Method: validateAttributeExpression

Validates that a given CEL expression conforms to IAP restrictions.

HTTP request

POST https://iap.googleapis.com/v1/{name=**}:validateAttributeExpression

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
name

string

Required. The resource name of the IAP protected resource.

Query parameters

Parameters
expression

string

Required. User input string expression. Should be of the form attributes.saml_attributes.filter(attribute, attribute.name in ['{attribute_name}', '{attribute_name}'])

Request body

The request body must be empty.

Response body

If successful, the response body is empty.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires one of the following IAM permissions on the name resource, depending on the resource type:

  • iap.folders.updateSettings
  • iap.organizations.updateSettings
  • iap.projects.updateSettings
  • iap.web.updateSettings
  • iap.webServices.updateSettings
  • iap.webServiceVersions.updateSettings
  • iap.webTypes.updateSettings

For more information, see the IAM documentation.