService.
Arguments for getSupportedService.
-
GetSupportedServiceResult
-
Result data returned by getSupportedService.
-
GetSupportedServicesResult
-
Result data returned by getSupportedServices.
-
GetSupportedServicesSupportedService
-
-
GetSupportedServiceSupportedMethod
-
-
IngressPolicy
-
This resource has been deprecated, please refer to ServicePerimeterIngressPolicy.
-
IngressPolicyArgs
-
The set of arguments for IngressPolicy.
The set of arguments for IngressPolicy.
-
IngressPolicyState
-
Input properties used for looking up and filtering IngressPolicy resources.
-
ServicePerimeter
-
ServicePerimeter describes a set of GCP resources which can freely import
and export data amongst themselves, but not export outside of the
ServicePerimeter. If a request with a source within this ServicePerimeter
has a target outside of the ServicePerimeter, the request will be blocked.
Otherwise the request is allowed. There are two types of Service Perimeter
-
ServicePerimeterArgs
-
The set of arguments for ServicePerimeter.
The set of arguments for ServicePerimeter.
-
ServicePerimeterDryRunEgressPolicy
-
Manage a single EgressPolicy in the spec (dry-run) configuration for a service perimeter.
EgressPolicies match requests based on egressFrom and egressTo stanzas.
For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched.
If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter
boundary. For example, an EgressPolicy can be used to allow VMs on networks
within the ServicePerimeter to access a defined set of projects outside the
perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
or query against a BigQuery dataset).
-
ServicePerimeterDryRunEgressPolicyArgs
-
The set of arguments for ServicePerimeterDryRunEgressPolicy.
The set of arguments for ServicePerimeterDryRunEgressPolicy.
-
ServicePerimeterDryRunEgressPolicyEgressFrom
-
-
ServicePerimeterDryRunEgressPolicyEgressFromSource
-
-
ServicePerimeterDryRunEgressPolicyEgressFromSourcePscEndpoint
-
-
ServicePerimeterDryRunEgressPolicyEgressTo
-
-
ServicePerimeterDryRunEgressPolicyEgressToOperation
-
-
ServicePerimeterDryRunEgressPolicyEgressToOperationMethodSelector
-
-
ServicePerimeterDryRunEgressPolicyState
-
Input properties used for looking up and filtering ServicePerimeterDryRunEgressPolicy resources.
-
ServicePerimeterDryRunIngressPolicy
-
Manage a single IngressPolicy in the spec (dry-run) configuration for a service perimeter.
IngressPolicies match requests based on ingressFrom and ingressTo stanzas. For an ingress policy to match,
both the ingressFrom and ingressTo stanzas must be matched. If an IngressPolicy matches a request,
the request is allowed through the perimeter boundary from outside the perimeter.
For example, access from the internet can be allowed either based on an AccessLevel or,
for traffic hosted on Google Cloud, the project of the source network.
For access from private networks, using the project of the hosting network is required.
Individual ingress policies can be limited by restricting which services and/
or actions they match using the ingressTo field.
-
ServicePerimeterDryRunIngressPolicyArgs
-
The set of arguments for ServicePerimeterDryRunIngressPolicy.
The set of arguments for ServicePerimeterDryRunIngressPolicy.
-
ServicePerimeterDryRunIngressPolicyIngressFrom
-
-
ServicePerimeterDryRunIngressPolicyIngressFromSource
-
-
ServicePerimeterDryRunIngressPolicyIngressFromSourcePscEndpoint
-
-
ServicePerimeterDryRunIngressPolicyIngressTo
-
-
ServicePerimeterDryRunIngressPolicyIngressToOperation
-
-
ServicePerimeterDryRunIngressPolicyIngressToOperationMethodSelector
-
-
ServicePerimeterDryRunIngressPolicyState
-
Input properties used for looking up and filtering ServicePerimeterDryRunIngressPolicy resources.
-
ServicePerimeterDryRunResource
-
Allows configuring a single GCP resource that should be inside of the
spec block of a dry run service perimeter.
This resource is intended to be used in cases where it is not possible to compile a full list
of projects to include in a gcp.accesscontextmanager.ServicePerimeter resource,
to enable them to be added separately.
If your perimeter is NOT in dry-run mode use gcp.accesscontextmanager.ServicePerimeterResource instead.
-
ServicePerimeterDryRunResourceArgs
-
The set of arguments for ServicePerimeterDryRunResource.
The set of arguments for ServicePerimeterDryRunResource.
-
ServicePerimeterDryRunResourceState
-
Input properties used for looking up and filtering ServicePerimeterDryRunResource resources.
-
ServicePerimeterEgressPolicy
-
Manage a single EgressPolicy in the status (enforced) configuration for a service perimeter.
EgressPolicies match requests based on egressFrom and egressTo stanzas.
For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched.
If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter
boundary. For example, an EgressPolicy can be used to allow VMs on networks
within the ServicePerimeter to access a defined set of projects outside the
perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
or query against a BigQuery dataset).
-
ServicePerimeterEgressPolicyArgs
-
The set of arguments for ServicePerimeterEgressPolicy.
The set of arguments for ServicePerimeterEgressPolicy.
-
ServicePerimeterEgressPolicyEgressFrom
-
-
ServicePerimeterEgressPolicyEgressFromSource
-
-
ServicePerimeterEgressPolicyEgressFromSourcePscEndpoint
-
-
ServicePerimeterEgressPolicyEgressTo
-
-
ServicePerimeterEgressPolicyEgressToOperation
-
-
ServicePerimeterEgressPolicyEgressToOperationMethodSelector
-
-
ServicePerimeterEgressPolicyState
-
Input properties used for looking up and filtering ServicePerimeterEgressPolicy resources.
-
ServicePerimeterIngressPolicy
-
Manage a single IngressPolicy in the status (enforced) configuration for a service perimeter.
IngressPolicies match requests based on ingressFrom and ingressTo stanzas. For an ingress policy to match,
both the ingressFrom and ingressTo stanzas must be matched. If an IngressPolicy matches a request,
the request is allowed through the perimeter boundary from outside the perimeter.
For example, access from the internet can be allowed either based on an AccessLevel or,
for traffic hosted on Google Cloud, the project of the source network.
For access from private networks, using the project of the hosting network is required.
Individual ingress policies can be limited by restricting which services and/
or actions they match using the ingressTo field.
-
ServicePerimeterIngressPolicyArgs
-
The set of arguments for ServicePerimeterIngressPolicy.
The set of arguments for ServicePerimeterIngressPolicy.
-
ServicePerimeterIngressPolicyIngressFrom
-
-
ServicePerimeterIngressPolicyIngressFromSource
-
-
ServicePerimeterIngressPolicyIngressFromSourcePscEndpoint
-
-
ServicePerimeterIngressPolicyIngressTo
-
-
ServicePerimeterIngressPolicyIngressToOperation
-
-
ServicePerimeterIngressPolicyIngressToOperationMethodSelector
-
-
ServicePerimeterIngressPolicyState
-
Input properties used for looking up and filtering ServicePerimeterIngressPolicy resources.
-
ServicePerimeterResource
-
Allows configuring a single GCP resource that should be inside the
status block of a service perimeter.
This resource is intended to be used in cases where it is not possible to compile a full list
of projects to include in a gcp.accesscontextmanager.ServicePerimeter resource,
to enable them to be added separately.
If your perimeter is in dry-run mode use gcp.accesscontextmanager.ServicePerimeterDryRunResource instead.
-
ServicePerimeterResourceArgs
-
The set of arguments for ServicePerimeterResource.
The set of arguments for ServicePerimeterResource.
-
ServicePerimeterResourceState
-
Input properties used for looking up and filtering ServicePerimeterResource resources.
-
ServicePerimeters
-
Replace all existing Service Perimeters in an Access Policy with the Service Perimeters provided. This is done atomically.
This is a bulk edit of all Service Perimeters and may override existing Service Perimeters created by
gcp.accesscontextmanager.ServicePerimeter,
thus causing a permadiff if used alongside gcp.accesscontextmanager.ServicePerimeter on the same parent.
-
ServicePerimetersArgs
-
The set of arguments for ServicePerimeters.
The set of arguments for ServicePerimeters.
-
ServicePerimeterSpec
-
-
ServicePerimeterSpecEgressPolicy
-
-
ServicePerimeterSpecEgressPolicyEgressFrom
-
-
ServicePerimeterSpecEgressPolicyEgressFromSource
-
-
ServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint
-
-
ServicePerimeterSpecEgressPolicyEgressTo
-
-
ServicePerimeterSpecEgressPolicyEgressToOperation
-
-
ServicePerimeterSpecEgressPolicyEgressToOperationMethodSelector
-
-
ServicePerimeterSpecIngressPolicy
-
-
ServicePerimeterSpecIngressPolicyIngressFrom
-
-
ServicePerimeterSpecIngressPolicyIngressFromSource
-
-
ServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint
-
-
ServicePerimeterSpecIngressPolicyIngressTo
-
-
ServicePerimeterSpecIngressPolicyIngressToOperation
-
-
ServicePerimeterSpecIngressPolicyIngressToOperationMethodSelector
-
-
ServicePerimeterSpecVpcAccessibleServices
-
-
ServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern
-
-
ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Input properties used for looking up and filtering ServicePerimeters resources.
-
ServicePerimeterState
-
Input properties used for looking up and filtering ServicePerimeter resources.
-
ServicePerimeterStatus
-
-
ServicePerimeterStatusEgressPolicy
-
-
ServicePerimeterStatusEgressPolicyEgressFrom
-
-
ServicePerimeterStatusEgressPolicyEgressFromSource
-
-
ServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint
-
-
ServicePerimeterStatusEgressPolicyEgressTo
-
-
ServicePerimeterStatusEgressPolicyEgressToOperation
-
-
ServicePerimeterStatusEgressPolicyEgressToOperationMethodSelector
-
-
ServicePerimeterStatusIngressPolicy
-
-
ServicePerimeterStatusIngressPolicyIngressFrom
-
-
ServicePerimeterStatusIngressPolicyIngressFromSource
-
-
ServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint
-
-
ServicePerimeterStatusIngressPolicyIngressTo
-
-
ServicePerimeterStatusIngressPolicyIngressToOperation
-
-
ServicePerimeterStatusIngressPolicyIngressToOperationMethodSelector
-
-
ServicePerimeterStatusVpcAccessibleServices
-
-
ServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern
-
-
ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier
-
-
