Class AccessLevelBasicCondition

Inheritance

System.Object

AccessLevelBasicCondition

Inherited Members

System.Object.Equals(System.Object)

System.Object.Equals(System.Object, System.Object)

System.Object.GetHashCode()

System.Object.GetType()

System.Object.MemberwiseClone()

System.Object.ReferenceEquals(System.Object, System.Object)

System.Object.ToString()

Namespace: Pulumi.Gcp.AccessContextManager.Outputs

Assembly: Pulumi.Gcp.dll

Syntax

public sealed class AccessLevelBasicCondition

Fields

DevicePolicy

Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.

Declaration

public readonly AccessLevelBasicConditionDevicePolicy DevicePolicy

Field Value

Type	Description
AccessLevelBasicConditionDevicePolicy

IpSubnetworks

A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.

Declaration

public readonly ImmutableArray<string> IpSubnetworks

Field Value

Type	Description
System.Collections.Immutable.ImmutableArray<System.String>

Members

An allowed list of members (users, service accounts). Using groups is not supported yet. The signed-in user originating the request must be a part of one of the provided members. If not specified, a request may come from any user (logged in/not logged in, not present in any groups, etc.). Formats: user:{emailid}, serviceAccount:{emailid}

Declaration

public readonly ImmutableArray<string> Members

Field Value

Type	Description
System.Collections.Immutable.ImmutableArray<System.String>

Negate

Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.

Declaration

public readonly bool? Negate

Field Value

Type	Description
System.Nullable<System.Boolean>

Regions

The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.

Declaration

public readonly ImmutableArray<string> Regions

Field Value

Type	Description
System.Collections.Immutable.ImmutableArray<System.String>

RequiredAccessLevels

A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}

Declaration

public readonly ImmutableArray<string> RequiredAccessLevels

Field Value

Type	Description
System.Collections.Immutable.ImmutableArray<System.String>