Package com.hashicorp.cdktf.providers.google.folder_iam_audit_config

Interface FolderIamAuditConfigAuditLogConfig

  • All Superinterfaces:
    software.amazon.jsii.JsiiSerializable
    All Known Implementing Classes:
    FolderIamAuditConfigAuditLogConfig.Jsii$Proxy
    @Generated(value="jsii-pacmak/1.102.0 (build e354887)",
           date="2024-08-31T03:59:21.257Z")
@Stability(Stable)
public interface FolderIamAuditConfigAuditLogConfig
extends software.amazon.jsii.JsiiSerializable

    • Method Detail

      • getLogType

        @Stability(Stable)
@NotNull
String getLogType()
        Permission type for which logging is to be configured. Must be one of DATA_READ, DATA_WRITE, or ADMIN_READ.

        Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/folder_iam_audit_config#log_type FolderIamAuditConfig#log_type}

      • getExemptedMembers

        @Stability(Stable)
@Nullable
default List<String> getExemptedMembers()
        Identities that do not cause logging for this type of permission.

        Each entry can have one of the following values:user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. group:{emailid}: An email address that represents a Google group. For example, admins@example.com. domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/folder_iam_audit_config#exempted_members FolderIamAuditConfig#exempted_members}