@pulumi/gcp 6.59.0-alpha.1687300882 → 6.59.0

package/accesscontextmanager/egressPolicy.d.ts

@@ -1,12 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * EgressPolicies match requests based on egressFrom and egressTo stanzas.
- * For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched.
- * If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter
- * boundary. For example, an EgressPolicy can be used to allow VMs on networks
- * within the ServicePerimeter to access a defined set of projects outside the
- * perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
- * or query against a BigQuery dataset).
+ * This resource has been deprecated, please refer to ServicePerimeterEgressPolicy.
  *
  * To get more information about EgressPolicy, see:
  *

package/accesscontextmanager/egressPolicy.js

@@ -6,13 +6,7 @@ exports.EgressPolicy = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 /**
- * EgressPolicies match requests based on egressFrom and egressTo stanzas.
- * For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched.
- * If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter
- * boundary. For example, an EgressPolicy can be used to allow VMs on networks
- * within the ServicePerimeter to access a defined set of projects outside the
- * perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
- * or query against a BigQuery dataset).
+ * This resource has been deprecated, please refer to ServicePerimeterEgressPolicy.
  *
  * To get more information about EgressPolicy, see:
  *

package/accesscontextmanager/egressPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"egressPolicy.js","sourceRoot":"","sources":["../../accesscontextmanager/egressPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAsBD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AApEL,oCAqEC;AAvDG,gBAAgB;AACO,yBAAY,GAAG,oDAAoD,CAAC"}
+{"version":3,"file":"egressPolicy.js","sourceRoot":"","sources":["../../accesscontextmanager/egressPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAsBD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AApEL,oCAqEC;AAvDG,gBAAgB;AACO,yBAAY,GAAG,oDAAoD,CAAC"}

package/accesscontextmanager/getAccessPolicyIamPolicy.d.ts

@@ -0,0 +1,68 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Retrieves the current IAM policy data for accesspolicy
+ *
+ * ## example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const policy = gcp.accesscontextmanager.getAccessPolicyIamPolicy({
+ *     name: google_access_context_manager_access_policy["access-policy"].name,
+ * });
+ * ```
+ */
+export declare function getAccessPolicyIamPolicy(args: GetAccessPolicyIamPolicyArgs, opts?: pulumi.InvokeOptions): Promise<GetAccessPolicyIamPolicyResult>;
+/**
+ * A collection of arguments for invoking getAccessPolicyIamPolicy.
+ */
+export interface GetAccessPolicyIamPolicyArgs {
+    /**
+     * Used to find the parent resource to bind the IAM policy to
+     */
+    name: string;
+}
+/**
+ * A collection of values returned by getAccessPolicyIamPolicy.
+ */
+export interface GetAccessPolicyIamPolicyResult {
+    /**
+     * (Computed) The etag of the IAM policy.
+     */
+    readonly etag: string;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    readonly name: string;
+    /**
+     * (Required only by `gcp.accesscontextmanager.AccessPolicyIamPolicy`) The policy data generated by
+     * a `gcp.organizations.getIAMPolicy` data source.
+     */
+    readonly policyData: string;
+}
+/**
+ * Retrieves the current IAM policy data for accesspolicy
+ *
+ * ## example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const policy = gcp.accesscontextmanager.getAccessPolicyIamPolicy({
+ *     name: google_access_context_manager_access_policy["access-policy"].name,
+ * });
+ * ```
+ */
+export declare function getAccessPolicyIamPolicyOutput(args: GetAccessPolicyIamPolicyOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetAccessPolicyIamPolicyResult>;
+/**
+ * A collection of arguments for invoking getAccessPolicyIamPolicy.
+ */
+export interface GetAccessPolicyIamPolicyOutputArgs {
+    /**
+     * Used to find the parent resource to bind the IAM policy to
+     */
+    name: pulumi.Input<string>;
+}

package/accesscontextmanager/getAccessPolicyIamPolicy.js

@@ -0,0 +1,47 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAccessPolicyIamPolicyOutput = exports.getAccessPolicyIamPolicy = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Retrieves the current IAM policy data for accesspolicy
+ *
+ * ## example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const policy = gcp.accesscontextmanager.getAccessPolicyIamPolicy({
+ *     name: google_access_context_manager_access_policy["access-policy"].name,
+ * });
+ * ```
+ */
+function getAccessPolicyIamPolicy(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("gcp:accesscontextmanager/getAccessPolicyIamPolicy:getAccessPolicyIamPolicy", {
+        "name": args.name,
+    }, opts);
+}
+exports.getAccessPolicyIamPolicy = getAccessPolicyIamPolicy;
+/**
+ * Retrieves the current IAM policy data for accesspolicy
+ *
+ * ## example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ *
+ * const policy = gcp.accesscontextmanager.getAccessPolicyIamPolicy({
+ *     name: google_access_context_manager_access_policy["access-policy"].name,
+ * });
+ * ```
+ */
+function getAccessPolicyIamPolicyOutput(args, opts) {
+    return pulumi.output(args).apply((a) => getAccessPolicyIamPolicy(a, opts));
+}
+exports.getAccessPolicyIamPolicyOutput = getAccessPolicyIamPolicyOutput;
+//# sourceMappingURL=getAccessPolicyIamPolicy.js.map

package/accesscontextmanager/getAccessPolicyIamPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAccessPolicyIamPolicy.js","sourceRoot":"","sources":["../../accesscontextmanager/getAccessPolicyIamPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;GAaG;AACH,SAAgB,wBAAwB,CAAC,IAAkC,EAAE,IAA2B;IAEpG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,4EAA4E,EAAE;QACvG,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,4DAMC;AA+BD;;;;;;;;;;;;;GAaG;AACH,SAAgB,8BAA8B,CAAC,IAAwC,EAAE,IAA2B;IAChH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACnF,CAAC;AAFD,wEAEC"}

package/accesscontextmanager/index.d.ts

@@ -28,12 +28,21 @@ export declare const EgressPolicy: typeof import("./egressPolicy").EgressPolicy;
 export { GcpUserAccessBindingArgs, GcpUserAccessBindingState } from "./gcpUserAccessBinding";
 export type GcpUserAccessBinding = import("./gcpUserAccessBinding").GcpUserAccessBinding;
 export declare const GcpUserAccessBinding: typeof import("./gcpUserAccessBinding").GcpUserAccessBinding;
+export { GetAccessPolicyIamPolicyArgs, GetAccessPolicyIamPolicyResult, GetAccessPolicyIamPolicyOutputArgs } from "./getAccessPolicyIamPolicy";
+export declare const getAccessPolicyIamPolicy: typeof import("./getAccessPolicyIamPolicy").getAccessPolicyIamPolicy;
+export declare const getAccessPolicyIamPolicyOutput: typeof import("./getAccessPolicyIamPolicy").getAccessPolicyIamPolicyOutput;
 export { IngressPolicyArgs, IngressPolicyState } from "./ingressPolicy";
 export type IngressPolicy = import("./ingressPolicy").IngressPolicy;
 export declare const IngressPolicy: typeof import("./ingressPolicy").IngressPolicy;
 export { ServicePerimeterArgs, ServicePerimeterState } from "./servicePerimeter";
 export type ServicePerimeter = import("./servicePerimeter").ServicePerimeter;
 export declare const ServicePerimeter: typeof import("./servicePerimeter").ServicePerimeter;
+export { ServicePerimeterEgressPolicyArgs, ServicePerimeterEgressPolicyState } from "./servicePerimeterEgressPolicy";
+export type ServicePerimeterEgressPolicy = import("./servicePerimeterEgressPolicy").ServicePerimeterEgressPolicy;
+export declare const ServicePerimeterEgressPolicy: typeof import("./servicePerimeterEgressPolicy").ServicePerimeterEgressPolicy;
+export { ServicePerimeterIngressPolicyArgs, ServicePerimeterIngressPolicyState } from "./servicePerimeterIngressPolicy";
+export type ServicePerimeterIngressPolicy = import("./servicePerimeterIngressPolicy").ServicePerimeterIngressPolicy;
+export declare const ServicePerimeterIngressPolicy: typeof import("./servicePerimeterIngressPolicy").ServicePerimeterIngressPolicy;
 export { ServicePerimeterResourceArgs, ServicePerimeterResourceState } from "./servicePerimeterResource";
 export type ServicePerimeterResource = import("./servicePerimeterResource").ServicePerimeterResource;
 export declare const ServicePerimeterResource: typeof import("./servicePerimeterResource").ServicePerimeterResource;

package/accesscontextmanager/index.js

@@ -2,7 +2,7 @@
 // *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 // *** Do not edit by hand unless you're certain you know what you are doing! ***
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServicePerimeters = exports.ServicePerimeterResource = exports.ServicePerimeter = exports.IngressPolicy = exports.GcpUserAccessBinding = exports.EgressPolicy = exports.AuthorizedOrgsDesc = exports.AccessPolicyIamPolicy = exports.AccessPolicyIamMember = exports.AccessPolicyIamBinding = exports.AccessPolicy = exports.AccessLevels = exports.AccessLevelCondition = exports.AccessLevel = void 0;
+exports.ServicePerimeters = exports.ServicePerimeterResource = exports.ServicePerimeterIngressPolicy = exports.ServicePerimeterEgressPolicy = exports.ServicePerimeter = exports.IngressPolicy = exports.getAccessPolicyIamPolicyOutput = exports.getAccessPolicyIamPolicy = exports.GcpUserAccessBinding = exports.EgressPolicy = exports.AuthorizedOrgsDesc = exports.AccessPolicyIamPolicy = exports.AccessPolicyIamMember = exports.AccessPolicyIamBinding = exports.AccessPolicy = exports.AccessLevels = exports.AccessLevelCondition = exports.AccessLevel = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 exports.AccessLevel = null;
@@ -25,10 +25,17 @@ exports.EgressPolicy = null;
 utilities.lazyLoad(exports, ["EgressPolicy"], () => require("./egressPolicy"));
 exports.GcpUserAccessBinding = null;
 utilities.lazyLoad(exports, ["GcpUserAccessBinding"], () => require("./gcpUserAccessBinding"));
+exports.getAccessPolicyIamPolicy = null;
+exports.getAccessPolicyIamPolicyOutput = null;
+utilities.lazyLoad(exports, ["getAccessPolicyIamPolicy", "getAccessPolicyIamPolicyOutput"], () => require("./getAccessPolicyIamPolicy"));
 exports.IngressPolicy = null;
 utilities.lazyLoad(exports, ["IngressPolicy"], () => require("./ingressPolicy"));
 exports.ServicePerimeter = null;
 utilities.lazyLoad(exports, ["ServicePerimeter"], () => require("./servicePerimeter"));
+exports.ServicePerimeterEgressPolicy = null;
+utilities.lazyLoad(exports, ["ServicePerimeterEgressPolicy"], () => require("./servicePerimeterEgressPolicy"));
+exports.ServicePerimeterIngressPolicy = null;
+utilities.lazyLoad(exports, ["ServicePerimeterIngressPolicy"], () => require("./servicePerimeterIngressPolicy"));
 exports.ServicePerimeterResource = null;
 utilities.lazyLoad(exports, ["ServicePerimeterResource"], () => require("./servicePerimeterResource"));
 exports.ServicePerimeters = null;
@@ -61,6 +68,10 @@ const _module = {
                 return new exports.IngressPolicy(name, undefined, { urn });
             case "gcp:accesscontextmanager/servicePerimeter:ServicePerimeter":
                 return new exports.ServicePerimeter(name, undefined, { urn });
+            case "gcp:accesscontextmanager/servicePerimeterEgressPolicy:ServicePerimeterEgressPolicy":
+                return new exports.ServicePerimeterEgressPolicy(name, undefined, { urn });
+            case "gcp:accesscontextmanager/servicePerimeterIngressPolicy:ServicePerimeterIngressPolicy":
+                return new exports.ServicePerimeterIngressPolicy(name, undefined, { urn });
             case "gcp:accesscontextmanager/servicePerimeterResource:ServicePerimeterResource":
                 return new exports.ServicePerimeterResource(name, undefined, { urn });
             case "gcp:accesscontextmanager/servicePerimeters:ServicePerimeters":
@@ -82,6 +93,8 @@ pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/egressPolicy"
 pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/gcpUserAccessBinding", _module);
 pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/ingressPolicy", _module);
 pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/servicePerimeter", _module);
+pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/servicePerimeterEgressPolicy", _module);
+pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/servicePerimeterIngressPolicy", _module);
 pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/servicePerimeterResource", _module);
 pulumi.runtime.registerResourceModule("gcp", "accesscontextmanager/servicePerimeters", _module);
 //# sourceMappingURL=index.js.map

package/accesscontextmanager/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../accesscontextmanager/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,WAAW,GAA+C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;AAIhE,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAIlF,QAAA,YAAY,GAAiD,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIlE,QAAA,YAAY,GAAiD,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIlE,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAItF,QAAA,qBAAqB,GAAmE,IAAW,CAAC;AACjH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAIpF,QAAA,qBAAqB,GAAmE,IAAW,CAAC;AACjH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAIpF,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AACxG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAI9E,QAAA,YAAY,GAAiD,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIlE,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAIlF,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAI1E,QAAA,wBAAwB,GAAyE,IAAW,CAAC;AAC1H,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAI1F,QAAA,iBAAiB,GAA2D,IAAW,CAAC;AACrG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAGzF,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,kDAAkD;gBACnD,OAAO,IAAI,mBAAW,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzD,KAAK,oEAAoE;gBACrE,OAAO,IAAI,4BAAoB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,KAAK,oDAAoD;gBACrD,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1D,KAAK,oDAAoD;gBACrD,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1D,KAAK,wEAAwE;gBACzE,OAAO,IAAI,8BAAsB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,KAAK,sEAAsE;gBACvE,OAAO,IAAI,6BAAqB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACnE,KAAK,sEAAsE;gBACvE,OAAO,IAAI,6BAAqB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACnE,KAAK,gEAAgE;gBACjE,OAAO,IAAI,0BAAkB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAChE,KAAK,oDAAoD;gBACrD,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1D,KAAK,oEAAoE;gBACrE,OAAO,IAAI,4BAAoB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,KAAK,sDAAsD;gBACvD,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,4DAA4D;gBAC7D,OAAO,IAAI,wBAAgB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC9D,KAAK,4EAA4E;gBAC7E,OAAO,IAAI,gCAAwB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,KAAK,8DAA8D;gBAC/D,OAAO,IAAI,yBAAiB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/D;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,kCAAkC,EAAE,OAAO,CAAC,CAAA;AACzF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,2CAA2C,EAAE,OAAO,CAAC,CAAA;AAClG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,EAAE,OAAO,CAAC,CAAA;AAC1F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,EAAE,OAAO,CAAC,CAAA;AAC1F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,6CAA6C,EAAE,OAAO,CAAC,CAAA;AACpG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,4CAA4C,EAAE,OAAO,CAAC,CAAA;AACnG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,4CAA4C,EAAE,OAAO,CAAC,CAAA;AACnG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,yCAAyC,EAAE,OAAO,CAAC,CAAA;AAChG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,EAAE,OAAO,CAAC,CAAA;AAC1F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,2CAA2C,EAAE,OAAO,CAAC,CAAA;AAClG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,oCAAoC,EAAE,OAAO,CAAC,CAAA;AAC3F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,uCAAuC,EAAE,OAAO,CAAC,CAAA;AAC9F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,+CAA+C,EAAE,OAAO,CAAC,CAAA;AACtG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,wCAAwC,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../accesscontextmanager/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,WAAW,GAA+C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;AAIhE,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAIlF,QAAA,YAAY,GAAiD,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIlE,QAAA,YAAY,GAAiD,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIlE,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAItF,QAAA,qBAAqB,GAAmE,IAAW,CAAC;AACjH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAIpF,QAAA,qBAAqB,GAAmE,IAAW,CAAC;AACjH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAIpF,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AACxG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAI9E,QAAA,YAAY,GAAiD,IAAW,CAAC;AACtF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIlE,QAAA,oBAAoB,GAAiE,IAAW,CAAC;AAC9G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAGlF,QAAA,wBAAwB,GAAyE,IAAW,CAAC;AAC7G,QAAA,8BAA8B,GAA+E,IAAW,CAAC;AACtI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,0BAA0B,EAAC,gCAAgC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAI3H,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAI1E,QAAA,4BAA4B,GAAiF,IAAW,CAAC;AACtI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,8BAA8B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;AAIlG,QAAA,6BAA6B,GAAmF,IAAW,CAAC;AACzI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,+BAA+B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;AAIpG,QAAA,wBAAwB,GAAyE,IAAW,CAAC;AAC1H,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;AAI1F,QAAA,iBAAiB,GAA2D,IAAW,CAAC;AACrG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAGzF,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,kDAAkD;gBACnD,OAAO,IAAI,mBAAW,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzD,KAAK,oEAAoE;gBACrE,OAAO,IAAI,4BAAoB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,KAAK,oDAAoD;gBACrD,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1D,KAAK,oDAAoD;gBACrD,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1D,KAAK,wEAAwE;gBACzE,OAAO,IAAI,8BAAsB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,KAAK,sEAAsE;gBACvE,OAAO,IAAI,6BAAqB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACnE,KAAK,sEAAsE;gBACvE,OAAO,IAAI,6BAAqB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACnE,KAAK,gEAAgE;gBACjE,OAAO,IAAI,0BAAkB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAChE,KAAK,oDAAoD;gBACrD,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1D,KAAK,oEAAoE;gBACrE,OAAO,IAAI,4BAAoB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClE,KAAK,sDAAsD;gBACvD,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,4DAA4D;gBAC7D,OAAO,IAAI,wBAAgB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC9D,KAAK,oFAAoF;gBACrF,OAAO,IAAI,oCAA4B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E,KAAK,sFAAsF;gBACvF,OAAO,IAAI,qCAA6B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3E,KAAK,4EAA4E;gBAC7E,OAAO,IAAI,gCAAwB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,KAAK,8DAA8D;gBAC/D,OAAO,IAAI,yBAAiB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/D;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,kCAAkC,EAAE,OAAO,CAAC,CAAA;AACzF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,2CAA2C,EAAE,OAAO,CAAC,CAAA;AAClG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,EAAE,OAAO,CAAC,CAAA;AAC1F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,EAAE,OAAO,CAAC,CAAA;AAC1F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,6CAA6C,EAAE,OAAO,CAAC,CAAA;AACpG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,4CAA4C,EAAE,OAAO,CAAC,CAAA;AACnG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,4CAA4C,EAAE,OAAO,CAAC,CAAA;AACnG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,yCAAyC,EAAE,OAAO,CAAC,CAAA;AAChG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,EAAE,OAAO,CAAC,CAAA;AAC1F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,2CAA2C,EAAE,OAAO,CAAC,CAAA;AAClG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,oCAAoC,EAAE,OAAO,CAAC,CAAA;AAC3F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,uCAAuC,EAAE,OAAO,CAAC,CAAA;AAC9F,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,mDAAmD,EAAE,OAAO,CAAC,CAAA;AAC1G,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,oDAAoD,EAAE,OAAO,CAAC,CAAA;AAC3G,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,+CAA+C,EAAE,OAAO,CAAC,CAAA;AACtG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,EAAE,wCAAwC,EAAE,OAAO,CAAC,CAAA"}

package/accesscontextmanager/ingressPolicy.d.ts

@@ -1,13 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * IngressPolicies match requests based on ingressFrom and ingressTo stanzas. For an ingress policy to match,
- * both the ingressFrom and ingressTo stanzas must be matched. If an IngressPolicy matches a request,
- * the request is allowed through the perimeter boundary from outside the perimeter.
- * For example, access from the internet can be allowed either based on an AccessLevel or,
- * for traffic hosted on Google Cloud, the project of the source network.
- * For access from private networks, using the project of the hosting network is required.
- * Individual ingress policies can be limited by restricting which services and/
- * or actions they match using the ingressTo field.
+ * This resource has been deprecated, please refer to ServicePerimeterIngressPolicy.
  *
  * To get more information about IngressPolicy, see:
  *

package/accesscontextmanager/ingressPolicy.js

@@ -6,14 +6,7 @@ exports.IngressPolicy = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 /**
- * IngressPolicies match requests based on ingressFrom and ingressTo stanzas. For an ingress policy to match,
- * both the ingressFrom and ingressTo stanzas must be matched. If an IngressPolicy matches a request,
- * the request is allowed through the perimeter boundary from outside the perimeter.
- * For example, access from the internet can be allowed either based on an AccessLevel or,
- * for traffic hosted on Google Cloud, the project of the source network.
- * For access from private networks, using the project of the hosting network is required.
- * Individual ingress policies can be limited by restricting which services and/
- * or actions they match using the ingressTo field.
+ * This resource has been deprecated, please refer to ServicePerimeterIngressPolicy.
  *
  * To get more information about IngressPolicy, see:
  *

package/accesscontextmanager/ingressPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"ingressPolicy.js","sourceRoot":"","sources":["../../accesscontextmanager/ingressPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,aAAc,SAAQ,MAAM,CAAC,cAAc;IACpD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0B,EAAE,IAAmC;QACxH,OAAO,IAAI,aAAa,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC;IAC9D,CAAC;IAsBD,YAAY,IAAY,EAAE,WAAoD,EAAE,IAAmC;QAC/G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6C,CAAC;YAC5D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAA4C,CAAC;YAC1D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;;AApEL,sCAqEC;AAvDG,gBAAgB;AACO,0BAAY,GAAG,sDAAsD,CAAC"}
+{"version":3,"file":"ingressPolicy.js","sourceRoot":"","sources":["../../accesscontextmanager/ingressPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAa,aAAc,SAAQ,MAAM,CAAC,cAAc;IACpD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0B,EAAE,IAAmC;QACxH,OAAO,IAAI,aAAa,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC;IAC9D,CAAC;IAsBD,YAAY,IAAY,EAAE,WAAoD,EAAE,IAAmC;QAC/G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6C,CAAC;YAC5D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAA4C,CAAC;YAC1D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;;AApEL,sCAqEC;AAvDG,gBAAgB;AACO,0BAAY,GAAG,sDAAsD,CAAC"}

package/accesscontextmanager/servicePerimeterEgressPolicy.d.ts

@@ -0,0 +1,113 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * EgressPolicies match requests based on egressFrom and egressTo stanzas.
+ * For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched.
+ * If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter
+ * boundary. For example, an EgressPolicy can be used to allow VMs on networks
+ * within the ServicePerimeter to access a defined set of projects outside the
+ * perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
+ * or query against a BigQuery dataset).
+ *
+ * To get more information about ServicePerimeterEgressPolicy, see:
+ *
+ * * [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#egresspolicy)
+ *
+ * ## Import
+ *
+ * ServicePerimeterEgressPolicy can be imported using any of these accepted formats
+ *
+ * ```sh
+ *  $ pulumi import gcp:accesscontextmanager/servicePerimeterEgressPolicy:ServicePerimeterEgressPolicy default {{perimeter}}
+ * ```
+ */
+export declare class ServicePerimeterEgressPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing ServicePerimeterEgressPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ServicePerimeterEgressPolicyState, opts?: pulumi.CustomResourceOptions): ServicePerimeterEgressPolicy;
+    /**
+     * Returns true if the given object is an instance of ServicePerimeterEgressPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ServicePerimeterEgressPolicy;
+    /**
+     * Defines conditions on the source of a request causing this `EgressPolicy` to apply.
+     * Structure is documented below.
+     */
+    readonly egressFrom: pulumi.Output<outputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressFrom | undefined>;
+    /**
+     * Defines the conditions on the `ApiOperation` and destination resources that
+     * cause this `EgressPolicy` to apply.
+     * Structure is documented below.
+     */
+    readonly egressTo: pulumi.Output<outputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressTo | undefined>;
+    /**
+     * The name of the Service Perimeter to add this resource to.
+     *
+     *
+     * - - -
+     */
+    readonly perimeter: pulumi.Output<string>;
+    /**
+     * Create a ServicePerimeterEgressPolicy resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ServicePerimeterEgressPolicyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ServicePerimeterEgressPolicy resources.
+ */
+export interface ServicePerimeterEgressPolicyState {
+    /**
+     * Defines conditions on the source of a request causing this `EgressPolicy` to apply.
+     * Structure is documented below.
+     */
+    egressFrom?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressFrom>;
+    /**
+     * Defines the conditions on the `ApiOperation` and destination resources that
+     * cause this `EgressPolicy` to apply.
+     * Structure is documented below.
+     */
+    egressTo?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressTo>;
+    /**
+     * The name of the Service Perimeter to add this resource to.
+     *
+     *
+     * - - -
+     */
+    perimeter?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ServicePerimeterEgressPolicy resource.
+ */
+export interface ServicePerimeterEgressPolicyArgs {
+    /**
+     * Defines conditions on the source of a request causing this `EgressPolicy` to apply.
+     * Structure is documented below.
+     */
+    egressFrom?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressFrom>;
+    /**
+     * Defines the conditions on the `ApiOperation` and destination resources that
+     * cause this `EgressPolicy` to apply.
+     * Structure is documented below.
+     */
+    egressTo?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressTo>;
+    /**
+     * The name of the Service Perimeter to add this resource to.
+     *
+     *
+     * - - -
+     */
+    perimeter: pulumi.Input<string>;
+}

package/accesscontextmanager/servicePerimeterEgressPolicy.js

@@ -0,0 +1,77 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServicePerimeterEgressPolicy = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * EgressPolicies match requests based on egressFrom and egressTo stanzas.
+ * For an EgressPolicy to match, both egressFrom and egressTo stanzas must be matched.
+ * If an EgressPolicy matches a request, the request is allowed to span the ServicePerimeter
+ * boundary. For example, an EgressPolicy can be used to allow VMs on networks
+ * within the ServicePerimeter to access a defined set of projects outside the
+ * perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
+ * or query against a BigQuery dataset).
+ *
+ * To get more information about ServicePerimeterEgressPolicy, see:
+ *
+ * * [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#egresspolicy)
+ *
+ * ## Import
+ *
+ * ServicePerimeterEgressPolicy can be imported using any of these accepted formats
+ *
+ * ```sh
+ *  $ pulumi import gcp:accesscontextmanager/servicePerimeterEgressPolicy:ServicePerimeterEgressPolicy default {{perimeter}}
+ * ```
+ */
+class ServicePerimeterEgressPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing ServicePerimeterEgressPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ServicePerimeterEgressPolicy(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ServicePerimeterEgressPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ServicePerimeterEgressPolicy.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["egressFrom"] = state ? state.egressFrom : undefined;
+            resourceInputs["egressTo"] = state ? state.egressTo : undefined;
+            resourceInputs["perimeter"] = state ? state.perimeter : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.perimeter === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'perimeter'");
+            }
+            resourceInputs["egressFrom"] = args ? args.egressFrom : undefined;
+            resourceInputs["egressTo"] = args ? args.egressTo : undefined;
+            resourceInputs["perimeter"] = args ? args.perimeter : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ServicePerimeterEgressPolicy.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ServicePerimeterEgressPolicy = ServicePerimeterEgressPolicy;
+/** @internal */
+ServicePerimeterEgressPolicy.__pulumiType = 'gcp:accesscontextmanager/servicePerimeterEgressPolicy:ServicePerimeterEgressPolicy';
+//# sourceMappingURL=servicePerimeterEgressPolicy.js.map

package/accesscontextmanager/servicePerimeterEgressPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"servicePerimeterEgressPolicy.js","sourceRoot":"","sources":["../../accesscontextmanager/servicePerimeterEgressPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,4BAA6B,SAAQ,MAAM,CAAC,cAAc;IACnE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyC,EAAE,IAAmC;QACvI,OAAO,IAAI,4BAA4B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4BAA4B,CAAC,YAAY,CAAC;IAC7E,CAAC;IA6BD,YAAY,IAAY,EAAE,WAAkF,EAAE,IAAmC;QAC7I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4D,CAAC;YAC3E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2D,CAAC;YACzE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;;AA1EL,oEA2EC;AA7DG,gBAAgB;AACO,yCAAY,GAAG,oFAAoF,CAAC"}

package/accesscontextmanager/servicePerimeterIngressPolicy.d.ts

@@ -0,0 +1,117 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * IngressPolicies match requests based on ingressFrom and ingressTo stanzas. For an ingress policy to match,
+ * both the ingressFrom and ingressTo stanzas must be matched. If an IngressPolicy matches a request,
+ * the request is allowed through the perimeter boundary from outside the perimeter.
+ * For example, access from the internet can be allowed either based on an AccessLevel or,
+ * for traffic hosted on Google Cloud, the project of the source network.
+ * For access from private networks, using the project of the hosting network is required.
+ * Individual ingress policies can be limited by restricting which services and/
+ * or actions they match using the ingressTo field.
+ *
+ * To get more information about ServicePerimeterIngressPolicy, see:
+ *
+ * * [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.servicePerimeters#ingresspolicy)
+ *
+ * ## Import
+ *
+ * ServicePerimeterIngressPolicy can be imported using any of these accepted formats
+ *
+ * ```sh
+ *  $ pulumi import gcp:accesscontextmanager/servicePerimeterIngressPolicy:ServicePerimeterIngressPolicy default {{perimeter}}
+ * ```
+ */
+export declare class ServicePerimeterIngressPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing ServicePerimeterIngressPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ServicePerimeterIngressPolicyState, opts?: pulumi.CustomResourceOptions): ServicePerimeterIngressPolicy;
+    /**
+     * Returns true if the given object is an instance of ServicePerimeterIngressPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ServicePerimeterIngressPolicy;
+    /**
+     * Defines the conditions on the source of a request causing this `IngressPolicy`
+     * to apply.
+     * Structure is documented below.
+     */
+    readonly ingressFrom: pulumi.Output<outputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressFrom | undefined>;
+    /**
+     * Defines the conditions on the `ApiOperation` and request destination that cause
+     * this `IngressPolicy` to apply.
+     * Structure is documented below.
+     */
+    readonly ingressTo: pulumi.Output<outputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressTo | undefined>;
+    /**
+     * The name of the Service Perimeter to add this resource to.
+     *
+     *
+     * - - -
+     */
+    readonly perimeter: pulumi.Output<string>;
+    /**
+     * Create a ServicePerimeterIngressPolicy resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ServicePerimeterIngressPolicyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ServicePerimeterIngressPolicy resources.
+ */
+export interface ServicePerimeterIngressPolicyState {
+    /**
+     * Defines the conditions on the source of a request causing this `IngressPolicy`
+     * to apply.
+     * Structure is documented below.
+     */
+    ingressFrom?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressFrom>;
+    /**
+     * Defines the conditions on the `ApiOperation` and request destination that cause
+     * this `IngressPolicy` to apply.
+     * Structure is documented below.
+     */
+    ingressTo?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressTo>;
+    /**
+     * The name of the Service Perimeter to add this resource to.
+     *
+     *
+     * - - -
+     */
+    perimeter?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ServicePerimeterIngressPolicy resource.
+ */
+export interface ServicePerimeterIngressPolicyArgs {
+    /**
+     * Defines the conditions on the source of a request causing this `IngressPolicy`
+     * to apply.
+     * Structure is documented below.
+     */
+    ingressFrom?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressFrom>;
+    /**
+     * Defines the conditions on the `ApiOperation` and request destination that cause
+     * this `IngressPolicy` to apply.
+     * Structure is documented below.
+     */
+    ingressTo?: pulumi.Input<inputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressTo>;
+    /**
+     * The name of the Service Perimeter to add this resource to.
+     *
+     *
+     * - - -
+     */
+    perimeter: pulumi.Input<string>;
+}