Package com.hashicorp.cdktf.providers.google.iam_deny_policy

Class IamDenyPolicyRulesDenyRule.Builder

java.lang.Object

com.hashicorp.cdktf.providers.google.iam_deny_policy.IamDenyPolicyRulesDenyRule.Builder

All Implemented Interfaces:

software.amazon.jsii.Builder<IamDenyPolicyRulesDenyRule>

Enclosing interface:

IamDenyPolicyRulesDenyRule

@Stability(Stable)
public static final class IamDenyPolicyRulesDenyRule.Builder
extends Object
implements software.amazon.jsii.Builder<IamDenyPolicyRulesDenyRule>

A builder for IamDenyPolicyRulesDenyRule

Constructor Summary

Constructors

Constructor	Description
Builder()

Method Summary

Modifier and Type	Method	Description
IamDenyPolicyRulesDenyRule	build()	Builds the configured instance.
IamDenyPolicyRulesDenyRule.Builder	denialCondition(IamDenyPolicyRulesDenyRuleDenialCondition denialCondition)	Sets the value of IamDenyPolicyRulesDenyRule.getDenialCondition()
IamDenyPolicyRulesDenyRule.Builder	deniedPermissions(List<String> deniedPermissions)	Sets the value of IamDenyPolicyRulesDenyRule.getDeniedPermissions()
IamDenyPolicyRulesDenyRule.Builder	deniedPrincipals(List<String> deniedPrincipals)	Sets the value of IamDenyPolicyRulesDenyRule.getDeniedPrincipals()
IamDenyPolicyRulesDenyRule.Builder	exceptionPermissions(List<String> exceptionPermissions)	Sets the value of IamDenyPolicyRulesDenyRule.getExceptionPermissions()
IamDenyPolicyRulesDenyRule.Builder	exceptionPrincipals(List<String> exceptionPrincipals)	Sets the value of IamDenyPolicyRulesDenyRule.getExceptionPrincipals()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Builder

public Builder()

Method Detail

denialCondition

@Stability(Stable)
public IamDenyPolicyRulesDenyRule.Builder denialCondition(IamDenyPolicyRulesDenyRuleDenialCondition denialCondition)

Sets the value of IamDenyPolicyRulesDenyRule.getDenialCondition()

Parameters:

denialCondition - denial_condition block. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_deny_policy#denial_condition IamDenyPolicy#denial_condition}

Returns:

this

deniedPermissions

@Stability(Stable)
public IamDenyPolicyRulesDenyRule.Builder deniedPermissions(List<String> deniedPermissions)

Sets the value of IamDenyPolicyRulesDenyRule.getDeniedPermissions()

Parameters:

deniedPermissions - The permissions that are explicitly denied by this rule. Each permission uses the format '{service-fqdn}/{resource}.{verb}', where '{service-fqdn}' is the fully qualified domain name for the service. For example, 'iam.googleapis.com/roles.list'. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_deny_policy#denied_permissions IamDenyPolicy#denied_permissions}

Returns:

this

deniedPrincipals

@Stability(Stable)
public IamDenyPolicyRulesDenyRule.Builder deniedPrincipals(List<String> deniedPrincipals)

Sets the value of IamDenyPolicyRulesDenyRule.getDeniedPrincipals()

Parameters:

deniedPrincipals - The identities that are prevented from using one or more permissions on Google Cloud resources. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_deny_policy#denied_principals IamDenyPolicy#denied_principals}

Returns:

this

exceptionPermissions

@Stability(Stable)
public IamDenyPolicyRulesDenyRule.Builder exceptionPermissions(List<String> exceptionPermissions)

Sets the value of IamDenyPolicyRulesDenyRule.getExceptionPermissions()

Parameters:

exceptionPermissions - Specifies the permissions that this rule excludes from the set of denied permissions given by deniedPermissions. If a permission appears in deniedPermissions and in exceptionPermissions then it will not be denied. The excluded permissions can be specified using the same syntax as deniedPermissions. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_deny_policy#exception_permissions IamDenyPolicy#exception_permissions}

Returns:

this

exceptionPrincipals

@Stability(Stable)
public IamDenyPolicyRulesDenyRule.Builder exceptionPrincipals(List<String> exceptionPrincipals)

Sets the value of IamDenyPolicyRulesDenyRule.getExceptionPrincipals()

Parameters:

exceptionPrincipals - The identities that are excluded from the deny rule, even if they are listed in the deniedPrincipals. For example, you could add a Google group to the deniedPrincipals, then exclude specific users who belong to that group. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/iam_deny_policy#exception_principals IamDenyPolicy#exception_principals}

Returns:

this

build

@Stability(Stable)
public IamDenyPolicyRulesDenyRule build()

Builds the configured instance.

Specified by:

build in interface software.amazon.jsii.Builder<IamDenyPolicyRulesDenyRule>

Returns:

a new instance of IamDenyPolicyRulesDenyRule

Throws:

NullPointerException - if any required attribute was not provided