AccessApprovalSettingsState class
Input properties used for looking up and filtering AccessApprovalSettings resources.
Constructors
-
AccessApprovalSettingsState({Input<
String?> ? activeKeyVersion, Input<bool?> ? ancestorHasActiveKeyVersion, Input<String?> ? deletionPolicy, Input<bool?> ? enrolledAncestor, Input<List< ? enrolledServices, Input<AccessApprovalSettingsEnrolledService> ?>String?> ? folderId, Input<bool?> ? invalidKeyVersion, Input<String?> ? name, Input<List< ? notificationEmails})String> ?> -
Creates a new AccessApprovalSettingsState.
activeKeyVersionThe asymmetric crypto key version to use for signing approval requests.ancestorHasActiveKeyVersionIf the field is true, that indicates that an ancestor of this Folder has set active_key_version.deletionPolicyWhether Terraform will be prevented from destroying the resource. Defaults to DELETE.enrolledAncestorIf the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Folder.enrolledServicesA list of Google Cloud Services for which the given resource has Access Approval enrolled.folderIdID of the folder of the access approval settings.invalidKeyVersionIf the field is true, that indicates that there is some configuration issue with the activeKeyVersionnameThe resource name of the settings. Format is "folders/{folder_id}/accessApprovalSettings"notificationEmailsA list of email addresses to which notifications relating to approval requests should be sent.const -
AccessApprovalSettingsState.fromMap(Map<
String, dynamic> map) -
factory
Properties
-
activeKeyVersion
→ Input<
String?> ? -
The asymmetric crypto key version to use for signing approval requests.
Empty activeKeyVersion indicates that a Google-managed key should be used for signing.
This property will be ignored if set by an ancestor of the resource, and new non-empty values may not be set.
final
-
ancestorHasActiveKeyVersion
→ Input<
bool?> ? -
If the field is true, that indicates that an ancestor of this Folder has set active_key_version.
final
-
deletionPolicy
→ Input<
String?> ? -
Whether Terraform will be prevented from destroying the resource. Defaults to DELETE.
When a 'terraform destroy' or 'pulumi up' would delete the resource,
the command will fail if this field is set to "PREVENT" in Terraform state.
When set to "ABANDON", the command will remove the resource from Terraform
management without updating or deleting the resource in the API.
When set to "DELETE", deleting the resource is allowed.
final
-
enrolledAncestor
→ Input<
bool?> ? -
If the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Folder.
final
-
enrolledServices
→ Input<
List< ?AccessApprovalSettingsEnrolledService> ?> -
A list of Google Cloud Services for which the given resource has Access Approval enrolled.
Access requests for the resource given by name against any of these services contained here will be required
to have explicit approval. Enrollment can only be done on an all or nothing basis.
A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.
Structure is documented below.
final
-
folderId
→ Input<
String?> ? -
ID of the folder of the access approval settings.
final
- hashCode → int
-
The hash code for this object.
no setterinherited
-
invalidKeyVersion
→ Input<
bool?> ? -
If the field is true, that indicates that there is some configuration issue with the activeKeyVersion
configured on this Folder (e.g. it doesn't exist or the Access Approval service account doesn't have the
correct permissions on it, etc.) This key version is not necessarily the effective key version at this level,
as key versions are inherited top-down.
final
-
name
→ Input<
String?> ? -
The resource name of the settings. Format is "folders/{folder_id}/accessApprovalSettings"
final
-
notificationEmails
→ Input<
List< ?String> ?> -
A list of email addresses to which notifications relating to approval requests should be sent.
Notifications relating to a resource will be sent to all emails in the settings of ancestor
resources of that resource. A maximum of 50 email addresses are allowed.
final
- runtimeType → Type
-
A representation of the runtime type of the object.
no setterinherited
Methods
-
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
toMap(
) → Map< String, dynamic> -
toString(
) → String -
A string representation of this object.
inherited
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited