Access Context Manager V1 Client - Class ServicePerimeterConfig (0.3.5)

Version 0.3.5

• 1.0.1 (latest)
• 1.0.0
• 0.5.5
• 0.4.5
• 0.3.5

Reference documentation and code samples for the Access Context Manager V1 Client class ServicePerimeterConfig.

ServicePerimeterConfig specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.

Generated from protobuf message google.identity.accesscontextmanager.v1.ServicePerimeterConfig

Methods

__construct

Constructor.

Parameters
Name	Description
data	array Optional. Data for populating the Message object.
↳ resources	array A list of Google Cloud resources that are inside of the service perimeter. Currently only projects are allowed. Format: projects/{project_number}
↳ access_levels	array A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL". For Service Perimeter Bridge, must be empty.
↳ restricted_services	array Google Cloud services that are subject to the Service Perimeter restrictions. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.
↳ vpc_accessible_services	Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\VpcAccessibleServices Configuration for APIs allowed within Perimeter.
↳ ingress_policies	array<Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\IngressPolicy> List of [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] to apply to the perimeter. A perimeter may have multiple [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy], each of which is evaluated separately. Access is granted if any [Ingress Policy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] grants it. Must be empty for a perimeter bridge.
↳ egress_policies	array<Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\EgressPolicy> List of [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] to apply to the perimeter. A perimeter may have multiple [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy], each of which is evaluated separately. Access is granted if any [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] grants it. Must be empty for a perimeter bridge.

getResources

A list of Google Cloud resources that are inside of the service perimeter.

Currently only projects are allowed. Format: projects/{project_number}

Returns
Type	Description
Google\Protobuf\Internal\RepeatedField

setResources

A list of Google Cloud resources that are inside of the service perimeter.

Currently only projects are allowed. Format: projects/{project_number}

Parameter
Name	Description
var	string[]

Returns
Type	Description
$this

getAccessLevels

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL".

For Service Perimeter Bridge, must be empty.

Returns
Type	Description
Google\Protobuf\Internal\RepeatedField

setAccessLevels

A list of AccessLevel resource names that allow resources within the ServicePerimeter to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel is a syntax error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: "accessPolicies/MY_POLICY/accessLevels/MY_LEVEL".

For Service Perimeter Bridge, must be empty.

Parameter
Name	Description
var	string[]

Returns
Type	Description
$this

getRestrictedServices

Google Cloud services that are subject to the Service Perimeter restrictions. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

Returns
Type	Description
Google\Protobuf\Internal\RepeatedField

setRestrictedServices

Google Cloud services that are subject to the Service Perimeter restrictions. For example, if storage.googleapis.com is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions.

Parameter
Name	Description
var	string[]

Returns
Type	Description
$this

getVpcAccessibleServices

Configuration for APIs allowed within Perimeter.

Returns
Type	Description
Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\VpcAccessibleServices|null

hasVpcAccessibleServices

clearVpcAccessibleServices

setVpcAccessibleServices

Configuration for APIs allowed within Perimeter.

Parameter
Name	Description
var	Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\VpcAccessibleServices

Returns
Type	Description
$this

getIngressPolicies

List of [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] to apply to the perimeter. A perimeter may have multiple [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy], each of which is evaluated separately. Access is granted if any [Ingress Policy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] grants it. Must be empty for a perimeter bridge.

Returns
Type	Description
Google\Protobuf\Internal\RepeatedField

setIngressPolicies

List of [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] to apply to the perimeter. A perimeter may have multiple [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy], each of which is evaluated separately. Access is granted if any [Ingress Policy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] grants it. Must be empty for a perimeter bridge.

Parameter
Name	Description
var	array<Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\IngressPolicy>

Returns
Type	Description
$this

getEgressPolicies

List of [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] to apply to the perimeter. A perimeter may have multiple [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy], each of which is evaluated separately. Access is granted if any [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] grants it. Must be empty for a perimeter bridge.

Returns
Type	Description
Google\Protobuf\Internal\RepeatedField

setEgressPolicies

List of [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] to apply to the perimeter. A perimeter may have multiple [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy], each of which is evaluated separately. Access is granted if any [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] grants it. Must be empty for a perimeter bridge.

Parameter
Name	Description
var	array<Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\EgressPolicy>

Returns
Type	Description
$this