Class Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::EgressPolicy (v0.17.3)

Policy for egress from perimeter.

[EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] match requests based on egress_from and egress_to stanzas. For an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] to match, both egress_from and egress_to stanzas must be matched. If an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] matches a request, the request is allowed to span the [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter] boundary. For example, an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] can be used to allow VMs on networks within the [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter] to access a defined set of projects outside the perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket or query against a BigQuery dataset).

[EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] are concerned with the resources that a request relates as well as the API services and API actions being used. They do not related to the direction of data movement. More detailed documentation for this concept can be found in the descriptions of [EgressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom] and [EgressTo] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo].

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#egress_from

def egress_from() -> ::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::EgressFrom
Returns

#egress_from=

def egress_from=(value) -> ::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::EgressFrom
Parameter
Returns

#egress_to

def egress_to() -> ::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::EgressTo
Returns

#egress_to=

def egress_to=(value) -> ::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::EgressTo
Parameter
Returns