Condition (Access Context Manager API v1-rev20240102-2.0.0)

java.lang.Object
- java.util.AbstractMap<String,Object>
- - com.google.api.client.util.GenericData
  - - com.google.api.client.json.GenericJson
    - - com.google.api.services.accesscontextmanager.v1.model.Condition

All Implemented Interfaces:

Cloneable, Map<String,Object>
```
public final class Condition
extends com.google.api.client.json.GenericJson
```
A condition necessary for an `AccessLevel` to be granted. The Condition is an AND over its fields. So a Condition is true if: 1) the request IP is from one of the listed subnetworks AND 2) the originating device complies with the listed device policy AND 3) all listed access levels are granted AND 4) the request was sent at a time allowed by the DateTimeRestriction.
This is the Java data model class that specifies how to parse/serialize into the JSON that is transmitted over HTTP when working with the Access Context Manager API. For a detailed explanation see: https://developers.google.com/api-client-library/java/google-http-java-client/json

Author:

Google, Inc.

Nested Class Summary
- Nested classes/interfaces inherited from class com.google.api.client.util.GenericData
  com.google.api.client.util.GenericData.Flags
- Nested classes/interfaces inherited from class java.util.AbstractMap
  AbstractMap.SimpleEntry<K,V>, AbstractMap.SimpleImmutableEntry<K,V>
- Nested classes/interfaces inherited from interface java.util.Map
  Map.Entry<K,V>

Constructor Summary

Constructors
Constructor and Description

Condition()

Constructors
Constructor and Description
`Condition()`

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`Condition`	`clone()`
`DevicePolicy`	`getDevicePolicy()` Device specific restrictions, all restrictions must hold for the Condition to be true.
`List<String>`	`getIpSubnetworks()` CIDR block IP subnetwork specification.
`List<String>`	`getMembers()` The request must be made by one of the provided user or service accounts.
`Boolean`	`getNegate()` Whether to negate the Condition.
`List<String>`	`getRegions()` The request must originate from one of the provided countries/regions.
`List<String>`	`getRequiredAccessLevels()` A list of other access levels defined in the same `Policy`, referenced by resource name.
`List<VpcNetworkSource>`	`getVpcNetworkSources()` The request must originate from one of the provided VPC networks in Google Cloud.
`Condition`	`set(String fieldName, Object value)`
`Condition`	`setDevicePolicy(DevicePolicy devicePolicy)` Device specific restrictions, all restrictions must hold for the Condition to be true.
`Condition`	`setIpSubnetworks(List<String> ipSubnetworks)` CIDR block IP subnetwork specification.
`Condition`	`setMembers(List<String> members)` The request must be made by one of the provided user or service accounts.
`Condition`	`setNegate(Boolean negate)` Whether to negate the Condition.
`Condition`	`setRegions(List<String> regions)` The request must originate from one of the provided countries/regions.
`Condition`	`setRequiredAccessLevels(List<String> requiredAccessLevels)` A list of other access levels defined in the same `Policy`, referenced by resource name.
`Condition`	`setVpcNetworkSources(List<VpcNetworkSource> vpcNetworkSources)` The request must originate from one of the provided VPC networks in Google Cloud.

Methods inherited from class com.google.api.client.json.GenericJson
getFactory, setFactory, toPrettyString, toString

Methods inherited from class com.google.api.client.util.GenericData
entrySet, equals, get, getClassInfo, getUnknownKeys, hashCode, put, putAll, remove, setUnknownKeys

Methods inherited from class java.util.AbstractMap
clear, containsKey, containsValue, isEmpty, keySet, size, values

Methods inherited from class java.lang.Object
finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.util.Map
compute, computeIfAbsent, computeIfPresent, forEach, getOrDefault, merge, putIfAbsent, remove, replace, replace, replaceAll

- Constructor Detail
  - Condition
```
public Condition()
```
- Method Detail
  - getDevicePolicy
```
public DevicePolicy getDevicePolicy()
```
    Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed.
    
    Returns:
    
    value or null for none
  - setDevicePolicy
```
public Condition setDevicePolicy(DevicePolicy devicePolicy)
```
    Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed.
    
    Parameters:
    
    devicePolicy - devicePolicy or null for none
  - getIpSubnetworks
```
public List<String> getIpSubnetworks()
```
    CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
    
    Returns:
    
    value or null for none
  - setIpSubnetworks
```
public Condition setIpSubnetworks(List<String> ipSubnetworks)
```
    CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
    
    Parameters:
    
    ipSubnetworks - ipSubnetworks or null for none
  - getMembers
```
public List<String> getMembers()
```
    The request must be made by one of the provided user or service accounts. Groups are not supported. Syntax: `user:{emailid}` `serviceAccount:{emailid}` If not specified, a request may come from any user.
    
    Returns:
    
    value or null for none
  - setMembers
```
public Condition setMembers(List<String> members)
```
    The request must be made by one of the provided user or service accounts. Groups are not supported. Syntax: `user:{emailid}` `serviceAccount:{emailid}` If not specified, a request may come from any user.
    
    Parameters:
    
    members - members or null for none
  - getNegate
```
public Boolean getNegate()
```
    Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields. Any non-empty field criteria evaluating to false will result in the Condition to be satisfied. Defaults to false.
    
    Returns:
    
    value or null for none
  - setNegate
```
public Condition setNegate(Boolean negate)
```
    Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields. Any non-empty field criteria evaluating to false will result in the Condition to be satisfied. Defaults to false.
    
    Parameters:
    
    negate - negate or null for none
  - getRegions
```
public List<String> getRegions()
```
    The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes.
    
    Returns:
    
    value or null for none
  - setRegions
```
public Condition setRegions(List<String> regions)
```
    The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes.
    
    Parameters:
    
    regions - regions or null for none
  - getRequiredAccessLevels
```
public List<String> getRequiredAccessLevels()
```
    A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
    
    Returns:
    
    value or null for none
  - setRequiredAccessLevels
```
public Condition setRequiredAccessLevels(List<String> requiredAccessLevels)
```
    A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
    
    Parameters:
    
    requiredAccessLevels - requiredAccessLevels or null for none
  - getVpcNetworkSources
```
public List<VpcNetworkSource> getVpcNetworkSources()
```
    The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ip_subnetworks`.
    
    Returns:
    
    value or null for none
  - setVpcNetworkSources
```
public Condition setVpcNetworkSources(List<VpcNetworkSource> vpcNetworkSources)
```
    The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ip_subnetworks`.
    
    Parameters:
    
    vpcNetworkSources - vpcNetworkSources or null for none
  - set
```
public Condition set(String fieldName,
                     Object value)
```
    Overrides:
    
    set in class com.google.api.client.json.GenericJson
  - clone
```
public Condition clone()
```
    Overrides:
    
    clone in class com.google.api.client.json.GenericJson

Class Condition

Nested Class Summary

Nested classes/interfaces inherited from class com.google.api.client.util.GenericData

Nested classes/interfaces inherited from class java.util.AbstractMap

Nested classes/interfaces inherited from interface java.util.Map

Constructor Summary

Method Summary

Methods inherited from class com.google.api.client.json.GenericJson

Methods inherited from class com.google.api.client.util.GenericData

Methods inherited from class java.util.AbstractMap

Methods inherited from class java.lang.Object

Methods inherited from interface java.util.Map

Constructor Detail

Condition

Method Detail

getDevicePolicy

setDevicePolicy

getIpSubnetworks

setIpSubnetworks

getMembers

setMembers

getNegate

setNegate

getRegions

setRegions

getRequiredAccessLevels

setRequiredAccessLevels

getVpcNetworkSources

setVpcNetworkSources

set

clone