com.pulumi.gcp.accesscontextmanager.kotlin.inputs.ServicePerimeterSpecArgs.kt Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of pulumi-gcp-kotlin Show documentation
Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.
There is a newer version: 8.10.0.0
Show newest version
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.gcp.accesscontextmanager.kotlin.inputs

import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.gcp.accesscontextmanager.inputs.ServicePerimeterSpecArgs.builder
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiTagMarker
import com.pulumi.kotlin.applySuspend
import kotlin.String
import kotlin.Suppress
import kotlin.Unit
import kotlin.collections.List
import kotlin.jvm.JvmName

/**
 *
 * @property accessLevels A list of AccessLevel resource names that allow resources within
 * the ServicePerimeter to be accessed from the internet.
 * AccessLevels listed must be in the same policy as this
 * ServicePerimeter. Referencing a nonexistent AccessLevel is a
 * syntax error. If no AccessLevel names are listed, resources within
 * the perimeter can only be accessed via GCP calls with request
 * origins within the perimeter. For Service Perimeter Bridge, must
 * be empty.
 * Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
 * @property egressPolicies List of EgressPolicies to apply to the perimeter. A perimeter may
 * have multiple EgressPolicies, each of which is evaluated separately.
 * Access is granted if any EgressPolicy grants it. Must be empty for
 * a perimeter bridge.
 * Structure is documented below.
 * @property ingressPolicies List of `IngressPolicies` to apply to the perimeter. A perimeter may
 * have multiple `IngressPolicies`, each of which is evaluated
 * separately. Access is granted if any `Ingress Policy` grants it.
 * Must be empty for a perimeter bridge.
 * Structure is documented below.
 * @property resources A list of GCP resources that are inside of the service perimeter.
 * Currently only projects are allowed.
 * Format: projects/{project_number}
 * @property restrictedServices GCP services that are subject to the Service Perimeter
 * restrictions. Must contain a list of services. For example, if
 * `storage.googleapis.com` is specified, access to the storage
 * buckets inside the perimeter must meet the perimeter's access
 * restrictions.
 * @property vpcAccessibleServices Specifies how APIs are allowed to communicate within the Service
 * Perimeter.
 * Structure is documented below.
 */
public data class ServicePerimeterSpecArgs(
    public val accessLevels: Output>? = null,
    public val egressPolicies: Output>? = null,
    public val ingressPolicies: Output>? = null,
    public val resources: Output>? = null,
    public val restrictedServices: Output>? = null,
    public val vpcAccessibleServices: Output? = null,
) : ConvertibleToJava {
    override fun toJava(): com.pulumi.gcp.accesscontextmanager.inputs.ServicePerimeterSpecArgs =
        com.pulumi.gcp.accesscontextmanager.inputs.ServicePerimeterSpecArgs.builder()
            .accessLevels(accessLevels?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
            .egressPolicies(
                egressPolicies?.applyValue({ args0 ->
                    args0.map({ args0 ->
                        args0.let({ args0 ->
                            args0.toJava()
                        })
                    })
                }),
            )
            .ingressPolicies(
                ingressPolicies?.applyValue({ args0 ->
                    args0.map({ args0 ->
                        args0.let({ args0 ->
                            args0.toJava()
                        })
                    })
                }),
            )
            .resources(resources?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
            .restrictedServices(restrictedServices?.applyValue({ args0 -> args0.map({ args0 -> args0 }) }))
            .vpcAccessibleServices(
                vpcAccessibleServices?.applyValue({ args0 ->
                    args0.let({ args0 ->
                        args0.toJava()
                    })
                }),
            ).build()
}

/**
 * Builder for [ServicePerimeterSpecArgs].
 */
@PulumiTagMarker
public class ServicePerimeterSpecArgsBuilder internal constructor() {
    private var accessLevels: Output>? = null

    private var egressPolicies: Output>? = null

    private var ingressPolicies: Output>? = null

    private var resources: Output>? = null

    private var restrictedServices: Output>? = null

    private var vpcAccessibleServices: Output? = null

    /**
     * @param value A list of AccessLevel resource names that allow resources within
     * the ServicePerimeter to be accessed from the internet.
     * AccessLevels listed must be in the same policy as this
     * ServicePerimeter. Referencing a nonexistent AccessLevel is a
     * syntax error. If no AccessLevel names are listed, resources within
     * the perimeter can only be accessed via GCP calls with request
     * origins within the perimeter. For Service Perimeter Bridge, must
     * be empty.
     * Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
     */
    @JvmName("mrhpfpmaxkkyuhpf")
    public suspend fun accessLevels(`value`: Output>) {
        this.accessLevels = value
    }

    @JvmName("rhneohpbxopdjfin")
    public suspend fun accessLevels(vararg values: Output) {
        this.accessLevels = Output.all(values.asList())
    }

    /**
     * @param values A list of AccessLevel resource names that allow resources within
     * the ServicePerimeter to be accessed from the internet.
     * AccessLevels listed must be in the same policy as this
     * ServicePerimeter. Referencing a nonexistent AccessLevel is a
     * syntax error. If no AccessLevel names are listed, resources within
     * the perimeter can only be accessed via GCP calls with request
     * origins within the perimeter. For Service Perimeter Bridge, must
     * be empty.
     * Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
     */
    @JvmName("lxwhnpepbqgmcnhy")
    public suspend fun accessLevels(values: List>) {
        this.accessLevels = Output.all(values)
    }

    /**
     * @param value List of EgressPolicies to apply to the perimeter. A perimeter may
     * have multiple EgressPolicies, each of which is evaluated separately.
     * Access is granted if any EgressPolicy grants it. Must be empty for
     * a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("wgjujanfkjxgvvmw")
    public suspend fun egressPolicies(`value`: Output>) {
        this.egressPolicies = value
    }

    @JvmName("kultmwpkomjixqmf")
    public suspend fun egressPolicies(vararg values: Output) {
        this.egressPolicies = Output.all(values.asList())
    }

    /**
     * @param values List of EgressPolicies to apply to the perimeter. A perimeter may
     * have multiple EgressPolicies, each of which is evaluated separately.
     * Access is granted if any EgressPolicy grants it. Must be empty for
     * a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("btoirqdsqhlxlfqr")
    public suspend fun egressPolicies(values: List>) {
        this.egressPolicies = Output.all(values)
    }

    /**
     * @param value List of `IngressPolicies` to apply to the perimeter. A perimeter may
     * have multiple `IngressPolicies`, each of which is evaluated
     * separately. Access is granted if any `Ingress Policy` grants it.
     * Must be empty for a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("kfxamvpdooudffif")
    public suspend fun ingressPolicies(`value`: Output>) {
        this.ingressPolicies = value
    }

    @JvmName("sfceudjgrcactnkc")
    public suspend fun ingressPolicies(vararg values: Output) {
        this.ingressPolicies = Output.all(values.asList())
    }

    /**
     * @param values List of `IngressPolicies` to apply to the perimeter. A perimeter may
     * have multiple `IngressPolicies`, each of which is evaluated
     * separately. Access is granted if any `Ingress Policy` grants it.
     * Must be empty for a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("fdmxaxrtltxbmwst")
    public suspend fun ingressPolicies(values: List>) {
        this.ingressPolicies = Output.all(values)
    }

    /**
     * @param value A list of GCP resources that are inside of the service perimeter.
     * Currently only projects are allowed.
     * Format: projects/{project_number}
     */
    @JvmName("effojnljabyyqdwl")
    public suspend fun resources(`value`: Output>) {
        this.resources = value
    }

    @JvmName("totbdvvegdsfbiaq")
    public suspend fun resources(vararg values: Output) {
        this.resources = Output.all(values.asList())
    }

    /**
     * @param values A list of GCP resources that are inside of the service perimeter.
     * Currently only projects are allowed.
     * Format: projects/{project_number}
     */
    @JvmName("rohfysmkvvrlcoxt")
    public suspend fun resources(values: List>) {
        this.resources = Output.all(values)
    }

    /**
     * @param value GCP services that are subject to the Service Perimeter
     * restrictions. Must contain a list of services. For example, if
     * `storage.googleapis.com` is specified, access to the storage
     * buckets inside the perimeter must meet the perimeter's access
     * restrictions.
     */
    @JvmName("kylkqyppnvpwqqhd")
    public suspend fun restrictedServices(`value`: Output>) {
        this.restrictedServices = value
    }

    @JvmName("ckjqjuhsunakphvs")
    public suspend fun restrictedServices(vararg values: Output) {
        this.restrictedServices = Output.all(values.asList())
    }

    /**
     * @param values GCP services that are subject to the Service Perimeter
     * restrictions. Must contain a list of services. For example, if
     * `storage.googleapis.com` is specified, access to the storage
     * buckets inside the perimeter must meet the perimeter's access
     * restrictions.
     */
    @JvmName("oqxtfvawmqvfdbws")
    public suspend fun restrictedServices(values: List>) {
        this.restrictedServices = Output.all(values)
    }

    /**
     * @param value Specifies how APIs are allowed to communicate within the Service
     * Perimeter.
     * Structure is documented below.
     */
    @JvmName("xmwqmkmwuiekchwj")
    public suspend fun vpcAccessibleServices(`value`: Output) {
        this.vpcAccessibleServices = value
    }

    /**
     * @param value A list of AccessLevel resource names that allow resources within
     * the ServicePerimeter to be accessed from the internet.
     * AccessLevels listed must be in the same policy as this
     * ServicePerimeter. Referencing a nonexistent AccessLevel is a
     * syntax error. If no AccessLevel names are listed, resources within
     * the perimeter can only be accessed via GCP calls with request
     * origins within the perimeter. For Service Perimeter Bridge, must
     * be empty.
     * Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
     */
    @JvmName("yyverjexaikqkdpk")
    public suspend fun accessLevels(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.accessLevels = mapped
    }

    /**
     * @param values A list of AccessLevel resource names that allow resources within
     * the ServicePerimeter to be accessed from the internet.
     * AccessLevels listed must be in the same policy as this
     * ServicePerimeter. Referencing a nonexistent AccessLevel is a
     * syntax error. If no AccessLevel names are listed, resources within
     * the perimeter can only be accessed via GCP calls with request
     * origins within the perimeter. For Service Perimeter Bridge, must
     * be empty.
     * Format: accessPolicies/{policy_id}/accessLevels/{access_level_name}
     */
    @JvmName("rxxpvjjcjnjvblap")
    public suspend fun accessLevels(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.accessLevels = mapped
    }

    /**
     * @param value List of EgressPolicies to apply to the perimeter. A perimeter may
     * have multiple EgressPolicies, each of which is evaluated separately.
     * Access is granted if any EgressPolicy grants it. Must be empty for
     * a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("wgolrxiccjalpvfj")
    public suspend fun egressPolicies(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.egressPolicies = mapped
    }

    /**
     * @param argument List of EgressPolicies to apply to the perimeter. A perimeter may
     * have multiple EgressPolicies, each of which is evaluated separately.
     * Access is granted if any EgressPolicy grants it. Must be empty for
     * a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("rxhulgkniurmnynv")
    public suspend fun egressPolicies(argument: List Unit>) {
        val toBeMapped = argument.toList().map {
            ServicePerimeterSpecEgressPolicyArgsBuilder().applySuspend { it() }.build()
        }
        val mapped = of(toBeMapped)
        this.egressPolicies = mapped
    }

    /**
     * @param argument List of EgressPolicies to apply to the perimeter. A perimeter may
     * have multiple EgressPolicies, each of which is evaluated separately.
     * Access is granted if any EgressPolicy grants it. Must be empty for
     * a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("krohbksghlvvignr")
    public suspend fun egressPolicies(vararg argument: suspend ServicePerimeterSpecEgressPolicyArgsBuilder.() -> Unit) {
        val toBeMapped = argument.toList().map {
            ServicePerimeterSpecEgressPolicyArgsBuilder().applySuspend { it() }.build()
        }
        val mapped = of(toBeMapped)
        this.egressPolicies = mapped
    }

    /**
     * @param argument List of EgressPolicies to apply to the perimeter. A perimeter may
     * have multiple EgressPolicies, each of which is evaluated separately.
     * Access is granted if any EgressPolicy grants it. Must be empty for
     * a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("vaxsilrtrfduoomn")
    public suspend fun egressPolicies(argument: suspend ServicePerimeterSpecEgressPolicyArgsBuilder.() -> Unit) {
        val toBeMapped = listOf(
            ServicePerimeterSpecEgressPolicyArgsBuilder().applySuspend {
                argument()
            }.build(),
        )
        val mapped = of(toBeMapped)
        this.egressPolicies = mapped
    }

    /**
     * @param values List of EgressPolicies to apply to the perimeter. A perimeter may
     * have multiple EgressPolicies, each of which is evaluated separately.
     * Access is granted if any EgressPolicy grants it. Must be empty for
     * a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("uodfqdpnxgdoeeka")
    public suspend fun egressPolicies(vararg values: ServicePerimeterSpecEgressPolicyArgs) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.egressPolicies = mapped
    }

    /**
     * @param value List of `IngressPolicies` to apply to the perimeter. A perimeter may
     * have multiple `IngressPolicies`, each of which is evaluated
     * separately. Access is granted if any `Ingress Policy` grants it.
     * Must be empty for a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("xsddiffqmdtkqplr")
    public suspend fun ingressPolicies(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.ingressPolicies = mapped
    }

    /**
     * @param argument List of `IngressPolicies` to apply to the perimeter. A perimeter may
     * have multiple `IngressPolicies`, each of which is evaluated
     * separately. Access is granted if any `Ingress Policy` grants it.
     * Must be empty for a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("mfurkasrnwmkuiwc")
    public suspend fun ingressPolicies(argument: List Unit>) {
        val toBeMapped = argument.toList().map {
            ServicePerimeterSpecIngressPolicyArgsBuilder().applySuspend { it() }.build()
        }
        val mapped = of(toBeMapped)
        this.ingressPolicies = mapped
    }

    /**
     * @param argument List of `IngressPolicies` to apply to the perimeter. A perimeter may
     * have multiple `IngressPolicies`, each of which is evaluated
     * separately. Access is granted if any `Ingress Policy` grants it.
     * Must be empty for a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("vhpfofudfxdyqpmk")
    public suspend fun ingressPolicies(vararg argument: suspend ServicePerimeterSpecIngressPolicyArgsBuilder.() -> Unit) {
        val toBeMapped = argument.toList().map {
            ServicePerimeterSpecIngressPolicyArgsBuilder().applySuspend { it() }.build()
        }
        val mapped = of(toBeMapped)
        this.ingressPolicies = mapped
    }

    /**
     * @param argument List of `IngressPolicies` to apply to the perimeter. A perimeter may
     * have multiple `IngressPolicies`, each of which is evaluated
     * separately. Access is granted if any `Ingress Policy` grants it.
     * Must be empty for a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("meawfkxvirkeejnx")
    public suspend fun ingressPolicies(argument: suspend ServicePerimeterSpecIngressPolicyArgsBuilder.() -> Unit) {
        val toBeMapped = listOf(
            ServicePerimeterSpecIngressPolicyArgsBuilder().applySuspend {
                argument()
            }.build(),
        )
        val mapped = of(toBeMapped)
        this.ingressPolicies = mapped
    }

    /**
     * @param values List of `IngressPolicies` to apply to the perimeter. A perimeter may
     * have multiple `IngressPolicies`, each of which is evaluated
     * separately. Access is granted if any `Ingress Policy` grants it.
     * Must be empty for a perimeter bridge.
     * Structure is documented below.
     */
    @JvmName("yewhsmbgxdtbnmrx")
    public suspend fun ingressPolicies(vararg values: ServicePerimeterSpecIngressPolicyArgs) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.ingressPolicies = mapped
    }

    /**
     * @param value A list of GCP resources that are inside of the service perimeter.
     * Currently only projects are allowed.
     * Format: projects/{project_number}
     */
    @JvmName("cwsosctgnmxieqfm")
    public suspend fun resources(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.resources = mapped
    }

    /**
     * @param values A list of GCP resources that are inside of the service perimeter.
     * Currently only projects are allowed.
     * Format: projects/{project_number}
     */
    @JvmName("ujsvtddcbwuqissj")
    public suspend fun resources(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.resources = mapped
    }

    /**
     * @param value GCP services that are subject to the Service Perimeter
     * restrictions. Must contain a list of services. For example, if
     * `storage.googleapis.com` is specified, access to the storage
     * buckets inside the perimeter must meet the perimeter's access
     * restrictions.
     */
    @JvmName("cbsjharfwydlwrro")
    public suspend fun restrictedServices(`value`: List?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.restrictedServices = mapped
    }

    /**
     * @param values GCP services that are subject to the Service Perimeter
     * restrictions. Must contain a list of services. For example, if
     * `storage.googleapis.com` is specified, access to the storage
     * buckets inside the perimeter must meet the perimeter's access
     * restrictions.
     */
    @JvmName("tejcuwyauuusnwar")
    public suspend fun restrictedServices(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> of(args0) })
        this.restrictedServices = mapped
    }

    /**
     * @param value Specifies how APIs are allowed to communicate within the Service
     * Perimeter.
     * Structure is documented below.
     */
    @JvmName("gihbxhnhljtgdcnv")
    public suspend fun vpcAccessibleServices(`value`: ServicePerimeterSpecVpcAccessibleServicesArgs?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.vpcAccessibleServices = mapped
    }

    /**
     * @param argument Specifies how APIs are allowed to communicate within the Service
     * Perimeter.
     * Structure is documented below.
     */
    @JvmName("oewvovueaipxhbng")
    public suspend fun vpcAccessibleServices(argument: suspend ServicePerimeterSpecVpcAccessibleServicesArgsBuilder.() -> Unit) {
        val toBeMapped = ServicePerimeterSpecVpcAccessibleServicesArgsBuilder().applySuspend {
            argument()
        }.build()
        val mapped = of(toBeMapped)
        this.vpcAccessibleServices = mapped
    }

    internal fun build(): ServicePerimeterSpecArgs = ServicePerimeterSpecArgs(
        accessLevels = accessLevels,
        egressPolicies = egressPolicies,
        ingressPolicies = ingressPolicies,
        resources = resources,
        restrictedServices = restrictedServices,
        vpcAccessibleServices = vpcAccessibleServices,
    )
}