networksecurity library

Classes

AddressGroup
AddressGroup is a resource that specifies how a collection of IP/DNS used in Firewall Policy.
AddressGroupArgs
The set of arguments for AddressGroup. The set of arguments for AddressGroup.
AddressGroupIamBinding
Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:
AddressGroupIamBindingArgs
The set of arguments for AddressGroupIamBinding. The set of arguments for AddressGroupIamBinding.
AddressGroupIamBindingCondition
AddressGroupIamBindingState
Input properties used for looking up and filtering AddressGroupIamBinding resources.
AddressGroupIamMember
Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:
AddressGroupIamMemberArgs
The set of arguments for AddressGroupIamMember. The set of arguments for AddressGroupIamMember.
AddressGroupIamMemberCondition
AddressGroupIamMemberState
Input properties used for looking up and filtering AddressGroupIamMember resources.
AddressGroupIamPolicy
Three different resources help you manage your IAM policy for Network Security ProjectAddressGroup. Each of these resources serves a different use case:
AddressGroupIamPolicyArgs
The set of arguments for AddressGroupIamPolicy. The set of arguments for AddressGroupIamPolicy.
AddressGroupIamPolicyState
Input properties used for looking up and filtering AddressGroupIamPolicy resources.
AddressGroupState
Input properties used for looking up and filtering AddressGroup resources.
AuthorizationPolicy
AuthorizationPolicy is a resource that specifies how a server should authorize incoming connections. This resource in itself does not change the configuration unless it's attached to a target https proxy or endpoint config selector resource.
AuthorizationPolicyArgs
The set of arguments for AuthorizationPolicy. The set of arguments for AuthorizationPolicy.
AuthorizationPolicyRule
AuthorizationPolicyRuleDestination
AuthorizationPolicyRuleDestinationHttpHeaderMatch
AuthorizationPolicyRuleSource
AuthorizationPolicyState
Input properties used for looking up and filtering AuthorizationPolicy resources.
AuthzPolicy
AuthzPolicy is a resource that allows to forward traffic to a callout backend designed to scan the traffic for security purposes.
AuthzPolicyArgs
The set of arguments for AuthzPolicy. The set of arguments for AuthzPolicy.
AuthzPolicyCustomProvider
AuthzPolicyCustomProviderAuthzExtension
AuthzPolicyCustomProviderCloudIap
AuthzPolicyHttpRule
AuthzPolicyHttpRuleFrom
AuthzPolicyHttpRuleFromNotSource
AuthzPolicyHttpRuleFromNotSourceIpBlock
AuthzPolicyHttpRuleFromNotSourcePrincipal
AuthzPolicyHttpRuleFromNotSourcePrincipalPrincipal
AuthzPolicyHttpRuleFromNotSourceResource
AuthzPolicyHttpRuleFromNotSourceResourceIamServiceAccount
AuthzPolicyHttpRuleFromNotSourceResourceTagValueIdSet
AuthzPolicyHttpRuleFromSource
AuthzPolicyHttpRuleFromSourceIpBlock
AuthzPolicyHttpRuleFromSourcePrincipal
AuthzPolicyHttpRuleFromSourcePrincipalPrincipal
AuthzPolicyHttpRuleFromSourceResource
AuthzPolicyHttpRuleFromSourceResourceIamServiceAccount
AuthzPolicyHttpRuleFromSourceResourceTagValueIdSet
AuthzPolicyHttpRuleTo
AuthzPolicyHttpRuleToNotOperation
AuthzPolicyHttpRuleToNotOperationHeaderSet
AuthzPolicyHttpRuleToNotOperationHeaderSetHeader
AuthzPolicyHttpRuleToNotOperationHeaderSetHeaderValue
AuthzPolicyHttpRuleToNotOperationHost
AuthzPolicyHttpRuleToNotOperationPath
AuthzPolicyHttpRuleToOperation
AuthzPolicyHttpRuleToOperationHeaderSet
AuthzPolicyHttpRuleToOperationHeaderSetHeader
AuthzPolicyHttpRuleToOperationHeaderSetHeaderValue
AuthzPolicyHttpRuleToOperationHost
AuthzPolicyHttpRuleToOperationMcp
AuthzPolicyHttpRuleToOperationMcpMethod
AuthzPolicyHttpRuleToOperationMcpMethodParam
AuthzPolicyHttpRuleToOperationPath
AuthzPolicyNetworkRule
AuthzPolicyNetworkRuleFrom
AuthzPolicyNetworkRuleFromNotSource
AuthzPolicyNetworkRuleFromNotSourceIpBlock
AuthzPolicyNetworkRuleFromNotSourcePrincipal
AuthzPolicyNetworkRuleFromNotSourcePrincipalPrincipal
AuthzPolicyNetworkRuleFromSource
AuthzPolicyNetworkRuleFromSourceIpBlock
AuthzPolicyNetworkRuleFromSourcePrincipal
AuthzPolicyNetworkRuleFromSourcePrincipalPrincipal
AuthzPolicyNetworkRuleTo
AuthzPolicyNetworkRuleToOperation
AuthzPolicyNetworkRuleToOperationSni
AuthzPolicyState
Input properties used for looking up and filtering AuthzPolicy resources.
AuthzPolicyTarget
BackendAuthenticationConfig
BackendAuthenticationConfig groups the TrustConfig together with other settings that control how the load balancer authenticates, and expresses its identity to the backend.
BackendAuthenticationConfigArgs
The set of arguments for BackendAuthenticationConfig. The set of arguments for BackendAuthenticationConfig.
BackendAuthenticationConfigState
Input properties used for looking up and filtering BackendAuthenticationConfig resources.
ClientTlsPolicy
ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
ClientTlsPolicyArgs
The set of arguments for ClientTlsPolicy. The set of arguments for ClientTlsPolicy.
ClientTlsPolicyClientCertificate
ClientTlsPolicyClientCertificateCertificateProviderInstance
ClientTlsPolicyClientCertificateGrpcEndpoint
ClientTlsPolicyServerValidationCa
ClientTlsPolicyServerValidationCaCertificateProviderInstance
ClientTlsPolicyServerValidationCaGrpcEndpoint
ClientTlsPolicyState
Input properties used for looking up and filtering ClientTlsPolicy resources.
DnsThreatDetector
DNS Armor is a fully-managed service that provides DNS-layer security for your Google Cloud workloads.
DnsThreatDetectorArgs
The set of arguments for DnsThreatDetector. The set of arguments for DnsThreatDetector.
DnsThreatDetectorState
Input properties used for looking up and filtering DnsThreatDetector resources.
FirewallEndpoint
A Firewall endpoint is a Cloud Firewall resource that enables layer 7 advanced protection capabilities, such as intrusion prevention, in your network.
FirewallEndpointArgs
The set of arguments for FirewallEndpoint. The set of arguments for FirewallEndpoint.
FirewallEndpointAssociation
Firewall endpoint association links a firewall endpoint to a VPC network in the same zone. After you define this association, Cloud Firewall forwards the zonal workload traffic in your VPC network that requires layer 7 inspection to the attached firewall endpoint.
FirewallEndpointAssociationArgs
The set of arguments for FirewallEndpointAssociation. The set of arguments for FirewallEndpointAssociation.
FirewallEndpointAssociationState
Input properties used for looking up and filtering FirewallEndpointAssociation resources.
FirewallEndpointEndpointSettings
FirewallEndpointState
Input properties used for looking up and filtering FirewallEndpoint resources.
GatewaySecurityPolicy
The GatewaySecurityPolicy resource contains a collection of GatewaySecurityPolicyRules and associated metadata.
GatewaySecurityPolicyArgs
The set of arguments for GatewaySecurityPolicy. The set of arguments for GatewaySecurityPolicy.
GatewaySecurityPolicyRule
The GatewaySecurityPolicyRule resource is in a nested collection within a GatewaySecurityPolicy and represents a traffic matching condition and associated action to perform.
GatewaySecurityPolicyRuleArgs
The set of arguments for GatewaySecurityPolicyRule. The set of arguments for GatewaySecurityPolicyRule.
GatewaySecurityPolicyRuleState
Input properties used for looking up and filtering GatewaySecurityPolicyRule resources.
GatewaySecurityPolicyState
Input properties used for looking up and filtering GatewaySecurityPolicy resources.
GetAddressGroupIamPolicyArgs
Arguments for getAddressGroupIamPolicy. Arguments for getAddressGroupIamPolicy.
GetAddressGroupIamPolicyResult
Result data returned by getAddressGroupIamPolicy.
GetAddressGroupsAddressGroup
GetAddressGroupsArgs
Arguments for getAddressGroups. Arguments for getAddressGroups.
GetAddressGroupsResult
Result data returned by getAddressGroups.
InterceptDeployment
A deployment represents a zonal intercept backend ready to accept GENEVE-encapsulated traffic, e.g. a zonal instance group fronted by an internal passthrough load balancer. Deployments are always part of a global deployment group which represents a global intercept service.
InterceptDeploymentArgs
The set of arguments for InterceptDeployment. The set of arguments for InterceptDeployment.
InterceptDeploymentGroup
A deployment group aggregates many zonal intercept backends (deployments) into a single global intercept service. Consumers can connect this service using an endpoint group.
InterceptDeploymentGroupArgs
The set of arguments for InterceptDeploymentGroup. The set of arguments for InterceptDeploymentGroup.
InterceptDeploymentGroupConnectedEndpointGroup
InterceptDeploymentGroupLocation
InterceptDeploymentGroupState
Input properties used for looking up and filtering InterceptDeploymentGroup resources.
InterceptDeploymentState
Input properties used for looking up and filtering InterceptDeployment resources.
InterceptEndpointGroup
An endpoint group is a consumer frontend for a deployment group (backend). In order to configure intercept for a network, consumers must create:
InterceptEndpointGroupArgs
The set of arguments for InterceptEndpointGroup. The set of arguments for InterceptEndpointGroup.
InterceptEndpointGroupAssociation
InterceptEndpointGroupAssociationArgs
The set of arguments for InterceptEndpointGroupAssociation. The set of arguments for InterceptEndpointGroupAssociation.
InterceptEndpointGroupAssociationLocation
InterceptEndpointGroupAssociationLocationsDetail
InterceptEndpointGroupAssociationNetworksecurity
An endpoint group association represents a link between a network and an endpoint group in the organization.
InterceptEndpointGroupAssociationState
Input properties used for looking up and filtering InterceptEndpointGroupAssociation resources.
InterceptEndpointGroupConnectedDeploymentGroup
InterceptEndpointGroupConnectedDeploymentGroupLocation
InterceptEndpointGroupState
Input properties used for looking up and filtering InterceptEndpointGroup resources.
MirroringDeployment
A deployment represents a zonal mirroring backend ready to accept GENEVE-encapsulated replica traffic, e.g. a zonal instance group fronted by an internal passthrough load balancer. Deployments are always part of a global deployment group which represents a global mirroring service.
MirroringDeploymentArgs
The set of arguments for MirroringDeployment. The set of arguments for MirroringDeployment.
MirroringDeploymentGroup
A deployment group aggregates many zonal mirroring backends (deployments) into a single global mirroring service. Consumers can connect this service using an endpoint group.
MirroringDeploymentGroupArgs
The set of arguments for MirroringDeploymentGroup. The set of arguments for MirroringDeploymentGroup.
MirroringDeploymentGroupConnectedEndpointGroup
MirroringDeploymentGroupLocation
MirroringDeploymentGroupState
Input properties used for looking up and filtering MirroringDeploymentGroup resources.
MirroringDeploymentState
Input properties used for looking up and filtering MirroringDeployment resources.
MirroringEndpoint
An endpoint is a managed mirroring collector that provides enhanced packet enrichment capabilities and support for multiple replica destinations. Endpoints are always part of a global endpoint group which represents a global "mirroring broker" service.
MirroringEndpointArgs
The set of arguments for MirroringEndpoint. The set of arguments for MirroringEndpoint.
MirroringEndpointGroup
An endpoint group is a consumer frontend for a deployment group (backend). In order to configure mirroring for a network, consumers must create:
MirroringEndpointGroupArgs
The set of arguments for MirroringEndpointGroup. The set of arguments for MirroringEndpointGroup.
MirroringEndpointGroupAssociation
MirroringEndpointGroupAssociationArgs
The set of arguments for MirroringEndpointGroupAssociation. The set of arguments for MirroringEndpointGroupAssociation.
MirroringEndpointGroupAssociationLocation
MirroringEndpointGroupAssociationLocationsDetail
MirroringEndpointGroupAssociationNetworksecurity
An endpoint group association represents a link between a network and an endpoint group in the organization.
MirroringEndpointGroupAssociationState
Input properties used for looking up and filtering MirroringEndpointGroupAssociation resources.
MirroringEndpointGroupConnectedDeploymentGroup
MirroringEndpointGroupConnectedDeploymentGroupLocation
MirroringEndpointGroupState
Input properties used for looking up and filtering MirroringEndpointGroup resources.
MirroringEndpointState
Input properties used for looking up and filtering MirroringEndpoint resources.
SacAttachment
Represents a Secure Access Connect (SAC) attachment resource
SacAttachmentArgs
The set of arguments for SacAttachment. The set of arguments for SacAttachment.
SacAttachmentState
Input properties used for looking up and filtering SacAttachment resources.
SacAttachmentSymantecOptions
SacRealm
Secure Access Connect Realm resource
SacRealmArgs
The set of arguments for SacRealm. The set of arguments for SacRealm.
SacRealmPairingKey
SacRealmState
Input properties used for looking up and filtering SacRealm resources.
SacRealmSymantecOptions
SecurityProfile
A security profile defines the behavior associated to a profile type.
SecurityProfileArgs
The set of arguments for SecurityProfile. The set of arguments for SecurityProfile.
SecurityProfileCustomInterceptProfile
SecurityProfileCustomMirroringProfile
SecurityProfileGroup
A security profile group defines a container for security profiles.
SecurityProfileGroupArgs
The set of arguments for SecurityProfileGroup. The set of arguments for SecurityProfileGroup.
SecurityProfileGroupState
Input properties used for looking up and filtering SecurityProfileGroup resources.
SecurityProfileState
Input properties used for looking up and filtering SecurityProfile resources.
SecurityProfileThreatPreventionProfile
SecurityProfileThreatPreventionProfileAntivirusOverride
SecurityProfileThreatPreventionProfileSeverityOverride
SecurityProfileThreatPreventionProfileThreatOverride
SecurityProfileUrlFilteringProfile
SecurityProfileUrlFilteringProfileUrlFilter
ServerTlsPolicy
ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target HTTPS proxy or endpoint config selector resource.
ServerTlsPolicyArgs
The set of arguments for ServerTlsPolicy. The set of arguments for ServerTlsPolicy.
ServerTlsPolicyMtlsPolicy
ServerTlsPolicyMtlsPolicyClientValidationCa
ServerTlsPolicyMtlsPolicyClientValidationCaCertificateProviderInstance
ServerTlsPolicyMtlsPolicyClientValidationCaGrpcEndpoint
ServerTlsPolicyServerCertificate
ServerTlsPolicyServerCertificateCertificateProviderInstance
ServerTlsPolicyServerCertificateGrpcEndpoint
ServerTlsPolicyState
Input properties used for looking up and filtering ServerTlsPolicy resources.
TlsInspectionPolicy
The TlsInspectionPolicy resource contains references to CA pools in Certificate Authority Service and associated metadata.
TlsInspectionPolicyArgs
The set of arguments for TlsInspectionPolicy. The set of arguments for TlsInspectionPolicy.
TlsInspectionPolicyState
Input properties used for looking up and filtering TlsInspectionPolicy resources.
UllMirroringCollector
A Mirroring Collector is a logical representation of an appliance that collects mirrored traffic.
UllMirroringCollectorArgs
The set of arguments for UllMirroringCollector. The set of arguments for UllMirroringCollector.
UllMirroringCollectorRule
UllMirroringCollectorRule is a resource that defines what traffic should be mirrored.
UllMirroringCollectorRuleArgs
The set of arguments for UllMirroringCollectorRule. The set of arguments for UllMirroringCollectorRule.
UllMirroringCollectorRuleMatch
UllMirroringCollectorRuleState
Input properties used for looking up and filtering UllMirroringCollectorRule resources.
UllMirroringCollectorState
Input properties used for looking up and filtering UllMirroringCollector resources.
UllMirroringEngine
A Mirroring Engine is a logical representation of the underlying infrastructure that is used to manage and monitor the ULL Mirroring setup.
UllMirroringEngineArgs
The set of arguments for UllMirroringEngine. The set of arguments for UllMirroringEngine.
UllMirroringEngineState
Input properties used for looking up and filtering UllMirroringEngine resources.
UrlList
UrlList proto helps users to set reusable, independently manageable lists of hosts, host patterns, URLs, URL patterns.
UrlListArgs
The set of arguments for UrlList. The set of arguments for UrlList.
UrlListState
Input properties used for looking up and filtering UrlList resources.

Functions

getAddressGroupIamPolicy(GetAddressGroupIamPolicyArgs args, {InvokeOptions? options}) → Future<GetAddressGroupIamPolicyResult>
Retrieves the current IAM policy data for projectaddressgroup args Arguments passed to this invoke. Arguments for getAddressGroupIamPolicy. options Invoke options controlling this call.
getAddressGroupIamPolicyOutput(GetAddressGroupIamPolicyArgs args, {InvokeOutputOptions? options}) → Output<GetAddressGroupIamPolicyResult>
getAddressGroups(GetAddressGroupsArgs args, {InvokeOptions? options}) → Future<GetAddressGroupsResult>
AddressGroups are used to group IP addresses together for use in firewall policies. This data source allows you to list address groups in a project or organization and location.
getAddressGroupsOutput(GetAddressGroupsArgs args, {InvokeOutputOptions? options}) → Output<GetAddressGroupsResult>