Represents a {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule google_compute_firewall_policy_rule}.
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
new computeFirewallPolicyRule.ComputeFirewallPolicyRule(scope: Construct, id: string, config: ComputeFirewallPolicyRuleConfig)
Name | Type | Description |
---|---|---|
scope |
constructs.Construct |
The scope in which to define this construct. |
id |
string |
The scoped construct ID. |
config |
ComputeFirewallPolicyRuleConfig |
No description. |
- Type: constructs.Construct
The scope in which to define this construct.
- Type: string
The scoped construct ID.
Must be unique amongst siblings in the same scope
Name | Description |
---|---|
toString |
Returns a string representation of this construct. |
addOverride |
No description. |
overrideLogicalId |
Overrides the auto-generated logical ID with a specific ID. |
resetOverrideLogicalId |
Resets a previously passed logical Id to use the auto-generated logical id again. |
toHclTerraform |
No description. |
toMetadata |
No description. |
toTerraform |
Adds this resource to the terraform JSON output. |
addMoveTarget |
Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move. |
getAnyMapAttribute |
No description. |
getBooleanAttribute |
No description. |
getBooleanMapAttribute |
No description. |
getListAttribute |
No description. |
getNumberAttribute |
No description. |
getNumberListAttribute |
No description. |
getNumberMapAttribute |
No description. |
getStringAttribute |
No description. |
getStringMapAttribute |
No description. |
hasResourceMove |
No description. |
importFrom |
No description. |
interpolationForAttribute |
No description. |
moveFromId |
Move the resource corresponding to "id" to this resource. |
moveTo |
Moves this resource to the target resource given by moveTarget. |
moveToId |
Moves this resource to the resource corresponding to "id". |
putMatch |
No description. |
putTimeouts |
No description. |
resetDescription |
No description. |
resetDisabled |
No description. |
resetEnableLogging |
No description. |
resetId |
No description. |
resetSecurityProfileGroup |
No description. |
resetTargetResources |
No description. |
resetTargetServiceAccounts |
No description. |
resetTimeouts |
No description. |
resetTlsInspect |
No description. |
public toString(): string
Returns a string representation of this construct.
public addOverride(path: string, value: any): void
- Type: string
- Type: any
public overrideLogicalId(newLogicalId: string): void
Overrides the auto-generated logical ID with a specific ID.
- Type: string
The new logical ID to use for this stack element.
public resetOverrideLogicalId(): void
Resets a previously passed logical Id to use the auto-generated logical id again.
public toHclTerraform(): any
public toMetadata(): any
public toTerraform(): any
Adds this resource to the terraform JSON output.
public addMoveTarget(moveTarget: string): void
Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.
- Type: string
The string move target that will correspond to this resource.
public getAnyMapAttribute(terraformAttribute: string): {[ key: string ]: any}
- Type: string
public getBooleanAttribute(terraformAttribute: string): IResolvable
- Type: string
public getBooleanMapAttribute(terraformAttribute: string): {[ key: string ]: boolean}
- Type: string
public getListAttribute(terraformAttribute: string): string[]
- Type: string
public getNumberAttribute(terraformAttribute: string): number
- Type: string
public getNumberListAttribute(terraformAttribute: string): number[]
- Type: string
public getNumberMapAttribute(terraformAttribute: string): {[ key: string ]: number}
- Type: string
public getStringAttribute(terraformAttribute: string): string
- Type: string
public getStringMapAttribute(terraformAttribute: string): {[ key: string ]: string}
- Type: string
public hasResourceMove(): TerraformResourceMoveByTarget | TerraformResourceMoveById
public importFrom(id: string, provider?: TerraformProvider): void
- Type: string
- Type: cdktf.TerraformProvider
public interpolationForAttribute(terraformAttribute: string): IResolvable
- Type: string
public moveFromId(id: string): void
Move the resource corresponding to "id" to this resource.
Note that the resource being moved from must be marked as moved using it's instance function.
- Type: string
Full id of resource being moved from, e.g. "aws_s3_bucket.example".
public moveTo(moveTarget: string, index?: string | number): void
Moves this resource to the target resource given by moveTarget.
- Type: string
The previously set user defined string set by .addMoveTarget() corresponding to the resource to move to.
- Type: string | number
Optional The index corresponding to the key the resource is to appear in the foreach of a resource to move to.
public moveToId(id: string): void
Moves this resource to the resource corresponding to "id".
- Type: string
Full id of resource to move to, e.g. "aws_s3_bucket.example".
public putMatch(value: ComputeFirewallPolicyRuleMatch): void
public putTimeouts(value: ComputeFirewallPolicyRuleTimeouts): void
public resetDescription(): void
public resetDisabled(): void
public resetEnableLogging(): void
public resetId(): void
public resetSecurityProfileGroup(): void
public resetTargetResources(): void
public resetTargetServiceAccounts(): void
public resetTimeouts(): void
public resetTlsInspect(): void
Name | Description |
---|---|
isConstruct |
Checks if x is a construct. |
isTerraformElement |
No description. |
isTerraformResource |
No description. |
generateConfigForImport |
Generates CDKTF code for importing a ComputeFirewallPolicyRule resource upon running "cdktf plan ". |
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
computeFirewallPolicyRule.ComputeFirewallPolicyRule.isConstruct(x: any)
Checks if x
is a construct.
Use this method instead of instanceof
to properly detect Construct
instances, even when the construct library is symlinked.
Explanation: in JavaScript, multiple copies of the constructs
library on
disk are seen as independent, completely different libraries. As a
consequence, the class Construct
in each copy of the constructs
library
is seen as a different class, and an instance of one class will not test as
instanceof
the other class. npm install
will not create installations
like this, but users may manually symlink construct libraries together or
use a monorepo tool: in those cases, multiple copies of the constructs
library can be accidentally installed, and instanceof
will behave
unpredictably. It is safest to avoid using instanceof
, and using
this type-testing method instead.
- Type: any
Any object.
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
computeFirewallPolicyRule.ComputeFirewallPolicyRule.isTerraformElement(x: any)
- Type: any
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
computeFirewallPolicyRule.ComputeFirewallPolicyRule.isTerraformResource(x: any)
- Type: any
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
computeFirewallPolicyRule.ComputeFirewallPolicyRule.generateConfigForImport(scope: Construct, importToId: string, importFromId: string, provider?: TerraformProvider)
Generates CDKTF code for importing a ComputeFirewallPolicyRule resource upon running "cdktf plan ".
- Type: constructs.Construct
The scope in which to define this construct.
- Type: string
The construct id used in the generated config for the ComputeFirewallPolicyRule to import.
- Type: string
The id of the existing ComputeFirewallPolicyRule that should be imported.
Refer to the {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#import import section} in the documentation of this resource for the id to use
- Type: cdktf.TerraformProvider
? Optional instance of the provider where the ComputeFirewallPolicyRule to import is found.
Name | Type | Description |
---|---|---|
node |
constructs.Node |
The tree node. |
cdktfStack |
cdktf.TerraformStack |
No description. |
fqn |
string |
No description. |
friendlyUniqueId |
string |
No description. |
terraformMetaArguments |
{[ key: string ]: any} |
No description. |
terraformResourceType |
string |
No description. |
terraformGeneratorMetadata |
cdktf.TerraformProviderGeneratorMetadata |
No description. |
connection |
cdktf.SSHProvisionerConnection | cdktf.WinrmProvisionerConnection |
No description. |
count |
number | cdktf.TerraformCount |
No description. |
dependsOn |
string[] |
No description. |
forEach |
cdktf.ITerraformIterator |
No description. |
lifecycle |
cdktf.TerraformResourceLifecycle |
No description. |
provider |
cdktf.TerraformProvider |
No description. |
provisioners |
cdktf.FileProvisioner | cdktf.LocalExecProvisioner | cdktf.RemoteExecProvisioner[] |
No description. |
creationTimestamp |
string |
No description. |
kind |
string |
No description. |
match |
ComputeFirewallPolicyRuleMatchOutputReference |
No description. |
ruleTupleCount |
number |
No description. |
timeouts |
ComputeFirewallPolicyRuleTimeoutsOutputReference |
No description. |
actionInput |
string |
No description. |
descriptionInput |
string |
No description. |
directionInput |
string |
No description. |
disabledInput |
boolean | cdktf.IResolvable |
No description. |
enableLoggingInput |
boolean | cdktf.IResolvable |
No description. |
firewallPolicyInput |
string |
No description. |
idInput |
string |
No description. |
matchInput |
ComputeFirewallPolicyRuleMatch |
No description. |
priorityInput |
number |
No description. |
securityProfileGroupInput |
string |
No description. |
targetResourcesInput |
string[] |
No description. |
targetServiceAccountsInput |
string[] |
No description. |
timeoutsInput |
cdktf.IResolvable | ComputeFirewallPolicyRuleTimeouts |
No description. |
tlsInspectInput |
boolean | cdktf.IResolvable |
No description. |
action |
string |
No description. |
description |
string |
No description. |
direction |
string |
No description. |
disabled |
boolean | cdktf.IResolvable |
No description. |
enableLogging |
boolean | cdktf.IResolvable |
No description. |
firewallPolicy |
string |
No description. |
id |
string |
No description. |
priority |
number |
No description. |
securityProfileGroup |
string |
No description. |
targetResources |
string[] |
No description. |
targetServiceAccounts |
string[] |
No description. |
tlsInspect |
boolean | cdktf.IResolvable |
No description. |
public readonly node: Node;
- Type: constructs.Node
The tree node.
public readonly cdktfStack: TerraformStack;
- Type: cdktf.TerraformStack
public readonly fqn: string;
- Type: string
public readonly friendlyUniqueId: string;
- Type: string
public readonly terraformMetaArguments: {[ key: string ]: any};
- Type: {[ key: string ]: any}
public readonly terraformResourceType: string;
- Type: string
public readonly terraformGeneratorMetadata: TerraformProviderGeneratorMetadata;
- Type: cdktf.TerraformProviderGeneratorMetadata
public readonly connection: SSHProvisionerConnection | WinrmProvisionerConnection;
- Type: cdktf.SSHProvisionerConnection | cdktf.WinrmProvisionerConnection
public readonly count: number | TerraformCount;
- Type: number | cdktf.TerraformCount
public readonly dependsOn: string[];
- Type: string[]
public readonly forEach: ITerraformIterator;
- Type: cdktf.ITerraformIterator
public readonly lifecycle: TerraformResourceLifecycle;
- Type: cdktf.TerraformResourceLifecycle
public readonly provider: TerraformProvider;
- Type: cdktf.TerraformProvider
public readonly provisioners: FileProvisioner | LocalExecProvisioner | RemoteExecProvisioner[];
- Type: cdktf.FileProvisioner | cdktf.LocalExecProvisioner | cdktf.RemoteExecProvisioner[]
public readonly creationTimestamp: string;
- Type: string
public readonly kind: string;
- Type: string
public readonly match: ComputeFirewallPolicyRuleMatchOutputReference;
public readonly ruleTupleCount: number;
- Type: number
public readonly timeouts: ComputeFirewallPolicyRuleTimeoutsOutputReference;
public readonly actionInput: string;
- Type: string
public readonly descriptionInput: string;
- Type: string
public readonly directionInput: string;
- Type: string
public readonly disabledInput: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
public readonly enableLoggingInput: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
public readonly firewallPolicyInput: string;
- Type: string
public readonly idInput: string;
- Type: string
public readonly matchInput: ComputeFirewallPolicyRuleMatch;
public readonly priorityInput: number;
- Type: number
public readonly securityProfileGroupInput: string;
- Type: string
public readonly targetResourcesInput: string[];
- Type: string[]
public readonly targetServiceAccountsInput: string[];
- Type: string[]
public readonly timeoutsInput: IResolvable | ComputeFirewallPolicyRuleTimeouts;
- Type: cdktf.IResolvable | ComputeFirewallPolicyRuleTimeouts
public readonly tlsInspectInput: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
public readonly action: string;
- Type: string
public readonly description: string;
- Type: string
public readonly direction: string;
- Type: string
public readonly disabled: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
public readonly enableLogging: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
public readonly firewallPolicy: string;
- Type: string
public readonly id: string;
- Type: string
public readonly priority: number;
- Type: number
public readonly securityProfileGroup: string;
- Type: string
public readonly targetResources: string[];
- Type: string[]
public readonly targetServiceAccounts: string[];
- Type: string[]
public readonly tlsInspect: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
Name | Type | Description |
---|---|---|
tfResourceType |
string |
No description. |
public readonly tfResourceType: string;
- Type: string
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
const computeFirewallPolicyRuleConfig: computeFirewallPolicyRule.ComputeFirewallPolicyRuleConfig = { ... }
Name | Type | Description |
---|---|---|
connection |
cdktf.SSHProvisionerConnection | cdktf.WinrmProvisionerConnection |
No description. |
count |
number | cdktf.TerraformCount |
No description. |
dependsOn |
cdktf.ITerraformDependable[] |
No description. |
forEach |
cdktf.ITerraformIterator |
No description. |
lifecycle |
cdktf.TerraformResourceLifecycle |
No description. |
provider |
cdktf.TerraformProvider |
No description. |
provisioners |
cdktf.FileProvisioner | cdktf.LocalExecProvisioner | cdktf.RemoteExecProvisioner[] |
No description. |
action |
string |
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group". |
direction |
string |
The direction in which this rule applies. Possible values: ["INGRESS", "EGRESS"]. |
firewallPolicy |
string |
The firewall policy of the resource. |
match |
ComputeFirewallPolicyRuleMatch |
match block. |
priority |
number |
An integer indicating the priority of a rule in the list. |
description |
string |
An optional description for this resource. |
disabled |
boolean | cdktf.IResolvable |
Denotes whether the firewall policy rule is disabled. |
enableLogging |
boolean | cdktf.IResolvable |
Denotes whether to enable logging for a particular rule. |
id |
string |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#id ComputeFirewallPolicyRule#id}. |
securityProfileGroup |
string |
A fully-qualified URL of a SecurityProfile resource instance. |
targetResources |
string[] |
A list of network resource URLs to which this rule applies. |
targetServiceAccounts |
string[] |
A list of service accounts indicating the sets of instances that are applied with this rule. |
timeouts |
ComputeFirewallPolicyRuleTimeouts |
timeouts block. |
tlsInspect |
boolean | cdktf.IResolvable |
Boolean flag indicating if the traffic should be TLS decrypted. |
public readonly connection: SSHProvisionerConnection | WinrmProvisionerConnection;
- Type: cdktf.SSHProvisionerConnection | cdktf.WinrmProvisionerConnection
public readonly count: number | TerraformCount;
- Type: number | cdktf.TerraformCount
public readonly dependsOn: ITerraformDependable[];
- Type: cdktf.ITerraformDependable[]
public readonly forEach: ITerraformIterator;
- Type: cdktf.ITerraformIterator
public readonly lifecycle: TerraformResourceLifecycle;
- Type: cdktf.TerraformResourceLifecycle
public readonly provider: TerraformProvider;
- Type: cdktf.TerraformProvider
public readonly provisioners: FileProvisioner | LocalExecProvisioner | RemoteExecProvisioner[];
- Type: cdktf.FileProvisioner | cdktf.LocalExecProvisioner | cdktf.RemoteExecProvisioner[]
public readonly action: string;
- Type: string
The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#action ComputeFirewallPolicyRule#action}
public readonly direction: string;
- Type: string
The direction in which this rule applies. Possible values: ["INGRESS", "EGRESS"].
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#direction ComputeFirewallPolicyRule#direction}
public readonly firewallPolicy: string;
- Type: string
The firewall policy of the resource.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#firewall_policy ComputeFirewallPolicyRule#firewall_policy}
public readonly match: ComputeFirewallPolicyRuleMatch;
match block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#match ComputeFirewallPolicyRule#match}
public readonly priority: number;
- Type: number
An integer indicating the priority of a rule in the list.
The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#priority ComputeFirewallPolicyRule#priority}
public readonly description: string;
- Type: string
An optional description for this resource.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#description ComputeFirewallPolicyRule#description}
public readonly disabled: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
Denotes whether the firewall policy rule is disabled.
When set to true, the firewall policy rule is not enforced and traffic behaves as if it did not exist. If this is unspecified, the firewall policy rule will be enabled.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#disabled ComputeFirewallPolicyRule#disabled}
public readonly enableLogging: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
Denotes whether to enable logging for a particular rule.
If logging is enabled, logs will be exported to the configured export destination in Stackdriver. Logs may be exported to BigQuery or Pub/Sub. Note: you cannot enable logging on "goto_next" rules.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#enable_logging ComputeFirewallPolicyRule#enable_logging}
public readonly id: string;
- Type: string
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#id ComputeFirewallPolicyRule#id}.
Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.
public readonly securityProfileGroup: string;
- Type: string
A fully-qualified URL of a SecurityProfile resource instance.
Example: https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group Must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#security_profile_group ComputeFirewallPolicyRule#security_profile_group}
public readonly targetResources: string[];
- Type: string[]
A list of network resource URLs to which this rule applies.
This field allows you to control which network's VMs get this rule. If this field is left blank, all VMs within the organization will receive the rule.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#target_resources ComputeFirewallPolicyRule#target_resources}
public readonly targetServiceAccounts: string[];
- Type: string[]
A list of service accounts indicating the sets of instances that are applied with this rule.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#target_service_accounts ComputeFirewallPolicyRule#target_service_accounts}
public readonly timeouts: ComputeFirewallPolicyRuleTimeouts;
timeouts block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#timeouts ComputeFirewallPolicyRule#timeouts}
public readonly tlsInspect: boolean | IResolvable;
- Type: boolean | cdktf.IResolvable
Boolean flag indicating if the traffic should be TLS decrypted.
Can be set only if action = 'apply_security_profile_group' and cannot be set for other actions.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#tls_inspect ComputeFirewallPolicyRule#tls_inspect}
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
const computeFirewallPolicyRuleMatch: computeFirewallPolicyRule.ComputeFirewallPolicyRuleMatch = { ... }
Name | Type | Description |
---|---|---|
layer4Configs |
cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[] |
layer4_configs block. |
destAddressGroups |
string[] |
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. |
destFqdns |
string[] |
Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. |
destIpRanges |
string[] |
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000. |
destRegionCodes |
string[] |
Region codes whose IP addresses will be used to match for destination of traffic. |
destThreatIntelligences |
string[] |
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination. |
srcAddressGroups |
string[] |
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. |
srcFqdns |
string[] |
Fully Qualified Domain Name (FQDN) which should be matched against traffic source. |
srcIpRanges |
string[] |
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000. |
srcRegionCodes |
string[] |
Region codes whose IP addresses will be used to match for source of traffic. |
srcThreatIntelligences |
string[] |
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source. |
public readonly layer4Configs: IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[];
- Type: cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[]
layer4_configs block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#layer4_configs ComputeFirewallPolicyRule#layer4_configs}
public readonly destAddressGroups: string[];
- Type: string[]
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#dest_address_groups ComputeFirewallPolicyRule#dest_address_groups}
public readonly destFqdns: string[];
- Type: string[]
Fully Qualified Domain Name (FQDN) which should be matched against traffic destination.
Maximum number of destination fqdn allowed is 100.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#dest_fqdns ComputeFirewallPolicyRule#dest_fqdns}
public readonly destIpRanges: string[];
- Type: string[]
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#dest_ip_ranges ComputeFirewallPolicyRule#dest_ip_ranges}
public readonly destRegionCodes: string[];
- Type: string[]
Region codes whose IP addresses will be used to match for destination of traffic.
Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#dest_region_codes ComputeFirewallPolicyRule#dest_region_codes}
public readonly destThreatIntelligences: string[];
- Type: string[]
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#dest_threat_intelligences ComputeFirewallPolicyRule#dest_threat_intelligences}
public readonly srcAddressGroups: string[];
- Type: string[]
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#src_address_groups ComputeFirewallPolicyRule#src_address_groups}
public readonly srcFqdns: string[];
- Type: string[]
Fully Qualified Domain Name (FQDN) which should be matched against traffic source.
Maximum number of source fqdn allowed is 100.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#src_fqdns ComputeFirewallPolicyRule#src_fqdns}
public readonly srcIpRanges: string[];
- Type: string[]
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#src_ip_ranges ComputeFirewallPolicyRule#src_ip_ranges}
public readonly srcRegionCodes: string[];
- Type: string[]
Region codes whose IP addresses will be used to match for source of traffic.
Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#src_region_codes ComputeFirewallPolicyRule#src_region_codes}
public readonly srcThreatIntelligences: string[];
- Type: string[]
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#src_threat_intelligences ComputeFirewallPolicyRule#src_threat_intelligences}
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
const computeFirewallPolicyRuleMatchLayer4Configs: computeFirewallPolicyRule.ComputeFirewallPolicyRuleMatchLayer4Configs = { ... }
Name | Type | Description |
---|---|---|
ipProtocol |
string |
The IP protocol to which this rule applies. |
ports |
string[] |
An optional list of ports to which this rule applies. |
public readonly ipProtocol: string;
- Type: string
The IP protocol to which this rule applies.
The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp), or the IP protocol number.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#ip_protocol ComputeFirewallPolicyRule#ip_protocol}
public readonly ports: string[];
- Type: string[]
An optional list of ports to which this rule applies.
This field is only applicable for UDP or TCP protocol. Each entry must be either an integer or a range. If not specified, this rule applies to connections through any port. Example inputs include: ["22"], ["80","443"], and ["12345-12349"].
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#ports ComputeFirewallPolicyRule#ports}
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
const computeFirewallPolicyRuleTimeouts: computeFirewallPolicyRule.ComputeFirewallPolicyRuleTimeouts = { ... }
Name | Type | Description |
---|---|---|
create |
string |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#create ComputeFirewallPolicyRule#create}. |
delete |
string |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#delete ComputeFirewallPolicyRule#delete}. |
update |
string |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#update ComputeFirewallPolicyRule#update}. |
public readonly create: string;
- Type: string
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#create ComputeFirewallPolicyRule#create}.
public readonly delete: string;
- Type: string
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#delete ComputeFirewallPolicyRule#delete}.
public readonly update: string;
- Type: string
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.22.0/docs/resources/compute_firewall_policy_rule#update ComputeFirewallPolicyRule#update}.
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
new computeFirewallPolicyRule.ComputeFirewallPolicyRuleMatchLayer4ConfigsList(terraformResource: IInterpolatingParent, terraformAttribute: string, wrapsSet: boolean)
Name | Type | Description |
---|---|---|
terraformResource |
cdktf.IInterpolatingParent |
The parent resource. |
terraformAttribute |
string |
The attribute on the parent resource this class is referencing. |
wrapsSet |
boolean |
whether the list is wrapping a set (will add tolist() to be able to access an item via an index). |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: string
The attribute on the parent resource this class is referencing.
- Type: boolean
whether the list is wrapping a set (will add tolist() to be able to access an item via an index).
Name | Description |
---|---|
allWithMapKey |
Creating an iterator for this complex list. |
computeFqn |
No description. |
resolve |
Produce the Token's value at resolution time. |
toString |
Return a string representation of this resolvable object. |
get |
No description. |
public allWithMapKey(mapKeyAttributeName: string): DynamicListTerraformIterator
Creating an iterator for this complex list.
The list will be converted into a map with the mapKeyAttributeName as the key.
- Type: string
public computeFqn(): string
public resolve(_context: IResolveContext): any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
public toString(): string
Return a string representation of this resolvable object.
Returns a reversible string representation.
public get(index: number): ComputeFirewallPolicyRuleMatchLayer4ConfigsOutputReference
- Type: number
the index of the item to return.
Name | Type | Description |
---|---|---|
creationStack |
string[] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
string |
No description. |
internalValue |
cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[] |
No description. |
public readonly creationStack: string[];
- Type: string[]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
public readonly fqn: string;
- Type: string
public readonly internalValue: IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[];
- Type: cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[]
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
new computeFirewallPolicyRule.ComputeFirewallPolicyRuleMatchLayer4ConfigsOutputReference(terraformResource: IInterpolatingParent, terraformAttribute: string, complexObjectIndex: number, complexObjectIsFromSet: boolean)
Name | Type | Description |
---|---|---|
terraformResource |
cdktf.IInterpolatingParent |
The parent resource. |
terraformAttribute |
string |
The attribute on the parent resource this class is referencing. |
complexObjectIndex |
number |
the index of this item in the list. |
complexObjectIsFromSet |
boolean |
whether the list is wrapping a set (will add tolist() to be able to access an item via an index). |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: string
The attribute on the parent resource this class is referencing.
- Type: number
the index of this item in the list.
- Type: boolean
whether the list is wrapping a set (will add tolist() to be able to access an item via an index).
Name | Description |
---|---|
computeFqn |
No description. |
getAnyMapAttribute |
No description. |
getBooleanAttribute |
No description. |
getBooleanMapAttribute |
No description. |
getListAttribute |
No description. |
getNumberAttribute |
No description. |
getNumberListAttribute |
No description. |
getNumberMapAttribute |
No description. |
getStringAttribute |
No description. |
getStringMapAttribute |
No description. |
interpolationForAttribute |
No description. |
resolve |
Produce the Token's value at resolution time. |
toString |
Return a string representation of this resolvable object. |
resetPorts |
No description. |
public computeFqn(): string
public getAnyMapAttribute(terraformAttribute: string): {[ key: string ]: any}
- Type: string
public getBooleanAttribute(terraformAttribute: string): IResolvable
- Type: string
public getBooleanMapAttribute(terraformAttribute: string): {[ key: string ]: boolean}
- Type: string
public getListAttribute(terraformAttribute: string): string[]
- Type: string
public getNumberAttribute(terraformAttribute: string): number
- Type: string
public getNumberListAttribute(terraformAttribute: string): number[]
- Type: string
public getNumberMapAttribute(terraformAttribute: string): {[ key: string ]: number}
- Type: string
public getStringAttribute(terraformAttribute: string): string
- Type: string
public getStringMapAttribute(terraformAttribute: string): {[ key: string ]: string}
- Type: string
public interpolationForAttribute(property: string): IResolvable
- Type: string
public resolve(_context: IResolveContext): any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
public toString(): string
Return a string representation of this resolvable object.
Returns a reversible string representation.
public resetPorts(): void
Name | Type | Description |
---|---|---|
creationStack |
string[] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
string |
No description. |
ipProtocolInput |
string |
No description. |
portsInput |
string[] |
No description. |
ipProtocol |
string |
No description. |
ports |
string[] |
No description. |
internalValue |
cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs |
No description. |
public readonly creationStack: string[];
- Type: string[]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
public readonly fqn: string;
- Type: string
public readonly ipProtocolInput: string;
- Type: string
public readonly portsInput: string[];
- Type: string[]
public readonly ipProtocol: string;
- Type: string
public readonly ports: string[];
- Type: string[]
public readonly internalValue: IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs;
- Type: cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
new computeFirewallPolicyRule.ComputeFirewallPolicyRuleMatchOutputReference(terraformResource: IInterpolatingParent, terraformAttribute: string)
Name | Type | Description |
---|---|---|
terraformResource |
cdktf.IInterpolatingParent |
The parent resource. |
terraformAttribute |
string |
The attribute on the parent resource this class is referencing. |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: string
The attribute on the parent resource this class is referencing.
Name | Description |
---|---|
computeFqn |
No description. |
getAnyMapAttribute |
No description. |
getBooleanAttribute |
No description. |
getBooleanMapAttribute |
No description. |
getListAttribute |
No description. |
getNumberAttribute |
No description. |
getNumberListAttribute |
No description. |
getNumberMapAttribute |
No description. |
getStringAttribute |
No description. |
getStringMapAttribute |
No description. |
interpolationForAttribute |
No description. |
resolve |
Produce the Token's value at resolution time. |
toString |
Return a string representation of this resolvable object. |
putLayer4Configs |
No description. |
resetDestAddressGroups |
No description. |
resetDestFqdns |
No description. |
resetDestIpRanges |
No description. |
resetDestRegionCodes |
No description. |
resetDestThreatIntelligences |
No description. |
resetSrcAddressGroups |
No description. |
resetSrcFqdns |
No description. |
resetSrcIpRanges |
No description. |
resetSrcRegionCodes |
No description. |
resetSrcThreatIntelligences |
No description. |
public computeFqn(): string
public getAnyMapAttribute(terraformAttribute: string): {[ key: string ]: any}
- Type: string
public getBooleanAttribute(terraformAttribute: string): IResolvable
- Type: string
public getBooleanMapAttribute(terraformAttribute: string): {[ key: string ]: boolean}
- Type: string
public getListAttribute(terraformAttribute: string): string[]
- Type: string
public getNumberAttribute(terraformAttribute: string): number
- Type: string
public getNumberListAttribute(terraformAttribute: string): number[]
- Type: string
public getNumberMapAttribute(terraformAttribute: string): {[ key: string ]: number}
- Type: string
public getStringAttribute(terraformAttribute: string): string
- Type: string
public getStringMapAttribute(terraformAttribute: string): {[ key: string ]: string}
- Type: string
public interpolationForAttribute(property: string): IResolvable
- Type: string
public resolve(_context: IResolveContext): any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
public toString(): string
Return a string representation of this resolvable object.
Returns a reversible string representation.
public putLayer4Configs(value: IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[]): void
- Type: cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[]
public resetDestAddressGroups(): void
public resetDestFqdns(): void
public resetDestIpRanges(): void
public resetDestRegionCodes(): void
public resetDestThreatIntelligences(): void
public resetSrcAddressGroups(): void
public resetSrcFqdns(): void
public resetSrcIpRanges(): void
public resetSrcRegionCodes(): void
public resetSrcThreatIntelligences(): void
Name | Type | Description |
---|---|---|
creationStack |
string[] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
string |
No description. |
layer4Configs |
ComputeFirewallPolicyRuleMatchLayer4ConfigsList |
No description. |
destAddressGroupsInput |
string[] |
No description. |
destFqdnsInput |
string[] |
No description. |
destIpRangesInput |
string[] |
No description. |
destRegionCodesInput |
string[] |
No description. |
destThreatIntelligencesInput |
string[] |
No description. |
layer4ConfigsInput |
cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[] |
No description. |
srcAddressGroupsInput |
string[] |
No description. |
srcFqdnsInput |
string[] |
No description. |
srcIpRangesInput |
string[] |
No description. |
srcRegionCodesInput |
string[] |
No description. |
srcThreatIntelligencesInput |
string[] |
No description. |
destAddressGroups |
string[] |
No description. |
destFqdns |
string[] |
No description. |
destIpRanges |
string[] |
No description. |
destRegionCodes |
string[] |
No description. |
destThreatIntelligences |
string[] |
No description. |
srcAddressGroups |
string[] |
No description. |
srcFqdns |
string[] |
No description. |
srcIpRanges |
string[] |
No description. |
srcRegionCodes |
string[] |
No description. |
srcThreatIntelligences |
string[] |
No description. |
internalValue |
ComputeFirewallPolicyRuleMatch |
No description. |
public readonly creationStack: string[];
- Type: string[]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
public readonly fqn: string;
- Type: string
public readonly layer4Configs: ComputeFirewallPolicyRuleMatchLayer4ConfigsList;
public readonly destAddressGroupsInput: string[];
- Type: string[]
public readonly destFqdnsInput: string[];
- Type: string[]
public readonly destIpRangesInput: string[];
- Type: string[]
public readonly destRegionCodesInput: string[];
- Type: string[]
public readonly destThreatIntelligencesInput: string[];
- Type: string[]
public readonly layer4ConfigsInput: IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[];
- Type: cdktf.IResolvable | ComputeFirewallPolicyRuleMatchLayer4Configs[]
public readonly srcAddressGroupsInput: string[];
- Type: string[]
public readonly srcFqdnsInput: string[];
- Type: string[]
public readonly srcIpRangesInput: string[];
- Type: string[]
public readonly srcRegionCodesInput: string[];
- Type: string[]
public readonly srcThreatIntelligencesInput: string[];
- Type: string[]
public readonly destAddressGroups: string[];
- Type: string[]
public readonly destFqdns: string[];
- Type: string[]
public readonly destIpRanges: string[];
- Type: string[]
public readonly destRegionCodes: string[];
- Type: string[]
public readonly destThreatIntelligences: string[];
- Type: string[]
public readonly srcAddressGroups: string[];
- Type: string[]
public readonly srcFqdns: string[];
- Type: string[]
public readonly srcIpRanges: string[];
- Type: string[]
public readonly srcRegionCodes: string[];
- Type: string[]
public readonly srcThreatIntelligences: string[];
- Type: string[]
public readonly internalValue: ComputeFirewallPolicyRuleMatch;
import { computeFirewallPolicyRule } from '@cdktf/provider-google'
new computeFirewallPolicyRule.ComputeFirewallPolicyRuleTimeoutsOutputReference(terraformResource: IInterpolatingParent, terraformAttribute: string)
Name | Type | Description |
---|---|---|
terraformResource |
cdktf.IInterpolatingParent |
The parent resource. |
terraformAttribute |
string |
The attribute on the parent resource this class is referencing. |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: string
The attribute on the parent resource this class is referencing.
Name | Description |
---|---|
computeFqn |
No description. |
getAnyMapAttribute |
No description. |
getBooleanAttribute |
No description. |
getBooleanMapAttribute |
No description. |
getListAttribute |
No description. |
getNumberAttribute |
No description. |
getNumberListAttribute |
No description. |
getNumberMapAttribute |
No description. |
getStringAttribute |
No description. |
getStringMapAttribute |
No description. |
interpolationForAttribute |
No description. |
resolve |
Produce the Token's value at resolution time. |
toString |
Return a string representation of this resolvable object. |
resetCreate |
No description. |
resetDelete |
No description. |
resetUpdate |
No description. |
public computeFqn(): string
public getAnyMapAttribute(terraformAttribute: string): {[ key: string ]: any}
- Type: string
public getBooleanAttribute(terraformAttribute: string): IResolvable
- Type: string
public getBooleanMapAttribute(terraformAttribute: string): {[ key: string ]: boolean}
- Type: string
public getListAttribute(terraformAttribute: string): string[]
- Type: string
public getNumberAttribute(terraformAttribute: string): number
- Type: string
public getNumberListAttribute(terraformAttribute: string): number[]
- Type: string
public getNumberMapAttribute(terraformAttribute: string): {[ key: string ]: number}
- Type: string
public getStringAttribute(terraformAttribute: string): string
- Type: string
public getStringMapAttribute(terraformAttribute: string): {[ key: string ]: string}
- Type: string
public interpolationForAttribute(property: string): IResolvable
- Type: string
public resolve(_context: IResolveContext): any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
public toString(): string
Return a string representation of this resolvable object.
Returns a reversible string representation.
public resetCreate(): void
public resetDelete(): void
public resetUpdate(): void
Name | Type | Description |
---|---|---|
creationStack |
string[] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
string |
No description. |
createInput |
string |
No description. |
deleteInput |
string |
No description. |
updateInput |
string |
No description. |
create |
string |
No description. |
delete |
string |
No description. |
update |
string |
No description. |
internalValue |
cdktf.IResolvable | ComputeFirewallPolicyRuleTimeouts |
No description. |
public readonly creationStack: string[];
- Type: string[]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
public readonly fqn: string;
- Type: string
public readonly createInput: string;
- Type: string
public readonly deleteInput: string;
- Type: string
public readonly updateInput: string;
- Type: string
public readonly create: string;
- Type: string
public readonly delete: string;
- Type: string
public readonly update: string;
- Type: string
public readonly internalValue: IResolvable | ComputeFirewallPolicyRuleTimeouts;
- Type: cdktf.IResolvable | ComputeFirewallPolicyRuleTimeouts