pulumi-gcp 8.2.0__py3-none-any.whl → 8.2.0a1726589141__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +0 -38
- pulumi_gcp/bigquery/__init__.py +0 -1
- pulumi_gcp/bigquery/outputs.py +0 -30
- pulumi_gcp/compute/__init__.py +0 -1
- pulumi_gcp/compute/_inputs.py +286 -2209
- pulumi_gcp/compute/get_instance.py +0 -3
- pulumi_gcp/compute/outputs.py +0 -1383
- pulumi_gcp/compute/region_target_http_proxy.py +0 -159
- pulumi_gcp/compute/region_target_https_proxy.py +0 -175
- pulumi_gcp/compute/service_attachment.py +0 -75
- pulumi_gcp/compute/target_http_proxy.py +28 -49
- pulumi_gcp/compute/target_https_proxy.py +28 -49
- pulumi_gcp/config/__init__.pyi +0 -4
- pulumi_gcp/config/vars.py +0 -8
- pulumi_gcp/container/_inputs.py +0 -96
- pulumi_gcp/container/attached_cluster.py +1 -54
- pulumi_gcp/container/outputs.py +0 -102
- pulumi_gcp/dataproc/metastore_federation.py +8 -8
- pulumi_gcp/dataproc/metastore_service.py +0 -2
- pulumi_gcp/datastream/stream.py +14 -21
- pulumi_gcp/gkeonprem/_inputs.py +3 -3
- pulumi_gcp/gkeonprem/outputs.py +2 -2
- pulumi_gcp/netapp/volume.py +0 -101
- pulumi_gcp/organizations/folder.py +33 -52
- pulumi_gcp/provider.py +0 -40
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/securitycenter/v2_project_mute_config.py +2 -2
- pulumi_gcp/vpcaccess/connector.py +28 -21
- {pulumi_gcp-8.2.0.dist-info → pulumi_gcp-8.2.0a1726589141.dist-info}/METADATA +1 -1
- {pulumi_gcp-8.2.0.dist-info → pulumi_gcp-8.2.0a1726589141.dist-info}/RECORD +32 -43
- pulumi_gcp/bigquery/get_tables.py +0 -143
- pulumi_gcp/compute/network_firewall_policy_with_rules.py +0 -826
- pulumi_gcp/developerconnect/__init__.py +0 -11
- pulumi_gcp/developerconnect/_inputs.py +0 -301
- pulumi_gcp/developerconnect/connection.py +0 -1034
- pulumi_gcp/developerconnect/git_repository_link.py +0 -873
- pulumi_gcp/developerconnect/outputs.py +0 -247
- pulumi_gcp/memorystore/__init__.py +0 -10
- pulumi_gcp/memorystore/_inputs.py +0 -731
- pulumi_gcp/memorystore/instance.py +0 -1663
- pulumi_gcp/memorystore/outputs.py +0 -598
- {pulumi_gcp-8.2.0.dist-info → pulumi_gcp-8.2.0a1726589141.dist-info}/WHEEL +0 -0
- {pulumi_gcp-8.2.0.dist-info → pulumi_gcp-8.2.0a1726589141.dist-info}/top_level.txt +0 -0
pulumi_gcp/compute/_inputs.py
CHANGED
|
@@ -399,26 +399,6 @@ __all__ = [
|
|
|
399
399
|
'NetworkFirewallPolicyRuleMatchSrcSecureTagArgsDict',
|
|
400
400
|
'NetworkFirewallPolicyRuleTargetSecureTagArgs',
|
|
401
401
|
'NetworkFirewallPolicyRuleTargetSecureTagArgsDict',
|
|
402
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleArgs',
|
|
403
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleArgsDict',
|
|
404
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgs',
|
|
405
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgsDict',
|
|
406
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgs',
|
|
407
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgsDict',
|
|
408
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgs',
|
|
409
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgsDict',
|
|
410
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleTargetSecureTagArgs',
|
|
411
|
-
'NetworkFirewallPolicyWithRulesPredefinedRuleTargetSecureTagArgsDict',
|
|
412
|
-
'NetworkFirewallPolicyWithRulesRuleArgs',
|
|
413
|
-
'NetworkFirewallPolicyWithRulesRuleArgsDict',
|
|
414
|
-
'NetworkFirewallPolicyWithRulesRuleMatchArgs',
|
|
415
|
-
'NetworkFirewallPolicyWithRulesRuleMatchArgsDict',
|
|
416
|
-
'NetworkFirewallPolicyWithRulesRuleMatchLayer4ConfigArgs',
|
|
417
|
-
'NetworkFirewallPolicyWithRulesRuleMatchLayer4ConfigArgsDict',
|
|
418
|
-
'NetworkFirewallPolicyWithRulesRuleMatchSrcSecureTagArgs',
|
|
419
|
-
'NetworkFirewallPolicyWithRulesRuleMatchSrcSecureTagArgsDict',
|
|
420
|
-
'NetworkFirewallPolicyWithRulesRuleTargetSecureTagArgs',
|
|
421
|
-
'NetworkFirewallPolicyWithRulesRuleTargetSecureTagArgsDict',
|
|
422
402
|
'NodeGroupAutoscalingPolicyArgs',
|
|
423
403
|
'NodeGroupAutoscalingPolicyArgsDict',
|
|
424
404
|
'NodeGroupMaintenanceWindowArgs',
|
|
@@ -8843,10 +8823,6 @@ if not MYPY:
|
|
|
8843
8823
|
"""
|
|
8844
8824
|
A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
|
|
8845
8825
|
"""
|
|
8846
|
-
resource_policies: NotRequired[pulumi.Input[str]]
|
|
8847
|
-
"""
|
|
8848
|
-
A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
8849
|
-
"""
|
|
8850
8826
|
size: NotRequired[pulumi.Input[int]]
|
|
8851
8827
|
"""
|
|
8852
8828
|
The size of the image in gigabytes. If not specified, it
|
|
@@ -8875,7 +8851,6 @@ class InstanceBootDiskInitializeParamsArgs:
|
|
|
8875
8851
|
provisioned_iops: Optional[pulumi.Input[int]] = None,
|
|
8876
8852
|
provisioned_throughput: Optional[pulumi.Input[int]] = None,
|
|
8877
8853
|
resource_manager_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
|
8878
|
-
resource_policies: Optional[pulumi.Input[str]] = None,
|
|
8879
8854
|
size: Optional[pulumi.Input[int]] = None,
|
|
8880
8855
|
storage_pool: Optional[pulumi.Input[str]] = None,
|
|
8881
8856
|
type: Optional[pulumi.Input[str]] = None):
|
|
@@ -8908,7 +8883,6 @@ class InstanceBootDiskInitializeParamsArgs:
|
|
|
8908
8883
|
for an update of throughput every 4 hours. To update your hyperdisk more
|
|
8909
8884
|
frequently, you'll need to manually delete and recreate it.
|
|
8910
8885
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] resource_manager_tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
|
|
8911
|
-
:param pulumi.Input[str] resource_policies: A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
8912
8886
|
:param pulumi.Input[int] size: The size of the image in gigabytes. If not specified, it
|
|
8913
8887
|
will inherit the size of its base image.
|
|
8914
8888
|
:param pulumi.Input[str] storage_pool: The URL of the storage pool in which the new disk is created.
|
|
@@ -8929,8 +8903,6 @@ class InstanceBootDiskInitializeParamsArgs:
|
|
|
8929
8903
|
pulumi.set(__self__, "provisioned_throughput", provisioned_throughput)
|
|
8930
8904
|
if resource_manager_tags is not None:
|
|
8931
8905
|
pulumi.set(__self__, "resource_manager_tags", resource_manager_tags)
|
|
8932
|
-
if resource_policies is not None:
|
|
8933
|
-
pulumi.set(__self__, "resource_policies", resource_policies)
|
|
8934
8906
|
if size is not None:
|
|
8935
8907
|
pulumi.set(__self__, "size", size)
|
|
8936
8908
|
if storage_pool is not None:
|
|
@@ -9032,18 +9004,6 @@ class InstanceBootDiskInitializeParamsArgs:
|
|
|
9032
9004
|
def resource_manager_tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
|
|
9033
9005
|
pulumi.set(self, "resource_manager_tags", value)
|
|
9034
9006
|
|
|
9035
|
-
@property
|
|
9036
|
-
@pulumi.getter(name="resourcePolicies")
|
|
9037
|
-
def resource_policies(self) -> Optional[pulumi.Input[str]]:
|
|
9038
|
-
"""
|
|
9039
|
-
A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
9040
|
-
"""
|
|
9041
|
-
return pulumi.get(self, "resource_policies")
|
|
9042
|
-
|
|
9043
|
-
@resource_policies.setter
|
|
9044
|
-
def resource_policies(self, value: Optional[pulumi.Input[str]]):
|
|
9045
|
-
pulumi.set(self, "resource_policies", value)
|
|
9046
|
-
|
|
9047
9007
|
@property
|
|
9048
9008
|
@pulumi.getter
|
|
9049
9009
|
def size(self) -> Optional[pulumi.Input[int]]:
|
|
@@ -9558,10 +9518,6 @@ if not MYPY:
|
|
|
9558
9518
|
"""
|
|
9559
9519
|
A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
|
|
9560
9520
|
"""
|
|
9561
|
-
resource_policies: NotRequired[pulumi.Input[str]]
|
|
9562
|
-
"""
|
|
9563
|
-
A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
9564
|
-
"""
|
|
9565
9521
|
size: NotRequired[pulumi.Input[int]]
|
|
9566
9522
|
"""
|
|
9567
9523
|
The size of the image in gigabytes.
|
|
@@ -9586,7 +9542,6 @@ class InstanceFromMachineImageBootDiskInitializeParamsArgs:
|
|
|
9586
9542
|
provisioned_iops: Optional[pulumi.Input[int]] = None,
|
|
9587
9543
|
provisioned_throughput: Optional[pulumi.Input[int]] = None,
|
|
9588
9544
|
resource_manager_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
|
9589
|
-
resource_policies: Optional[pulumi.Input[str]] = None,
|
|
9590
9545
|
size: Optional[pulumi.Input[int]] = None,
|
|
9591
9546
|
storage_pool: Optional[pulumi.Input[str]] = None,
|
|
9592
9547
|
type: Optional[pulumi.Input[str]] = None):
|
|
@@ -9597,7 +9552,6 @@ class InstanceFromMachineImageBootDiskInitializeParamsArgs:
|
|
|
9597
9552
|
:param pulumi.Input[int] provisioned_iops: Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle.
|
|
9598
9553
|
:param pulumi.Input[int] provisioned_throughput: Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle.
|
|
9599
9554
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] resource_manager_tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
|
|
9600
|
-
:param pulumi.Input[str] resource_policies: A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
9601
9555
|
:param pulumi.Input[int] size: The size of the image in gigabytes.
|
|
9602
9556
|
:param pulumi.Input[str] storage_pool: The URL of the storage pool in which the new disk is created
|
|
9603
9557
|
:param pulumi.Input[str] type: The Google Compute Engine disk type. Such as pd-standard, pd-ssd or pd-balanced.
|
|
@@ -9614,8 +9568,6 @@ class InstanceFromMachineImageBootDiskInitializeParamsArgs:
|
|
|
9614
9568
|
pulumi.set(__self__, "provisioned_throughput", provisioned_throughput)
|
|
9615
9569
|
if resource_manager_tags is not None:
|
|
9616
9570
|
pulumi.set(__self__, "resource_manager_tags", resource_manager_tags)
|
|
9617
|
-
if resource_policies is not None:
|
|
9618
|
-
pulumi.set(__self__, "resource_policies", resource_policies)
|
|
9619
9571
|
if size is not None:
|
|
9620
9572
|
pulumi.set(__self__, "size", size)
|
|
9621
9573
|
if storage_pool is not None:
|
|
@@ -9695,18 +9647,6 @@ class InstanceFromMachineImageBootDiskInitializeParamsArgs:
|
|
|
9695
9647
|
def resource_manager_tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
|
|
9696
9648
|
pulumi.set(self, "resource_manager_tags", value)
|
|
9697
9649
|
|
|
9698
|
-
@property
|
|
9699
|
-
@pulumi.getter(name="resourcePolicies")
|
|
9700
|
-
def resource_policies(self) -> Optional[pulumi.Input[str]]:
|
|
9701
|
-
"""
|
|
9702
|
-
A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
9703
|
-
"""
|
|
9704
|
-
return pulumi.get(self, "resource_policies")
|
|
9705
|
-
|
|
9706
|
-
@resource_policies.setter
|
|
9707
|
-
def resource_policies(self, value: Optional[pulumi.Input[str]]):
|
|
9708
|
-
pulumi.set(self, "resource_policies", value)
|
|
9709
|
-
|
|
9710
9650
|
@property
|
|
9711
9651
|
@pulumi.getter
|
|
9712
9652
|
def size(self) -> Optional[pulumi.Input[int]]:
|
|
@@ -11684,10 +11624,6 @@ if not MYPY:
|
|
|
11684
11624
|
"""
|
|
11685
11625
|
A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
|
|
11686
11626
|
"""
|
|
11687
|
-
resource_policies: NotRequired[pulumi.Input[str]]
|
|
11688
|
-
"""
|
|
11689
|
-
A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
11690
|
-
"""
|
|
11691
11627
|
size: NotRequired[pulumi.Input[int]]
|
|
11692
11628
|
"""
|
|
11693
11629
|
The size of the image in gigabytes.
|
|
@@ -11712,7 +11648,6 @@ class InstanceFromTemplateBootDiskInitializeParamsArgs:
|
|
|
11712
11648
|
provisioned_iops: Optional[pulumi.Input[int]] = None,
|
|
11713
11649
|
provisioned_throughput: Optional[pulumi.Input[int]] = None,
|
|
11714
11650
|
resource_manager_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
|
11715
|
-
resource_policies: Optional[pulumi.Input[str]] = None,
|
|
11716
11651
|
size: Optional[pulumi.Input[int]] = None,
|
|
11717
11652
|
storage_pool: Optional[pulumi.Input[str]] = None,
|
|
11718
11653
|
type: Optional[pulumi.Input[str]] = None):
|
|
@@ -11723,7 +11658,6 @@ class InstanceFromTemplateBootDiskInitializeParamsArgs:
|
|
|
11723
11658
|
:param pulumi.Input[int] provisioned_iops: Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle.
|
|
11724
11659
|
:param pulumi.Input[int] provisioned_throughput: Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle.
|
|
11725
11660
|
:param pulumi.Input[Mapping[str, pulumi.Input[str]]] resource_manager_tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored (both PUT & PATCH) when empty.
|
|
11726
|
-
:param pulumi.Input[str] resource_policies: A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
11727
11661
|
:param pulumi.Input[int] size: The size of the image in gigabytes.
|
|
11728
11662
|
:param pulumi.Input[str] storage_pool: The URL of the storage pool in which the new disk is created
|
|
11729
11663
|
:param pulumi.Input[str] type: The Google Compute Engine disk type. Such as pd-standard, pd-ssd or pd-balanced.
|
|
@@ -11740,8 +11674,6 @@ class InstanceFromTemplateBootDiskInitializeParamsArgs:
|
|
|
11740
11674
|
pulumi.set(__self__, "provisioned_throughput", provisioned_throughput)
|
|
11741
11675
|
if resource_manager_tags is not None:
|
|
11742
11676
|
pulumi.set(__self__, "resource_manager_tags", resource_manager_tags)
|
|
11743
|
-
if resource_policies is not None:
|
|
11744
|
-
pulumi.set(__self__, "resource_policies", resource_policies)
|
|
11745
11677
|
if size is not None:
|
|
11746
11678
|
pulumi.set(__self__, "size", size)
|
|
11747
11679
|
if storage_pool is not None:
|
|
@@ -11821,18 +11753,6 @@ class InstanceFromTemplateBootDiskInitializeParamsArgs:
|
|
|
11821
11753
|
def resource_manager_tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
|
|
11822
11754
|
pulumi.set(self, "resource_manager_tags", value)
|
|
11823
11755
|
|
|
11824
|
-
@property
|
|
11825
|
-
@pulumi.getter(name="resourcePolicies")
|
|
11826
|
-
def resource_policies(self) -> Optional[pulumi.Input[str]]:
|
|
11827
|
-
"""
|
|
11828
|
-
A list of self_links of resource policies to attach to the instance's boot disk. Modifying this list will cause the instance to recreate. Currently a max of 1 resource policy is supported.
|
|
11829
|
-
"""
|
|
11830
|
-
return pulumi.get(self, "resource_policies")
|
|
11831
|
-
|
|
11832
|
-
@resource_policies.setter
|
|
11833
|
-
def resource_policies(self, value: Optional[pulumi.Input[str]]):
|
|
11834
|
-
pulumi.set(self, "resource_policies", value)
|
|
11835
|
-
|
|
11836
11756
|
@property
|
|
11837
11757
|
@pulumi.getter
|
|
11838
11758
|
def size(self) -> Optional[pulumi.Input[int]]:
|
|
@@ -19339,2033 +19259,366 @@ class MachineImageMachineImageEncryptionKeyArgs:
|
|
|
19339
19259
|
|
|
19340
19260
|
@raw_key.setter
|
|
19341
19261
|
def raw_key(self, value: Optional[pulumi.Input[str]]):
|
|
19342
|
-
pulumi.set(self, "raw_key", value)
|
|
19343
|
-
|
|
19344
|
-
@property
|
|
19345
|
-
@pulumi.getter
|
|
19346
|
-
def sha256(self) -> Optional[pulumi.Input[str]]:
|
|
19347
|
-
"""
|
|
19348
|
-
(Output)
|
|
19349
|
-
The RFC 4648 base64 encoded SHA-256 hash of the
|
|
19350
|
-
customer-supplied encryption key that protects this resource.
|
|
19351
|
-
"""
|
|
19352
|
-
return pulumi.get(self, "sha256")
|
|
19353
|
-
|
|
19354
|
-
@sha256.setter
|
|
19355
|
-
def sha256(self, value: Optional[pulumi.Input[str]]):
|
|
19356
|
-
pulumi.set(self, "sha256", value)
|
|
19357
|
-
|
|
19358
|
-
|
|
19359
|
-
if not MYPY:
|
|
19360
|
-
class ManagedSslCertificateManagedArgsDict(TypedDict):
|
|
19361
|
-
domains: pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
19362
|
-
"""
|
|
19363
|
-
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19364
|
-
there can be up to 100 domains in this list.
|
|
19365
|
-
"""
|
|
19366
|
-
elif False:
|
|
19367
|
-
ManagedSslCertificateManagedArgsDict: TypeAlias = Mapping[str, Any]
|
|
19368
|
-
|
|
19369
|
-
@pulumi.input_type
|
|
19370
|
-
class ManagedSslCertificateManagedArgs:
|
|
19371
|
-
def __init__(__self__, *,
|
|
19372
|
-
domains: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
19373
|
-
"""
|
|
19374
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] domains: Domains for which a managed SSL certificate will be valid. Currently,
|
|
19375
|
-
there can be up to 100 domains in this list.
|
|
19376
|
-
"""
|
|
19377
|
-
pulumi.set(__self__, "domains", domains)
|
|
19378
|
-
|
|
19379
|
-
@property
|
|
19380
|
-
@pulumi.getter
|
|
19381
|
-
def domains(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
|
|
19382
|
-
"""
|
|
19383
|
-
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19384
|
-
there can be up to 100 domains in this list.
|
|
19385
|
-
"""
|
|
19386
|
-
return pulumi.get(self, "domains")
|
|
19387
|
-
|
|
19388
|
-
@domains.setter
|
|
19389
|
-
def domains(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
19390
|
-
pulumi.set(self, "domains", value)
|
|
19391
|
-
|
|
19392
|
-
|
|
19393
|
-
if not MYPY:
|
|
19394
|
-
class MangedSslCertificateManagedArgsDict(TypedDict):
|
|
19395
|
-
domains: pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
19396
|
-
"""
|
|
19397
|
-
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19398
|
-
there can be up to 100 domains in this list.
|
|
19399
|
-
"""
|
|
19400
|
-
elif False:
|
|
19401
|
-
MangedSslCertificateManagedArgsDict: TypeAlias = Mapping[str, Any]
|
|
19402
|
-
|
|
19403
|
-
@pulumi.input_type
|
|
19404
|
-
class MangedSslCertificateManagedArgs:
|
|
19405
|
-
def __init__(__self__, *,
|
|
19406
|
-
domains: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
19407
|
-
"""
|
|
19408
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] domains: Domains for which a managed SSL certificate will be valid. Currently,
|
|
19409
|
-
there can be up to 100 domains in this list.
|
|
19410
|
-
"""
|
|
19411
|
-
pulumi.set(__self__, "domains", domains)
|
|
19412
|
-
|
|
19413
|
-
@property
|
|
19414
|
-
@pulumi.getter
|
|
19415
|
-
def domains(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
|
|
19416
|
-
"""
|
|
19417
|
-
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19418
|
-
there can be up to 100 domains in this list.
|
|
19419
|
-
"""
|
|
19420
|
-
return pulumi.get(self, "domains")
|
|
19421
|
-
|
|
19422
|
-
@domains.setter
|
|
19423
|
-
def domains(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
19424
|
-
pulumi.set(self, "domains", value)
|
|
19425
|
-
|
|
19426
|
-
|
|
19427
|
-
if not MYPY:
|
|
19428
|
-
class NetworkAttachmentConnectionEndpointArgsDict(TypedDict):
|
|
19429
|
-
ip_address: NotRequired[pulumi.Input[str]]
|
|
19430
|
-
"""
|
|
19431
|
-
(Output)
|
|
19432
|
-
The IPv4 address assigned to the producer instance network interface. This value will be a range in case of Serverless.
|
|
19433
|
-
"""
|
|
19434
|
-
project_id_or_num: NotRequired[pulumi.Input[str]]
|
|
19435
|
-
"""
|
|
19436
|
-
(Output)
|
|
19437
|
-
The project id or number of the interface to which the IP was assigned.
|
|
19438
|
-
"""
|
|
19439
|
-
secondary_ip_cidr_ranges: NotRequired[pulumi.Input[str]]
|
|
19440
|
-
"""
|
|
19441
|
-
(Output)
|
|
19442
|
-
Alias IP ranges from the same subnetwork.
|
|
19443
|
-
"""
|
|
19444
|
-
status: NotRequired[pulumi.Input[str]]
|
|
19445
|
-
"""
|
|
19446
|
-
(Output)
|
|
19447
|
-
The status of a connected endpoint to this network attachment.
|
|
19448
|
-
"""
|
|
19449
|
-
subnetwork: NotRequired[pulumi.Input[str]]
|
|
19450
|
-
"""
|
|
19451
|
-
(Output)
|
|
19452
|
-
The subnetwork used to assign the IP to the producer instance network interface.
|
|
19453
|
-
"""
|
|
19454
|
-
elif False:
|
|
19455
|
-
NetworkAttachmentConnectionEndpointArgsDict: TypeAlias = Mapping[str, Any]
|
|
19456
|
-
|
|
19457
|
-
@pulumi.input_type
|
|
19458
|
-
class NetworkAttachmentConnectionEndpointArgs:
|
|
19459
|
-
def __init__(__self__, *,
|
|
19460
|
-
ip_address: Optional[pulumi.Input[str]] = None,
|
|
19461
|
-
project_id_or_num: Optional[pulumi.Input[str]] = None,
|
|
19462
|
-
secondary_ip_cidr_ranges: Optional[pulumi.Input[str]] = None,
|
|
19463
|
-
status: Optional[pulumi.Input[str]] = None,
|
|
19464
|
-
subnetwork: Optional[pulumi.Input[str]] = None):
|
|
19465
|
-
"""
|
|
19466
|
-
:param pulumi.Input[str] ip_address: (Output)
|
|
19467
|
-
The IPv4 address assigned to the producer instance network interface. This value will be a range in case of Serverless.
|
|
19468
|
-
:param pulumi.Input[str] project_id_or_num: (Output)
|
|
19469
|
-
The project id or number of the interface to which the IP was assigned.
|
|
19470
|
-
:param pulumi.Input[str] secondary_ip_cidr_ranges: (Output)
|
|
19471
|
-
Alias IP ranges from the same subnetwork.
|
|
19472
|
-
:param pulumi.Input[str] status: (Output)
|
|
19473
|
-
The status of a connected endpoint to this network attachment.
|
|
19474
|
-
:param pulumi.Input[str] subnetwork: (Output)
|
|
19475
|
-
The subnetwork used to assign the IP to the producer instance network interface.
|
|
19476
|
-
"""
|
|
19477
|
-
if ip_address is not None:
|
|
19478
|
-
pulumi.set(__self__, "ip_address", ip_address)
|
|
19479
|
-
if project_id_or_num is not None:
|
|
19480
|
-
pulumi.set(__self__, "project_id_or_num", project_id_or_num)
|
|
19481
|
-
if secondary_ip_cidr_ranges is not None:
|
|
19482
|
-
pulumi.set(__self__, "secondary_ip_cidr_ranges", secondary_ip_cidr_ranges)
|
|
19483
|
-
if status is not None:
|
|
19484
|
-
pulumi.set(__self__, "status", status)
|
|
19485
|
-
if subnetwork is not None:
|
|
19486
|
-
pulumi.set(__self__, "subnetwork", subnetwork)
|
|
19487
|
-
|
|
19488
|
-
@property
|
|
19489
|
-
@pulumi.getter(name="ipAddress")
|
|
19490
|
-
def ip_address(self) -> Optional[pulumi.Input[str]]:
|
|
19491
|
-
"""
|
|
19492
|
-
(Output)
|
|
19493
|
-
The IPv4 address assigned to the producer instance network interface. This value will be a range in case of Serverless.
|
|
19494
|
-
"""
|
|
19495
|
-
return pulumi.get(self, "ip_address")
|
|
19496
|
-
|
|
19497
|
-
@ip_address.setter
|
|
19498
|
-
def ip_address(self, value: Optional[pulumi.Input[str]]):
|
|
19499
|
-
pulumi.set(self, "ip_address", value)
|
|
19500
|
-
|
|
19501
|
-
@property
|
|
19502
|
-
@pulumi.getter(name="projectIdOrNum")
|
|
19503
|
-
def project_id_or_num(self) -> Optional[pulumi.Input[str]]:
|
|
19504
|
-
"""
|
|
19505
|
-
(Output)
|
|
19506
|
-
The project id or number of the interface to which the IP was assigned.
|
|
19507
|
-
"""
|
|
19508
|
-
return pulumi.get(self, "project_id_or_num")
|
|
19509
|
-
|
|
19510
|
-
@project_id_or_num.setter
|
|
19511
|
-
def project_id_or_num(self, value: Optional[pulumi.Input[str]]):
|
|
19512
|
-
pulumi.set(self, "project_id_or_num", value)
|
|
19513
|
-
|
|
19514
|
-
@property
|
|
19515
|
-
@pulumi.getter(name="secondaryIpCidrRanges")
|
|
19516
|
-
def secondary_ip_cidr_ranges(self) -> Optional[pulumi.Input[str]]:
|
|
19517
|
-
"""
|
|
19518
|
-
(Output)
|
|
19519
|
-
Alias IP ranges from the same subnetwork.
|
|
19520
|
-
"""
|
|
19521
|
-
return pulumi.get(self, "secondary_ip_cidr_ranges")
|
|
19522
|
-
|
|
19523
|
-
@secondary_ip_cidr_ranges.setter
|
|
19524
|
-
def secondary_ip_cidr_ranges(self, value: Optional[pulumi.Input[str]]):
|
|
19525
|
-
pulumi.set(self, "secondary_ip_cidr_ranges", value)
|
|
19526
|
-
|
|
19527
|
-
@property
|
|
19528
|
-
@pulumi.getter
|
|
19529
|
-
def status(self) -> Optional[pulumi.Input[str]]:
|
|
19530
|
-
"""
|
|
19531
|
-
(Output)
|
|
19532
|
-
The status of a connected endpoint to this network attachment.
|
|
19533
|
-
"""
|
|
19534
|
-
return pulumi.get(self, "status")
|
|
19535
|
-
|
|
19536
|
-
@status.setter
|
|
19537
|
-
def status(self, value: Optional[pulumi.Input[str]]):
|
|
19538
|
-
pulumi.set(self, "status", value)
|
|
19539
|
-
|
|
19540
|
-
@property
|
|
19541
|
-
@pulumi.getter
|
|
19542
|
-
def subnetwork(self) -> Optional[pulumi.Input[str]]:
|
|
19543
|
-
"""
|
|
19544
|
-
(Output)
|
|
19545
|
-
The subnetwork used to assign the IP to the producer instance network interface.
|
|
19546
|
-
"""
|
|
19547
|
-
return pulumi.get(self, "subnetwork")
|
|
19548
|
-
|
|
19549
|
-
@subnetwork.setter
|
|
19550
|
-
def subnetwork(self, value: Optional[pulumi.Input[str]]):
|
|
19551
|
-
pulumi.set(self, "subnetwork", value)
|
|
19552
|
-
|
|
19553
|
-
|
|
19554
|
-
if not MYPY:
|
|
19555
|
-
class NetworkEndpointListNetworkEndpointArgsDict(TypedDict):
|
|
19556
|
-
ip_address: pulumi.Input[str]
|
|
19557
|
-
"""
|
|
19558
|
-
IPv4 address of network endpoint. The IP address must belong
|
|
19559
|
-
to a VM in GCE (either the primary IP or as part of an aliased IP
|
|
19560
|
-
range).
|
|
19561
|
-
"""
|
|
19562
|
-
instance: NotRequired[pulumi.Input[str]]
|
|
19563
|
-
"""
|
|
19564
|
-
The name for a specific VM instance that the IP address belongs to.
|
|
19565
|
-
This is required for network endpoints of type GCE_VM_IP_PORT.
|
|
19566
|
-
The instance must be in the same zone as the network endpoint group.
|
|
19567
|
-
"""
|
|
19568
|
-
port: NotRequired[pulumi.Input[int]]
|
|
19569
|
-
"""
|
|
19570
|
-
Port number of network endpoint.
|
|
19571
|
-
**Note** `port` is required unless the Network Endpoint Group is created
|
|
19572
|
-
with the type of `GCE_VM_IP`
|
|
19573
|
-
"""
|
|
19574
|
-
elif False:
|
|
19575
|
-
NetworkEndpointListNetworkEndpointArgsDict: TypeAlias = Mapping[str, Any]
|
|
19576
|
-
|
|
19577
|
-
@pulumi.input_type
|
|
19578
|
-
class NetworkEndpointListNetworkEndpointArgs:
|
|
19579
|
-
def __init__(__self__, *,
|
|
19580
|
-
ip_address: pulumi.Input[str],
|
|
19581
|
-
instance: Optional[pulumi.Input[str]] = None,
|
|
19582
|
-
port: Optional[pulumi.Input[int]] = None):
|
|
19583
|
-
"""
|
|
19584
|
-
:param pulumi.Input[str] ip_address: IPv4 address of network endpoint. The IP address must belong
|
|
19585
|
-
to a VM in GCE (either the primary IP or as part of an aliased IP
|
|
19586
|
-
range).
|
|
19587
|
-
:param pulumi.Input[str] instance: The name for a specific VM instance that the IP address belongs to.
|
|
19588
|
-
This is required for network endpoints of type GCE_VM_IP_PORT.
|
|
19589
|
-
The instance must be in the same zone as the network endpoint group.
|
|
19590
|
-
:param pulumi.Input[int] port: Port number of network endpoint.
|
|
19591
|
-
**Note** `port` is required unless the Network Endpoint Group is created
|
|
19592
|
-
with the type of `GCE_VM_IP`
|
|
19593
|
-
"""
|
|
19594
|
-
pulumi.set(__self__, "ip_address", ip_address)
|
|
19595
|
-
if instance is not None:
|
|
19596
|
-
pulumi.set(__self__, "instance", instance)
|
|
19597
|
-
if port is not None:
|
|
19598
|
-
pulumi.set(__self__, "port", port)
|
|
19599
|
-
|
|
19600
|
-
@property
|
|
19601
|
-
@pulumi.getter(name="ipAddress")
|
|
19602
|
-
def ip_address(self) -> pulumi.Input[str]:
|
|
19603
|
-
"""
|
|
19604
|
-
IPv4 address of network endpoint. The IP address must belong
|
|
19605
|
-
to a VM in GCE (either the primary IP or as part of an aliased IP
|
|
19606
|
-
range).
|
|
19607
|
-
"""
|
|
19608
|
-
return pulumi.get(self, "ip_address")
|
|
19609
|
-
|
|
19610
|
-
@ip_address.setter
|
|
19611
|
-
def ip_address(self, value: pulumi.Input[str]):
|
|
19612
|
-
pulumi.set(self, "ip_address", value)
|
|
19613
|
-
|
|
19614
|
-
@property
|
|
19615
|
-
@pulumi.getter
|
|
19616
|
-
def instance(self) -> Optional[pulumi.Input[str]]:
|
|
19617
|
-
"""
|
|
19618
|
-
The name for a specific VM instance that the IP address belongs to.
|
|
19619
|
-
This is required for network endpoints of type GCE_VM_IP_PORT.
|
|
19620
|
-
The instance must be in the same zone as the network endpoint group.
|
|
19621
|
-
"""
|
|
19622
|
-
return pulumi.get(self, "instance")
|
|
19623
|
-
|
|
19624
|
-
@instance.setter
|
|
19625
|
-
def instance(self, value: Optional[pulumi.Input[str]]):
|
|
19626
|
-
pulumi.set(self, "instance", value)
|
|
19627
|
-
|
|
19628
|
-
@property
|
|
19629
|
-
@pulumi.getter
|
|
19630
|
-
def port(self) -> Optional[pulumi.Input[int]]:
|
|
19631
|
-
"""
|
|
19632
|
-
Port number of network endpoint.
|
|
19633
|
-
**Note** `port` is required unless the Network Endpoint Group is created
|
|
19634
|
-
with the type of `GCE_VM_IP`
|
|
19635
|
-
"""
|
|
19636
|
-
return pulumi.get(self, "port")
|
|
19637
|
-
|
|
19638
|
-
@port.setter
|
|
19639
|
-
def port(self, value: Optional[pulumi.Input[int]]):
|
|
19640
|
-
pulumi.set(self, "port", value)
|
|
19641
|
-
|
|
19642
|
-
|
|
19643
|
-
if not MYPY:
|
|
19644
|
-
class NetworkFirewallPolicyRuleMatchArgsDict(TypedDict):
|
|
19645
|
-
layer4_configs: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgsDict']]]
|
|
19646
|
-
"""
|
|
19647
|
-
Pairs of IP protocols and ports that the rule should match.
|
|
19648
|
-
"""
|
|
19649
|
-
dest_address_groups: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19650
|
-
"""
|
|
19651
|
-
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. Destination address groups is only supported in Egress rules.
|
|
19652
|
-
"""
|
|
19653
|
-
dest_fqdns: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19654
|
-
"""
|
|
19655
|
-
Domain names that will be used to match against the resolved domain name of destination of traffic. Can only be specified if DIRECTION is egress.
|
|
19656
|
-
"""
|
|
19657
|
-
dest_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19658
|
-
"""
|
|
19659
|
-
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
|
|
19660
|
-
"""
|
|
19661
|
-
dest_region_codes: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19662
|
-
"""
|
|
19663
|
-
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is egress.
|
|
19664
|
-
"""
|
|
19665
|
-
dest_threat_intelligences: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19666
|
-
"""
|
|
19667
|
-
Name of the Google Cloud Threat Intelligence list.
|
|
19668
|
-
"""
|
|
19669
|
-
src_address_groups: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19670
|
-
"""
|
|
19671
|
-
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. Source address groups is only supported in Ingress rules.
|
|
19672
|
-
"""
|
|
19673
|
-
src_fqdns: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19674
|
-
"""
|
|
19675
|
-
Domain names that will be used to match against the resolved domain name of source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19676
|
-
"""
|
|
19677
|
-
src_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19678
|
-
"""
|
|
19679
|
-
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
|
|
19680
|
-
"""
|
|
19681
|
-
src_region_codes: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19682
|
-
"""
|
|
19683
|
-
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19684
|
-
"""
|
|
19685
|
-
src_secure_tags: NotRequired[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgsDict']]]]
|
|
19686
|
-
"""
|
|
19687
|
-
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE, and there is no <code>srcIpRange</code>, this rule will be ignored. Maximum number of source tag values allowed is 256.
|
|
19688
|
-
"""
|
|
19689
|
-
src_threat_intelligences: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19690
|
-
"""
|
|
19691
|
-
Name of the Google Cloud Threat Intelligence list.
|
|
19692
|
-
|
|
19693
|
-
The `layer4_configs` block supports:
|
|
19694
|
-
"""
|
|
19695
|
-
elif False:
|
|
19696
|
-
NetworkFirewallPolicyRuleMatchArgsDict: TypeAlias = Mapping[str, Any]
|
|
19697
|
-
|
|
19698
|
-
@pulumi.input_type
|
|
19699
|
-
class NetworkFirewallPolicyRuleMatchArgs:
|
|
19700
|
-
def __init__(__self__, *,
|
|
19701
|
-
layer4_configs: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]],
|
|
19702
|
-
dest_address_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19703
|
-
dest_fqdns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19704
|
-
dest_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19705
|
-
dest_region_codes: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19706
|
-
dest_threat_intelligences: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19707
|
-
src_address_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19708
|
-
src_fqdns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19709
|
-
src_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19710
|
-
src_region_codes: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
19711
|
-
src_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]]] = None,
|
|
19712
|
-
src_threat_intelligences: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
19713
|
-
"""
|
|
19714
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]] layer4_configs: Pairs of IP protocols and ports that the rule should match.
|
|
19715
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_address_groups: Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. Destination address groups is only supported in Egress rules.
|
|
19716
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_fqdns: Domain names that will be used to match against the resolved domain name of destination of traffic. Can only be specified if DIRECTION is egress.
|
|
19717
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_ip_ranges: CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
|
|
19718
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_region_codes: The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is egress.
|
|
19719
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_threat_intelligences: Name of the Google Cloud Threat Intelligence list.
|
|
19720
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_address_groups: Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. Source address groups is only supported in Ingress rules.
|
|
19721
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_fqdns: Domain names that will be used to match against the resolved domain name of source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19722
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_ip_ranges: CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
|
|
19723
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_region_codes: The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19724
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]] src_secure_tags: List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE, and there is no <code>srcIpRange</code>, this rule will be ignored. Maximum number of source tag values allowed is 256.
|
|
19725
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_threat_intelligences: Name of the Google Cloud Threat Intelligence list.
|
|
19726
|
-
|
|
19727
|
-
The `layer4_configs` block supports:
|
|
19728
|
-
"""
|
|
19729
|
-
pulumi.set(__self__, "layer4_configs", layer4_configs)
|
|
19730
|
-
if dest_address_groups is not None:
|
|
19731
|
-
pulumi.set(__self__, "dest_address_groups", dest_address_groups)
|
|
19732
|
-
if dest_fqdns is not None:
|
|
19733
|
-
pulumi.set(__self__, "dest_fqdns", dest_fqdns)
|
|
19734
|
-
if dest_ip_ranges is not None:
|
|
19735
|
-
pulumi.set(__self__, "dest_ip_ranges", dest_ip_ranges)
|
|
19736
|
-
if dest_region_codes is not None:
|
|
19737
|
-
pulumi.set(__self__, "dest_region_codes", dest_region_codes)
|
|
19738
|
-
if dest_threat_intelligences is not None:
|
|
19739
|
-
pulumi.set(__self__, "dest_threat_intelligences", dest_threat_intelligences)
|
|
19740
|
-
if src_address_groups is not None:
|
|
19741
|
-
pulumi.set(__self__, "src_address_groups", src_address_groups)
|
|
19742
|
-
if src_fqdns is not None:
|
|
19743
|
-
pulumi.set(__self__, "src_fqdns", src_fqdns)
|
|
19744
|
-
if src_ip_ranges is not None:
|
|
19745
|
-
pulumi.set(__self__, "src_ip_ranges", src_ip_ranges)
|
|
19746
|
-
if src_region_codes is not None:
|
|
19747
|
-
pulumi.set(__self__, "src_region_codes", src_region_codes)
|
|
19748
|
-
if src_secure_tags is not None:
|
|
19749
|
-
pulumi.set(__self__, "src_secure_tags", src_secure_tags)
|
|
19750
|
-
if src_threat_intelligences is not None:
|
|
19751
|
-
pulumi.set(__self__, "src_threat_intelligences", src_threat_intelligences)
|
|
19752
|
-
|
|
19753
|
-
@property
|
|
19754
|
-
@pulumi.getter(name="layer4Configs")
|
|
19755
|
-
def layer4_configs(self) -> pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]]:
|
|
19756
|
-
"""
|
|
19757
|
-
Pairs of IP protocols and ports that the rule should match.
|
|
19758
|
-
"""
|
|
19759
|
-
return pulumi.get(self, "layer4_configs")
|
|
19760
|
-
|
|
19761
|
-
@layer4_configs.setter
|
|
19762
|
-
def layer4_configs(self, value: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]]):
|
|
19763
|
-
pulumi.set(self, "layer4_configs", value)
|
|
19764
|
-
|
|
19765
|
-
@property
|
|
19766
|
-
@pulumi.getter(name="destAddressGroups")
|
|
19767
|
-
def dest_address_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19768
|
-
"""
|
|
19769
|
-
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. Destination address groups is only supported in Egress rules.
|
|
19770
|
-
"""
|
|
19771
|
-
return pulumi.get(self, "dest_address_groups")
|
|
19772
|
-
|
|
19773
|
-
@dest_address_groups.setter
|
|
19774
|
-
def dest_address_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19775
|
-
pulumi.set(self, "dest_address_groups", value)
|
|
19776
|
-
|
|
19777
|
-
@property
|
|
19778
|
-
@pulumi.getter(name="destFqdns")
|
|
19779
|
-
def dest_fqdns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19780
|
-
"""
|
|
19781
|
-
Domain names that will be used to match against the resolved domain name of destination of traffic. Can only be specified if DIRECTION is egress.
|
|
19782
|
-
"""
|
|
19783
|
-
return pulumi.get(self, "dest_fqdns")
|
|
19784
|
-
|
|
19785
|
-
@dest_fqdns.setter
|
|
19786
|
-
def dest_fqdns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19787
|
-
pulumi.set(self, "dest_fqdns", value)
|
|
19788
|
-
|
|
19789
|
-
@property
|
|
19790
|
-
@pulumi.getter(name="destIpRanges")
|
|
19791
|
-
def dest_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19792
|
-
"""
|
|
19793
|
-
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
|
|
19794
|
-
"""
|
|
19795
|
-
return pulumi.get(self, "dest_ip_ranges")
|
|
19796
|
-
|
|
19797
|
-
@dest_ip_ranges.setter
|
|
19798
|
-
def dest_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19799
|
-
pulumi.set(self, "dest_ip_ranges", value)
|
|
19800
|
-
|
|
19801
|
-
@property
|
|
19802
|
-
@pulumi.getter(name="destRegionCodes")
|
|
19803
|
-
def dest_region_codes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19804
|
-
"""
|
|
19805
|
-
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is egress.
|
|
19806
|
-
"""
|
|
19807
|
-
return pulumi.get(self, "dest_region_codes")
|
|
19808
|
-
|
|
19809
|
-
@dest_region_codes.setter
|
|
19810
|
-
def dest_region_codes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19811
|
-
pulumi.set(self, "dest_region_codes", value)
|
|
19812
|
-
|
|
19813
|
-
@property
|
|
19814
|
-
@pulumi.getter(name="destThreatIntelligences")
|
|
19815
|
-
def dest_threat_intelligences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19816
|
-
"""
|
|
19817
|
-
Name of the Google Cloud Threat Intelligence list.
|
|
19818
|
-
"""
|
|
19819
|
-
return pulumi.get(self, "dest_threat_intelligences")
|
|
19820
|
-
|
|
19821
|
-
@dest_threat_intelligences.setter
|
|
19822
|
-
def dest_threat_intelligences(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19823
|
-
pulumi.set(self, "dest_threat_intelligences", value)
|
|
19824
|
-
|
|
19825
|
-
@property
|
|
19826
|
-
@pulumi.getter(name="srcAddressGroups")
|
|
19827
|
-
def src_address_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19828
|
-
"""
|
|
19829
|
-
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. Source address groups is only supported in Ingress rules.
|
|
19830
|
-
"""
|
|
19831
|
-
return pulumi.get(self, "src_address_groups")
|
|
19832
|
-
|
|
19833
|
-
@src_address_groups.setter
|
|
19834
|
-
def src_address_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19835
|
-
pulumi.set(self, "src_address_groups", value)
|
|
19836
|
-
|
|
19837
|
-
@property
|
|
19838
|
-
@pulumi.getter(name="srcFqdns")
|
|
19839
|
-
def src_fqdns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19840
|
-
"""
|
|
19841
|
-
Domain names that will be used to match against the resolved domain name of source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19842
|
-
"""
|
|
19843
|
-
return pulumi.get(self, "src_fqdns")
|
|
19844
|
-
|
|
19845
|
-
@src_fqdns.setter
|
|
19846
|
-
def src_fqdns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19847
|
-
pulumi.set(self, "src_fqdns", value)
|
|
19848
|
-
|
|
19849
|
-
@property
|
|
19850
|
-
@pulumi.getter(name="srcIpRanges")
|
|
19851
|
-
def src_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19852
|
-
"""
|
|
19853
|
-
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
|
|
19854
|
-
"""
|
|
19855
|
-
return pulumi.get(self, "src_ip_ranges")
|
|
19856
|
-
|
|
19857
|
-
@src_ip_ranges.setter
|
|
19858
|
-
def src_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19859
|
-
pulumi.set(self, "src_ip_ranges", value)
|
|
19860
|
-
|
|
19861
|
-
@property
|
|
19862
|
-
@pulumi.getter(name="srcRegionCodes")
|
|
19863
|
-
def src_region_codes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19864
|
-
"""
|
|
19865
|
-
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19866
|
-
"""
|
|
19867
|
-
return pulumi.get(self, "src_region_codes")
|
|
19868
|
-
|
|
19869
|
-
@src_region_codes.setter
|
|
19870
|
-
def src_region_codes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19871
|
-
pulumi.set(self, "src_region_codes", value)
|
|
19872
|
-
|
|
19873
|
-
@property
|
|
19874
|
-
@pulumi.getter(name="srcSecureTags")
|
|
19875
|
-
def src_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]]]:
|
|
19876
|
-
"""
|
|
19877
|
-
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE, and there is no <code>srcIpRange</code>, this rule will be ignored. Maximum number of source tag values allowed is 256.
|
|
19878
|
-
"""
|
|
19879
|
-
return pulumi.get(self, "src_secure_tags")
|
|
19880
|
-
|
|
19881
|
-
@src_secure_tags.setter
|
|
19882
|
-
def src_secure_tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]]]):
|
|
19883
|
-
pulumi.set(self, "src_secure_tags", value)
|
|
19884
|
-
|
|
19885
|
-
@property
|
|
19886
|
-
@pulumi.getter(name="srcThreatIntelligences")
|
|
19887
|
-
def src_threat_intelligences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19888
|
-
"""
|
|
19889
|
-
Name of the Google Cloud Threat Intelligence list.
|
|
19890
|
-
|
|
19891
|
-
The `layer4_configs` block supports:
|
|
19892
|
-
"""
|
|
19893
|
-
return pulumi.get(self, "src_threat_intelligences")
|
|
19894
|
-
|
|
19895
|
-
@src_threat_intelligences.setter
|
|
19896
|
-
def src_threat_intelligences(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19897
|
-
pulumi.set(self, "src_threat_intelligences", value)
|
|
19898
|
-
|
|
19899
|
-
|
|
19900
|
-
if not MYPY:
|
|
19901
|
-
class NetworkFirewallPolicyRuleMatchLayer4ConfigArgsDict(TypedDict):
|
|
19902
|
-
ip_protocol: pulumi.Input[str]
|
|
19903
|
-
"""
|
|
19904
|
-
The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (`tcp`, `udp`, `icmp`, `esp`, `ah`, `ipip`, `sctp`), or the IP protocol number.
|
|
19905
|
-
"""
|
|
19906
|
-
ports: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
19907
|
-
"""
|
|
19908
|
-
An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port. Example inputs include: ``.
|
|
19909
|
-
"""
|
|
19910
|
-
elif False:
|
|
19911
|
-
NetworkFirewallPolicyRuleMatchLayer4ConfigArgsDict: TypeAlias = Mapping[str, Any]
|
|
19912
|
-
|
|
19913
|
-
@pulumi.input_type
|
|
19914
|
-
class NetworkFirewallPolicyRuleMatchLayer4ConfigArgs:
|
|
19915
|
-
def __init__(__self__, *,
|
|
19916
|
-
ip_protocol: pulumi.Input[str],
|
|
19917
|
-
ports: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
19918
|
-
"""
|
|
19919
|
-
:param pulumi.Input[str] ip_protocol: The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (`tcp`, `udp`, `icmp`, `esp`, `ah`, `ipip`, `sctp`), or the IP protocol number.
|
|
19920
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] ports: An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port. Example inputs include: ``.
|
|
19921
|
-
"""
|
|
19922
|
-
pulumi.set(__self__, "ip_protocol", ip_protocol)
|
|
19923
|
-
if ports is not None:
|
|
19924
|
-
pulumi.set(__self__, "ports", ports)
|
|
19925
|
-
|
|
19926
|
-
@property
|
|
19927
|
-
@pulumi.getter(name="ipProtocol")
|
|
19928
|
-
def ip_protocol(self) -> pulumi.Input[str]:
|
|
19929
|
-
"""
|
|
19930
|
-
The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (`tcp`, `udp`, `icmp`, `esp`, `ah`, `ipip`, `sctp`), or the IP protocol number.
|
|
19931
|
-
"""
|
|
19932
|
-
return pulumi.get(self, "ip_protocol")
|
|
19933
|
-
|
|
19934
|
-
@ip_protocol.setter
|
|
19935
|
-
def ip_protocol(self, value: pulumi.Input[str]):
|
|
19936
|
-
pulumi.set(self, "ip_protocol", value)
|
|
19937
|
-
|
|
19938
|
-
@property
|
|
19939
|
-
@pulumi.getter
|
|
19940
|
-
def ports(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
19941
|
-
"""
|
|
19942
|
-
An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port. Example inputs include: ``.
|
|
19943
|
-
"""
|
|
19944
|
-
return pulumi.get(self, "ports")
|
|
19945
|
-
|
|
19946
|
-
@ports.setter
|
|
19947
|
-
def ports(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
19948
|
-
pulumi.set(self, "ports", value)
|
|
19949
|
-
|
|
19950
|
-
|
|
19951
|
-
if not MYPY:
|
|
19952
|
-
class NetworkFirewallPolicyRuleMatchSrcSecureTagArgsDict(TypedDict):
|
|
19953
|
-
name: pulumi.Input[str]
|
|
19954
|
-
"""
|
|
19955
|
-
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
19956
|
-
"""
|
|
19957
|
-
state: NotRequired[pulumi.Input[str]]
|
|
19958
|
-
"""
|
|
19959
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
19960
|
-
"""
|
|
19961
|
-
elif False:
|
|
19962
|
-
NetworkFirewallPolicyRuleMatchSrcSecureTagArgsDict: TypeAlias = Mapping[str, Any]
|
|
19963
|
-
|
|
19964
|
-
@pulumi.input_type
|
|
19965
|
-
class NetworkFirewallPolicyRuleMatchSrcSecureTagArgs:
|
|
19966
|
-
def __init__(__self__, *,
|
|
19967
|
-
name: pulumi.Input[str],
|
|
19968
|
-
state: Optional[pulumi.Input[str]] = None):
|
|
19969
|
-
"""
|
|
19970
|
-
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
19971
|
-
:param pulumi.Input[str] state: [Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
19972
|
-
"""
|
|
19973
|
-
pulumi.set(__self__, "name", name)
|
|
19974
|
-
if state is not None:
|
|
19975
|
-
pulumi.set(__self__, "state", state)
|
|
19976
|
-
|
|
19977
|
-
@property
|
|
19978
|
-
@pulumi.getter
|
|
19979
|
-
def name(self) -> pulumi.Input[str]:
|
|
19980
|
-
"""
|
|
19981
|
-
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
19982
|
-
"""
|
|
19983
|
-
return pulumi.get(self, "name")
|
|
19984
|
-
|
|
19985
|
-
@name.setter
|
|
19986
|
-
def name(self, value: pulumi.Input[str]):
|
|
19987
|
-
pulumi.set(self, "name", value)
|
|
19988
|
-
|
|
19989
|
-
@property
|
|
19990
|
-
@pulumi.getter
|
|
19991
|
-
def state(self) -> Optional[pulumi.Input[str]]:
|
|
19992
|
-
"""
|
|
19993
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
19994
|
-
"""
|
|
19995
|
-
return pulumi.get(self, "state")
|
|
19996
|
-
|
|
19997
|
-
@state.setter
|
|
19998
|
-
def state(self, value: Optional[pulumi.Input[str]]):
|
|
19999
|
-
pulumi.set(self, "state", value)
|
|
20000
|
-
|
|
20001
|
-
|
|
20002
|
-
if not MYPY:
|
|
20003
|
-
class NetworkFirewallPolicyRuleTargetSecureTagArgsDict(TypedDict):
|
|
20004
|
-
name: pulumi.Input[str]
|
|
20005
|
-
"""
|
|
20006
|
-
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
20007
|
-
"""
|
|
20008
|
-
state: NotRequired[pulumi.Input[str]]
|
|
20009
|
-
"""
|
|
20010
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
20011
|
-
"""
|
|
20012
|
-
elif False:
|
|
20013
|
-
NetworkFirewallPolicyRuleTargetSecureTagArgsDict: TypeAlias = Mapping[str, Any]
|
|
20014
|
-
|
|
20015
|
-
@pulumi.input_type
|
|
20016
|
-
class NetworkFirewallPolicyRuleTargetSecureTagArgs:
|
|
20017
|
-
def __init__(__self__, *,
|
|
20018
|
-
name: pulumi.Input[str],
|
|
20019
|
-
state: Optional[pulumi.Input[str]] = None):
|
|
20020
|
-
"""
|
|
20021
|
-
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
20022
|
-
:param pulumi.Input[str] state: [Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
20023
|
-
"""
|
|
20024
|
-
pulumi.set(__self__, "name", name)
|
|
20025
|
-
if state is not None:
|
|
20026
|
-
pulumi.set(__self__, "state", state)
|
|
20027
|
-
|
|
20028
|
-
@property
|
|
20029
|
-
@pulumi.getter
|
|
20030
|
-
def name(self) -> pulumi.Input[str]:
|
|
20031
|
-
"""
|
|
20032
|
-
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
20033
|
-
"""
|
|
20034
|
-
return pulumi.get(self, "name")
|
|
20035
|
-
|
|
20036
|
-
@name.setter
|
|
20037
|
-
def name(self, value: pulumi.Input[str]):
|
|
20038
|
-
pulumi.set(self, "name", value)
|
|
20039
|
-
|
|
20040
|
-
@property
|
|
20041
|
-
@pulumi.getter
|
|
20042
|
-
def state(self) -> Optional[pulumi.Input[str]]:
|
|
20043
|
-
"""
|
|
20044
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
20045
|
-
"""
|
|
20046
|
-
return pulumi.get(self, "state")
|
|
20047
|
-
|
|
20048
|
-
@state.setter
|
|
20049
|
-
def state(self, value: Optional[pulumi.Input[str]]):
|
|
20050
|
-
pulumi.set(self, "state", value)
|
|
20051
|
-
|
|
20052
|
-
|
|
20053
|
-
if not MYPY:
|
|
20054
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleArgsDict(TypedDict):
|
|
20055
|
-
action: NotRequired[pulumi.Input[str]]
|
|
20056
|
-
"""
|
|
20057
|
-
(Output)
|
|
20058
|
-
The Action to perform when the client connection triggers the rule. Can currently be either
|
|
20059
|
-
"allow", "deny", "apply_security_profile_group" or "goto_next".
|
|
20060
|
-
"""
|
|
20061
|
-
description: NotRequired[pulumi.Input[str]]
|
|
20062
|
-
"""
|
|
20063
|
-
(Output)
|
|
20064
|
-
A description of the rule.
|
|
20065
|
-
"""
|
|
20066
|
-
direction: NotRequired[pulumi.Input[str]]
|
|
20067
|
-
"""
|
|
20068
|
-
(Output)
|
|
20069
|
-
The direction in which this rule applies. If unspecified an INGRESS rule is created.
|
|
20070
|
-
"""
|
|
20071
|
-
disabled: NotRequired[pulumi.Input[bool]]
|
|
20072
|
-
"""
|
|
20073
|
-
(Output)
|
|
20074
|
-
Denotes whether the firewall policy rule is disabled. When set to true,
|
|
20075
|
-
the firewall policy rule is not enforced and traffic behaves as if it did
|
|
20076
|
-
not exist. If this is unspecified, the firewall policy rule will be
|
|
20077
|
-
enabled.
|
|
20078
|
-
"""
|
|
20079
|
-
enable_logging: NotRequired[pulumi.Input[bool]]
|
|
20080
|
-
"""
|
|
20081
|
-
(Output)
|
|
20082
|
-
Denotes whether to enable logging for a particular rule.
|
|
20083
|
-
If logging is enabled, logs will be exported to the
|
|
20084
|
-
configured export destination in Stackdriver.
|
|
20085
|
-
"""
|
|
20086
|
-
matches: NotRequired[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgsDict']]]]
|
|
20087
|
-
"""
|
|
20088
|
-
(Output)
|
|
20089
|
-
A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
|
20090
|
-
Structure is documented below.
|
|
20091
|
-
"""
|
|
20092
|
-
priority: NotRequired[pulumi.Input[int]]
|
|
20093
|
-
"""
|
|
20094
|
-
(Output)
|
|
20095
|
-
An integer indicating the priority of a rule in the list. The priority must be a value
|
|
20096
|
-
between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
|
|
20097
|
-
highest priority and 2147483647 is the lowest priority.
|
|
20098
|
-
"""
|
|
20099
|
-
rule_name: NotRequired[pulumi.Input[str]]
|
|
20100
|
-
"""
|
|
20101
|
-
(Output)
|
|
20102
|
-
An optional name for the rule. This field is not a unique identifier
|
|
20103
|
-
and can be updated.
|
|
20104
|
-
"""
|
|
20105
|
-
security_profile_group: NotRequired[pulumi.Input[str]]
|
|
20106
|
-
"""
|
|
20107
|
-
(Output)
|
|
20108
|
-
A fully-qualified URL of a SecurityProfile resource instance.
|
|
20109
|
-
Example:
|
|
20110
|
-
https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group
|
|
20111
|
-
Must be specified if action is 'apply_security_profile_group'.
|
|
20112
|
-
"""
|
|
20113
|
-
target_secure_tags: NotRequired[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleTargetSecureTagArgsDict']]]]
|
|
20114
|
-
"""
|
|
20115
|
-
(Output)
|
|
20116
|
-
A list of secure tags that controls which instances the firewall rule
|
|
20117
|
-
applies to. If <code>targetSecureTag</code> are specified, then the
|
|
20118
|
-
firewall rule applies only to instances in the VPC network that have one
|
|
20119
|
-
of those EFFECTIVE secure tags, if all the target_secure_tag are in
|
|
20120
|
-
INEFFECTIVE state, then this rule will be ignored.
|
|
20121
|
-
<code>targetSecureTag</code> may not be set at the same time as
|
|
20122
|
-
<code>targetServiceAccounts</code>.
|
|
20123
|
-
If neither <code>targetServiceAccounts</code> nor
|
|
20124
|
-
<code>targetSecureTag</code> are specified, the firewall rule applies
|
|
20125
|
-
to all instances on the specified network.
|
|
20126
|
-
Maximum number of target label tags allowed is 256.
|
|
20127
|
-
Structure is documented below.
|
|
20128
|
-
"""
|
|
20129
|
-
target_service_accounts: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20130
|
-
"""
|
|
20131
|
-
(Output)
|
|
20132
|
-
A list of service accounts indicating the sets of
|
|
20133
|
-
instances that are applied with this rule.
|
|
20134
|
-
"""
|
|
20135
|
-
tls_inspect: NotRequired[pulumi.Input[bool]]
|
|
20136
|
-
"""
|
|
20137
|
-
(Output)
|
|
20138
|
-
Boolean flag indicating if the traffic should be TLS decrypted.
|
|
20139
|
-
It can be set only if action = 'apply_security_profile_group' and cannot be set for other actions.
|
|
20140
|
-
"""
|
|
20141
|
-
elif False:
|
|
20142
|
-
NetworkFirewallPolicyWithRulesPredefinedRuleArgsDict: TypeAlias = Mapping[str, Any]
|
|
20143
|
-
|
|
20144
|
-
@pulumi.input_type
|
|
20145
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleArgs:
|
|
20146
|
-
def __init__(__self__, *,
|
|
20147
|
-
action: Optional[pulumi.Input[str]] = None,
|
|
20148
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
20149
|
-
direction: Optional[pulumi.Input[str]] = None,
|
|
20150
|
-
disabled: Optional[pulumi.Input[bool]] = None,
|
|
20151
|
-
enable_logging: Optional[pulumi.Input[bool]] = None,
|
|
20152
|
-
matches: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgs']]]] = None,
|
|
20153
|
-
priority: Optional[pulumi.Input[int]] = None,
|
|
20154
|
-
rule_name: Optional[pulumi.Input[str]] = None,
|
|
20155
|
-
security_profile_group: Optional[pulumi.Input[str]] = None,
|
|
20156
|
-
target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleTargetSecureTagArgs']]]] = None,
|
|
20157
|
-
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20158
|
-
tls_inspect: Optional[pulumi.Input[bool]] = None):
|
|
20159
|
-
"""
|
|
20160
|
-
:param pulumi.Input[str] action: (Output)
|
|
20161
|
-
The Action to perform when the client connection triggers the rule. Can currently be either
|
|
20162
|
-
"allow", "deny", "apply_security_profile_group" or "goto_next".
|
|
20163
|
-
:param pulumi.Input[str] description: (Output)
|
|
20164
|
-
A description of the rule.
|
|
20165
|
-
:param pulumi.Input[str] direction: (Output)
|
|
20166
|
-
The direction in which this rule applies. If unspecified an INGRESS rule is created.
|
|
20167
|
-
:param pulumi.Input[bool] disabled: (Output)
|
|
20168
|
-
Denotes whether the firewall policy rule is disabled. When set to true,
|
|
20169
|
-
the firewall policy rule is not enforced and traffic behaves as if it did
|
|
20170
|
-
not exist. If this is unspecified, the firewall policy rule will be
|
|
20171
|
-
enabled.
|
|
20172
|
-
:param pulumi.Input[bool] enable_logging: (Output)
|
|
20173
|
-
Denotes whether to enable logging for a particular rule.
|
|
20174
|
-
If logging is enabled, logs will be exported to the
|
|
20175
|
-
configured export destination in Stackdriver.
|
|
20176
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgs']]] matches: (Output)
|
|
20177
|
-
A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
|
20178
|
-
Structure is documented below.
|
|
20179
|
-
:param pulumi.Input[int] priority: (Output)
|
|
20180
|
-
An integer indicating the priority of a rule in the list. The priority must be a value
|
|
20181
|
-
between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
|
|
20182
|
-
highest priority and 2147483647 is the lowest priority.
|
|
20183
|
-
:param pulumi.Input[str] rule_name: (Output)
|
|
20184
|
-
An optional name for the rule. This field is not a unique identifier
|
|
20185
|
-
and can be updated.
|
|
20186
|
-
:param pulumi.Input[str] security_profile_group: (Output)
|
|
20187
|
-
A fully-qualified URL of a SecurityProfile resource instance.
|
|
20188
|
-
Example:
|
|
20189
|
-
https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group
|
|
20190
|
-
Must be specified if action is 'apply_security_profile_group'.
|
|
20191
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleTargetSecureTagArgs']]] target_secure_tags: (Output)
|
|
20192
|
-
A list of secure tags that controls which instances the firewall rule
|
|
20193
|
-
applies to. If <code>targetSecureTag</code> are specified, then the
|
|
20194
|
-
firewall rule applies only to instances in the VPC network that have one
|
|
20195
|
-
of those EFFECTIVE secure tags, if all the target_secure_tag are in
|
|
20196
|
-
INEFFECTIVE state, then this rule will be ignored.
|
|
20197
|
-
<code>targetSecureTag</code> may not be set at the same time as
|
|
20198
|
-
<code>targetServiceAccounts</code>.
|
|
20199
|
-
If neither <code>targetServiceAccounts</code> nor
|
|
20200
|
-
<code>targetSecureTag</code> are specified, the firewall rule applies
|
|
20201
|
-
to all instances on the specified network.
|
|
20202
|
-
Maximum number of target label tags allowed is 256.
|
|
20203
|
-
Structure is documented below.
|
|
20204
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: (Output)
|
|
20205
|
-
A list of service accounts indicating the sets of
|
|
20206
|
-
instances that are applied with this rule.
|
|
20207
|
-
:param pulumi.Input[bool] tls_inspect: (Output)
|
|
20208
|
-
Boolean flag indicating if the traffic should be TLS decrypted.
|
|
20209
|
-
It can be set only if action = 'apply_security_profile_group' and cannot be set for other actions.
|
|
20210
|
-
"""
|
|
20211
|
-
if action is not None:
|
|
20212
|
-
pulumi.set(__self__, "action", action)
|
|
20213
|
-
if description is not None:
|
|
20214
|
-
pulumi.set(__self__, "description", description)
|
|
20215
|
-
if direction is not None:
|
|
20216
|
-
pulumi.set(__self__, "direction", direction)
|
|
20217
|
-
if disabled is not None:
|
|
20218
|
-
pulumi.set(__self__, "disabled", disabled)
|
|
20219
|
-
if enable_logging is not None:
|
|
20220
|
-
pulumi.set(__self__, "enable_logging", enable_logging)
|
|
20221
|
-
if matches is not None:
|
|
20222
|
-
pulumi.set(__self__, "matches", matches)
|
|
20223
|
-
if priority is not None:
|
|
20224
|
-
pulumi.set(__self__, "priority", priority)
|
|
20225
|
-
if rule_name is not None:
|
|
20226
|
-
pulumi.set(__self__, "rule_name", rule_name)
|
|
20227
|
-
if security_profile_group is not None:
|
|
20228
|
-
pulumi.set(__self__, "security_profile_group", security_profile_group)
|
|
20229
|
-
if target_secure_tags is not None:
|
|
20230
|
-
pulumi.set(__self__, "target_secure_tags", target_secure_tags)
|
|
20231
|
-
if target_service_accounts is not None:
|
|
20232
|
-
pulumi.set(__self__, "target_service_accounts", target_service_accounts)
|
|
20233
|
-
if tls_inspect is not None:
|
|
20234
|
-
pulumi.set(__self__, "tls_inspect", tls_inspect)
|
|
20235
|
-
|
|
20236
|
-
@property
|
|
20237
|
-
@pulumi.getter
|
|
20238
|
-
def action(self) -> Optional[pulumi.Input[str]]:
|
|
20239
|
-
"""
|
|
20240
|
-
(Output)
|
|
20241
|
-
The Action to perform when the client connection triggers the rule. Can currently be either
|
|
20242
|
-
"allow", "deny", "apply_security_profile_group" or "goto_next".
|
|
20243
|
-
"""
|
|
20244
|
-
return pulumi.get(self, "action")
|
|
20245
|
-
|
|
20246
|
-
@action.setter
|
|
20247
|
-
def action(self, value: Optional[pulumi.Input[str]]):
|
|
20248
|
-
pulumi.set(self, "action", value)
|
|
20249
|
-
|
|
20250
|
-
@property
|
|
20251
|
-
@pulumi.getter
|
|
20252
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
20253
|
-
"""
|
|
20254
|
-
(Output)
|
|
20255
|
-
A description of the rule.
|
|
20256
|
-
"""
|
|
20257
|
-
return pulumi.get(self, "description")
|
|
20258
|
-
|
|
20259
|
-
@description.setter
|
|
20260
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
20261
|
-
pulumi.set(self, "description", value)
|
|
20262
|
-
|
|
20263
|
-
@property
|
|
20264
|
-
@pulumi.getter
|
|
20265
|
-
def direction(self) -> Optional[pulumi.Input[str]]:
|
|
20266
|
-
"""
|
|
20267
|
-
(Output)
|
|
20268
|
-
The direction in which this rule applies. If unspecified an INGRESS rule is created.
|
|
20269
|
-
"""
|
|
20270
|
-
return pulumi.get(self, "direction")
|
|
20271
|
-
|
|
20272
|
-
@direction.setter
|
|
20273
|
-
def direction(self, value: Optional[pulumi.Input[str]]):
|
|
20274
|
-
pulumi.set(self, "direction", value)
|
|
20275
|
-
|
|
20276
|
-
@property
|
|
20277
|
-
@pulumi.getter
|
|
20278
|
-
def disabled(self) -> Optional[pulumi.Input[bool]]:
|
|
20279
|
-
"""
|
|
20280
|
-
(Output)
|
|
20281
|
-
Denotes whether the firewall policy rule is disabled. When set to true,
|
|
20282
|
-
the firewall policy rule is not enforced and traffic behaves as if it did
|
|
20283
|
-
not exist. If this is unspecified, the firewall policy rule will be
|
|
20284
|
-
enabled.
|
|
20285
|
-
"""
|
|
20286
|
-
return pulumi.get(self, "disabled")
|
|
20287
|
-
|
|
20288
|
-
@disabled.setter
|
|
20289
|
-
def disabled(self, value: Optional[pulumi.Input[bool]]):
|
|
20290
|
-
pulumi.set(self, "disabled", value)
|
|
20291
|
-
|
|
20292
|
-
@property
|
|
20293
|
-
@pulumi.getter(name="enableLogging")
|
|
20294
|
-
def enable_logging(self) -> Optional[pulumi.Input[bool]]:
|
|
20295
|
-
"""
|
|
20296
|
-
(Output)
|
|
20297
|
-
Denotes whether to enable logging for a particular rule.
|
|
20298
|
-
If logging is enabled, logs will be exported to the
|
|
20299
|
-
configured export destination in Stackdriver.
|
|
20300
|
-
"""
|
|
20301
|
-
return pulumi.get(self, "enable_logging")
|
|
20302
|
-
|
|
20303
|
-
@enable_logging.setter
|
|
20304
|
-
def enable_logging(self, value: Optional[pulumi.Input[bool]]):
|
|
20305
|
-
pulumi.set(self, "enable_logging", value)
|
|
20306
|
-
|
|
20307
|
-
@property
|
|
20308
|
-
@pulumi.getter
|
|
20309
|
-
def matches(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgs']]]]:
|
|
20310
|
-
"""
|
|
20311
|
-
(Output)
|
|
20312
|
-
A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
|
20313
|
-
Structure is documented below.
|
|
20314
|
-
"""
|
|
20315
|
-
return pulumi.get(self, "matches")
|
|
20316
|
-
|
|
20317
|
-
@matches.setter
|
|
20318
|
-
def matches(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgs']]]]):
|
|
20319
|
-
pulumi.set(self, "matches", value)
|
|
20320
|
-
|
|
20321
|
-
@property
|
|
20322
|
-
@pulumi.getter
|
|
20323
|
-
def priority(self) -> Optional[pulumi.Input[int]]:
|
|
20324
|
-
"""
|
|
20325
|
-
(Output)
|
|
20326
|
-
An integer indicating the priority of a rule in the list. The priority must be a value
|
|
20327
|
-
between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
|
|
20328
|
-
highest priority and 2147483647 is the lowest priority.
|
|
20329
|
-
"""
|
|
20330
|
-
return pulumi.get(self, "priority")
|
|
20331
|
-
|
|
20332
|
-
@priority.setter
|
|
20333
|
-
def priority(self, value: Optional[pulumi.Input[int]]):
|
|
20334
|
-
pulumi.set(self, "priority", value)
|
|
20335
|
-
|
|
20336
|
-
@property
|
|
20337
|
-
@pulumi.getter(name="ruleName")
|
|
20338
|
-
def rule_name(self) -> Optional[pulumi.Input[str]]:
|
|
20339
|
-
"""
|
|
20340
|
-
(Output)
|
|
20341
|
-
An optional name for the rule. This field is not a unique identifier
|
|
20342
|
-
and can be updated.
|
|
20343
|
-
"""
|
|
20344
|
-
return pulumi.get(self, "rule_name")
|
|
20345
|
-
|
|
20346
|
-
@rule_name.setter
|
|
20347
|
-
def rule_name(self, value: Optional[pulumi.Input[str]]):
|
|
20348
|
-
pulumi.set(self, "rule_name", value)
|
|
20349
|
-
|
|
20350
|
-
@property
|
|
20351
|
-
@pulumi.getter(name="securityProfileGroup")
|
|
20352
|
-
def security_profile_group(self) -> Optional[pulumi.Input[str]]:
|
|
20353
|
-
"""
|
|
20354
|
-
(Output)
|
|
20355
|
-
A fully-qualified URL of a SecurityProfile resource instance.
|
|
20356
|
-
Example:
|
|
20357
|
-
https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group
|
|
20358
|
-
Must be specified if action is 'apply_security_profile_group'.
|
|
20359
|
-
"""
|
|
20360
|
-
return pulumi.get(self, "security_profile_group")
|
|
20361
|
-
|
|
20362
|
-
@security_profile_group.setter
|
|
20363
|
-
def security_profile_group(self, value: Optional[pulumi.Input[str]]):
|
|
20364
|
-
pulumi.set(self, "security_profile_group", value)
|
|
20365
|
-
|
|
20366
|
-
@property
|
|
20367
|
-
@pulumi.getter(name="targetSecureTags")
|
|
20368
|
-
def target_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleTargetSecureTagArgs']]]]:
|
|
20369
|
-
"""
|
|
20370
|
-
(Output)
|
|
20371
|
-
A list of secure tags that controls which instances the firewall rule
|
|
20372
|
-
applies to. If <code>targetSecureTag</code> are specified, then the
|
|
20373
|
-
firewall rule applies only to instances in the VPC network that have one
|
|
20374
|
-
of those EFFECTIVE secure tags, if all the target_secure_tag are in
|
|
20375
|
-
INEFFECTIVE state, then this rule will be ignored.
|
|
20376
|
-
<code>targetSecureTag</code> may not be set at the same time as
|
|
20377
|
-
<code>targetServiceAccounts</code>.
|
|
20378
|
-
If neither <code>targetServiceAccounts</code> nor
|
|
20379
|
-
<code>targetSecureTag</code> are specified, the firewall rule applies
|
|
20380
|
-
to all instances on the specified network.
|
|
20381
|
-
Maximum number of target label tags allowed is 256.
|
|
20382
|
-
Structure is documented below.
|
|
20383
|
-
"""
|
|
20384
|
-
return pulumi.get(self, "target_secure_tags")
|
|
20385
|
-
|
|
20386
|
-
@target_secure_tags.setter
|
|
20387
|
-
def target_secure_tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleTargetSecureTagArgs']]]]):
|
|
20388
|
-
pulumi.set(self, "target_secure_tags", value)
|
|
20389
|
-
|
|
20390
|
-
@property
|
|
20391
|
-
@pulumi.getter(name="targetServiceAccounts")
|
|
20392
|
-
def target_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20393
|
-
"""
|
|
20394
|
-
(Output)
|
|
20395
|
-
A list of service accounts indicating the sets of
|
|
20396
|
-
instances that are applied with this rule.
|
|
20397
|
-
"""
|
|
20398
|
-
return pulumi.get(self, "target_service_accounts")
|
|
20399
|
-
|
|
20400
|
-
@target_service_accounts.setter
|
|
20401
|
-
def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20402
|
-
pulumi.set(self, "target_service_accounts", value)
|
|
20403
|
-
|
|
20404
|
-
@property
|
|
20405
|
-
@pulumi.getter(name="tlsInspect")
|
|
20406
|
-
def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
|
|
20407
|
-
"""
|
|
20408
|
-
(Output)
|
|
20409
|
-
Boolean flag indicating if the traffic should be TLS decrypted.
|
|
20410
|
-
It can be set only if action = 'apply_security_profile_group' and cannot be set for other actions.
|
|
20411
|
-
"""
|
|
20412
|
-
return pulumi.get(self, "tls_inspect")
|
|
20413
|
-
|
|
20414
|
-
@tls_inspect.setter
|
|
20415
|
-
def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
|
|
20416
|
-
pulumi.set(self, "tls_inspect", value)
|
|
20417
|
-
|
|
20418
|
-
|
|
20419
|
-
if not MYPY:
|
|
20420
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgsDict(TypedDict):
|
|
20421
|
-
dest_address_groups: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20422
|
-
"""
|
|
20423
|
-
Address groups which should be matched against the traffic destination.
|
|
20424
|
-
Maximum number of destination address groups is 10.
|
|
20425
|
-
"""
|
|
20426
|
-
dest_fqdns: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20427
|
-
"""
|
|
20428
|
-
Fully Qualified Domain Name (FQDN) which should be matched against
|
|
20429
|
-
traffic destination. Maximum number of destination fqdn allowed is 100.
|
|
20430
|
-
"""
|
|
20431
|
-
dest_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20432
|
-
"""
|
|
20433
|
-
Destination IP address range in CIDR format. Required for
|
|
20434
|
-
EGRESS rules.
|
|
20435
|
-
"""
|
|
20436
|
-
dest_region_codes: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20437
|
-
"""
|
|
20438
|
-
Region codes whose IP addresses will be used to match for destination
|
|
20439
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
20440
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
20441
|
-
Maximum number of destination region codes allowed is 5000.
|
|
20442
|
-
"""
|
|
20443
|
-
dest_threat_intelligences: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20444
|
-
"""
|
|
20445
|
-
Names of Network Threat Intelligence lists.
|
|
20446
|
-
The IPs in these lists will be matched against traffic destination.
|
|
20447
|
-
"""
|
|
20448
|
-
layer4_configs: NotRequired[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgsDict']]]]
|
|
20449
|
-
"""
|
|
20450
|
-
Pairs of IP protocols and ports that the rule should match.
|
|
20451
|
-
Structure is documented below.
|
|
20452
|
-
"""
|
|
20453
|
-
src_address_groups: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20454
|
-
"""
|
|
20455
|
-
Address groups which should be matched against the traffic source.
|
|
20456
|
-
Maximum number of source address groups is 10.
|
|
20457
|
-
"""
|
|
20458
|
-
src_fqdns: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20459
|
-
"""
|
|
20460
|
-
Fully Qualified Domain Name (FQDN) which should be matched against
|
|
20461
|
-
traffic source. Maximum number of source fqdn allowed is 100.
|
|
20462
|
-
"""
|
|
20463
|
-
src_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20464
|
-
"""
|
|
20465
|
-
Source IP address range in CIDR format. Required for
|
|
20466
|
-
INGRESS rules.
|
|
20467
|
-
"""
|
|
20468
|
-
src_region_codes: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20469
|
-
"""
|
|
20470
|
-
Region codes whose IP addresses will be used to match for source
|
|
20471
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
20472
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
20473
|
-
Maximum number of source region codes allowed is 5000.
|
|
20474
|
-
"""
|
|
20475
|
-
src_secure_tags: NotRequired[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgsDict']]]]
|
|
20476
|
-
"""
|
|
20477
|
-
List of secure tag values, which should be matched at the source
|
|
20478
|
-
of the traffic.
|
|
20479
|
-
For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE,
|
|
20480
|
-
and there is no <code>srcIpRange</code>, this rule will be ignored.
|
|
20481
|
-
Maximum number of source tag values allowed is 256.
|
|
20482
|
-
Structure is documented below.
|
|
20483
|
-
|
|
20484
|
-
|
|
20485
|
-
<a name="nested_layer4_config"></a>The `layer4_config` block supports:
|
|
20486
|
-
"""
|
|
20487
|
-
src_threat_intelligences: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20488
|
-
"""
|
|
20489
|
-
Names of Network Threat Intelligence lists.
|
|
20490
|
-
The IPs in these lists will be matched against traffic source.
|
|
20491
|
-
"""
|
|
20492
|
-
elif False:
|
|
20493
|
-
NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgsDict: TypeAlias = Mapping[str, Any]
|
|
20494
|
-
|
|
20495
|
-
@pulumi.input_type
|
|
20496
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleMatchArgs:
|
|
20497
|
-
def __init__(__self__, *,
|
|
20498
|
-
dest_address_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20499
|
-
dest_fqdns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20500
|
-
dest_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20501
|
-
dest_region_codes: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20502
|
-
dest_threat_intelligences: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20503
|
-
layer4_configs: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgs']]]] = None,
|
|
20504
|
-
src_address_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20505
|
-
src_fqdns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20506
|
-
src_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20507
|
-
src_region_codes: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20508
|
-
src_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgs']]]] = None,
|
|
20509
|
-
src_threat_intelligences: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
20510
|
-
"""
|
|
20511
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_address_groups: Address groups which should be matched against the traffic destination.
|
|
20512
|
-
Maximum number of destination address groups is 10.
|
|
20513
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_fqdns: Fully Qualified Domain Name (FQDN) which should be matched against
|
|
20514
|
-
traffic destination. Maximum number of destination fqdn allowed is 100.
|
|
20515
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_ip_ranges: Destination IP address range in CIDR format. Required for
|
|
20516
|
-
EGRESS rules.
|
|
20517
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_region_codes: Region codes whose IP addresses will be used to match for destination
|
|
20518
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
20519
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
20520
|
-
Maximum number of destination region codes allowed is 5000.
|
|
20521
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_threat_intelligences: Names of Network Threat Intelligence lists.
|
|
20522
|
-
The IPs in these lists will be matched against traffic destination.
|
|
20523
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgs']]] layer4_configs: Pairs of IP protocols and ports that the rule should match.
|
|
20524
|
-
Structure is documented below.
|
|
20525
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_address_groups: Address groups which should be matched against the traffic source.
|
|
20526
|
-
Maximum number of source address groups is 10.
|
|
20527
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_fqdns: Fully Qualified Domain Name (FQDN) which should be matched against
|
|
20528
|
-
traffic source. Maximum number of source fqdn allowed is 100.
|
|
20529
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_ip_ranges: Source IP address range in CIDR format. Required for
|
|
20530
|
-
INGRESS rules.
|
|
20531
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_region_codes: Region codes whose IP addresses will be used to match for source
|
|
20532
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
20533
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
20534
|
-
Maximum number of source region codes allowed is 5000.
|
|
20535
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgs']]] src_secure_tags: List of secure tag values, which should be matched at the source
|
|
20536
|
-
of the traffic.
|
|
20537
|
-
For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE,
|
|
20538
|
-
and there is no <code>srcIpRange</code>, this rule will be ignored.
|
|
20539
|
-
Maximum number of source tag values allowed is 256.
|
|
20540
|
-
Structure is documented below.
|
|
20541
|
-
|
|
20542
|
-
|
|
20543
|
-
<a name="nested_layer4_config"></a>The `layer4_config` block supports:
|
|
20544
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_threat_intelligences: Names of Network Threat Intelligence lists.
|
|
20545
|
-
The IPs in these lists will be matched against traffic source.
|
|
20546
|
-
"""
|
|
20547
|
-
if dest_address_groups is not None:
|
|
20548
|
-
pulumi.set(__self__, "dest_address_groups", dest_address_groups)
|
|
20549
|
-
if dest_fqdns is not None:
|
|
20550
|
-
pulumi.set(__self__, "dest_fqdns", dest_fqdns)
|
|
20551
|
-
if dest_ip_ranges is not None:
|
|
20552
|
-
pulumi.set(__self__, "dest_ip_ranges", dest_ip_ranges)
|
|
20553
|
-
if dest_region_codes is not None:
|
|
20554
|
-
pulumi.set(__self__, "dest_region_codes", dest_region_codes)
|
|
20555
|
-
if dest_threat_intelligences is not None:
|
|
20556
|
-
pulumi.set(__self__, "dest_threat_intelligences", dest_threat_intelligences)
|
|
20557
|
-
if layer4_configs is not None:
|
|
20558
|
-
pulumi.set(__self__, "layer4_configs", layer4_configs)
|
|
20559
|
-
if src_address_groups is not None:
|
|
20560
|
-
pulumi.set(__self__, "src_address_groups", src_address_groups)
|
|
20561
|
-
if src_fqdns is not None:
|
|
20562
|
-
pulumi.set(__self__, "src_fqdns", src_fqdns)
|
|
20563
|
-
if src_ip_ranges is not None:
|
|
20564
|
-
pulumi.set(__self__, "src_ip_ranges", src_ip_ranges)
|
|
20565
|
-
if src_region_codes is not None:
|
|
20566
|
-
pulumi.set(__self__, "src_region_codes", src_region_codes)
|
|
20567
|
-
if src_secure_tags is not None:
|
|
20568
|
-
pulumi.set(__self__, "src_secure_tags", src_secure_tags)
|
|
20569
|
-
if src_threat_intelligences is not None:
|
|
20570
|
-
pulumi.set(__self__, "src_threat_intelligences", src_threat_intelligences)
|
|
20571
|
-
|
|
20572
|
-
@property
|
|
20573
|
-
@pulumi.getter(name="destAddressGroups")
|
|
20574
|
-
def dest_address_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20575
|
-
"""
|
|
20576
|
-
Address groups which should be matched against the traffic destination.
|
|
20577
|
-
Maximum number of destination address groups is 10.
|
|
20578
|
-
"""
|
|
20579
|
-
return pulumi.get(self, "dest_address_groups")
|
|
20580
|
-
|
|
20581
|
-
@dest_address_groups.setter
|
|
20582
|
-
def dest_address_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20583
|
-
pulumi.set(self, "dest_address_groups", value)
|
|
20584
|
-
|
|
20585
|
-
@property
|
|
20586
|
-
@pulumi.getter(name="destFqdns")
|
|
20587
|
-
def dest_fqdns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20588
|
-
"""
|
|
20589
|
-
Fully Qualified Domain Name (FQDN) which should be matched against
|
|
20590
|
-
traffic destination. Maximum number of destination fqdn allowed is 100.
|
|
20591
|
-
"""
|
|
20592
|
-
return pulumi.get(self, "dest_fqdns")
|
|
20593
|
-
|
|
20594
|
-
@dest_fqdns.setter
|
|
20595
|
-
def dest_fqdns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20596
|
-
pulumi.set(self, "dest_fqdns", value)
|
|
20597
|
-
|
|
20598
|
-
@property
|
|
20599
|
-
@pulumi.getter(name="destIpRanges")
|
|
20600
|
-
def dest_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20601
|
-
"""
|
|
20602
|
-
Destination IP address range in CIDR format. Required for
|
|
20603
|
-
EGRESS rules.
|
|
20604
|
-
"""
|
|
20605
|
-
return pulumi.get(self, "dest_ip_ranges")
|
|
20606
|
-
|
|
20607
|
-
@dest_ip_ranges.setter
|
|
20608
|
-
def dest_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20609
|
-
pulumi.set(self, "dest_ip_ranges", value)
|
|
20610
|
-
|
|
20611
|
-
@property
|
|
20612
|
-
@pulumi.getter(name="destRegionCodes")
|
|
20613
|
-
def dest_region_codes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20614
|
-
"""
|
|
20615
|
-
Region codes whose IP addresses will be used to match for destination
|
|
20616
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
20617
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
20618
|
-
Maximum number of destination region codes allowed is 5000.
|
|
20619
|
-
"""
|
|
20620
|
-
return pulumi.get(self, "dest_region_codes")
|
|
20621
|
-
|
|
20622
|
-
@dest_region_codes.setter
|
|
20623
|
-
def dest_region_codes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20624
|
-
pulumi.set(self, "dest_region_codes", value)
|
|
20625
|
-
|
|
20626
|
-
@property
|
|
20627
|
-
@pulumi.getter(name="destThreatIntelligences")
|
|
20628
|
-
def dest_threat_intelligences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20629
|
-
"""
|
|
20630
|
-
Names of Network Threat Intelligence lists.
|
|
20631
|
-
The IPs in these lists will be matched against traffic destination.
|
|
20632
|
-
"""
|
|
20633
|
-
return pulumi.get(self, "dest_threat_intelligences")
|
|
20634
|
-
|
|
20635
|
-
@dest_threat_intelligences.setter
|
|
20636
|
-
def dest_threat_intelligences(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20637
|
-
pulumi.set(self, "dest_threat_intelligences", value)
|
|
20638
|
-
|
|
20639
|
-
@property
|
|
20640
|
-
@pulumi.getter(name="layer4Configs")
|
|
20641
|
-
def layer4_configs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgs']]]]:
|
|
20642
|
-
"""
|
|
20643
|
-
Pairs of IP protocols and ports that the rule should match.
|
|
20644
|
-
Structure is documented below.
|
|
20645
|
-
"""
|
|
20646
|
-
return pulumi.get(self, "layer4_configs")
|
|
20647
|
-
|
|
20648
|
-
@layer4_configs.setter
|
|
20649
|
-
def layer4_configs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgs']]]]):
|
|
20650
|
-
pulumi.set(self, "layer4_configs", value)
|
|
20651
|
-
|
|
20652
|
-
@property
|
|
20653
|
-
@pulumi.getter(name="srcAddressGroups")
|
|
20654
|
-
def src_address_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20655
|
-
"""
|
|
20656
|
-
Address groups which should be matched against the traffic source.
|
|
20657
|
-
Maximum number of source address groups is 10.
|
|
20658
|
-
"""
|
|
20659
|
-
return pulumi.get(self, "src_address_groups")
|
|
20660
|
-
|
|
20661
|
-
@src_address_groups.setter
|
|
20662
|
-
def src_address_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20663
|
-
pulumi.set(self, "src_address_groups", value)
|
|
20664
|
-
|
|
20665
|
-
@property
|
|
20666
|
-
@pulumi.getter(name="srcFqdns")
|
|
20667
|
-
def src_fqdns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20668
|
-
"""
|
|
20669
|
-
Fully Qualified Domain Name (FQDN) which should be matched against
|
|
20670
|
-
traffic source. Maximum number of source fqdn allowed is 100.
|
|
20671
|
-
"""
|
|
20672
|
-
return pulumi.get(self, "src_fqdns")
|
|
20673
|
-
|
|
20674
|
-
@src_fqdns.setter
|
|
20675
|
-
def src_fqdns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20676
|
-
pulumi.set(self, "src_fqdns", value)
|
|
20677
|
-
|
|
20678
|
-
@property
|
|
20679
|
-
@pulumi.getter(name="srcIpRanges")
|
|
20680
|
-
def src_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20681
|
-
"""
|
|
20682
|
-
Source IP address range in CIDR format. Required for
|
|
20683
|
-
INGRESS rules.
|
|
20684
|
-
"""
|
|
20685
|
-
return pulumi.get(self, "src_ip_ranges")
|
|
20686
|
-
|
|
20687
|
-
@src_ip_ranges.setter
|
|
20688
|
-
def src_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20689
|
-
pulumi.set(self, "src_ip_ranges", value)
|
|
20690
|
-
|
|
20691
|
-
@property
|
|
20692
|
-
@pulumi.getter(name="srcRegionCodes")
|
|
20693
|
-
def src_region_codes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20694
|
-
"""
|
|
20695
|
-
Region codes whose IP addresses will be used to match for source
|
|
20696
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
20697
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
20698
|
-
Maximum number of source region codes allowed is 5000.
|
|
20699
|
-
"""
|
|
20700
|
-
return pulumi.get(self, "src_region_codes")
|
|
20701
|
-
|
|
20702
|
-
@src_region_codes.setter
|
|
20703
|
-
def src_region_codes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20704
|
-
pulumi.set(self, "src_region_codes", value)
|
|
20705
|
-
|
|
20706
|
-
@property
|
|
20707
|
-
@pulumi.getter(name="srcSecureTags")
|
|
20708
|
-
def src_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgs']]]]:
|
|
20709
|
-
"""
|
|
20710
|
-
List of secure tag values, which should be matched at the source
|
|
20711
|
-
of the traffic.
|
|
20712
|
-
For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE,
|
|
20713
|
-
and there is no <code>srcIpRange</code>, this rule will be ignored.
|
|
20714
|
-
Maximum number of source tag values allowed is 256.
|
|
20715
|
-
Structure is documented below.
|
|
20716
|
-
|
|
20717
|
-
|
|
20718
|
-
<a name="nested_layer4_config"></a>The `layer4_config` block supports:
|
|
20719
|
-
"""
|
|
20720
|
-
return pulumi.get(self, "src_secure_tags")
|
|
20721
|
-
|
|
20722
|
-
@src_secure_tags.setter
|
|
20723
|
-
def src_secure_tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgs']]]]):
|
|
20724
|
-
pulumi.set(self, "src_secure_tags", value)
|
|
20725
|
-
|
|
20726
|
-
@property
|
|
20727
|
-
@pulumi.getter(name="srcThreatIntelligences")
|
|
20728
|
-
def src_threat_intelligences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20729
|
-
"""
|
|
20730
|
-
Names of Network Threat Intelligence lists.
|
|
20731
|
-
The IPs in these lists will be matched against traffic source.
|
|
20732
|
-
"""
|
|
20733
|
-
return pulumi.get(self, "src_threat_intelligences")
|
|
20734
|
-
|
|
20735
|
-
@src_threat_intelligences.setter
|
|
20736
|
-
def src_threat_intelligences(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20737
|
-
pulumi.set(self, "src_threat_intelligences", value)
|
|
20738
|
-
|
|
20739
|
-
|
|
20740
|
-
if not MYPY:
|
|
20741
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgsDict(TypedDict):
|
|
20742
|
-
ip_protocol: NotRequired[pulumi.Input[str]]
|
|
20743
|
-
"""
|
|
20744
|
-
(Output)
|
|
20745
|
-
The IP protocol to which this rule applies. The protocol
|
|
20746
|
-
type is required when creating a firewall rule.
|
|
20747
|
-
This value can either be one of the following well
|
|
20748
|
-
known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp),
|
|
20749
|
-
or the IP protocol number.
|
|
20750
|
-
"""
|
|
20751
|
-
ports: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
20752
|
-
"""
|
|
20753
|
-
(Output)
|
|
20754
|
-
An optional list of ports to which this rule applies. This field
|
|
20755
|
-
is only applicable for UDP or TCP protocol. Each entry must be
|
|
20756
|
-
either an integer or a range. If not specified, this rule
|
|
20757
|
-
applies to connections through any port.
|
|
20758
|
-
Example inputs include: ["22"], ["80","443"], and
|
|
20759
|
-
["12345-12349"].
|
|
20760
|
-
"""
|
|
20761
|
-
elif False:
|
|
20762
|
-
NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgsDict: TypeAlias = Mapping[str, Any]
|
|
20763
|
-
|
|
20764
|
-
@pulumi.input_type
|
|
20765
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleMatchLayer4ConfigArgs:
|
|
20766
|
-
def __init__(__self__, *,
|
|
20767
|
-
ip_protocol: Optional[pulumi.Input[str]] = None,
|
|
20768
|
-
ports: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
20769
|
-
"""
|
|
20770
|
-
:param pulumi.Input[str] ip_protocol: (Output)
|
|
20771
|
-
The IP protocol to which this rule applies. The protocol
|
|
20772
|
-
type is required when creating a firewall rule.
|
|
20773
|
-
This value can either be one of the following well
|
|
20774
|
-
known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp),
|
|
20775
|
-
or the IP protocol number.
|
|
20776
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] ports: (Output)
|
|
20777
|
-
An optional list of ports to which this rule applies. This field
|
|
20778
|
-
is only applicable for UDP or TCP protocol. Each entry must be
|
|
20779
|
-
either an integer or a range. If not specified, this rule
|
|
20780
|
-
applies to connections through any port.
|
|
20781
|
-
Example inputs include: ["22"], ["80","443"], and
|
|
20782
|
-
["12345-12349"].
|
|
20783
|
-
"""
|
|
20784
|
-
if ip_protocol is not None:
|
|
20785
|
-
pulumi.set(__self__, "ip_protocol", ip_protocol)
|
|
20786
|
-
if ports is not None:
|
|
20787
|
-
pulumi.set(__self__, "ports", ports)
|
|
20788
|
-
|
|
20789
|
-
@property
|
|
20790
|
-
@pulumi.getter(name="ipProtocol")
|
|
20791
|
-
def ip_protocol(self) -> Optional[pulumi.Input[str]]:
|
|
20792
|
-
"""
|
|
20793
|
-
(Output)
|
|
20794
|
-
The IP protocol to which this rule applies. The protocol
|
|
20795
|
-
type is required when creating a firewall rule.
|
|
20796
|
-
This value can either be one of the following well
|
|
20797
|
-
known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp),
|
|
20798
|
-
or the IP protocol number.
|
|
20799
|
-
"""
|
|
20800
|
-
return pulumi.get(self, "ip_protocol")
|
|
20801
|
-
|
|
20802
|
-
@ip_protocol.setter
|
|
20803
|
-
def ip_protocol(self, value: Optional[pulumi.Input[str]]):
|
|
20804
|
-
pulumi.set(self, "ip_protocol", value)
|
|
20805
|
-
|
|
20806
|
-
@property
|
|
20807
|
-
@pulumi.getter
|
|
20808
|
-
def ports(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
20809
|
-
"""
|
|
20810
|
-
(Output)
|
|
20811
|
-
An optional list of ports to which this rule applies. This field
|
|
20812
|
-
is only applicable for UDP or TCP protocol. Each entry must be
|
|
20813
|
-
either an integer or a range. If not specified, this rule
|
|
20814
|
-
applies to connections through any port.
|
|
20815
|
-
Example inputs include: ["22"], ["80","443"], and
|
|
20816
|
-
["12345-12349"].
|
|
20817
|
-
"""
|
|
20818
|
-
return pulumi.get(self, "ports")
|
|
20819
|
-
|
|
20820
|
-
@ports.setter
|
|
20821
|
-
def ports(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
20822
|
-
pulumi.set(self, "ports", value)
|
|
20823
|
-
|
|
20824
|
-
|
|
20825
|
-
if not MYPY:
|
|
20826
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgsDict(TypedDict):
|
|
20827
|
-
name: NotRequired[pulumi.Input[str]]
|
|
20828
|
-
"""
|
|
20829
|
-
Name of the secure tag, created with TagManager's TagValue API.
|
|
20830
|
-
@pattern tagValues/[0-9]+
|
|
20831
|
-
"""
|
|
20832
|
-
state: NotRequired[pulumi.Input[str]]
|
|
20833
|
-
"""
|
|
20834
|
-
(Output)
|
|
20835
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
20836
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
20837
|
-
or its network is deleted.
|
|
20838
|
-
"""
|
|
20839
|
-
elif False:
|
|
20840
|
-
NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgsDict: TypeAlias = Mapping[str, Any]
|
|
20841
|
-
|
|
20842
|
-
@pulumi.input_type
|
|
20843
|
-
class NetworkFirewallPolicyWithRulesPredefinedRuleMatchSrcSecureTagArgs:
|
|
20844
|
-
def __init__(__self__, *,
|
|
20845
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
20846
|
-
state: Optional[pulumi.Input[str]] = None):
|
|
20847
|
-
"""
|
|
20848
|
-
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API.
|
|
20849
|
-
@pattern tagValues/[0-9]+
|
|
20850
|
-
:param pulumi.Input[str] state: (Output)
|
|
20851
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
20852
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
20853
|
-
or its network is deleted.
|
|
20854
|
-
"""
|
|
20855
|
-
if name is not None:
|
|
20856
|
-
pulumi.set(__self__, "name", name)
|
|
20857
|
-
if state is not None:
|
|
20858
|
-
pulumi.set(__self__, "state", state)
|
|
20859
|
-
|
|
20860
|
-
@property
|
|
20861
|
-
@pulumi.getter
|
|
20862
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
20863
|
-
"""
|
|
20864
|
-
Name of the secure tag, created with TagManager's TagValue API.
|
|
20865
|
-
@pattern tagValues/[0-9]+
|
|
20866
|
-
"""
|
|
20867
|
-
return pulumi.get(self, "name")
|
|
20868
|
-
|
|
20869
|
-
@name.setter
|
|
20870
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
20871
|
-
pulumi.set(self, "name", value)
|
|
19262
|
+
pulumi.set(self, "raw_key", value)
|
|
20872
19263
|
|
|
20873
19264
|
@property
|
|
20874
19265
|
@pulumi.getter
|
|
20875
|
-
def
|
|
19266
|
+
def sha256(self) -> Optional[pulumi.Input[str]]:
|
|
20876
19267
|
"""
|
|
20877
19268
|
(Output)
|
|
20878
|
-
|
|
20879
|
-
|
|
20880
|
-
or its network is deleted.
|
|
19269
|
+
The RFC 4648 base64 encoded SHA-256 hash of the
|
|
19270
|
+
customer-supplied encryption key that protects this resource.
|
|
20881
19271
|
"""
|
|
20882
|
-
return pulumi.get(self, "
|
|
19272
|
+
return pulumi.get(self, "sha256")
|
|
20883
19273
|
|
|
20884
|
-
@
|
|
20885
|
-
def
|
|
20886
|
-
pulumi.set(self, "
|
|
19274
|
+
@sha256.setter
|
|
19275
|
+
def sha256(self, value: Optional[pulumi.Input[str]]):
|
|
19276
|
+
pulumi.set(self, "sha256", value)
|
|
20887
19277
|
|
|
20888
19278
|
|
|
20889
19279
|
if not MYPY:
|
|
20890
|
-
class
|
|
20891
|
-
|
|
20892
|
-
"""
|
|
20893
|
-
Name of the secure tag, created with TagManager's TagValue API.
|
|
20894
|
-
@pattern tagValues/[0-9]+
|
|
20895
|
-
"""
|
|
20896
|
-
state: NotRequired[pulumi.Input[str]]
|
|
19280
|
+
class ManagedSslCertificateManagedArgsDict(TypedDict):
|
|
19281
|
+
domains: pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
20897
19282
|
"""
|
|
20898
|
-
|
|
20899
|
-
|
|
20900
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
20901
|
-
or its network is deleted.
|
|
20902
|
-
|
|
20903
|
-
- - -
|
|
19283
|
+
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19284
|
+
there can be up to 100 domains in this list.
|
|
20904
19285
|
"""
|
|
20905
19286
|
elif False:
|
|
20906
|
-
|
|
19287
|
+
ManagedSslCertificateManagedArgsDict: TypeAlias = Mapping[str, Any]
|
|
20907
19288
|
|
|
20908
19289
|
@pulumi.input_type
|
|
20909
|
-
class
|
|
19290
|
+
class ManagedSslCertificateManagedArgs:
|
|
20910
19291
|
def __init__(__self__, *,
|
|
20911
|
-
|
|
20912
|
-
state: Optional[pulumi.Input[str]] = None):
|
|
20913
|
-
"""
|
|
20914
|
-
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API.
|
|
20915
|
-
@pattern tagValues/[0-9]+
|
|
20916
|
-
:param pulumi.Input[str] state: (Output)
|
|
20917
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
20918
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
20919
|
-
or its network is deleted.
|
|
20920
|
-
|
|
20921
|
-
- - -
|
|
20922
|
-
"""
|
|
20923
|
-
if name is not None:
|
|
20924
|
-
pulumi.set(__self__, "name", name)
|
|
20925
|
-
if state is not None:
|
|
20926
|
-
pulumi.set(__self__, "state", state)
|
|
20927
|
-
|
|
20928
|
-
@property
|
|
20929
|
-
@pulumi.getter
|
|
20930
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
19292
|
+
domains: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
20931
19293
|
"""
|
|
20932
|
-
|
|
20933
|
-
|
|
19294
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] domains: Domains for which a managed SSL certificate will be valid. Currently,
|
|
19295
|
+
there can be up to 100 domains in this list.
|
|
20934
19296
|
"""
|
|
20935
|
-
|
|
20936
|
-
|
|
20937
|
-
@name.setter
|
|
20938
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
20939
|
-
pulumi.set(self, "name", value)
|
|
19297
|
+
pulumi.set(__self__, "domains", domains)
|
|
20940
19298
|
|
|
20941
19299
|
@property
|
|
20942
19300
|
@pulumi.getter
|
|
20943
|
-
def
|
|
19301
|
+
def domains(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
|
|
20944
19302
|
"""
|
|
20945
|
-
|
|
20946
|
-
|
|
20947
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
20948
|
-
or its network is deleted.
|
|
20949
|
-
|
|
20950
|
-
- - -
|
|
19303
|
+
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19304
|
+
there can be up to 100 domains in this list.
|
|
20951
19305
|
"""
|
|
20952
|
-
return pulumi.get(self, "
|
|
19306
|
+
return pulumi.get(self, "domains")
|
|
20953
19307
|
|
|
20954
|
-
@
|
|
20955
|
-
def
|
|
20956
|
-
pulumi.set(self, "
|
|
19308
|
+
@domains.setter
|
|
19309
|
+
def domains(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
19310
|
+
pulumi.set(self, "domains", value)
|
|
20957
19311
|
|
|
20958
19312
|
|
|
20959
19313
|
if not MYPY:
|
|
20960
|
-
class
|
|
20961
|
-
|
|
20962
|
-
"""
|
|
20963
|
-
The Action to perform when the client connection triggers the rule. Can currently be either
|
|
20964
|
-
"allow", "deny", "apply_security_profile_group" or "goto_next".
|
|
20965
|
-
"""
|
|
20966
|
-
match: pulumi.Input['NetworkFirewallPolicyWithRulesRuleMatchArgsDict']
|
|
20967
|
-
"""
|
|
20968
|
-
A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
|
20969
|
-
Structure is documented below.
|
|
20970
|
-
"""
|
|
20971
|
-
priority: pulumi.Input[int]
|
|
20972
|
-
"""
|
|
20973
|
-
An integer indicating the priority of a rule in the list. The priority must be a value
|
|
20974
|
-
between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
|
|
20975
|
-
highest priority and 2147483647 is the lowest priority.
|
|
20976
|
-
"""
|
|
20977
|
-
description: NotRequired[pulumi.Input[str]]
|
|
20978
|
-
"""
|
|
20979
|
-
A description of the rule.
|
|
20980
|
-
"""
|
|
20981
|
-
direction: NotRequired[pulumi.Input[str]]
|
|
19314
|
+
class MangedSslCertificateManagedArgsDict(TypedDict):
|
|
19315
|
+
domains: pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
20982
19316
|
"""
|
|
20983
|
-
|
|
20984
|
-
|
|
19317
|
+
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19318
|
+
there can be up to 100 domains in this list.
|
|
20985
19319
|
"""
|
|
20986
|
-
|
|
19320
|
+
elif False:
|
|
19321
|
+
MangedSslCertificateManagedArgsDict: TypeAlias = Mapping[str, Any]
|
|
19322
|
+
|
|
19323
|
+
@pulumi.input_type
|
|
19324
|
+
class MangedSslCertificateManagedArgs:
|
|
19325
|
+
def __init__(__self__, *,
|
|
19326
|
+
domains: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
20987
19327
|
"""
|
|
20988
|
-
|
|
20989
|
-
|
|
20990
|
-
not exist. If this is unspecified, the firewall policy rule will be
|
|
20991
|
-
enabled.
|
|
19328
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] domains: Domains for which a managed SSL certificate will be valid. Currently,
|
|
19329
|
+
there can be up to 100 domains in this list.
|
|
20992
19330
|
"""
|
|
20993
|
-
|
|
19331
|
+
pulumi.set(__self__, "domains", domains)
|
|
19332
|
+
|
|
19333
|
+
@property
|
|
19334
|
+
@pulumi.getter
|
|
19335
|
+
def domains(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
|
|
20994
19336
|
"""
|
|
20995
|
-
|
|
20996
|
-
|
|
20997
|
-
configured export destination in Stackdriver.
|
|
19337
|
+
Domains for which a managed SSL certificate will be valid. Currently,
|
|
19338
|
+
there can be up to 100 domains in this list.
|
|
20998
19339
|
"""
|
|
20999
|
-
|
|
19340
|
+
return pulumi.get(self, "domains")
|
|
19341
|
+
|
|
19342
|
+
@domains.setter
|
|
19343
|
+
def domains(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
19344
|
+
pulumi.set(self, "domains", value)
|
|
19345
|
+
|
|
19346
|
+
|
|
19347
|
+
if not MYPY:
|
|
19348
|
+
class NetworkAttachmentConnectionEndpointArgsDict(TypedDict):
|
|
19349
|
+
ip_address: NotRequired[pulumi.Input[str]]
|
|
21000
19350
|
"""
|
|
21001
|
-
|
|
21002
|
-
|
|
19351
|
+
(Output)
|
|
19352
|
+
The IPv4 address assigned to the producer instance network interface. This value will be a range in case of Serverless.
|
|
21003
19353
|
"""
|
|
21004
|
-
|
|
19354
|
+
project_id_or_num: NotRequired[pulumi.Input[str]]
|
|
21005
19355
|
"""
|
|
21006
|
-
|
|
21007
|
-
|
|
21008
|
-
https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group
|
|
21009
|
-
Must be specified if action is 'apply_security_profile_group'.
|
|
19356
|
+
(Output)
|
|
19357
|
+
The project id or number of the interface to which the IP was assigned.
|
|
21010
19358
|
"""
|
|
21011
|
-
|
|
19359
|
+
secondary_ip_cidr_ranges: NotRequired[pulumi.Input[str]]
|
|
21012
19360
|
"""
|
|
21013
|
-
|
|
21014
|
-
|
|
21015
|
-
firewall rule applies only to instances in the VPC network that have one
|
|
21016
|
-
of those EFFECTIVE secure tags, if all the target_secure_tag are in
|
|
21017
|
-
INEFFECTIVE state, then this rule will be ignored.
|
|
21018
|
-
<code>targetSecureTag</code> may not be set at the same time as
|
|
21019
|
-
<code>targetServiceAccounts</code>.
|
|
21020
|
-
If neither <code>targetServiceAccounts</code> nor
|
|
21021
|
-
<code>targetSecureTag</code> are specified, the firewall rule applies
|
|
21022
|
-
to all instances on the specified network.
|
|
21023
|
-
Maximum number of target label tags allowed is 256.
|
|
21024
|
-
Structure is documented below.
|
|
19361
|
+
(Output)
|
|
19362
|
+
Alias IP ranges from the same subnetwork.
|
|
21025
19363
|
"""
|
|
21026
|
-
|
|
19364
|
+
status: NotRequired[pulumi.Input[str]]
|
|
21027
19365
|
"""
|
|
21028
|
-
|
|
21029
|
-
|
|
19366
|
+
(Output)
|
|
19367
|
+
The status of a connected endpoint to this network attachment.
|
|
21030
19368
|
"""
|
|
21031
|
-
|
|
19369
|
+
subnetwork: NotRequired[pulumi.Input[str]]
|
|
21032
19370
|
"""
|
|
21033
|
-
|
|
21034
|
-
|
|
19371
|
+
(Output)
|
|
19372
|
+
The subnetwork used to assign the IP to the producer instance network interface.
|
|
21035
19373
|
"""
|
|
21036
19374
|
elif False:
|
|
21037
|
-
|
|
19375
|
+
NetworkAttachmentConnectionEndpointArgsDict: TypeAlias = Mapping[str, Any]
|
|
21038
19376
|
|
|
21039
19377
|
@pulumi.input_type
|
|
21040
|
-
class
|
|
19378
|
+
class NetworkAttachmentConnectionEndpointArgs:
|
|
21041
19379
|
def __init__(__self__, *,
|
|
21042
|
-
|
|
21043
|
-
|
|
21044
|
-
|
|
21045
|
-
|
|
21046
|
-
|
|
21047
|
-
disabled: Optional[pulumi.Input[bool]] = None,
|
|
21048
|
-
enable_logging: Optional[pulumi.Input[bool]] = None,
|
|
21049
|
-
rule_name: Optional[pulumi.Input[str]] = None,
|
|
21050
|
-
security_profile_group: Optional[pulumi.Input[str]] = None,
|
|
21051
|
-
target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesRuleTargetSecureTagArgs']]]] = None,
|
|
21052
|
-
target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21053
|
-
tls_inspect: Optional[pulumi.Input[bool]] = None):
|
|
21054
|
-
"""
|
|
21055
|
-
:param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Can currently be either
|
|
21056
|
-
"allow", "deny", "apply_security_profile_group" or "goto_next".
|
|
21057
|
-
:param pulumi.Input['NetworkFirewallPolicyWithRulesRuleMatchArgs'] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
|
|
21058
|
-
Structure is documented below.
|
|
21059
|
-
:param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list. The priority must be a value
|
|
21060
|
-
between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
|
|
21061
|
-
highest priority and 2147483647 is the lowest priority.
|
|
21062
|
-
:param pulumi.Input[str] description: A description of the rule.
|
|
21063
|
-
:param pulumi.Input[str] direction: The direction in which this rule applies. If unspecified an INGRESS rule is created.
|
|
21064
|
-
Possible values are: `INGRESS`, `EGRESS`.
|
|
21065
|
-
:param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true,
|
|
21066
|
-
the firewall policy rule is not enforced and traffic behaves as if it did
|
|
21067
|
-
not exist. If this is unspecified, the firewall policy rule will be
|
|
21068
|
-
enabled.
|
|
21069
|
-
:param pulumi.Input[bool] enable_logging: Denotes whether to enable logging for a particular rule.
|
|
21070
|
-
If logging is enabled, logs will be exported to the
|
|
21071
|
-
configured export destination in Stackdriver.
|
|
21072
|
-
:param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier
|
|
21073
|
-
and can be updated.
|
|
21074
|
-
:param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfile resource instance.
|
|
21075
|
-
Example:
|
|
21076
|
-
https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group
|
|
21077
|
-
Must be specified if action is 'apply_security_profile_group'.
|
|
21078
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesRuleTargetSecureTagArgs']]] target_secure_tags: A list of secure tags that controls which instances the firewall rule
|
|
21079
|
-
applies to. If <code>targetSecureTag</code> are specified, then the
|
|
21080
|
-
firewall rule applies only to instances in the VPC network that have one
|
|
21081
|
-
of those EFFECTIVE secure tags, if all the target_secure_tag are in
|
|
21082
|
-
INEFFECTIVE state, then this rule will be ignored.
|
|
21083
|
-
<code>targetSecureTag</code> may not be set at the same time as
|
|
21084
|
-
<code>targetServiceAccounts</code>.
|
|
21085
|
-
If neither <code>targetServiceAccounts</code> nor
|
|
21086
|
-
<code>targetSecureTag</code> are specified, the firewall rule applies
|
|
21087
|
-
to all instances on the specified network.
|
|
21088
|
-
Maximum number of target label tags allowed is 256.
|
|
21089
|
-
Structure is documented below.
|
|
21090
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of
|
|
21091
|
-
instances that are applied with this rule.
|
|
21092
|
-
:param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted.
|
|
21093
|
-
It can be set only if action = 'apply_security_profile_group' and cannot be set for other actions.
|
|
19380
|
+
ip_address: Optional[pulumi.Input[str]] = None,
|
|
19381
|
+
project_id_or_num: Optional[pulumi.Input[str]] = None,
|
|
19382
|
+
secondary_ip_cidr_ranges: Optional[pulumi.Input[str]] = None,
|
|
19383
|
+
status: Optional[pulumi.Input[str]] = None,
|
|
19384
|
+
subnetwork: Optional[pulumi.Input[str]] = None):
|
|
21094
19385
|
"""
|
|
21095
|
-
pulumi.
|
|
21096
|
-
|
|
21097
|
-
pulumi.
|
|
21098
|
-
|
|
21099
|
-
|
|
21100
|
-
|
|
21101
|
-
|
|
21102
|
-
|
|
21103
|
-
|
|
21104
|
-
|
|
21105
|
-
|
|
21106
|
-
if
|
|
21107
|
-
pulumi.set(__self__, "
|
|
21108
|
-
if
|
|
21109
|
-
pulumi.set(__self__, "
|
|
21110
|
-
if
|
|
21111
|
-
pulumi.set(__self__, "
|
|
21112
|
-
if
|
|
21113
|
-
pulumi.set(__self__, "
|
|
21114
|
-
if
|
|
21115
|
-
pulumi.set(__self__, "
|
|
19386
|
+
:param pulumi.Input[str] ip_address: (Output)
|
|
19387
|
+
The IPv4 address assigned to the producer instance network interface. This value will be a range in case of Serverless.
|
|
19388
|
+
:param pulumi.Input[str] project_id_or_num: (Output)
|
|
19389
|
+
The project id or number of the interface to which the IP was assigned.
|
|
19390
|
+
:param pulumi.Input[str] secondary_ip_cidr_ranges: (Output)
|
|
19391
|
+
Alias IP ranges from the same subnetwork.
|
|
19392
|
+
:param pulumi.Input[str] status: (Output)
|
|
19393
|
+
The status of a connected endpoint to this network attachment.
|
|
19394
|
+
:param pulumi.Input[str] subnetwork: (Output)
|
|
19395
|
+
The subnetwork used to assign the IP to the producer instance network interface.
|
|
19396
|
+
"""
|
|
19397
|
+
if ip_address is not None:
|
|
19398
|
+
pulumi.set(__self__, "ip_address", ip_address)
|
|
19399
|
+
if project_id_or_num is not None:
|
|
19400
|
+
pulumi.set(__self__, "project_id_or_num", project_id_or_num)
|
|
19401
|
+
if secondary_ip_cidr_ranges is not None:
|
|
19402
|
+
pulumi.set(__self__, "secondary_ip_cidr_ranges", secondary_ip_cidr_ranges)
|
|
19403
|
+
if status is not None:
|
|
19404
|
+
pulumi.set(__self__, "status", status)
|
|
19405
|
+
if subnetwork is not None:
|
|
19406
|
+
pulumi.set(__self__, "subnetwork", subnetwork)
|
|
21116
19407
|
|
|
21117
19408
|
@property
|
|
21118
|
-
@pulumi.getter
|
|
21119
|
-
def
|
|
19409
|
+
@pulumi.getter(name="ipAddress")
|
|
19410
|
+
def ip_address(self) -> Optional[pulumi.Input[str]]:
|
|
21120
19411
|
"""
|
|
21121
|
-
|
|
21122
|
-
|
|
19412
|
+
(Output)
|
|
19413
|
+
The IPv4 address assigned to the producer instance network interface. This value will be a range in case of Serverless.
|
|
21123
19414
|
"""
|
|
21124
|
-
return pulumi.get(self, "
|
|
19415
|
+
return pulumi.get(self, "ip_address")
|
|
21125
19416
|
|
|
21126
|
-
@
|
|
21127
|
-
def
|
|
21128
|
-
pulumi.set(self, "
|
|
19417
|
+
@ip_address.setter
|
|
19418
|
+
def ip_address(self, value: Optional[pulumi.Input[str]]):
|
|
19419
|
+
pulumi.set(self, "ip_address", value)
|
|
21129
19420
|
|
|
21130
19421
|
@property
|
|
21131
|
-
@pulumi.getter
|
|
21132
|
-
def
|
|
19422
|
+
@pulumi.getter(name="projectIdOrNum")
|
|
19423
|
+
def project_id_or_num(self) -> Optional[pulumi.Input[str]]:
|
|
21133
19424
|
"""
|
|
21134
|
-
|
|
21135
|
-
|
|
19425
|
+
(Output)
|
|
19426
|
+
The project id or number of the interface to which the IP was assigned.
|
|
21136
19427
|
"""
|
|
21137
|
-
return pulumi.get(self, "
|
|
19428
|
+
return pulumi.get(self, "project_id_or_num")
|
|
21138
19429
|
|
|
21139
|
-
@
|
|
21140
|
-
def
|
|
21141
|
-
pulumi.set(self, "
|
|
19430
|
+
@project_id_or_num.setter
|
|
19431
|
+
def project_id_or_num(self, value: Optional[pulumi.Input[str]]):
|
|
19432
|
+
pulumi.set(self, "project_id_or_num", value)
|
|
21142
19433
|
|
|
21143
19434
|
@property
|
|
21144
|
-
@pulumi.getter
|
|
21145
|
-
def
|
|
19435
|
+
@pulumi.getter(name="secondaryIpCidrRanges")
|
|
19436
|
+
def secondary_ip_cidr_ranges(self) -> Optional[pulumi.Input[str]]:
|
|
21146
19437
|
"""
|
|
21147
|
-
|
|
21148
|
-
|
|
21149
|
-
highest priority and 2147483647 is the lowest priority.
|
|
19438
|
+
(Output)
|
|
19439
|
+
Alias IP ranges from the same subnetwork.
|
|
21150
19440
|
"""
|
|
21151
|
-
return pulumi.get(self, "
|
|
19441
|
+
return pulumi.get(self, "secondary_ip_cidr_ranges")
|
|
21152
19442
|
|
|
21153
|
-
@
|
|
21154
|
-
def
|
|
21155
|
-
pulumi.set(self, "
|
|
19443
|
+
@secondary_ip_cidr_ranges.setter
|
|
19444
|
+
def secondary_ip_cidr_ranges(self, value: Optional[pulumi.Input[str]]):
|
|
19445
|
+
pulumi.set(self, "secondary_ip_cidr_ranges", value)
|
|
21156
19446
|
|
|
21157
19447
|
@property
|
|
21158
19448
|
@pulumi.getter
|
|
21159
|
-
def
|
|
19449
|
+
def status(self) -> Optional[pulumi.Input[str]]:
|
|
21160
19450
|
"""
|
|
21161
|
-
|
|
19451
|
+
(Output)
|
|
19452
|
+
The status of a connected endpoint to this network attachment.
|
|
21162
19453
|
"""
|
|
21163
|
-
return pulumi.get(self, "
|
|
19454
|
+
return pulumi.get(self, "status")
|
|
21164
19455
|
|
|
21165
|
-
@
|
|
21166
|
-
def
|
|
21167
|
-
pulumi.set(self, "
|
|
19456
|
+
@status.setter
|
|
19457
|
+
def status(self, value: Optional[pulumi.Input[str]]):
|
|
19458
|
+
pulumi.set(self, "status", value)
|
|
21168
19459
|
|
|
21169
19460
|
@property
|
|
21170
19461
|
@pulumi.getter
|
|
21171
|
-
def
|
|
19462
|
+
def subnetwork(self) -> Optional[pulumi.Input[str]]:
|
|
21172
19463
|
"""
|
|
21173
|
-
|
|
21174
|
-
|
|
19464
|
+
(Output)
|
|
19465
|
+
The subnetwork used to assign the IP to the producer instance network interface.
|
|
21175
19466
|
"""
|
|
21176
|
-
return pulumi.get(self, "
|
|
19467
|
+
return pulumi.get(self, "subnetwork")
|
|
21177
19468
|
|
|
21178
|
-
@
|
|
21179
|
-
def
|
|
21180
|
-
pulumi.set(self, "
|
|
19469
|
+
@subnetwork.setter
|
|
19470
|
+
def subnetwork(self, value: Optional[pulumi.Input[str]]):
|
|
19471
|
+
pulumi.set(self, "subnetwork", value)
|
|
21181
19472
|
|
|
21182
|
-
|
|
21183
|
-
|
|
21184
|
-
|
|
19473
|
+
|
|
19474
|
+
if not MYPY:
|
|
19475
|
+
class NetworkEndpointListNetworkEndpointArgsDict(TypedDict):
|
|
19476
|
+
ip_address: pulumi.Input[str]
|
|
21185
19477
|
"""
|
|
21186
|
-
|
|
21187
|
-
|
|
21188
|
-
|
|
21189
|
-
enabled.
|
|
19478
|
+
IPv4 address of network endpoint. The IP address must belong
|
|
19479
|
+
to a VM in GCE (either the primary IP or as part of an aliased IP
|
|
19480
|
+
range).
|
|
21190
19481
|
"""
|
|
21191
|
-
|
|
21192
|
-
|
|
21193
|
-
@disabled.setter
|
|
21194
|
-
def disabled(self, value: Optional[pulumi.Input[bool]]):
|
|
21195
|
-
pulumi.set(self, "disabled", value)
|
|
21196
|
-
|
|
21197
|
-
@property
|
|
21198
|
-
@pulumi.getter(name="enableLogging")
|
|
21199
|
-
def enable_logging(self) -> Optional[pulumi.Input[bool]]:
|
|
19482
|
+
instance: NotRequired[pulumi.Input[str]]
|
|
21200
19483
|
"""
|
|
21201
|
-
|
|
21202
|
-
|
|
21203
|
-
|
|
19484
|
+
The name for a specific VM instance that the IP address belongs to.
|
|
19485
|
+
This is required for network endpoints of type GCE_VM_IP_PORT.
|
|
19486
|
+
The instance must be in the same zone as the network endpoint group.
|
|
21204
19487
|
"""
|
|
21205
|
-
|
|
21206
|
-
|
|
21207
|
-
@enable_logging.setter
|
|
21208
|
-
def enable_logging(self, value: Optional[pulumi.Input[bool]]):
|
|
21209
|
-
pulumi.set(self, "enable_logging", value)
|
|
21210
|
-
|
|
21211
|
-
@property
|
|
21212
|
-
@pulumi.getter(name="ruleName")
|
|
21213
|
-
def rule_name(self) -> Optional[pulumi.Input[str]]:
|
|
19488
|
+
port: NotRequired[pulumi.Input[int]]
|
|
21214
19489
|
"""
|
|
21215
|
-
|
|
21216
|
-
|
|
19490
|
+
Port number of network endpoint.
|
|
19491
|
+
**Note** `port` is required unless the Network Endpoint Group is created
|
|
19492
|
+
with the type of `GCE_VM_IP`
|
|
21217
19493
|
"""
|
|
21218
|
-
|
|
21219
|
-
|
|
21220
|
-
@rule_name.setter
|
|
21221
|
-
def rule_name(self, value: Optional[pulumi.Input[str]]):
|
|
21222
|
-
pulumi.set(self, "rule_name", value)
|
|
19494
|
+
elif False:
|
|
19495
|
+
NetworkEndpointListNetworkEndpointArgsDict: TypeAlias = Mapping[str, Any]
|
|
21223
19496
|
|
|
21224
|
-
|
|
21225
|
-
|
|
21226
|
-
def
|
|
19497
|
+
@pulumi.input_type
|
|
19498
|
+
class NetworkEndpointListNetworkEndpointArgs:
|
|
19499
|
+
def __init__(__self__, *,
|
|
19500
|
+
ip_address: pulumi.Input[str],
|
|
19501
|
+
instance: Optional[pulumi.Input[str]] = None,
|
|
19502
|
+
port: Optional[pulumi.Input[int]] = None):
|
|
21227
19503
|
"""
|
|
21228
|
-
|
|
21229
|
-
|
|
21230
|
-
|
|
21231
|
-
|
|
19504
|
+
:param pulumi.Input[str] ip_address: IPv4 address of network endpoint. The IP address must belong
|
|
19505
|
+
to a VM in GCE (either the primary IP or as part of an aliased IP
|
|
19506
|
+
range).
|
|
19507
|
+
:param pulumi.Input[str] instance: The name for a specific VM instance that the IP address belongs to.
|
|
19508
|
+
This is required for network endpoints of type GCE_VM_IP_PORT.
|
|
19509
|
+
The instance must be in the same zone as the network endpoint group.
|
|
19510
|
+
:param pulumi.Input[int] port: Port number of network endpoint.
|
|
19511
|
+
**Note** `port` is required unless the Network Endpoint Group is created
|
|
19512
|
+
with the type of `GCE_VM_IP`
|
|
21232
19513
|
"""
|
|
21233
|
-
|
|
21234
|
-
|
|
21235
|
-
|
|
21236
|
-
|
|
21237
|
-
|
|
19514
|
+
pulumi.set(__self__, "ip_address", ip_address)
|
|
19515
|
+
if instance is not None:
|
|
19516
|
+
pulumi.set(__self__, "instance", instance)
|
|
19517
|
+
if port is not None:
|
|
19518
|
+
pulumi.set(__self__, "port", port)
|
|
21238
19519
|
|
|
21239
19520
|
@property
|
|
21240
|
-
@pulumi.getter(name="
|
|
21241
|
-
def
|
|
19521
|
+
@pulumi.getter(name="ipAddress")
|
|
19522
|
+
def ip_address(self) -> pulumi.Input[str]:
|
|
21242
19523
|
"""
|
|
21243
|
-
|
|
21244
|
-
|
|
21245
|
-
|
|
21246
|
-
of those EFFECTIVE secure tags, if all the target_secure_tag are in
|
|
21247
|
-
INEFFECTIVE state, then this rule will be ignored.
|
|
21248
|
-
<code>targetSecureTag</code> may not be set at the same time as
|
|
21249
|
-
<code>targetServiceAccounts</code>.
|
|
21250
|
-
If neither <code>targetServiceAccounts</code> nor
|
|
21251
|
-
<code>targetSecureTag</code> are specified, the firewall rule applies
|
|
21252
|
-
to all instances on the specified network.
|
|
21253
|
-
Maximum number of target label tags allowed is 256.
|
|
21254
|
-
Structure is documented below.
|
|
19524
|
+
IPv4 address of network endpoint. The IP address must belong
|
|
19525
|
+
to a VM in GCE (either the primary IP or as part of an aliased IP
|
|
19526
|
+
range).
|
|
21255
19527
|
"""
|
|
21256
|
-
return pulumi.get(self, "
|
|
19528
|
+
return pulumi.get(self, "ip_address")
|
|
21257
19529
|
|
|
21258
|
-
@
|
|
21259
|
-
def
|
|
21260
|
-
pulumi.set(self, "
|
|
19530
|
+
@ip_address.setter
|
|
19531
|
+
def ip_address(self, value: pulumi.Input[str]):
|
|
19532
|
+
pulumi.set(self, "ip_address", value)
|
|
21261
19533
|
|
|
21262
19534
|
@property
|
|
21263
|
-
@pulumi.getter
|
|
21264
|
-
def
|
|
19535
|
+
@pulumi.getter
|
|
19536
|
+
def instance(self) -> Optional[pulumi.Input[str]]:
|
|
21265
19537
|
"""
|
|
21266
|
-
|
|
21267
|
-
|
|
19538
|
+
The name for a specific VM instance that the IP address belongs to.
|
|
19539
|
+
This is required for network endpoints of type GCE_VM_IP_PORT.
|
|
19540
|
+
The instance must be in the same zone as the network endpoint group.
|
|
21268
19541
|
"""
|
|
21269
|
-
return pulumi.get(self, "
|
|
19542
|
+
return pulumi.get(self, "instance")
|
|
21270
19543
|
|
|
21271
|
-
@
|
|
21272
|
-
def
|
|
21273
|
-
pulumi.set(self, "
|
|
19544
|
+
@instance.setter
|
|
19545
|
+
def instance(self, value: Optional[pulumi.Input[str]]):
|
|
19546
|
+
pulumi.set(self, "instance", value)
|
|
21274
19547
|
|
|
21275
19548
|
@property
|
|
21276
|
-
@pulumi.getter
|
|
21277
|
-
def
|
|
19549
|
+
@pulumi.getter
|
|
19550
|
+
def port(self) -> Optional[pulumi.Input[int]]:
|
|
21278
19551
|
"""
|
|
21279
|
-
|
|
21280
|
-
|
|
19552
|
+
Port number of network endpoint.
|
|
19553
|
+
**Note** `port` is required unless the Network Endpoint Group is created
|
|
19554
|
+
with the type of `GCE_VM_IP`
|
|
21281
19555
|
"""
|
|
21282
|
-
return pulumi.get(self, "
|
|
19556
|
+
return pulumi.get(self, "port")
|
|
21283
19557
|
|
|
21284
|
-
@
|
|
21285
|
-
def
|
|
21286
|
-
pulumi.set(self, "
|
|
19558
|
+
@port.setter
|
|
19559
|
+
def port(self, value: Optional[pulumi.Input[int]]):
|
|
19560
|
+
pulumi.set(self, "port", value)
|
|
21287
19561
|
|
|
21288
19562
|
|
|
21289
19563
|
if not MYPY:
|
|
21290
|
-
class
|
|
21291
|
-
layer4_configs: pulumi.Input[Sequence[pulumi.Input['
|
|
19564
|
+
class NetworkFirewallPolicyRuleMatchArgsDict(TypedDict):
|
|
19565
|
+
layer4_configs: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgsDict']]]
|
|
21292
19566
|
"""
|
|
21293
19567
|
Pairs of IP protocols and ports that the rule should match.
|
|
21294
|
-
Structure is documented below.
|
|
21295
19568
|
"""
|
|
21296
19569
|
dest_address_groups: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21297
19570
|
"""
|
|
21298
|
-
Address groups which should be matched against the traffic destination.
|
|
21299
|
-
Maximum number of destination address groups is 10.
|
|
19571
|
+
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. Destination address groups is only supported in Egress rules.
|
|
21300
19572
|
"""
|
|
21301
19573
|
dest_fqdns: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21302
19574
|
"""
|
|
21303
|
-
|
|
21304
|
-
traffic destination. Maximum number of destination fqdn allowed is 100.
|
|
19575
|
+
Domain names that will be used to match against the resolved domain name of destination of traffic. Can only be specified if DIRECTION is egress.
|
|
21305
19576
|
"""
|
|
21306
19577
|
dest_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21307
19578
|
"""
|
|
21308
|
-
|
|
21309
|
-
EGRESS rules.
|
|
19579
|
+
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
|
|
21310
19580
|
"""
|
|
21311
19581
|
dest_region_codes: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21312
19582
|
"""
|
|
21313
|
-
|
|
21314
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
21315
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
21316
|
-
Maximum number of destination region codes allowed is 5000.
|
|
19583
|
+
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is egress.
|
|
21317
19584
|
"""
|
|
21318
19585
|
dest_threat_intelligences: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21319
19586
|
"""
|
|
21320
|
-
|
|
21321
|
-
The IPs in these lists will be matched against traffic destination.
|
|
19587
|
+
Name of the Google Cloud Threat Intelligence list.
|
|
21322
19588
|
"""
|
|
21323
19589
|
src_address_groups: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21324
19590
|
"""
|
|
21325
|
-
Address groups which should be matched against the traffic source.
|
|
21326
|
-
Maximum number of source address groups is 10.
|
|
19591
|
+
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. Source address groups is only supported in Ingress rules.
|
|
21327
19592
|
"""
|
|
21328
19593
|
src_fqdns: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21329
19594
|
"""
|
|
21330
|
-
|
|
21331
|
-
traffic source. Maximum number of source fqdn allowed is 100.
|
|
19595
|
+
Domain names that will be used to match against the resolved domain name of source of traffic. Can only be specified if DIRECTION is ingress.
|
|
21332
19596
|
"""
|
|
21333
19597
|
src_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21334
19598
|
"""
|
|
21335
|
-
|
|
21336
|
-
INGRESS rules.
|
|
19599
|
+
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
|
|
21337
19600
|
"""
|
|
21338
19601
|
src_region_codes: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21339
19602
|
"""
|
|
21340
|
-
|
|
21341
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
21342
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
21343
|
-
Maximum number of source region codes allowed is 5000.
|
|
19603
|
+
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is ingress.
|
|
21344
19604
|
"""
|
|
21345
|
-
src_secure_tags: NotRequired[pulumi.Input[Sequence[pulumi.Input['
|
|
19605
|
+
src_secure_tags: NotRequired[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgsDict']]]]
|
|
21346
19606
|
"""
|
|
21347
|
-
List of secure tag values, which should be matched at the source
|
|
21348
|
-
of the traffic.
|
|
21349
|
-
For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE,
|
|
21350
|
-
and there is no <code>srcIpRange</code>, this rule will be ignored.
|
|
21351
|
-
Maximum number of source tag values allowed is 256.
|
|
21352
|
-
Structure is documented below.
|
|
21353
|
-
|
|
21354
|
-
|
|
21355
|
-
<a name="nested_layer4_config"></a>The `layer4_config` block supports:
|
|
19607
|
+
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE, and there is no <code>srcIpRange</code>, this rule will be ignored. Maximum number of source tag values allowed is 256.
|
|
21356
19608
|
"""
|
|
21357
19609
|
src_threat_intelligences: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21358
19610
|
"""
|
|
21359
|
-
|
|
21360
|
-
|
|
19611
|
+
Name of the Google Cloud Threat Intelligence list.
|
|
19612
|
+
|
|
19613
|
+
The `layer4_configs` block supports:
|
|
21361
19614
|
"""
|
|
21362
19615
|
elif False:
|
|
21363
|
-
|
|
19616
|
+
NetworkFirewallPolicyRuleMatchArgsDict: TypeAlias = Mapping[str, Any]
|
|
21364
19617
|
|
|
21365
19618
|
@pulumi.input_type
|
|
21366
|
-
class
|
|
19619
|
+
class NetworkFirewallPolicyRuleMatchArgs:
|
|
21367
19620
|
def __init__(__self__, *,
|
|
21368
|
-
layer4_configs: pulumi.Input[Sequence[pulumi.Input['
|
|
19621
|
+
layer4_configs: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]],
|
|
21369
19622
|
dest_address_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21370
19623
|
dest_fqdns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21371
19624
|
dest_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
@@ -21375,44 +19628,23 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21375
19628
|
src_fqdns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21376
19629
|
src_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21377
19630
|
src_region_codes: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21378
|
-
src_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['
|
|
19631
|
+
src_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]]] = None,
|
|
21379
19632
|
src_threat_intelligences: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
21380
19633
|
"""
|
|
21381
|
-
:param pulumi.Input[Sequence[pulumi.Input['
|
|
21382
|
-
|
|
21383
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
21384
|
-
|
|
21385
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
21386
|
-
|
|
21387
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
21388
|
-
|
|
21389
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]]
|
|
21390
|
-
|
|
21391
|
-
|
|
21392
|
-
|
|
21393
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_threat_intelligences: Names of Network Threat Intelligence lists.
|
|
21394
|
-
The IPs in these lists will be matched against traffic destination.
|
|
21395
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_address_groups: Address groups which should be matched against the traffic source.
|
|
21396
|
-
Maximum number of source address groups is 10.
|
|
21397
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_fqdns: Fully Qualified Domain Name (FQDN) which should be matched against
|
|
21398
|
-
traffic source. Maximum number of source fqdn allowed is 100.
|
|
21399
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_ip_ranges: Source IP address range in CIDR format. Required for
|
|
21400
|
-
INGRESS rules.
|
|
21401
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_region_codes: Region codes whose IP addresses will be used to match for source
|
|
21402
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
21403
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
21404
|
-
Maximum number of source region codes allowed is 5000.
|
|
21405
|
-
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyWithRulesRuleMatchSrcSecureTagArgs']]] src_secure_tags: List of secure tag values, which should be matched at the source
|
|
21406
|
-
of the traffic.
|
|
21407
|
-
For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE,
|
|
21408
|
-
and there is no <code>srcIpRange</code>, this rule will be ignored.
|
|
21409
|
-
Maximum number of source tag values allowed is 256.
|
|
21410
|
-
Structure is documented below.
|
|
21411
|
-
|
|
19634
|
+
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]] layer4_configs: Pairs of IP protocols and ports that the rule should match.
|
|
19635
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_address_groups: Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. Destination address groups is only supported in Egress rules.
|
|
19636
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_fqdns: Domain names that will be used to match against the resolved domain name of destination of traffic. Can only be specified if DIRECTION is egress.
|
|
19637
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_ip_ranges: CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
|
|
19638
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_region_codes: The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is egress.
|
|
19639
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] dest_threat_intelligences: Name of the Google Cloud Threat Intelligence list.
|
|
19640
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_address_groups: Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. Source address groups is only supported in Ingress rules.
|
|
19641
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_fqdns: Domain names that will be used to match against the resolved domain name of source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19642
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_ip_ranges: CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
|
|
19643
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_region_codes: The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is ingress.
|
|
19644
|
+
:param pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]] src_secure_tags: List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE, and there is no <code>srcIpRange</code>, this rule will be ignored. Maximum number of source tag values allowed is 256.
|
|
19645
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_threat_intelligences: Name of the Google Cloud Threat Intelligence list.
|
|
21412
19646
|
|
|
21413
|
-
|
|
21414
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] src_threat_intelligences: Names of Network Threat Intelligence lists.
|
|
21415
|
-
The IPs in these lists will be matched against traffic source.
|
|
19647
|
+
The `layer4_configs` block supports:
|
|
21416
19648
|
"""
|
|
21417
19649
|
pulumi.set(__self__, "layer4_configs", layer4_configs)
|
|
21418
19650
|
if dest_address_groups is not None:
|
|
@@ -21440,23 +19672,21 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21440
19672
|
|
|
21441
19673
|
@property
|
|
21442
19674
|
@pulumi.getter(name="layer4Configs")
|
|
21443
|
-
def layer4_configs(self) -> pulumi.Input[Sequence[pulumi.Input['
|
|
19675
|
+
def layer4_configs(self) -> pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]]:
|
|
21444
19676
|
"""
|
|
21445
19677
|
Pairs of IP protocols and ports that the rule should match.
|
|
21446
|
-
Structure is documented below.
|
|
21447
19678
|
"""
|
|
21448
19679
|
return pulumi.get(self, "layer4_configs")
|
|
21449
19680
|
|
|
21450
19681
|
@layer4_configs.setter
|
|
21451
|
-
def layer4_configs(self, value: pulumi.Input[Sequence[pulumi.Input['
|
|
19682
|
+
def layer4_configs(self, value: pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchLayer4ConfigArgs']]]):
|
|
21452
19683
|
pulumi.set(self, "layer4_configs", value)
|
|
21453
19684
|
|
|
21454
19685
|
@property
|
|
21455
19686
|
@pulumi.getter(name="destAddressGroups")
|
|
21456
19687
|
def dest_address_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21457
19688
|
"""
|
|
21458
|
-
Address groups which should be matched against the traffic destination.
|
|
21459
|
-
Maximum number of destination address groups is 10.
|
|
19689
|
+
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. Destination address groups is only supported in Egress rules.
|
|
21460
19690
|
"""
|
|
21461
19691
|
return pulumi.get(self, "dest_address_groups")
|
|
21462
19692
|
|
|
@@ -21468,8 +19698,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21468
19698
|
@pulumi.getter(name="destFqdns")
|
|
21469
19699
|
def dest_fqdns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21470
19700
|
"""
|
|
21471
|
-
|
|
21472
|
-
traffic destination. Maximum number of destination fqdn allowed is 100.
|
|
19701
|
+
Domain names that will be used to match against the resolved domain name of destination of traffic. Can only be specified if DIRECTION is egress.
|
|
21473
19702
|
"""
|
|
21474
19703
|
return pulumi.get(self, "dest_fqdns")
|
|
21475
19704
|
|
|
@@ -21481,8 +19710,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21481
19710
|
@pulumi.getter(name="destIpRanges")
|
|
21482
19711
|
def dest_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21483
19712
|
"""
|
|
21484
|
-
|
|
21485
|
-
EGRESS rules.
|
|
19713
|
+
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
|
|
21486
19714
|
"""
|
|
21487
19715
|
return pulumi.get(self, "dest_ip_ranges")
|
|
21488
19716
|
|
|
@@ -21494,10 +19722,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21494
19722
|
@pulumi.getter(name="destRegionCodes")
|
|
21495
19723
|
def dest_region_codes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21496
19724
|
"""
|
|
21497
|
-
|
|
21498
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
21499
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
21500
|
-
Maximum number of destination region codes allowed is 5000.
|
|
19725
|
+
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is egress.
|
|
21501
19726
|
"""
|
|
21502
19727
|
return pulumi.get(self, "dest_region_codes")
|
|
21503
19728
|
|
|
@@ -21509,8 +19734,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21509
19734
|
@pulumi.getter(name="destThreatIntelligences")
|
|
21510
19735
|
def dest_threat_intelligences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21511
19736
|
"""
|
|
21512
|
-
|
|
21513
|
-
The IPs in these lists will be matched against traffic destination.
|
|
19737
|
+
Name of the Google Cloud Threat Intelligence list.
|
|
21514
19738
|
"""
|
|
21515
19739
|
return pulumi.get(self, "dest_threat_intelligences")
|
|
21516
19740
|
|
|
@@ -21522,8 +19746,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21522
19746
|
@pulumi.getter(name="srcAddressGroups")
|
|
21523
19747
|
def src_address_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21524
19748
|
"""
|
|
21525
|
-
Address groups which should be matched against the traffic source.
|
|
21526
|
-
Maximum number of source address groups is 10.
|
|
19749
|
+
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. Source address groups is only supported in Ingress rules.
|
|
21527
19750
|
"""
|
|
21528
19751
|
return pulumi.get(self, "src_address_groups")
|
|
21529
19752
|
|
|
@@ -21535,8 +19758,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21535
19758
|
@pulumi.getter(name="srcFqdns")
|
|
21536
19759
|
def src_fqdns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21537
19760
|
"""
|
|
21538
|
-
|
|
21539
|
-
traffic source. Maximum number of source fqdn allowed is 100.
|
|
19761
|
+
Domain names that will be used to match against the resolved domain name of source of traffic. Can only be specified if DIRECTION is ingress.
|
|
21540
19762
|
"""
|
|
21541
19763
|
return pulumi.get(self, "src_fqdns")
|
|
21542
19764
|
|
|
@@ -21548,8 +19770,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21548
19770
|
@pulumi.getter(name="srcIpRanges")
|
|
21549
19771
|
def src_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21550
19772
|
"""
|
|
21551
|
-
|
|
21552
|
-
INGRESS rules.
|
|
19773
|
+
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
|
|
21553
19774
|
"""
|
|
21554
19775
|
return pulumi.get(self, "src_ip_ranges")
|
|
21555
19776
|
|
|
@@ -21561,10 +19782,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21561
19782
|
@pulumi.getter(name="srcRegionCodes")
|
|
21562
19783
|
def src_region_codes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21563
19784
|
"""
|
|
21564
|
-
|
|
21565
|
-
of traffic. Should be specified as 2 letter country code defined as per
|
|
21566
|
-
ISO 3166 alpha-2 country codes. ex."US"
|
|
21567
|
-
Maximum number of source region codes allowed is 5000.
|
|
19785
|
+
The Unicode country codes whose IP addresses will be used to match against the source of traffic. Can only be specified if DIRECTION is ingress.
|
|
21568
19786
|
"""
|
|
21569
19787
|
return pulumi.get(self, "src_region_codes")
|
|
21570
19788
|
|
|
@@ -21574,30 +19792,23 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21574
19792
|
|
|
21575
19793
|
@property
|
|
21576
19794
|
@pulumi.getter(name="srcSecureTags")
|
|
21577
|
-
def src_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['
|
|
19795
|
+
def src_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]]]:
|
|
21578
19796
|
"""
|
|
21579
|
-
List of secure tag values, which should be matched at the source
|
|
21580
|
-
of the traffic.
|
|
21581
|
-
For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE,
|
|
21582
|
-
and there is no <code>srcIpRange</code>, this rule will be ignored.
|
|
21583
|
-
Maximum number of source tag values allowed is 256.
|
|
21584
|
-
Structure is documented below.
|
|
21585
|
-
|
|
21586
|
-
|
|
21587
|
-
<a name="nested_layer4_config"></a>The `layer4_config` block supports:
|
|
19797
|
+
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the <code>srcSecureTag</code> are INEFFECTIVE, and there is no <code>srcIpRange</code>, this rule will be ignored. Maximum number of source tag values allowed is 256.
|
|
21588
19798
|
"""
|
|
21589
19799
|
return pulumi.get(self, "src_secure_tags")
|
|
21590
19800
|
|
|
21591
19801
|
@src_secure_tags.setter
|
|
21592
|
-
def src_secure_tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['
|
|
19802
|
+
def src_secure_tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkFirewallPolicyRuleMatchSrcSecureTagArgs']]]]):
|
|
21593
19803
|
pulumi.set(self, "src_secure_tags", value)
|
|
21594
19804
|
|
|
21595
19805
|
@property
|
|
21596
19806
|
@pulumi.getter(name="srcThreatIntelligences")
|
|
21597
19807
|
def src_threat_intelligences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21598
19808
|
"""
|
|
21599
|
-
|
|
21600
|
-
|
|
19809
|
+
Name of the Google Cloud Threat Intelligence list.
|
|
19810
|
+
|
|
19811
|
+
The `layer4_configs` block supports:
|
|
21601
19812
|
"""
|
|
21602
19813
|
return pulumi.get(self, "src_threat_intelligences")
|
|
21603
19814
|
|
|
@@ -21607,48 +19818,26 @@ class NetworkFirewallPolicyWithRulesRuleMatchArgs:
|
|
|
21607
19818
|
|
|
21608
19819
|
|
|
21609
19820
|
if not MYPY:
|
|
21610
|
-
class
|
|
19821
|
+
class NetworkFirewallPolicyRuleMatchLayer4ConfigArgsDict(TypedDict):
|
|
21611
19822
|
ip_protocol: pulumi.Input[str]
|
|
21612
19823
|
"""
|
|
21613
|
-
(
|
|
21614
|
-
The IP protocol to which this rule applies. The protocol
|
|
21615
|
-
type is required when creating a firewall rule.
|
|
21616
|
-
This value can either be one of the following well
|
|
21617
|
-
known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp),
|
|
21618
|
-
or the IP protocol number.
|
|
19824
|
+
The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (`tcp`, `udp`, `icmp`, `esp`, `ah`, `ipip`, `sctp`), or the IP protocol number.
|
|
21619
19825
|
"""
|
|
21620
19826
|
ports: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
|
21621
19827
|
"""
|
|
21622
|
-
|
|
21623
|
-
An optional list of ports to which this rule applies. This field
|
|
21624
|
-
is only applicable for UDP or TCP protocol. Each entry must be
|
|
21625
|
-
either an integer or a range. If not specified, this rule
|
|
21626
|
-
applies to connections through any port.
|
|
21627
|
-
Example inputs include: ["22"], ["80","443"], and
|
|
21628
|
-
["12345-12349"].
|
|
19828
|
+
An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port. Example inputs include: ``.
|
|
21629
19829
|
"""
|
|
21630
19830
|
elif False:
|
|
21631
|
-
|
|
19831
|
+
NetworkFirewallPolicyRuleMatchLayer4ConfigArgsDict: TypeAlias = Mapping[str, Any]
|
|
21632
19832
|
|
|
21633
19833
|
@pulumi.input_type
|
|
21634
|
-
class
|
|
19834
|
+
class NetworkFirewallPolicyRuleMatchLayer4ConfigArgs:
|
|
21635
19835
|
def __init__(__self__, *,
|
|
21636
19836
|
ip_protocol: pulumi.Input[str],
|
|
21637
19837
|
ports: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
21638
19838
|
"""
|
|
21639
|
-
:param pulumi.Input[str] ip_protocol: (
|
|
21640
|
-
|
|
21641
|
-
type is required when creating a firewall rule.
|
|
21642
|
-
This value can either be one of the following well
|
|
21643
|
-
known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp),
|
|
21644
|
-
or the IP protocol number.
|
|
21645
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] ports: (Output)
|
|
21646
|
-
An optional list of ports to which this rule applies. This field
|
|
21647
|
-
is only applicable for UDP or TCP protocol. Each entry must be
|
|
21648
|
-
either an integer or a range. If not specified, this rule
|
|
21649
|
-
applies to connections through any port.
|
|
21650
|
-
Example inputs include: ["22"], ["80","443"], and
|
|
21651
|
-
["12345-12349"].
|
|
19839
|
+
:param pulumi.Input[str] ip_protocol: The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (`tcp`, `udp`, `icmp`, `esp`, `ah`, `ipip`, `sctp`), or the IP protocol number.
|
|
19840
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] ports: An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port. Example inputs include: ``.
|
|
21652
19841
|
"""
|
|
21653
19842
|
pulumi.set(__self__, "ip_protocol", ip_protocol)
|
|
21654
19843
|
if ports is not None:
|
|
@@ -21658,12 +19847,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchLayer4ConfigArgs:
|
|
|
21658
19847
|
@pulumi.getter(name="ipProtocol")
|
|
21659
19848
|
def ip_protocol(self) -> pulumi.Input[str]:
|
|
21660
19849
|
"""
|
|
21661
|
-
(
|
|
21662
|
-
The IP protocol to which this rule applies. The protocol
|
|
21663
|
-
type is required when creating a firewall rule.
|
|
21664
|
-
This value can either be one of the following well
|
|
21665
|
-
known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp),
|
|
21666
|
-
or the IP protocol number.
|
|
19850
|
+
The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (`tcp`, `udp`, `icmp`, `esp`, `ah`, `ipip`, `sctp`), or the IP protocol number.
|
|
21667
19851
|
"""
|
|
21668
19852
|
return pulumi.get(self, "ip_protocol")
|
|
21669
19853
|
|
|
@@ -21675,13 +19859,7 @@ class NetworkFirewallPolicyWithRulesRuleMatchLayer4ConfigArgs:
|
|
|
21675
19859
|
@pulumi.getter
|
|
21676
19860
|
def ports(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
21677
19861
|
"""
|
|
21678
|
-
|
|
21679
|
-
An optional list of ports to which this rule applies. This field
|
|
21680
|
-
is only applicable for UDP or TCP protocol. Each entry must be
|
|
21681
|
-
either an integer or a range. If not specified, this rule
|
|
21682
|
-
applies to connections through any port.
|
|
21683
|
-
Example inputs include: ["22"], ["80","443"], and
|
|
21684
|
-
["12345-12349"].
|
|
19862
|
+
An optional list of ports to which this rule applies. This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port. Example inputs include: ``.
|
|
21685
19863
|
"""
|
|
21686
19864
|
return pulumi.get(self, "ports")
|
|
21687
19865
|
|
|
@@ -21691,61 +19869,48 @@ class NetworkFirewallPolicyWithRulesRuleMatchLayer4ConfigArgs:
|
|
|
21691
19869
|
|
|
21692
19870
|
|
|
21693
19871
|
if not MYPY:
|
|
21694
|
-
class
|
|
21695
|
-
name:
|
|
19872
|
+
class NetworkFirewallPolicyRuleMatchSrcSecureTagArgsDict(TypedDict):
|
|
19873
|
+
name: pulumi.Input[str]
|
|
21696
19874
|
"""
|
|
21697
|
-
Name of the secure tag, created with TagManager's TagValue API.
|
|
21698
|
-
@pattern tagValues/[0-9]+
|
|
19875
|
+
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
21699
19876
|
"""
|
|
21700
19877
|
state: NotRequired[pulumi.Input[str]]
|
|
21701
19878
|
"""
|
|
21702
|
-
|
|
21703
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
21704
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
21705
|
-
or its network is deleted.
|
|
19879
|
+
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
21706
19880
|
"""
|
|
21707
19881
|
elif False:
|
|
21708
|
-
|
|
19882
|
+
NetworkFirewallPolicyRuleMatchSrcSecureTagArgsDict: TypeAlias = Mapping[str, Any]
|
|
21709
19883
|
|
|
21710
19884
|
@pulumi.input_type
|
|
21711
|
-
class
|
|
19885
|
+
class NetworkFirewallPolicyRuleMatchSrcSecureTagArgs:
|
|
21712
19886
|
def __init__(__self__, *,
|
|
21713
|
-
name:
|
|
19887
|
+
name: pulumi.Input[str],
|
|
21714
19888
|
state: Optional[pulumi.Input[str]] = None):
|
|
21715
19889
|
"""
|
|
21716
|
-
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API.
|
|
21717
|
-
|
|
21718
|
-
:param pulumi.Input[str] state: (Output)
|
|
21719
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
21720
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
21721
|
-
or its network is deleted.
|
|
19890
|
+
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
19891
|
+
:param pulumi.Input[str] state: [Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
21722
19892
|
"""
|
|
21723
|
-
|
|
21724
|
-
pulumi.set(__self__, "name", name)
|
|
19893
|
+
pulumi.set(__self__, "name", name)
|
|
21725
19894
|
if state is not None:
|
|
21726
19895
|
pulumi.set(__self__, "state", state)
|
|
21727
19896
|
|
|
21728
19897
|
@property
|
|
21729
19898
|
@pulumi.getter
|
|
21730
|
-
def name(self) ->
|
|
19899
|
+
def name(self) -> pulumi.Input[str]:
|
|
21731
19900
|
"""
|
|
21732
|
-
Name of the secure tag, created with TagManager's TagValue API.
|
|
21733
|
-
@pattern tagValues/[0-9]+
|
|
19901
|
+
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
21734
19902
|
"""
|
|
21735
19903
|
return pulumi.get(self, "name")
|
|
21736
19904
|
|
|
21737
19905
|
@name.setter
|
|
21738
|
-
def name(self, value:
|
|
19906
|
+
def name(self, value: pulumi.Input[str]):
|
|
21739
19907
|
pulumi.set(self, "name", value)
|
|
21740
19908
|
|
|
21741
19909
|
@property
|
|
21742
19910
|
@pulumi.getter
|
|
21743
19911
|
def state(self) -> Optional[pulumi.Input[str]]:
|
|
21744
19912
|
"""
|
|
21745
|
-
|
|
21746
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
21747
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
21748
|
-
or its network is deleted.
|
|
19913
|
+
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
21749
19914
|
"""
|
|
21750
19915
|
return pulumi.get(self, "state")
|
|
21751
19916
|
|
|
@@ -21755,67 +19920,48 @@ class NetworkFirewallPolicyWithRulesRuleMatchSrcSecureTagArgs:
|
|
|
21755
19920
|
|
|
21756
19921
|
|
|
21757
19922
|
if not MYPY:
|
|
21758
|
-
class
|
|
21759
|
-
name:
|
|
19923
|
+
class NetworkFirewallPolicyRuleTargetSecureTagArgsDict(TypedDict):
|
|
19924
|
+
name: pulumi.Input[str]
|
|
21760
19925
|
"""
|
|
21761
|
-
Name of the secure tag, created with TagManager's TagValue API.
|
|
21762
|
-
@pattern tagValues/[0-9]+
|
|
19926
|
+
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
21763
19927
|
"""
|
|
21764
19928
|
state: NotRequired[pulumi.Input[str]]
|
|
21765
19929
|
"""
|
|
21766
|
-
|
|
21767
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
21768
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
21769
|
-
or its network is deleted.
|
|
21770
|
-
|
|
21771
|
-
- - -
|
|
19930
|
+
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
21772
19931
|
"""
|
|
21773
19932
|
elif False:
|
|
21774
|
-
|
|
19933
|
+
NetworkFirewallPolicyRuleTargetSecureTagArgsDict: TypeAlias = Mapping[str, Any]
|
|
21775
19934
|
|
|
21776
19935
|
@pulumi.input_type
|
|
21777
|
-
class
|
|
19936
|
+
class NetworkFirewallPolicyRuleTargetSecureTagArgs:
|
|
21778
19937
|
def __init__(__self__, *,
|
|
21779
|
-
name:
|
|
19938
|
+
name: pulumi.Input[str],
|
|
21780
19939
|
state: Optional[pulumi.Input[str]] = None):
|
|
21781
19940
|
"""
|
|
21782
|
-
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API.
|
|
21783
|
-
|
|
21784
|
-
:param pulumi.Input[str] state: (Output)
|
|
21785
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
21786
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
21787
|
-
or its network is deleted.
|
|
21788
|
-
|
|
21789
|
-
- - -
|
|
19941
|
+
:param pulumi.Input[str] name: Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
19942
|
+
:param pulumi.Input[str] state: [Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
21790
19943
|
"""
|
|
21791
|
-
|
|
21792
|
-
pulumi.set(__self__, "name", name)
|
|
19944
|
+
pulumi.set(__self__, "name", name)
|
|
21793
19945
|
if state is not None:
|
|
21794
19946
|
pulumi.set(__self__, "state", state)
|
|
21795
19947
|
|
|
21796
19948
|
@property
|
|
21797
19949
|
@pulumi.getter
|
|
21798
|
-
def name(self) ->
|
|
19950
|
+
def name(self) -> pulumi.Input[str]:
|
|
21799
19951
|
"""
|
|
21800
|
-
Name of the secure tag, created with TagManager's TagValue API.
|
|
21801
|
-
@pattern tagValues/[0-9]+
|
|
19952
|
+
Name of the secure tag, created with TagManager's TagValue API. @pattern tagValues/[0-9]+
|
|
21802
19953
|
"""
|
|
21803
19954
|
return pulumi.get(self, "name")
|
|
21804
19955
|
|
|
21805
19956
|
@name.setter
|
|
21806
|
-
def name(self, value:
|
|
19957
|
+
def name(self, value: pulumi.Input[str]):
|
|
21807
19958
|
pulumi.set(self, "name", value)
|
|
21808
19959
|
|
|
21809
19960
|
@property
|
|
21810
19961
|
@pulumi.getter
|
|
21811
19962
|
def state(self) -> Optional[pulumi.Input[str]]:
|
|
21812
19963
|
"""
|
|
21813
|
-
|
|
21814
|
-
[Output Only] State of the secure tag, either `EFFECTIVE` or
|
|
21815
|
-
`INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted
|
|
21816
|
-
or its network is deleted.
|
|
21817
|
-
|
|
21818
|
-
- - -
|
|
19964
|
+
[Output Only] State of the secure tag, either `EFFECTIVE` or `INEFFECTIVE`. A secure tag is `INEFFECTIVE` when it is deleted or its network is deleted.
|
|
21819
19965
|
"""
|
|
21820
19966
|
return pulumi.get(self, "state")
|
|
21821
19967
|
|
|
@@ -47040,26 +45186,11 @@ class SecurityScanConfigScheduleArgs:
|
|
|
47040
45186
|
|
|
47041
45187
|
if not MYPY:
|
|
47042
45188
|
class ServiceAttachmentConnectedEndpointArgsDict(TypedDict):
|
|
47043
|
-
consumer_network: NotRequired[pulumi.Input[str]]
|
|
47044
|
-
"""
|
|
47045
|
-
(Output)
|
|
47046
|
-
The url of the consumer network.
|
|
47047
|
-
"""
|
|
47048
45189
|
endpoint: NotRequired[pulumi.Input[str]]
|
|
47049
45190
|
"""
|
|
47050
45191
|
(Output)
|
|
47051
45192
|
The URL of the consumer forwarding rule.
|
|
47052
45193
|
"""
|
|
47053
|
-
propagated_connection_count: NotRequired[pulumi.Input[int]]
|
|
47054
|
-
"""
|
|
47055
|
-
(Output, Beta)
|
|
47056
|
-
The number of consumer Network Connectivity Center spokes that the connected Private Service Connect endpoint has propagated to.
|
|
47057
|
-
"""
|
|
47058
|
-
psc_connection_id: NotRequired[pulumi.Input[str]]
|
|
47059
|
-
"""
|
|
47060
|
-
(Output)
|
|
47061
|
-
The PSC connection id of the connected endpoint.
|
|
47062
|
-
"""
|
|
47063
45194
|
status: NotRequired[pulumi.Input[str]]
|
|
47064
45195
|
"""
|
|
47065
45196
|
(Output)
|
|
@@ -47072,48 +45203,20 @@ elif False:
|
|
|
47072
45203
|
@pulumi.input_type
|
|
47073
45204
|
class ServiceAttachmentConnectedEndpointArgs:
|
|
47074
45205
|
def __init__(__self__, *,
|
|
47075
|
-
consumer_network: Optional[pulumi.Input[str]] = None,
|
|
47076
45206
|
endpoint: Optional[pulumi.Input[str]] = None,
|
|
47077
|
-
propagated_connection_count: Optional[pulumi.Input[int]] = None,
|
|
47078
|
-
psc_connection_id: Optional[pulumi.Input[str]] = None,
|
|
47079
45207
|
status: Optional[pulumi.Input[str]] = None):
|
|
47080
45208
|
"""
|
|
47081
|
-
:param pulumi.Input[str] consumer_network: (Output)
|
|
47082
|
-
The url of the consumer network.
|
|
47083
45209
|
:param pulumi.Input[str] endpoint: (Output)
|
|
47084
45210
|
The URL of the consumer forwarding rule.
|
|
47085
|
-
:param pulumi.Input[int] propagated_connection_count: (Output, Beta)
|
|
47086
|
-
The number of consumer Network Connectivity Center spokes that the connected Private Service Connect endpoint has propagated to.
|
|
47087
|
-
:param pulumi.Input[str] psc_connection_id: (Output)
|
|
47088
|
-
The PSC connection id of the connected endpoint.
|
|
47089
45211
|
:param pulumi.Input[str] status: (Output)
|
|
47090
45212
|
The status of the connection from the consumer forwarding rule to
|
|
47091
45213
|
this service attachment.
|
|
47092
45214
|
"""
|
|
47093
|
-
if consumer_network is not None:
|
|
47094
|
-
pulumi.set(__self__, "consumer_network", consumer_network)
|
|
47095
45215
|
if endpoint is not None:
|
|
47096
45216
|
pulumi.set(__self__, "endpoint", endpoint)
|
|
47097
|
-
if propagated_connection_count is not None:
|
|
47098
|
-
pulumi.set(__self__, "propagated_connection_count", propagated_connection_count)
|
|
47099
|
-
if psc_connection_id is not None:
|
|
47100
|
-
pulumi.set(__self__, "psc_connection_id", psc_connection_id)
|
|
47101
45217
|
if status is not None:
|
|
47102
45218
|
pulumi.set(__self__, "status", status)
|
|
47103
45219
|
|
|
47104
|
-
@property
|
|
47105
|
-
@pulumi.getter(name="consumerNetwork")
|
|
47106
|
-
def consumer_network(self) -> Optional[pulumi.Input[str]]:
|
|
47107
|
-
"""
|
|
47108
|
-
(Output)
|
|
47109
|
-
The url of the consumer network.
|
|
47110
|
-
"""
|
|
47111
|
-
return pulumi.get(self, "consumer_network")
|
|
47112
|
-
|
|
47113
|
-
@consumer_network.setter
|
|
47114
|
-
def consumer_network(self, value: Optional[pulumi.Input[str]]):
|
|
47115
|
-
pulumi.set(self, "consumer_network", value)
|
|
47116
|
-
|
|
47117
45220
|
@property
|
|
47118
45221
|
@pulumi.getter
|
|
47119
45222
|
def endpoint(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -47127,32 +45230,6 @@ class ServiceAttachmentConnectedEndpointArgs:
|
|
|
47127
45230
|
def endpoint(self, value: Optional[pulumi.Input[str]]):
|
|
47128
45231
|
pulumi.set(self, "endpoint", value)
|
|
47129
45232
|
|
|
47130
|
-
@property
|
|
47131
|
-
@pulumi.getter(name="propagatedConnectionCount")
|
|
47132
|
-
def propagated_connection_count(self) -> Optional[pulumi.Input[int]]:
|
|
47133
|
-
"""
|
|
47134
|
-
(Output, Beta)
|
|
47135
|
-
The number of consumer Network Connectivity Center spokes that the connected Private Service Connect endpoint has propagated to.
|
|
47136
|
-
"""
|
|
47137
|
-
return pulumi.get(self, "propagated_connection_count")
|
|
47138
|
-
|
|
47139
|
-
@propagated_connection_count.setter
|
|
47140
|
-
def propagated_connection_count(self, value: Optional[pulumi.Input[int]]):
|
|
47141
|
-
pulumi.set(self, "propagated_connection_count", value)
|
|
47142
|
-
|
|
47143
|
-
@property
|
|
47144
|
-
@pulumi.getter(name="pscConnectionId")
|
|
47145
|
-
def psc_connection_id(self) -> Optional[pulumi.Input[str]]:
|
|
47146
|
-
"""
|
|
47147
|
-
(Output)
|
|
47148
|
-
The PSC connection id of the connected endpoint.
|
|
47149
|
-
"""
|
|
47150
|
-
return pulumi.get(self, "psc_connection_id")
|
|
47151
|
-
|
|
47152
|
-
@psc_connection_id.setter
|
|
47153
|
-
def psc_connection_id(self, value: Optional[pulumi.Input[str]]):
|
|
47154
|
-
pulumi.set(self, "psc_connection_id", value)
|
|
47155
|
-
|
|
47156
45233
|
@property
|
|
47157
45234
|
@pulumi.getter
|
|
47158
45235
|
def status(self) -> Optional[pulumi.Input[str]]:
|