Class ServicePerimeterConfig (1.4.0)

Version 1.4.0

• 2.5.0 (latest)
• 2.4.0
• 2.3.0
• 2.2.0
• 2.1.0
• 2.0.0
• 1.5.0
• 1.4.0
• 1.3.0
• 1.2.0

public sealed class ServicePerimeterConfig : IMessage<ServicePerimeterConfig>, IEquatable<ServicePerimeterConfig>, IDeepCloneable<ServicePerimeterConfig>, IBufferMessage, IMessage

ServicePerimeterConfig specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.

Inheritance

Object > ServicePerimeterConfig

Implements

IMessage<ServicePerimeterConfig>, IEquatable<ServicePerimeterConfig>, IDeepCloneable<ServicePerimeterConfig>, IBufferMessage, IMessage

Inherited Members

Object.GetHashCode()

Object.GetType()

Object.MemberwiseClone()

Object.ToString()

Namespace

Google.Identity.AccessContextManager.V1

Assembly

Google.Identity.AccessContextManager.V1.dll

Constructors

ServicePerimeterConfig()

public ServicePerimeterConfig()

ServicePerimeterConfig(ServicePerimeterConfig)

public ServicePerimeterConfig(ServicePerimeterConfig other)

Parameter
Name	Description
other	ServicePerimeterConfig

Properties

AccessLevels

public RepeatedField<string> AccessLevels { get; }

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL". For Service Perimeter Bridge, must be empty.

Property Value
Type	Description
RepeatedField<String>

EgressPolicies

public RepeatedField<ServicePerimeterConfig.Types.EgressPolicy> EgressPolicies { get; }

List of [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] to apply to the perimeter. A perimeter may have multiple [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy], each of which is evaluated separately. Access is granted if any [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] grants it. Must be empty for a perimeter bridge.

Property Value
Type	Description
RepeatedField<ServicePerimeterConfig.Types.EgressPolicy>

IngressPolicies

public RepeatedField<ServicePerimeterConfig.Types.IngressPolicy> IngressPolicies { get; }

List of [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] to apply to the perimeter. A perimeter may have multiple [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy], each of which is evaluated separately. Access is granted if any [Ingress Policy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] grants it. Must be empty for a perimeter bridge.

Property Value
Type	Description
RepeatedField<ServicePerimeterConfig.Types.IngressPolicy>

Resources

public RepeatedField<string> Resources { get; }

A list of Google Cloud resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}

Property Value
Type	Description
RepeatedField<String>

RestrictedServices

public RepeatedField<string> RestrictedServices { get; }

Google Cloud services that are subject to the Service Perimeter restrictions. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

Property Value
Type	Description
RepeatedField<String>

VpcAccessibleServices

public ServicePerimeterConfig.Types.VpcAccessibleServices VpcAccessibleServices { get; set; }

Configuration for APIs allowed within Perimeter.

Property Value
Type	Description
ServicePerimeterConfig.Types.VpcAccessibleServices