Package com.hashicorp.cdktf.providers.google.access_context_manager_access_level

Interface AccessContextManagerAccessLevelBasicConditions

    • Method Detail

      • getDevicePolicy

        @Stability(Stable)
@Nullable
default AccessContextManagerAccessLevelBasicConditionsDevicePolicy getDevicePolicy()
        device_policy block.

        Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/access_context_manager_access_level#device_policy AccessContextManagerAccessLevel#device_policy}

      • getIpSubnetworks

        @Stability(Stable)
@Nullable
default List<String> getIpSubnetworks()
        A list of CIDR block IP subnetwork specification.

        May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/access_context_manager_access_level#ip_subnetworks AccessContextManagerAccessLevel#ip_subnetworks}

      • getMembers

        @Stability(Stable)
@Nullable
default List<String> getMembers()
        An allowed list of members (users, service accounts). Using groups is not supported yet.

        The signed-in user originating the request must be a part of one of the provided members. If not specified, a request may come from any user (logged in/not logged in, not present in any groups, etc.). Formats: 'user:{emailid}', 'serviceAccount:{emailid}' Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/access_context_manager_access_level#members AccessContextManagerAccessLevel#members}

      • getNegate

        @Stability(Stable)
@Nullable
default Object getNegate()
        Whether to negate the Condition.

        If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/access_context_manager_access_level#negate AccessContextManagerAccessLevel#negate}

      • getRegions

        @Stability(Stable)
@Nullable
default List<String> getRegions()
        The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.

        Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/access_context_manager_access_level#regions AccessContextManagerAccessLevel#regions}

      • getRequiredAccessLevels

        @Stability(Stable)
@Nullable
default List<String> getRequiredAccessLevels()
        A list of other access levels defined in the same Policy, referenced by resource name.

        Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name} Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/access_context_manager_access_level#required_access_levels AccessContextManagerAccessLevel#required_access_levels}

      • getVpcNetworkSources

        @Stability(Stable)
@Nullable
default Object getVpcNetworkSources()
        vpc_network_sources block.

        Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/access_context_manager_access_level#vpc_network_sources AccessContextManagerAccessLevel#vpc_network_sources}