Docs Home
Google Cloud v8.32.0 published on Wednesday, May 21, 2025 by Pulumi
gcp.accesscontextmanager.AccessLevels
Explore with Pulumi AI
Example Usage
Access Context Manager Access Levels Basic
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const access_policy = new gcp.accesscontextmanager.AccessPolicy("access-policy", {
parent: "organizations/123456789",
title: "my policy",
});
const access_levels = new gcp.accesscontextmanager.AccessLevels("access-levels", {
parent: pulumi.interpolate`accessPolicies/${access_policy.name}`,
accessLevels: [
{
name: pulumi.interpolate`accessPolicies/${access_policy.name}/accessLevels/chromeos_no_lock`,
title: "chromeos_no_lock",
basic: {
conditions: [{
devicePolicy: {
requireScreenLock: true,
osConstraints: [{
osType: "DESKTOP_CHROME_OS",
}],
},
regions: [
"CH",
"IT",
"US",
],
}],
},
},
{
name: pulumi.interpolate`accessPolicies/${access_policy.name}/accessLevels/mac_no_lock`,
title: "mac_no_lock",
basic: {
conditions: [{
devicePolicy: {
requireScreenLock: true,
osConstraints: [{
osType: "DESKTOP_MAC",
}],
},
regions: [
"CH",
"IT",
"US",
],
}],
},
},
],
});
import pulumi
import pulumi_gcp as gcp
access_policy = gcp.accesscontextmanager.AccessPolicy("access-policy",
parent="organizations/123456789",
title="my policy")
access_levels = gcp.accesscontextmanager.AccessLevels("access-levels",
parent=access_policy.name.apply(lambda name: f"accessPolicies/{name}"),
access_levels=[
{
"name": access_policy.name.apply(lambda name: f"accessPolicies/{name}/accessLevels/chromeos_no_lock"),
"title": "chromeos_no_lock",
"basic": {
"conditions": [{
"device_policy": {
"require_screen_lock": True,
"os_constraints": [{
"os_type": "DESKTOP_CHROME_OS",
}],
},
"regions": [
"CH",
"IT",
"US",
],
}],
},
},
{
"name": access_policy.name.apply(lambda name: f"accessPolicies/{name}/accessLevels/mac_no_lock"),
"title": "mac_no_lock",
"basic": {
"conditions": [{
"device_policy": {
"require_screen_lock": True,
"os_constraints": [{
"os_type": "DESKTOP_MAC",
}],
},
"regions": [
"CH",
"IT",
"US",
],
}],
},
},
])
package main
import (
"fmt"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
access_policy, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
Parent: pulumi.String("organizations/123456789"),
Title: pulumi.String("my policy"),
})
if err != nil {
return err
}
_, err = accesscontextmanager.NewAccessLevels(ctx, "access-levels", &accesscontextmanager.AccessLevelsArgs{
Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
return fmt.Sprintf("accessPolicies/%v", name), nil
}).(pulumi.StringOutput),
AccessLevels: accesscontextmanager.AccessLevelsAccessLevelArray{
&accesscontextmanager.AccessLevelsAccessLevelArgs{
Name: access_policy.Name.ApplyT(func(name string) (string, error) {
return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
}).(pulumi.StringOutput),
Title: pulumi.String("chromeos_no_lock"),
Basic: &accesscontextmanager.AccessLevelsAccessLevelBasicArgs{
Conditions: accesscontextmanager.AccessLevelsAccessLevelBasicConditionArray{
&accesscontextmanager.AccessLevelsAccessLevelBasicConditionArgs{
DevicePolicy: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{
RequireScreenLock: pulumi.Bool(true),
OsConstraints: accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{
&accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{
OsType: pulumi.String("DESKTOP_CHROME_OS"),
},
},
},
Regions: pulumi.StringArray{
pulumi.String("CH"),
pulumi.String("IT"),
pulumi.String("US"),
},
},
},
},
},
&accesscontextmanager.AccessLevelsAccessLevelArgs{
Name: access_policy.Name.ApplyT(func(name string) (string, error) {
return fmt.Sprintf("accessPolicies/%v/accessLevels/mac_no_lock", name), nil
}).(pulumi.StringOutput),
Title: pulumi.String("mac_no_lock"),
Basic: &accesscontextmanager.AccessLevelsAccessLevelBasicArgs{
Conditions: accesscontextmanager.AccessLevelsAccessLevelBasicConditionArray{
&accesscontextmanager.AccessLevelsAccessLevelBasicConditionArgs{
DevicePolicy: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{
RequireScreenLock: pulumi.Bool(true),
OsConstraints: accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{
&accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{
OsType: pulumi.String("DESKTOP_MAC"),
},
},
},
Regions: pulumi.StringArray{
pulumi.String("CH"),
pulumi.String("IT"),
pulumi.String("US"),
},
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var access_policy = new Gcp.AccessContextManager.AccessPolicy("access-policy", new()
{
Parent = "organizations/123456789",
Title = "my policy",
});
var access_levels = new Gcp.AccessContextManager.AccessLevels("access-levels", new()
{
Parent = access_policy.Name.Apply(name => $"accessPolicies/{name}"),
AccessLevelDetails = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelArgs
{
Name = access_policy.Name.Apply(name => $"accessPolicies/{name}/accessLevels/chromeos_no_lock"),
Title = "chromeos_no_lock",
Basic = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicArgs
{
Conditions = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionArgs
{
DevicePolicy = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs
{
RequireScreenLock = true,
OsConstraints = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs
{
OsType = "DESKTOP_CHROME_OS",
},
},
},
Regions = new[]
{
"CH",
"IT",
"US",
},
},
},
},
},
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelArgs
{
Name = access_policy.Name.Apply(name => $"accessPolicies/{name}/accessLevels/mac_no_lock"),
Title = "mac_no_lock",
Basic = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicArgs
{
Conditions = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionArgs
{
DevicePolicy = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs
{
RequireScreenLock = true,
OsConstraints = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs
{
OsType = "DESKTOP_MAC",
},
},
},
Regions = new[]
{
"CH",
"IT",
"US",
},
},
},
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.accesscontextmanager.AccessPolicy;
import com.pulumi.gcp.accesscontextmanager.AccessPolicyArgs;
import com.pulumi.gcp.accesscontextmanager.AccessLevels;
import com.pulumi.gcp.accesscontextmanager.AccessLevelsArgs;
import com.pulumi.gcp.accesscontextmanager.inputs.AccessLevelsAccessLevelArgs;
import com.pulumi.gcp.accesscontextmanager.inputs.AccessLevelsAccessLevelBasicArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var access_policy = new AccessPolicy("access-policy", AccessPolicyArgs.builder()
.parent("organizations/123456789")
.title("my policy")
.build());
var access_levels = new AccessLevels("access-levels", AccessLevelsArgs.builder()
.parent(access_policy.name().applyValue(_name -> String.format("accessPolicies/%s", _name)))
.accessLevels(
AccessLevelsAccessLevelArgs.builder()
.name(access_policy.name().applyValue(_name -> String.format("accessPolicies/%s/accessLevels/chromeos_no_lock", _name)))
.title("chromeos_no_lock")
.basic(AccessLevelsAccessLevelBasicArgs.builder()
.conditions(AccessLevelsAccessLevelBasicConditionArgs.builder()
.devicePolicy(AccessLevelsAccessLevelBasicConditionDevicePolicyArgs.builder()
.requireScreenLock(true)
.osConstraints(AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs.builder()
.osType("DESKTOP_CHROME_OS")
.build())
.build())
.regions(
"CH",
"IT",
"US")
.build())
.build())
.build(),
AccessLevelsAccessLevelArgs.builder()
.name(access_policy.name().applyValue(_name -> String.format("accessPolicies/%s/accessLevels/mac_no_lock", _name)))
.title("mac_no_lock")
.basic(AccessLevelsAccessLevelBasicArgs.builder()
.conditions(AccessLevelsAccessLevelBasicConditionArgs.builder()
.devicePolicy(AccessLevelsAccessLevelBasicConditionDevicePolicyArgs.builder()
.requireScreenLock(true)
.osConstraints(AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs.builder()
.osType("DESKTOP_MAC")
.build())
.build())
.regions(
"CH",
"IT",
"US")
.build())
.build())
.build())
.build());
}
}
resources:
access-levels:
type: gcp:accesscontextmanager:AccessLevels
properties:
parent: accessPolicies/${["access-policy"].name}
accessLevels:
- name: accessPolicies/${["access-policy"].name}/accessLevels/chromeos_no_lock
title: chromeos_no_lock
basic:
conditions:
- devicePolicy:
requireScreenLock: true
osConstraints:
- osType: DESKTOP_CHROME_OS
regions:
- CH
- IT
- US
- name: accessPolicies/${["access-policy"].name}/accessLevels/mac_no_lock
title: mac_no_lock
basic:
conditions:
- devicePolicy:
requireScreenLock: true
osConstraints:
- osType: DESKTOP_MAC
regions:
- CH
- IT
- US
access-policy:
type: gcp:accesscontextmanager:AccessPolicy
properties:
parent: organizations/123456789
title: my policy
Create AccessLevels Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AccessLevels(name: string, args: AccessLevelsArgs, opts?: CustomResourceOptions);@overload
def AccessLevels(resource_name: str,
args: AccessLevelsArgs,
opts: Optional[ResourceOptions] = None)
@overload
def AccessLevels(resource_name: str,
opts: Optional[ResourceOptions] = None,
parent: Optional[str] = None,
access_levels: Optional[Sequence[AccessLevelsAccessLevelArgs]] = None)func NewAccessLevels(ctx *Context, name string, args AccessLevelsArgs, opts ...ResourceOption) (*AccessLevels, error)public AccessLevels(string name, AccessLevelsArgs args, CustomResourceOptions? opts = null)
public AccessLevels(String name, AccessLevelsArgs args)
public AccessLevels(String name, AccessLevelsArgs args, CustomResourceOptions options)
type: gcp:accesscontextmanager:AccessLevels
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args AccessLevelsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AccessLevelsArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AccessLevelsArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AccessLevelsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AccessLevelsArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var accessLevelsResource = new Gcp.AccessContextManager.AccessLevels("accessLevelsResource", new()
{
Parent = "string",
AccessLevelDetails = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelArgs
{
Name = "string",
Title = "string",
Basic = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicArgs
{
Conditions = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionArgs
{
DevicePolicy = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs
{
AllowedDeviceManagementLevels = new[]
{
"string",
},
AllowedEncryptionStatuses = new[]
{
"string",
},
OsConstraints = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs
{
OsType = "string",
MinimumVersion = "string",
},
},
RequireAdminApproval = false,
RequireCorpOwned = false,
RequireScreenLock = false,
},
IpSubnetworks = new[]
{
"string",
},
Members = new[]
{
"string",
},
Negate = false,
Regions = new[]
{
"string",
},
RequiredAccessLevels = new[]
{
"string",
},
VpcNetworkSources = new[]
{
new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs
{
VpcSubnetwork = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs
{
Network = "string",
VpcIpSubnetworks = new[]
{
"string",
},
},
},
},
},
},
CombiningFunction = "string",
},
Custom = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelCustomArgs
{
Expr = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelCustomExprArgs
{
Expression = "string",
Description = "string",
Location = "string",
Title = "string",
},
},
Description = "string",
},
},
});
example, err := accesscontextmanager.NewAccessLevels(ctx, "accessLevelsResource", &accesscontextmanager.AccessLevelsArgs{
Parent: pulumi.String("string"),
AccessLevels: accesscontextmanager.AccessLevelsAccessLevelArray{
&accesscontextmanager.AccessLevelsAccessLevelArgs{
Name: pulumi.String("string"),
Title: pulumi.String("string"),
Basic: &accesscontextmanager.AccessLevelsAccessLevelBasicArgs{
Conditions: accesscontextmanager.AccessLevelsAccessLevelBasicConditionArray{
&accesscontextmanager.AccessLevelsAccessLevelBasicConditionArgs{
DevicePolicy: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{
AllowedDeviceManagementLevels: pulumi.StringArray{
pulumi.String("string"),
},
AllowedEncryptionStatuses: pulumi.StringArray{
pulumi.String("string"),
},
OsConstraints: accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{
&accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{
OsType: pulumi.String("string"),
MinimumVersion: pulumi.String("string"),
},
},
RequireAdminApproval: pulumi.Bool(false),
RequireCorpOwned: pulumi.Bool(false),
RequireScreenLock: pulumi.Bool(false),
},
IpSubnetworks: pulumi.StringArray{
pulumi.String("string"),
},
Members: pulumi.StringArray{
pulumi.String("string"),
},
Negate: pulumi.Bool(false),
Regions: pulumi.StringArray{
pulumi.String("string"),
},
RequiredAccessLevels: pulumi.StringArray{
pulumi.String("string"),
},
VpcNetworkSources: accesscontextmanager.AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArray{
&accesscontextmanager.AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs{
VpcSubnetwork: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs{
Network: pulumi.String("string"),
VpcIpSubnetworks: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
},
CombiningFunction: pulumi.String("string"),
},
Custom: &accesscontextmanager.AccessLevelsAccessLevelCustomArgs{
Expr: &accesscontextmanager.AccessLevelsAccessLevelCustomExprArgs{
Expression: pulumi.String("string"),
Description: pulumi.String("string"),
Location: pulumi.String("string"),
Title: pulumi.String("string"),
},
},
Description: pulumi.String("string"),
},
},
})
var accessLevelsResource = new AccessLevels("accessLevelsResource", AccessLevelsArgs.builder()
.parent("string")
.accessLevels(AccessLevelsAccessLevelArgs.builder()
.name("string")
.title("string")
.basic(AccessLevelsAccessLevelBasicArgs.builder()
.conditions(AccessLevelsAccessLevelBasicConditionArgs.builder()
.devicePolicy(AccessLevelsAccessLevelBasicConditionDevicePolicyArgs.builder()
.allowedDeviceManagementLevels("string")
.allowedEncryptionStatuses("string")
.osConstraints(AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs.builder()
.osType("string")
.minimumVersion("string")
.build())
.requireAdminApproval(false)
.requireCorpOwned(false)
.requireScreenLock(false)
.build())
.ipSubnetworks("string")
.members("string")
.negate(false)
.regions("string")
.requiredAccessLevels("string")
.vpcNetworkSources(AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs.builder()
.vpcSubnetwork(AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs.builder()
.network("string")
.vpcIpSubnetworks("string")
.build())
.build())
.build())
.combiningFunction("string")
.build())
.custom(AccessLevelsAccessLevelCustomArgs.builder()
.expr(AccessLevelsAccessLevelCustomExprArgs.builder()
.expression("string")
.description("string")
.location("string")
.title("string")
.build())
.build())
.description("string")
.build())
.build());
access_levels_resource = gcp.accesscontextmanager.AccessLevels("accessLevelsResource",
parent="string",
access_levels=[{
"name": "string",
"title": "string",
"basic": {
"conditions": [{
"device_policy": {
"allowed_device_management_levels": ["string"],
"allowed_encryption_statuses": ["string"],
"os_constraints": [{
"os_type": "string",
"minimum_version": "string",
}],
"require_admin_approval": False,
"require_corp_owned": False,
"require_screen_lock": False,
},
"ip_subnetworks": ["string"],
"members": ["string"],
"negate": False,
"regions": ["string"],
"required_access_levels": ["string"],
"vpc_network_sources": [{
"vpc_subnetwork": {
"network": "string",
"vpc_ip_subnetworks": ["string"],
},
}],
}],
"combining_function": "string",
},
"custom": {
"expr": {
"expression": "string",
"description": "string",
"location": "string",
"title": "string",
},
},
"description": "string",
}])
const accessLevelsResource = new gcp.accesscontextmanager.AccessLevels("accessLevelsResource", {
parent: "string",
accessLevels: [{
name: "string",
title: "string",
basic: {
conditions: [{
devicePolicy: {
allowedDeviceManagementLevels: ["string"],
allowedEncryptionStatuses: ["string"],
osConstraints: [{
osType: "string",
minimumVersion: "string",
}],
requireAdminApproval: false,
requireCorpOwned: false,
requireScreenLock: false,
},
ipSubnetworks: ["string"],
members: ["string"],
negate: false,
regions: ["string"],
requiredAccessLevels: ["string"],
vpcNetworkSources: [{
vpcSubnetwork: {
network: "string",
vpcIpSubnetworks: ["string"],
},
}],
}],
combiningFunction: "string",
},
custom: {
expr: {
expression: "string",
description: "string",
location: "string",
title: "string",
},
},
description: "string",
}],
});
type: gcp:accesscontextmanager:AccessLevels
properties:
accessLevels:
- basic:
combiningFunction: string
conditions:
- devicePolicy:
allowedDeviceManagementLevels:
- string
allowedEncryptionStatuses:
- string
osConstraints:
- minimumVersion: string
osType: string
requireAdminApproval: false
requireCorpOwned: false
requireScreenLock: false
ipSubnetworks:
- string
members:
- string
negate: false
regions:
- string
requiredAccessLevels:
- string
vpcNetworkSources:
- vpcSubnetwork:
network: string
vpcIpSubnetworks:
- string
custom:
expr:
description: string
expression: string
location: string
title: string
description: string
name: string
title: string
parent: string
AccessLevels Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The AccessLevels resource accepts the following input properties:
- Parent string
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- Access
Level List<AccessDetails Levels Access Level> - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- Parent string
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- Access
Levels []AccessLevels Access Level Args - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent String
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access
Levels List<AccessLevels Access Level> - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent string
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access
Levels AccessLevels Access Level[] - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent str
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access_
levels Sequence[AccessLevels Access Level Args] - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent String
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access
Levels List<Property Map> - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
Outputs
All input properties are implicitly available as output properties. Additionally, the AccessLevels resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing AccessLevels Resource
Get an existing AccessLevels resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AccessLevelsState, opts?: CustomResourceOptions): AccessLevels@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
access_levels: Optional[Sequence[AccessLevelsAccessLevelArgs]] = None,
parent: Optional[str] = None) -> AccessLevelsfunc GetAccessLevels(ctx *Context, name string, id IDInput, state *AccessLevelsState, opts ...ResourceOption) (*AccessLevels, error)public static AccessLevels Get(string name, Input<string> id, AccessLevelsState? state, CustomResourceOptions? opts = null)public static AccessLevels get(String name, Output<String> id, AccessLevelsState state, CustomResourceOptions options)resources: _: type: gcp:accesscontextmanager:AccessLevels get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Access
Level List<AccessDetails Levels Access Level> - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- Parent string
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- Access
Levels []AccessLevels Access Level Args - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- Parent string
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access
Levels List<AccessLevels Access Level> - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent String
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access
Levels AccessLevels Access Level[] - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent string
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access_
levels Sequence[AccessLevels Access Level Args] - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent str
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
- access
Levels List<Property Map> - The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.
- parent String
- The AccessPolicy this AccessLevel lives in.
Format: accessPolicies/{policy_id}
Supporting Types
AccessLevelsAccessLevel, AccessLevelsAccessLevelArgs
- Name string
- Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- Title string
- Human readable title. Must be unique within the Policy.
- Basic
Access
Levels Access Level Basic - A set of predefined conditions for the access level and a combining function. Structure is documented below.
- Custom
Access
Levels Access Level Custom - Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.
- Description string
- Description of the AccessLevel and its use. Does not affect behavior.
- Name string
- Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- Title string
- Human readable title. Must be unique within the Policy.
- Basic
Access
Levels Access Level Basic - A set of predefined conditions for the access level and a combining function. Structure is documented below.
- Custom
Access
Levels Access Level Custom - Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.
- Description string
- Description of the AccessLevel and its use. Does not affect behavior.
- name String
- Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- title String
- Human readable title. Must be unique within the Policy.
- basic
Access
Levels Access Level Basic - A set of predefined conditions for the access level and a combining function. Structure is documented below.
- custom
Access
Levels Access Level Custom - Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.
- description String
- Description of the AccessLevel and its use. Does not affect behavior.
- name string
- Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- title string
- Human readable title. Must be unique within the Policy.
- basic
Access
Levels Access Level Basic - A set of predefined conditions for the access level and a combining function. Structure is documented below.
- custom
Access
Levels Access Level Custom - Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.
- description string
- Description of the AccessLevel and its use. Does not affect behavior.
- name str
- Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- title str
- Human readable title. Must be unique within the Policy.
- basic
Access
Levels Access Level Basic - A set of predefined conditions for the access level and a combining function. Structure is documented below.
- custom
Access
Levels Access Level Custom - Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.
- description str
- Description of the AccessLevel and its use. Does not affect behavior.
- name String
- Resource name for the Access Level. The short_name component must begin with a letter and only include alphanumeric and '_'. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- title String
- Human readable title. Must be unique within the Policy.
- basic Property Map
- A set of predefined conditions for the access level and a combining function. Structure is documented below.
- custom Property Map
- Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec. Structure is documented below.
- description String
- Description of the AccessLevel and its use. Does not affect behavior.
AccessLevelsAccessLevelBasic, AccessLevelsAccessLevelBasicArgs
- Conditions
List<Access
Levels Access Level Basic Condition> - A set of requirements for the AccessLevel to be granted. Structure is documented below.
- Combining
Function string - How the conditions list should be combined to determine if a request
is granted this AccessLevel. If AND is used, each Condition in
conditions must be satisfied for the AccessLevel to be applied. If
OR is used, at least one Condition in conditions must be satisfied
for the AccessLevel to be applied.
Default value is
AND. Possible values are:AND,OR.
- Conditions
[]Access
Levels Access Level Basic Condition - A set of requirements for the AccessLevel to be granted. Structure is documented below.
- Combining
Function string - How the conditions list should be combined to determine if a request
is granted this AccessLevel. If AND is used, each Condition in
conditions must be satisfied for the AccessLevel to be applied. If
OR is used, at least one Condition in conditions must be satisfied
for the AccessLevel to be applied.
Default value is
AND. Possible values are:AND,OR.
- conditions
List<Access
Levels Access Level Basic Condition> - A set of requirements for the AccessLevel to be granted. Structure is documented below.
- combining
Function String - How the conditions list should be combined to determine if a request
is granted this AccessLevel. If AND is used, each Condition in
conditions must be satisfied for the AccessLevel to be applied. If
OR is used, at least one Condition in conditions must be satisfied
for the AccessLevel to be applied.
Default value is
AND. Possible values are:AND,OR.
- conditions
Access
Levels Access Level Basic Condition[] - A set of requirements for the AccessLevel to be granted. Structure is documented below.
- combining
Function string - How the conditions list should be combined to determine if a request
is granted this AccessLevel. If AND is used, each Condition in
conditions must be satisfied for the AccessLevel to be applied. If
OR is used, at least one Condition in conditions must be satisfied
for the AccessLevel to be applied.
Default value is
AND. Possible values are:AND,OR.
- conditions
Sequence[Access
Levels Access Level Basic Condition] - A set of requirements for the AccessLevel to be granted. Structure is documented below.
- combining_
function str - How the conditions list should be combined to determine if a request
is granted this AccessLevel. If AND is used, each Condition in
conditions must be satisfied for the AccessLevel to be applied. If
OR is used, at least one Condition in conditions must be satisfied
for the AccessLevel to be applied.
Default value is
AND. Possible values are:AND,OR.
- conditions List<Property Map>
- A set of requirements for the AccessLevel to be granted. Structure is documented below.
- combining
Function String - How the conditions list should be combined to determine if a request
is granted this AccessLevel. If AND is used, each Condition in
conditions must be satisfied for the AccessLevel to be applied. If
OR is used, at least one Condition in conditions must be satisfied
for the AccessLevel to be applied.
Default value is
AND. Possible values are:AND,OR.
AccessLevelsAccessLevelBasicCondition, AccessLevelsAccessLevelBasicConditionArgs
- Device
Policy AccessLevels Access Level Basic Condition Device Policy - Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.
- Ip
Subnetworks List<string> - A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
- Members List<string>
- An allowed list of members (users, service accounts).
Using groups is not supported yet.
The signed-in user originating the request must be a part of one
of the provided members. If not specified, a request may come
from any user (logged in/not logged in, not present in any
groups, etc.).
Formats:
user:{emailid},serviceAccount:{emailid} - Negate bool
- Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
- Regions List<string>
- The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.
- Required
Access List<string>Levels - A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- Vpc
Network List<AccessSources Levels Access Level Basic Condition Vpc Network Source> - The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with
ip_subnetworks. Structure is documented below.
- Device
Policy AccessLevels Access Level Basic Condition Device Policy - Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.
- Ip
Subnetworks []string - A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
- Members []string
- An allowed list of members (users, service accounts).
Using groups is not supported yet.
The signed-in user originating the request must be a part of one
of the provided members. If not specified, a request may come
from any user (logged in/not logged in, not present in any
groups, etc.).
Formats:
user:{emailid},serviceAccount:{emailid} - Negate bool
- Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
- Regions []string
- The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.
- Required
Access []stringLevels - A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- Vpc
Network []AccessSources Levels Access Level Basic Condition Vpc Network Source - The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with
ip_subnetworks. Structure is documented below.
- device
Policy AccessLevels Access Level Basic Condition Device Policy - Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.
- ip
Subnetworks List<String> - A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
- members List<String>
- An allowed list of members (users, service accounts).
Using groups is not supported yet.
The signed-in user originating the request must be a part of one
of the provided members. If not specified, a request may come
from any user (logged in/not logged in, not present in any
groups, etc.).
Formats:
user:{emailid},serviceAccount:{emailid} - negate Boolean
- Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
- regions List<String>
- The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.
- required
Access List<String>Levels - A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- vpc
Network List<AccessSources Levels Access Level Basic Condition Vpc Network Source> - The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with
ip_subnetworks. Structure is documented below.
- device
Policy AccessLevels Access Level Basic Condition Device Policy - Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.
- ip
Subnetworks string[] - A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
- members string[]
- An allowed list of members (users, service accounts).
Using groups is not supported yet.
The signed-in user originating the request must be a part of one
of the provided members. If not specified, a request may come
from any user (logged in/not logged in, not present in any
groups, etc.).
Formats:
user:{emailid},serviceAccount:{emailid} - negate boolean
- Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
- regions string[]
- The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.
- required
Access string[]Levels - A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- vpc
Network AccessSources Levels Access Level Basic Condition Vpc Network Source[] - The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with
ip_subnetworks. Structure is documented below.
- device_
policy AccessLevels Access Level Basic Condition Device Policy - Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.
- ip_
subnetworks Sequence[str] - A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
- members Sequence[str]
- An allowed list of members (users, service accounts).
Using groups is not supported yet.
The signed-in user originating the request must be a part of one
of the provided members. If not specified, a request may come
from any user (logged in/not logged in, not present in any
groups, etc.).
Formats:
user:{emailid},serviceAccount:{emailid} - negate bool
- Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
- regions Sequence[str]
- The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.
- required_
access_ Sequence[str]levels - A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- vpc_
network_ Sequence[Accesssources Levels Access Level Basic Condition Vpc Network Source] - The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with
ip_subnetworks. Structure is documented below.
- device
Policy Property Map - Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. Structure is documented below.
- ip
Subnetworks List<String> - A list of CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
- members List<String>
- An allowed list of members (users, service accounts).
Using groups is not supported yet.
The signed-in user originating the request must be a part of one
of the provided members. If not specified, a request may come
from any user (logged in/not logged in, not present in any
groups, etc.).
Formats:
user:{emailid},serviceAccount:{emailid} - negate Boolean
- Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
- regions List<String>
- The request must originate from one of the provided countries/regions. Format: A valid ISO 3166-1 alpha-2 code.
- required
Access List<String>Levels - A list of other access levels defined in the same Policy, referenced by resource name. Referencing an AccessLevel which does not exist is an error. All access levels listed must be granted for the Condition to be true. Format: accessPolicies/{policy_id}/accessLevels/{short_name}
- vpc
Network List<Property Map>Sources - The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with
ip_subnetworks. Structure is documented below.
AccessLevelsAccessLevelBasicConditionDevicePolicy, AccessLevelsAccessLevelBasicConditionDevicePolicyArgs
- Allowed
Device List<string>Management Levels - A list of allowed device management levels.
An empty list allows all management levels.
Each value may be one of:
MANAGEMENT_UNSPECIFIED,NONE,BASIC,COMPLETE. - Allowed
Encryption List<string>Statuses - A list of allowed encryptions statuses.
An empty list allows all statuses.
Each value may be one of:
ENCRYPTION_UNSPECIFIED,ENCRYPTION_UNSUPPORTED,UNENCRYPTED,ENCRYPTED. - Os
Constraints List<AccessLevels Access Level Basic Condition Device Policy Os Constraint> - A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.
- Require
Admin boolApproval - Whether the device needs to be approved by the customer admin.
- Require
Corp boolOwned - Whether the device needs to be corp owned.
- Require
Screen boolLock - Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.
- Allowed
Device []stringManagement Levels - A list of allowed device management levels.
An empty list allows all management levels.
Each value may be one of:
MANAGEMENT_UNSPECIFIED,NONE,BASIC,COMPLETE. - Allowed
Encryption []stringStatuses - A list of allowed encryptions statuses.
An empty list allows all statuses.
Each value may be one of:
ENCRYPTION_UNSPECIFIED,ENCRYPTION_UNSUPPORTED,UNENCRYPTED,ENCRYPTED. - Os
Constraints []AccessLevels Access Level Basic Condition Device Policy Os Constraint - A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.
- Require
Admin boolApproval - Whether the device needs to be approved by the customer admin.
- Require
Corp boolOwned - Whether the device needs to be corp owned.
- Require
Screen boolLock - Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.
- allowed
Device List<String>Management Levels - A list of allowed device management levels.
An empty list allows all management levels.
Each value may be one of:
MANAGEMENT_UNSPECIFIED,NONE,BASIC,COMPLETE. - allowed
Encryption List<String>Statuses - A list of allowed encryptions statuses.
An empty list allows all statuses.
Each value may be one of:
ENCRYPTION_UNSPECIFIED,ENCRYPTION_UNSUPPORTED,UNENCRYPTED,ENCRYPTED. - os
Constraints List<AccessLevels Access Level Basic Condition Device Policy Os Constraint> - A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.
- require
Admin BooleanApproval - Whether the device needs to be approved by the customer admin.
- require
Corp BooleanOwned - Whether the device needs to be corp owned.
- require
Screen BooleanLock - Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.
- allowed
Device string[]Management Levels - A list of allowed device management levels.
An empty list allows all management levels.
Each value may be one of:
MANAGEMENT_UNSPECIFIED,NONE,BASIC,COMPLETE. - allowed
Encryption string[]Statuses - A list of allowed encryptions statuses.
An empty list allows all statuses.
Each value may be one of:
ENCRYPTION_UNSPECIFIED,ENCRYPTION_UNSUPPORTED,UNENCRYPTED,ENCRYPTED. - os
Constraints AccessLevels Access Level Basic Condition Device Policy Os Constraint[] - A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.
- require
Admin booleanApproval - Whether the device needs to be approved by the customer admin.
- require
Corp booleanOwned - Whether the device needs to be corp owned.
- require
Screen booleanLock - Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.
- allowed_
device_ Sequence[str]management_ levels - A list of allowed device management levels.
An empty list allows all management levels.
Each value may be one of:
MANAGEMENT_UNSPECIFIED,NONE,BASIC,COMPLETE. - allowed_
encryption_ Sequence[str]statuses - A list of allowed encryptions statuses.
An empty list allows all statuses.
Each value may be one of:
ENCRYPTION_UNSPECIFIED,ENCRYPTION_UNSUPPORTED,UNENCRYPTED,ENCRYPTED. - os_
constraints Sequence[AccessLevels Access Level Basic Condition Device Policy Os Constraint] - A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.
- require_
admin_ boolapproval - Whether the device needs to be approved by the customer admin.
- require_
corp_ boolowned - Whether the device needs to be corp owned.
- require_
screen_ boollock - Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.
- allowed
Device List<String>Management Levels - A list of allowed device management levels.
An empty list allows all management levels.
Each value may be one of:
MANAGEMENT_UNSPECIFIED,NONE,BASIC,COMPLETE. - allowed
Encryption List<String>Statuses - A list of allowed encryptions statuses.
An empty list allows all statuses.
Each value may be one of:
ENCRYPTION_UNSPECIFIED,ENCRYPTION_UNSUPPORTED,UNENCRYPTED,ENCRYPTED. - os
Constraints List<Property Map> - A list of allowed OS versions. An empty list allows all types and all versions. Structure is documented below.
- require
Admin BooleanApproval - Whether the device needs to be approved by the customer admin.
- require
Corp BooleanOwned - Whether the device needs to be corp owned.
- require
Screen BooleanLock - Whether or not screenlock is required for the DevicePolicy to be true. Defaults to false.
AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraint, AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs
- Os
Type string - The operating system type of the device.
Possible values are:
OS_UNSPECIFIED,DESKTOP_MAC,DESKTOP_WINDOWS,DESKTOP_LINUX,DESKTOP_CHROME_OS,ANDROID,IOS. - Minimum
Version string - The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".
- Os
Type string - The operating system type of the device.
Possible values are:
OS_UNSPECIFIED,DESKTOP_MAC,DESKTOP_WINDOWS,DESKTOP_LINUX,DESKTOP_CHROME_OS,ANDROID,IOS. - Minimum
Version string - The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".
- os
Type String - The operating system type of the device.
Possible values are:
OS_UNSPECIFIED,DESKTOP_MAC,DESKTOP_WINDOWS,DESKTOP_LINUX,DESKTOP_CHROME_OS,ANDROID,IOS. - minimum
Version String - The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".
- os
Type string - The operating system type of the device.
Possible values are:
OS_UNSPECIFIED,DESKTOP_MAC,DESKTOP_WINDOWS,DESKTOP_LINUX,DESKTOP_CHROME_OS,ANDROID,IOS. - minimum
Version string - The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".
- os_
type str - The operating system type of the device.
Possible values are:
OS_UNSPECIFIED,DESKTOP_MAC,DESKTOP_WINDOWS,DESKTOP_LINUX,DESKTOP_CHROME_OS,ANDROID,IOS. - minimum_
version str - The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".
- os
Type String - The operating system type of the device.
Possible values are:
OS_UNSPECIFIED,DESKTOP_MAC,DESKTOP_WINDOWS,DESKTOP_LINUX,DESKTOP_CHROME_OS,ANDROID,IOS. - minimum
Version String - The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: "major.minor.patch" such as "10.5.301", "9.2.1".
AccessLevelsAccessLevelBasicConditionVpcNetworkSource, AccessLevelsAccessLevelBasicConditionVpcNetworkSourceArgs
- Vpc
Subnetwork AccessLevels Access Level Basic Condition Vpc Network Source Vpc Subnetwork - Sub networks within a VPC network. Structure is documented below.
- Vpc
Subnetwork AccessLevels Access Level Basic Condition Vpc Network Source Vpc Subnetwork - Sub networks within a VPC network. Structure is documented below.
- vpc
Subnetwork AccessLevels Access Level Basic Condition Vpc Network Source Vpc Subnetwork - Sub networks within a VPC network. Structure is documented below.
- vpc
Subnetwork AccessLevels Access Level Basic Condition Vpc Network Source Vpc Subnetwork - Sub networks within a VPC network. Structure is documented below.
- vpc_
subnetwork AccessLevels Access Level Basic Condition Vpc Network Source Vpc Subnetwork - Sub networks within a VPC network. Structure is documented below.
- vpc
Subnetwork Property Map - Sub networks within a VPC network. Structure is documented below.
AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetwork, AccessLevelsAccessLevelBasicConditionVpcNetworkSourceVpcSubnetworkArgs
- Network string
- Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires
compute.network.getpermission to be granted to caller. - Vpc
Ip List<string>Subnetworks - CIDR block IP subnetwork specification. Must be IPv4.
- Network string
- Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires
compute.network.getpermission to be granted to caller. - Vpc
Ip []stringSubnetworks - CIDR block IP subnetwork specification. Must be IPv4.
- network String
- Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires
compute.network.getpermission to be granted to caller. - vpc
Ip List<String>Subnetworks - CIDR block IP subnetwork specification. Must be IPv4.
- network string
- Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires
compute.network.getpermission to be granted to caller. - vpc
Ip string[]Subnetworks - CIDR block IP subnetwork specification. Must be IPv4.
- network str
- Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires
compute.network.getpermission to be granted to caller. - vpc_
ip_ Sequence[str]subnetworks - CIDR block IP subnetwork specification. Must be IPv4.
- network String
- Required. Network name to be allowed by this Access Level. Networks of foreign organizations requires
compute.network.getpermission to be granted to caller. - vpc
Ip List<String>Subnetworks - CIDR block IP subnetwork specification. Must be IPv4.
AccessLevelsAccessLevelCustom, AccessLevelsAccessLevelCustomArgs
- Expr
Access
Levels Access Level Custom Expr - Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.
- Expr
Access
Levels Access Level Custom Expr - Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.
- expr
Access
Levels Access Level Custom Expr - Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.
- expr
Access
Levels Access Level Custom Expr - Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.
- expr
Access
Levels Access Level Custom Expr - Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.
- expr Property Map
- Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. This page details the objects and attributes that are used to the build the CEL expressions for custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec. Structure is documented below.
AccessLevelsAccessLevelCustomExpr, AccessLevelsAccessLevelCustomExprArgs
- Expression string
- Textual representation of an expression in Common Expression Language syntax.
- Description string
- Description of the expression
- Location string
- String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
- Title string
- Title for the expression, i.e. a short string describing its purpose.
- Expression string
- Textual representation of an expression in Common Expression Language syntax.
- Description string
- Description of the expression
- Location string
- String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
- Title string
- Title for the expression, i.e. a short string describing its purpose.
- expression String
- Textual representation of an expression in Common Expression Language syntax.
- description String
- Description of the expression
- location String
- String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
- title String
- Title for the expression, i.e. a short string describing its purpose.
- expression string
- Textual representation of an expression in Common Expression Language syntax.
- description string
- Description of the expression
- location string
- String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
- title string
- Title for the expression, i.e. a short string describing its purpose.
- expression str
- Textual representation of an expression in Common Expression Language syntax.
- description str
- Description of the expression
- location str
- String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
- title str
- Title for the expression, i.e. a short string describing its purpose.
- expression String
- Textual representation of an expression in Common Expression Language syntax.
- description String
- Description of the expression
- location String
- String indicating the location of the expression for error reporting, e.g. a file name and a position in the file
- title String
- Title for the expression, i.e. a short string describing its purpose.
Import
AccessLevels can be imported using any of these accepted formats:
{{parent}}/accessLevels{{parent}}
When using the pulumi import command, AccessLevels can be imported using one of the formats above. For example:
$ pulumi import gcp:accesscontextmanager/accessLevels:AccessLevels default {{parent}}/accessLevels
$ pulumi import gcp:accesscontextmanager/accessLevels:AccessLevels default {{parent}}
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
google-betaTerraform Provider.