Defines the conditions under which an [IngressPolicy]
[google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy]
matches a request. Conditions are based on information about the
[ApiOperation]
[google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation]
intended to be performed on the target resource of the request. The request
must satisfy what is defined in operations AND resources in order to
match.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#operations
def operations() -> ::Array<::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::ApiOperation>
Returns
- (::Array<::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::ApiOperation>) — A list of [ApiOperations] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] allowed to be performed by the sources specified in corresponding [IngressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom] in this [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter].
#operations=
def operations=(value) -> ::Array<::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::ApiOperation>
Parameter
- value (::Array<::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::ApiOperation>) — A list of [ApiOperations] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] allowed to be performed by the sources specified in corresponding [IngressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom] in this [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter].
Returns
- (::Array<::Google::Identity::AccessContextManager::V1::ServicePerimeterConfig::ApiOperation>) — A list of [ApiOperations] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] allowed to be performed by the sources specified in corresponding [IngressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom] in this [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter].
#resources
def resources() -> ::Array<::String>
Returns
-
(::Array<::String>) — A list of resources, currently only projects in the form
projects/<projectnumber>, protected by this [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter] that are allowed to be accessed by sources defined in the corresponding [IngressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom]. If a single*is specified, then access to all resources inside the perimeter are allowed.
#resources=
def resources=(value) -> ::Array<::String>
Parameter
-
value (::Array<::String>) — A list of resources, currently only projects in the form
projects/<projectnumber>, protected by this [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter] that are allowed to be accessed by sources defined in the corresponding [IngressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom]. If a single*is specified, then access to all resources inside the perimeter are allowed.
Returns
-
(::Array<::String>) — A list of resources, currently only projects in the form
projects/<projectnumber>, protected by this [ServicePerimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter] that are allowed to be accessed by sources defined in the corresponding [IngressFrom] [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom]. If a single*is specified, then access to all resources inside the perimeter are allowed.