com.google.api.services.accesscontextmanager.v1.model

Class EgressTo

java.lang.Object

java.util.AbstractMap<String,Object>

com.google.api.client.util.GenericData

com.google.api.client.json.GenericJson

com.google.api.services.accesscontextmanager.v1.model.EgressTo

All Implemented Interfaces:

Cloneable, Map<String,Object>

public final class EgressTo
extends com.google.api.client.json.GenericJson

Defines the conditions under which an EgressPolicy matches a request. Conditions are based on information about the ApiOperation intended to be performed on the `resources` specified. Note that if the destination of the request is also protected by a ServicePerimeter, then that ServicePerimeter must have an IngressPolicy which allows access in order for this request to succeed. The request must match `operations` AND `resources` fields in order to be allowed egress out of the perimeter.

This is the Java data model class that specifies how to parse/serialize into the JSON that is transmitted over HTTP when working with the Access Context Manager API. For a detailed explanation see: https://developers.google.com/api-client-library/java/google-http-java-client/json

Author:

Google, Inc.

Nested Class Summary

Nested classes/interfaces inherited from class com.google.api.client.util.GenericData

com.google.api.client.util.GenericData.Flags

Nested classes/interfaces inherited from class java.util.AbstractMap

AbstractMap.SimpleEntry<K,V>, AbstractMap.SimpleImmutableEntry<K,V>

Nested classes/interfaces inherited from interface java.util.Map

Map.Entry<K,V>

Constructor Summary

Constructors

Constructor and Description
EgressTo()

Method Summary

Modifier and Type	Method and Description
EgressTo	clone()
List<String>	getExternalResources() A list of external resources that are allowed to be accessed.
List<ApiOperation>	getOperations() A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom.
List<String>	getResources() A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom.
EgressTo	set(String fieldName, Object value)
EgressTo	setExternalResources(List<String> externalResources) A list of external resources that are allowed to be accessed.
EgressTo	setOperations(List<ApiOperation> operations) A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom.
EgressTo	setResources(List<String> resources) A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom.

Methods inherited from class com.google.api.client.json.GenericJson

getFactory, setFactory, toPrettyString, toString

Methods inherited from class com.google.api.client.util.GenericData

entrySet, equals, get, getClassInfo, getUnknownKeys, hashCode, put, putAll, remove, setUnknownKeys

Methods inherited from class java.util.AbstractMap

clear, containsKey, containsValue, isEmpty, keySet, size, values

Methods inherited from class java.lang.Object

finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.util.Map

compute, computeIfAbsent, computeIfPresent, forEach, getOrDefault, merge, putIfAbsent, remove, replace, replace, replaceAll

Constructor Detail

EgressTo

public EgressTo()

Method Detail

getExternalResources

public List<String> getExternalResources()

A list of external resources that are allowed to be accessed. Only AWS and Azure resources are supported. For Amazon S3, the supported format is s3://BUCKET_NAME. For Azure Storage, the supported format is azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

Returns:

value or null for none

setExternalResources

public EgressTo setExternalResources(List<String> externalResources)

A list of external resources that are allowed to be accessed. Only AWS and Azure resources are supported. For Amazon S3, the supported format is s3://BUCKET_NAME. For Azure Storage, the supported format is azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed.

Parameters:

externalResources - externalResources or null for none

getOperations

public List<ApiOperation> getOperations()

A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom. A request matches if it uses an operation/service in this list.

Returns:

value or null for none

setOperations

public EgressTo setOperations(List<ApiOperation> operations)

A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom. A request matches if it uses an operation/service in this list.

Parameters:

operations - operations or null for none

getResources

public List<String> getResources()

A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.

Returns:

value or null for none

setResources

public EgressTo setResources(List<String> resources)

A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.

Parameters:

resources - resources or null for none

set

public EgressTo set(String fieldName,
                    Object value)

Overrides:

set in class com.google.api.client.json.GenericJson

clone

public EgressTo clone()

Overrides:

clone in class com.google.api.client.json.GenericJson