NetworkFirewallPolicyWithRulesRule class
Constructors
-
NetworkFirewallPolicyWithRulesRule({required Input<String> action, Input<String?>? description, Input<String?>? direction, Input<bool?>? disabled, Input<bool?>? enableLogging, required Input<NetworkFirewallPolicyWithRulesRuleMatch> match, required Input<int> priority, Input<String?>? ruleName, Input<String?>? securityProfileGroup, Input<List<NetworkFirewallPolicyWithRulesRuleTargetSecureTag>?>? targetSecureTags, Input<List<String>?>? targetServiceAccounts, Input<bool?>? tlsInspect})
-
Creates a new NetworkFirewallPolicyWithRulesRule.
action The Action to perform when the client connection triggers the rule. Can currently be either
description A description of the rule.
direction The direction in which this rule applies. If unspecified an INGRESS rule is created.
disabled Denotes whether the firewall policy rule is disabled. When set to true,
enableLogging Denotes whether to enable logging for a particular rule.
match A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
priority An integer indicating the priority of a rule in the list. The priority must be a value
ruleName An optional name for the rule. This field is not a unique identifier
securityProfileGroup A fully-qualified URL of a SecurityProfile resource instance.
targetSecureTags A list of secure tags that controls which instances the firewall rule
targetServiceAccounts A list of service accounts indicating the sets of
tlsInspect Boolean flag indicating if the traffic should be TLS decrypted.
const
-
NetworkFirewallPolicyWithRulesRule.fromMap(Map<String, dynamic> map)
-
factory
Properties
-
action
→ Input<String>
-
The Action to perform when the client connection triggers the rule. Can currently be either
"allow", "deny", "applySecurityProfileGroup" or "gotoNext".
final
-
description
→ Input<String?>?
-
A description of the rule.
final
-
direction
→ Input<String?>?
-
The direction in which this rule applies. If unspecified an INGRESS rule is created.
Possible values are:
INGRESS, EGRESS.
final
-
disabled
→ Input<bool?>?
-
Denotes whether the firewall policy rule is disabled. When set to true,
the firewall policy rule is not enforced and traffic behaves as if it did
not exist. If this is unspecified, the firewall policy rule will be
enabled.
final
-
enableLogging
→ Input<bool?>?
-
Denotes whether to enable logging for a particular rule.
If logging is enabled, logs will be exported to the
configured export destination in Stackdriver.
final
-
hashCode
→ int
-
The hash code for this object.
no setterinherited
-
match
→ Input<NetworkFirewallPolicyWithRulesRuleMatch>
-
A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
Structure is documented below.
final
-
priority
→ Input<int>
-
An integer indicating the priority of a rule in the list. The priority must be a value
between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
highest priority and 2147483647 is the lowest priority.
final
-
ruleName
→ Input<String?>?
-
An optional name for the rule. This field is not a unique identifier
and can be updated.
final
-
runtimeType
→ Type
-
A representation of the runtime type of the object.
no setterinherited
-
securityProfileGroup
→ Input<String?>?
-
A fully-qualified URL of a SecurityProfile resource instance.
Example:
https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group
Must be specified if action is 'apply_security_profile_group'.
final
-
targetSecureTags
→ Input<List<NetworkFirewallPolicyWithRulesRuleTargetSecureTag>?>?
-
A list of secure tags that controls which instances the firewall rule
applies to. If <code>targetSecureTag</code> are specified, then the
firewall rule applies only to instances in the VPC network that have one
of those EFFECTIVE secure tags, if all the targetSecureTag are in
INEFFECTIVE state, then this rule will be ignored.
<code>targetSecureTag</code> may not be set at the same time as
<code>targetServiceAccounts</code>.
If neither <code>targetServiceAccounts</code> nor
<code>targetSecureTag</code> are specified, the firewall rule applies
to all instances on the specified network.
Maximum number of target label tags allowed is 256.
Structure is documented below.
final
-
targetServiceAccounts
→ Input<List<String>?>?
-
A list of service accounts indicating the sets of
instances that are applied with this rule.
final
-
tlsInspect
→ Input<bool?>?
-
Boolean flag indicating if the traffic should be TLS decrypted.
It can be set only if action = 'apply_security_profile_group' and cannot be set for other actions.
final
