▽

Package accesscontextmanager

Constants

Deprecated: Please use consts in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

const (
    BasicLevel_AND                                   = src.BasicLevel_AND
    BasicLevel_OR                                    = src.BasicLevel_OR
    LevelFormat_AS_DEFINED                           = src.LevelFormat_AS_DEFINED
    LevelFormat_CEL                                  = src.LevelFormat_CEL
    LevelFormat_LEVEL_FORMAT_UNSPECIFIED             = src.LevelFormat_LEVEL_FORMAT_UNSPECIFIED
    ServicePerimeterConfig_ANY_IDENTITY              = src.ServicePerimeterConfig_ANY_IDENTITY
    ServicePerimeterConfig_ANY_SERVICE_ACCOUNT       = src.ServicePerimeterConfig_ANY_SERVICE_ACCOUNT
    ServicePerimeterConfig_ANY_USER_ACCOUNT          = src.ServicePerimeterConfig_ANY_USER_ACCOUNT
    ServicePerimeterConfig_IDENTITY_TYPE_UNSPECIFIED = src.ServicePerimeterConfig_IDENTITY_TYPE_UNSPECIFIED
    ServicePerimeter_PERIMETER_TYPE_BRIDGE           = src.ServicePerimeter_PERIMETER_TYPE_BRIDGE
    ServicePerimeter_PERIMETER_TYPE_REGULAR          = src.ServicePerimeter_PERIMETER_TYPE_REGULAR
)

Variables

Deprecated: Please use vars in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

var (
    BasicLevel_ConditionCombiningFunction_name                                 = src.BasicLevel_ConditionCombiningFunction_name
    BasicLevel_ConditionCombiningFunction_value                                = src.BasicLevel_ConditionCombiningFunction_value
    File_google_identity_accesscontextmanager_v1_access_context_manager_proto  = src.File_google_identity_accesscontextmanager_v1_access_context_manager_proto
    File_google_identity_accesscontextmanager_v1_access_level_proto            = src.File_google_identity_accesscontextmanager_v1_access_level_proto
    File_google_identity_accesscontextmanager_v1_access_policy_proto           = src.File_google_identity_accesscontextmanager_v1_access_policy_proto
    File_google_identity_accesscontextmanager_v1_gcp_user_access_binding_proto = src.File_google_identity_accesscontextmanager_v1_gcp_user_access_binding_proto
    File_google_identity_accesscontextmanager_v1_service_perimeter_proto       = src.File_google_identity_accesscontextmanager_v1_service_perimeter_proto
    LevelFormat_name                                                           = src.LevelFormat_name
    LevelFormat_value                                                          = src.LevelFormat_value
    ServicePerimeterConfig_IdentityType_name                                   = src.ServicePerimeterConfig_IdentityType_name
    ServicePerimeterConfig_IdentityType_value                                  = src.ServicePerimeterConfig_IdentityType_value
    ServicePerimeter_PerimeterType_name                                        = src.ServicePerimeter_PerimeterType_name
    ServicePerimeter_PerimeterType_value                                       = src.ServicePerimeter_PerimeterType_value
)

func RegisterAccessContextManagerServer ¶

func RegisterAccessContextManagerServer(s *grpc.Server, srv AccessContextManagerServer)

Deprecated: Please use funcs in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type AccessContextManagerClient ¶

AccessContextManagerClient is the client API for AccessContextManager service. For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type AccessContextManagerClient = src.AccessContextManagerClient

func NewAccessContextManagerClient ¶

func NewAccessContextManagerClient(cc grpc.ClientConnInterface) AccessContextManagerClient

Deprecated: Please use funcs in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type AccessContextManagerOperationMetadata ¶

Metadata of Access Context Manager's Long Running Operations.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type AccessContextManagerOperationMetadata = src.AccessContextManagerOperationMetadata

type AccessContextManagerServer ¶

AccessContextManagerServer is the server API for AccessContextManager service.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type AccessContextManagerServer = src.AccessContextManagerServer

type AccessLevel ¶

An `AccessLevel` is a label that can be applied to requests to Google Cloud services, along with a list of requirements necessary for the label to be applied.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type AccessLevel = src.AccessLevel

type AccessLevel_Basic ¶

type AccessLevel_Basic = src.AccessLevel_Basic

type AccessLevel_Custom ¶

type AccessLevel_Custom = src.AccessLevel_Custom

type AccessPolicy ¶

`AccessPolicy` is a container for `AccessLevels` (which define the necessary attributes to use Google Cloud services) and `ServicePerimeters` (which define regions of services able to freely pass data within a perimeter). An access policy is globally visible within an organization, and the restrictions it specifies apply to all projects within an organization.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type AccessPolicy = src.AccessPolicy

type BasicLevel ¶

`BasicLevel` is an `AccessLevel` using a set of recommended features.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type BasicLevel = src.BasicLevel

type BasicLevel_ConditionCombiningFunction ¶

Options for how the `conditions` list should be combined to determine if this `AccessLevel` is applied. Default is AND.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type BasicLevel_ConditionCombiningFunction = src.BasicLevel_ConditionCombiningFunction

type CommitServicePerimetersRequest ¶

A request to commit dry-run specs in all [Service Perimeters] [google.identity.accesscontextmanager.v1.ServicePerimeter] belonging to an [Access Policy][google.identity.accesscontextmanager.v1.AccessPolicy].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type CommitServicePerimetersRequest = src.CommitServicePerimetersRequest

type CommitServicePerimetersResponse ¶

A response to CommitServicePerimetersRequest. This will be put inside of Operation.response field.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type CommitServicePerimetersResponse = src.CommitServicePerimetersResponse

type Condition ¶

A condition necessary for an `AccessLevel` to be granted. The Condition is an AND over its fields. So a Condition is true if: 1) the request IP is from one of the listed subnetworks AND 2) the originating device complies with the listed device policy AND 3) all listed access levels are granted AND 4) the request was sent at a time allowed by the DateTimeRestriction.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type Condition = src.Condition

type CreateAccessLevelRequest ¶

A request to create an `AccessLevel`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type CreateAccessLevelRequest = src.CreateAccessLevelRequest

type CreateGcpUserAccessBindingRequest ¶

Request of [CreateGcpUserAccessBinding] [google.identity.accesscontextmanager.v1.AccessContextManager.CreateGcpUserAccessBinding].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type CreateGcpUserAccessBindingRequest = src.CreateGcpUserAccessBindingRequest

type CreateServicePerimeterRequest ¶

A request to create a `ServicePerimeter`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type CreateServicePerimeterRequest = src.CreateServicePerimeterRequest

type CustomLevel ¶

`CustomLevel` is an `AccessLevel` using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type CustomLevel = src.CustomLevel

type DeleteAccessLevelRequest ¶

A request to delete an `AccessLevel`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type DeleteAccessLevelRequest = src.DeleteAccessLevelRequest

type DeleteAccessPolicyRequest ¶

A request to delete an `AccessPolicy`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type DeleteAccessPolicyRequest = src.DeleteAccessPolicyRequest

type DeleteGcpUserAccessBindingRequest ¶

Request of [DeleteGcpUserAccessBinding] [google.identity.accesscontextmanager.v1.AccessContextManager.DeleteGcpUserAccessBinding].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type DeleteGcpUserAccessBindingRequest = src.DeleteGcpUserAccessBindingRequest

type DeleteServicePerimeterRequest ¶

A request to delete a `ServicePerimeter`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type DeleteServicePerimeterRequest = src.DeleteServicePerimeterRequest

type DevicePolicy ¶

`DevicePolicy` specifies device specific restrictions necessary to acquire a given access level. A `DevicePolicy` specifies requirements for requests from devices to be granted access levels, it does not do any enforcement on the device. `DevicePolicy` acts as an AND over all specified fields, and each repeated field is an OR over its elements. Any unset fields are ignored. For example, if the proto is { os_type : DESKTOP_WINDOWS, os_type : DESKTOP_LINUX, encryption_status: ENCRYPTED}, then the DevicePolicy will be true for requests originating from encrypted Linux desktops and encrypted Windows desktops.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type DevicePolicy = src.DevicePolicy

type GcpUserAccessBinding ¶

Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type GcpUserAccessBinding = src.GcpUserAccessBinding

type GcpUserAccessBindingOperationMetadata ¶

Currently, a completed operation means nothing. In the future, this metadata and a completed operation may indicate that the binding has taken effect and is affecting access decisions for all users.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type GcpUserAccessBindingOperationMetadata = src.GcpUserAccessBindingOperationMetadata

type GetAccessLevelRequest ¶

A request to get a particular `AccessLevel`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type GetAccessLevelRequest = src.GetAccessLevelRequest

type GetAccessPolicyRequest ¶

A request to get a particular `AccessPolicy`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type GetAccessPolicyRequest = src.GetAccessPolicyRequest

type GetGcpUserAccessBindingRequest ¶

Request of [GetGcpUserAccessBinding] [google.identity.accesscontextmanager.v1.AccessContextManager.GetGcpUserAccessBinding].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type GetGcpUserAccessBindingRequest = src.GetGcpUserAccessBindingRequest

type GetServicePerimeterRequest ¶

A request to get a particular `ServicePerimeter`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type GetServicePerimeterRequest = src.GetServicePerimeterRequest

type LevelFormat ¶

The format used in an `AccessLevel`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type LevelFormat = src.LevelFormat

type ListAccessLevelsRequest ¶

A request to list all `AccessLevels` in an `AccessPolicy`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListAccessLevelsRequest = src.ListAccessLevelsRequest

type ListAccessLevelsResponse ¶

A response to `ListAccessLevelsRequest`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListAccessLevelsResponse = src.ListAccessLevelsResponse

type ListAccessPoliciesRequest ¶

A request to list all `AccessPolicies` for a container.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListAccessPoliciesRequest = src.ListAccessPoliciesRequest

type ListAccessPoliciesResponse ¶

A response to `ListAccessPoliciesRequest`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListAccessPoliciesResponse = src.ListAccessPoliciesResponse

type ListGcpUserAccessBindingsRequest ¶

Request of [ListGcpUserAccessBindings] [google.identity.accesscontextmanager.v1.AccessContextManager.ListGcpUserAccessBindings].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListGcpUserAccessBindingsRequest = src.ListGcpUserAccessBindingsRequest

type ListGcpUserAccessBindingsResponse ¶

Response of [ListGcpUserAccessBindings] [google.identity.accesscontextmanager.v1.AccessContextManager.ListGcpUserAccessBindings].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListGcpUserAccessBindingsResponse = src.ListGcpUserAccessBindingsResponse

type ListServicePerimetersRequest ¶

A request to list all `ServicePerimeters` in an `AccessPolicy`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListServicePerimetersRequest = src.ListServicePerimetersRequest

type ListServicePerimetersResponse ¶

A response to `ListServicePerimetersRequest`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ListServicePerimetersResponse = src.ListServicePerimetersResponse

type OsConstraint ¶

A restriction on the OS type and version of devices making requests.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type OsConstraint = src.OsConstraint

type ReplaceAccessLevelsRequest ¶

A request to replace all existing Access Levels in an Access Policy with the Access Levels provided. This is done atomically.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ReplaceAccessLevelsRequest = src.ReplaceAccessLevelsRequest

type ReplaceAccessLevelsResponse ¶

A response to ReplaceAccessLevelsRequest. This will be put inside of Operation.response field.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ReplaceAccessLevelsResponse = src.ReplaceAccessLevelsResponse

type ReplaceServicePerimetersRequest ¶

A request to replace all existing Service Perimeters in an Access Policy with the Service Perimeters provided. This is done atomically.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ReplaceServicePerimetersRequest = src.ReplaceServicePerimetersRequest

type ReplaceServicePerimetersResponse ¶

A response to ReplaceServicePerimetersRequest. This will be put inside of Operation.response field.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ReplaceServicePerimetersResponse = src.ReplaceServicePerimetersResponse

type ServicePerimeter ¶

`ServicePerimeter` describes a set of Google Cloud resources which can freely import and export data amongst themselves, but not export outside of the `ServicePerimeter`. If a request with a source within this `ServicePerimeter` has a target outside of the `ServicePerimeter`, the request will be blocked. Otherwise the request is allowed. There are two types of Service Perimeter - Regular and Bridge. Regular Service Perimeters cannot overlap, a single Google Cloud project can only belong to a single regular Service Perimeter. Service Perimeter Bridges can contain only Google Cloud projects as members, a single Google Cloud project may belong to multiple Service Perimeter Bridges.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeter = src.ServicePerimeter

type ServicePerimeterConfig ¶

`ServicePerimeterConfig` specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig = src.ServicePerimeterConfig

type ServicePerimeterConfig_ApiOperation ¶

Identification for an API Operation.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_ApiOperation = src.ServicePerimeterConfig_ApiOperation

type ServicePerimeterConfig_EgressFrom ¶

Defines the conditions under which an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] matches a request. Conditions based on information about the source of the request. Note that if the destination of the request is also protected by a ServicePerimeter [google.identity.accesscontextmanager.v1.ServicePerimeter], then that ServicePerimeter [google.identity.accesscontextmanager.v1.ServicePerimeter] must have an [IngressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] which allows access in order for this request to succeed.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_EgressFrom = src.ServicePerimeterConfig_EgressFrom

type ServicePerimeterConfig_EgressPolicy ¶

Policy for egress from perimeter. [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] match requests based on `egress_from` and `egress_to` stanzas. For an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] to match, both `egress_from` and `egress_to` stanzas must be matched. If an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] matches a request, the request is allowed to span the ServicePerimeter [google.identity.accesscontextmanager.v1.ServicePerimeter] boundary. For example, an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] can be used to allow VMs on networks within the ServicePerimeter [google.identity.accesscontextmanager.v1.ServicePerimeter] to access a defined set of projects outside the perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket or query against a BigQuery dataset). [EgressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] are concerned with the *resources* that a request relates as well as the API services and API actions being used. They do not related to the direction of data movement. More detailed documentation for this concept can be found in the descriptions of [EgressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom] and [EgressTo] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_EgressPolicy = src.ServicePerimeterConfig_EgressPolicy

type ServicePerimeterConfig_EgressTo ¶

Defines the conditions under which an [EgressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy] matches a request. Conditions are based on information about the [ApiOperation] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] intended to be performed on the `resources` specified. Note that if the destination of the request is also protected by a ServicePerimeter [google.identity.accesscontextmanager.v1.ServicePerimeter], then that ServicePerimeter [google.identity.accesscontextmanager.v1.ServicePerimeter] must have an [IngressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] which allows access in order for this request to succeed. The request must match `operations` AND `resources` fields in order to be allowed egress out of the perimeter.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_EgressTo = src.ServicePerimeterConfig_EgressTo

type ServicePerimeterConfig_IdentityType ¶

Specifies the types of identities that are allowed access in either [IngressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom] or [EgressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom] rules.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_IdentityType = src.ServicePerimeterConfig_IdentityType

type ServicePerimeterConfig_IngressFrom ¶

Defines the conditions under which an [IngressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] matches a request. Conditions are based on information about the source of the request. The request must satisfy what is defined in `sources` AND identity related fields in order to match.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_IngressFrom = src.ServicePerimeterConfig_IngressFrom

type ServicePerimeterConfig_IngressPolicy ¶

Policy for ingress into ServicePerimeter [google.identity.accesscontextmanager.v1.ServicePerimeter]. [IngressPolicies] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] match requests based on `ingress_from` and `ingress_to` stanzas. For an ingress policy to match, both the `ingress_from` and `ingress_to` stanzas must be matched. If an [IngressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] matches a request, the request is allowed through the perimeter boundary from outside the perimeter. For example, access from the internet can be allowed either based on an AccessLevel [google.identity.accesscontextmanager.v1.AccessLevel] or, for traffic hosted on Google Cloud, the project of the source network. For access from private networks, using the project of the hosting network is required. Individual ingress policies can be limited by restricting which services and/or actions they match using the `ingress_to` field.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_IngressPolicy = src.ServicePerimeterConfig_IngressPolicy

type ServicePerimeterConfig_IngressSource ¶

The source that [IngressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] authorizes access from.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_IngressSource = src.ServicePerimeterConfig_IngressSource

type ServicePerimeterConfig_IngressSource_AccessLevel ¶

type ServicePerimeterConfig_IngressSource_AccessLevel = src.ServicePerimeterConfig_IngressSource_AccessLevel

type ServicePerimeterConfig_IngressSource_Resource ¶

type ServicePerimeterConfig_IngressSource_Resource = src.ServicePerimeterConfig_IngressSource_Resource

type ServicePerimeterConfig_IngressTo ¶

Defines the conditions under which an [IngressPolicy] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy] matches a request. Conditions are based on information about the [ApiOperation] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] intended to be performed on the target resource of the request. The request must satisfy what is defined in `operations` AND `resources` in order to match.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_IngressTo = src.ServicePerimeterConfig_IngressTo

type ServicePerimeterConfig_MethodSelector ¶

An allowed method or permission of a service specified in [ApiOperation] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_MethodSelector = src.ServicePerimeterConfig_MethodSelector

type ServicePerimeterConfig_MethodSelector_Method ¶

type ServicePerimeterConfig_MethodSelector_Method = src.ServicePerimeterConfig_MethodSelector_Method

type ServicePerimeterConfig_MethodSelector_Permission ¶

type ServicePerimeterConfig_MethodSelector_Permission = src.ServicePerimeterConfig_MethodSelector_Permission

type ServicePerimeterConfig_VpcAccessibleServices ¶

Specifies how APIs are allowed to communicate within the Service Perimeter.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeterConfig_VpcAccessibleServices = src.ServicePerimeterConfig_VpcAccessibleServices

type ServicePerimeter_PerimeterType ¶

Specifies the type of the Perimeter. There are two types: regular and bridge. Regular Service Perimeter contains resources, access levels, and restricted services. Every resource can be in at most ONE regular Service Perimeter. In addition to being in a regular service perimeter, a resource can also be in zero or more perimeter bridges. A perimeter bridge only contains resources. Cross project operations are permitted if all effected resources share some perimeter (whether bridge or regular). Perimeter Bridge does not contain access levels or services: those are governed entirely by the regular perimeter that resource is in. Perimeter Bridges are typically useful when building more complex toplogies with many independent perimeters that need to share some data with a common perimeter, but should not be able to share data among themselves.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type ServicePerimeter_PerimeterType = src.ServicePerimeter_PerimeterType

type UnimplementedAccessContextManagerServer ¶

UnimplementedAccessContextManagerServer can be embedded to have forward compatible implementations.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type UnimplementedAccessContextManagerServer = src.UnimplementedAccessContextManagerServer

type UpdateAccessLevelRequest ¶

A request to update an `AccessLevel`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type UpdateAccessLevelRequest = src.UpdateAccessLevelRequest

type UpdateAccessPolicyRequest ¶

A request to update an `AccessPolicy`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type UpdateAccessPolicyRequest = src.UpdateAccessPolicyRequest

type UpdateGcpUserAccessBindingRequest ¶

Request of [UpdateGcpUserAccessBinding] [google.identity.accesscontextmanager.v1.AccessContextManager.UpdateGcpUserAccessBinding].

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type UpdateGcpUserAccessBindingRequest = src.UpdateGcpUserAccessBindingRequest

type UpdateServicePerimeterRequest ¶

A request to update a `ServicePerimeter`.

Deprecated: Please use types in: cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb

type UpdateServicePerimeterRequest = src.UpdateServicePerimeterRequest