DataAccessScopeArgs class

The set of arguments for DataAccessScope. The set of arguments for DataAccessScope.

Constructors

DataAccessScopeArgs({Input<bool?>? allowAll, Input<List<DataAccessScopeAllowedDataAccessLabel>?>? allowedDataAccessLabels, required Input<String> dataAccessScopeId, Input<String?>? deletionPolicy, Input<List<DataAccessScopeDeniedDataAccessLabel>?>? deniedDataAccessLabels, Input<String?>? description, required Input<String> instance, required Input<String> location, Input<String?>? project})
Creates a new DataAccessScopeArgs. allowAll Optional. Whether or not the scope allows all labels, allowAll and allowedDataAccessLabels The allowed labels for the scope. There has to be at dataAccessScopeId Required. The user provided scope id which will become the last part of the name deletionPolicy Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. deniedDataAccessLabels Optional. The denied labels for the scope. description Optional. A description of the data access scope for a human reader. instance The unique identifier for the Chronicle instance, which is the same as the customer ID. location The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2". project The ID of the project in which the resource belongs.
const
DataAccessScopeArgs.fromMap(Map<String, dynamic> map)
factory

Properties

allowAll → Input<bool?>?
Optional. Whether or not the scope allows all labels, allowAll and allowedDataAccessLabels are mutually exclusive and one of them must be present. deniedDataAccessLabels can still be used along with allow_all. When combined with denied_data_access_labels, access will be granted to all data that doesn't have labels mentioned in denied_data_access_labels. E.g.: A customer with scope with denied labels A and B and allowAll will be able to see all data except data labeled with A and data labeled with B and data with labels A and B.
final
allowedDataAccessLabels → Input<List<DataAccessScopeAllowedDataAccessLabel>?>?
The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allowAll or allowedDataAccessLabels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B). Structure is documented below.
final
dataAccessScopeId → Input<String>
Required. The user provided scope id which will become the last part of the name of the scope resource. Needs to be compliant with https://google.aip.dev/122
final
deletionPolicy → Input<String?>?
Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
final
deniedDataAccessLabels → Input<List<DataAccessScopeDeniedDataAccessLabel>?>?
Optional. The denied labels for the scope. The logical operator for evaluation of the denied labels is AND. E.g.: A customer with scope with denied labels A and B won't be able to see data labeled with A and data labeled with B and data with labels A and B. Structure is documented below.
final
description → Input<String?>?
Optional. A description of the data access scope for a human reader.
final
hashCode → int
The hash code for this object.
no setterinherited
instance → Input<String>
The unique identifier for the Chronicle instance, which is the same as the customer ID.
final
location → Input<String>
The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
final
project → Input<String?>?
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited