AuthzPolicyArgs class

The set of arguments for AuthzPolicy. The set of arguments for AuthzPolicy.

Constructors

AuthzPolicyArgs({required Input<String> action, Input<AuthzPolicyCustomProvider?>? customProvider, Input<String?>? deletionPolicy, Input<String?>? description, Input<List<AuthzPolicyHttpRule>?>? httpRules, Input<Map<String, String>?>? labels, required Input<String> location, Input<String?>? name, Input<List<AuthzPolicyNetworkRule>?>? networkRules, Input<String?>? policyProfile, Input<String?>? project, required Input<AuthzPolicyTarget> target})
Creates a new AuthzPolicyArgs. action When the action is CUSTOM, customProvider must be specified. customProvider Required if the action is CUSTOM. Allows delegating authorization decisions to Cloud IAP or to Service Extensions. One of cloudIap or authzExtension must be specified. deletionPolicy Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. description A human-readable description of the resource. httpRules A list of authorization HTTP rules to match against the incoming request.A policy match occurs when at least one HTTP rule matches the request or when no HTTP rules are specified in the policy. At least one HTTP Rule is required for Allow or Deny Action. labels Set of labels associated with the AuthzExtension resource. location The location of the resource. name Identifier. Name of the AuthzPolicy resource. networkRules A list of authorization HTTP rules to match against the incoming request.A policy match occurs when at least one HTTP rule matches the request or when no HTTP rules are specified in the policy. At least one HTTP Rule is required for Allow or Deny Action. policyProfile Defines the type of authorization being performed. REQUEST_AUTHZ applies to request authorization. CUSTOM project The ID of the project in which the resource belongs. target Specifies the set of resources to which this policy should be applied to.
const
AuthzPolicyArgs.fromMap(Map<String, dynamic> map)
factory

Properties

action → Input<String>
When the action is CUSTOM, customProvider must be specified. When the action is ALLOW, only requests matching the policy will be allowed. When the action is DENY, only requests matching the policy will be denied. When a request arrives, the policies are evaluated in the following order:
final
customProvider → Input<AuthzPolicyCustomProvider?>?
Required if the action is CUSTOM. Allows delegating authorization decisions to Cloud IAP or to Service Extensions. One of cloudIap or authzExtension must be specified. Structure is documented below.
final
deletionPolicy → Input<String?>?
Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
final
description → Input<String?>?
A human-readable description of the resource.
final
hashCode → int
The hash code for this object.
no setterinherited
httpRules → Input<List<AuthzPolicyHttpRule>?>?
A list of authorization HTTP rules to match against the incoming request.A policy match occurs when at least one HTTP rule matches the request or when no HTTP rules are specified in the policy. At least one HTTP Rule is required for Allow or Deny Action. Limited to 5 rules. Structure is documented below.
final
labels → Input<Map<String, String>?>?
Set of labels associated with the AuthzExtension resource.
final
location → Input<String>
The location of the resource.
final
name → Input<String?>?
Identifier. Name of the AuthzPolicy resource.
final
networkRules → Input<List<AuthzPolicyNetworkRule>?>?
A list of authorization HTTP rules to match against the incoming request.A policy match occurs when at least one HTTP rule matches the request or when no HTTP rules are specified in the policy. At least one HTTP Rule is required for Allow or Deny Action. Limited to 5 rules. Structure is documented below.
final
policyProfile → Input<String?>?
Defines the type of authorization being performed. REQUEST_AUTHZ applies to request authorization. CUSTOM authorization policies with Authz extensions will be allowed with extAuthz or extProc protocols. Extensions are invoked only once when the request headers arrive. CONTENT_AUTHZ applies to content security, sanitization, etc. Only CUSTOM action is allowed in this policy profile. AuthzExtensions in the custom provider must support extProc protocol and be capable of receiving all extProc events (REQUEST_HEADERS, REQUEST_BODY, REQUEST_TRAILERS, RESPONSE_HEADERS, RESPONSE_BODY, RESPONSE_TRAILERS) with FULL_DUPLEX_STREAMED body send mode. Possible values are: REQUEST_AUTHZ, CONTENT_AUTHZ.
final
project → Input<String?>?
The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
target → Input<AuthzPolicyTarget>
Specifies the set of resources to which this policy should be applied to. Structure is documented below.
final

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited