Class SecurityPolicyRuleMatcher (1.15.0)

SecurityPolicyRuleMatcher(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes

NameDescription
config google.cloud.compute_v1.types.SecurityPolicyRuleMatcherConfig
The configuration options available when specifying versioned_expr. This field must be specified if versioned_expr is specified and cannot be specified if versioned_expr is not specified. This field is a member of oneof_ _config.
expr google.cloud.compute_v1.types.Expr
User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing evaluateThreatIntelligence require Cloud Armor Managed Protection Plus tier and are not supported in Edge Policies nor in Regional Policies. Expressions containing evaluatePreconfiguredExpr('sourceiplist-*') require Cloud Armor Managed Protection Plus tier and are only supported in Global Security Policies. This field is a member of oneof_ _expr.
versioned_expr str
Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config. Check the VersionedExpr enum for the list of possible values. This field is a member of oneof_ _versioned_expr.

Classes

VersionedExpr

VersionedExpr(value)

Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config.

Values: UNDEFINED_VERSIONED_EXPR (0): A value indicating that the enum field is not set. SRC_IPS_V1 (70925961): Matches the source IP address of a request to the IP ranges supplied in config.