AccessLevelConditionArgs class

The set of arguments for AccessLevelCondition. The set of arguments for AccessLevelCondition.

Constructors

AccessLevelConditionArgs({required Input<String> accessLevel, Input<String?>? deletionPolicy, Input<AccessLevelConditionDevicePolicy?>? devicePolicy, Input<List<String>?>? ipSubnetworks, Input<List<String>?>? members, Input<bool?>? negate, Input<List<String>?>? regions, Input<List<String>?>? requiredAccessLevels, Input<List<AccessLevelConditionVpcNetworkSource>?>? vpcNetworkSources})
Creates a new AccessLevelConditionArgs. accessLevel The name of the Access Level to add this condition to. deletionPolicy Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. devicePolicy Device specific restrictions, all restrictions must hold for ipSubnetworks A list of CIDR block IP subnetwork specification. May be IPv4 members An allowed list of members (users, service accounts). negate Whether to negate the Condition. If true, the Condition becomes regions The request must originate from one of the provided requiredAccessLevels A list of other access levels defined in the same Policy, vpcNetworkSources The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with ipSubnetworks.
const
AccessLevelConditionArgs.fromMap(Map<String, dynamic> map)
factory

Properties

accessLevel → Input<String>
The name of the Access Level to add this condition to.
final
deletionPolicy → Input<String?>?
Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
final
devicePolicy → Input<AccessLevelConditionDevicePolicy?>?
Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.
final
hashCode → int
The hash code for this object.
no setterinherited
ipSubnetworks → Input<List<String>?>?
A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
final
members → Input<List<String>?>?
An allowed list of members (users, service accounts). Using groups is not supported yet. The signed-in user originating the request must be a part of one of the provided members. If not specified, a request may come from any user (logged in/not logged in, not present in any groups, etc.). Formats: user:{emailid}, serviceAccount:{emailid}
final
negate → Input<bool?>?
Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
final
regions → Input<List<String>?>?
The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.
final
requiredAccessLevels → Input<List<String>?>?
A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
vpcNetworkSources → Input<List<AccessLevelConditionVpcNetworkSource>?>?
The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with ipSubnetworks. Structure is documented below.
final

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited