Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.gameservices/v1beta.getGameServerDeploymentIamPolicy
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.
Using getGameServerDeploymentIamPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getGameServerDeploymentIamPolicy(args: GetGameServerDeploymentIamPolicyArgs, opts?: InvokeOptions): Promise<GetGameServerDeploymentIamPolicyResult>
function getGameServerDeploymentIamPolicyOutput(args: GetGameServerDeploymentIamPolicyOutputArgs, opts?: InvokeOptions): Output<GetGameServerDeploymentIamPolicyResult>
def get_game_server_deployment_iam_policy(game_server_deployment_id: Optional[str] = None,
location: Optional[str] = None,
options_requested_policy_version: Optional[int] = None,
project: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetGameServerDeploymentIamPolicyResult
def get_game_server_deployment_iam_policy_output(game_server_deployment_id: Optional[pulumi.Input[str]] = None,
location: Optional[pulumi.Input[str]] = None,
options_requested_policy_version: Optional[pulumi.Input[int]] = None,
project: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetGameServerDeploymentIamPolicyResult]
func LookupGameServerDeploymentIamPolicy(ctx *Context, args *LookupGameServerDeploymentIamPolicyArgs, opts ...InvokeOption) (*LookupGameServerDeploymentIamPolicyResult, error)
func LookupGameServerDeploymentIamPolicyOutput(ctx *Context, args *LookupGameServerDeploymentIamPolicyOutputArgs, opts ...InvokeOption) LookupGameServerDeploymentIamPolicyResultOutput
> Note: This function is named LookupGameServerDeploymentIamPolicy
in the Go SDK.
public static class GetGameServerDeploymentIamPolicy
{
public static Task<GetGameServerDeploymentIamPolicyResult> InvokeAsync(GetGameServerDeploymentIamPolicyArgs args, InvokeOptions? opts = null)
public static Output<GetGameServerDeploymentIamPolicyResult> Invoke(GetGameServerDeploymentIamPolicyInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetGameServerDeploymentIamPolicyResult> getGameServerDeploymentIamPolicy(GetGameServerDeploymentIamPolicyArgs args, InvokeOptions options)
public static Output<GetGameServerDeploymentIamPolicyResult> getGameServerDeploymentIamPolicy(GetGameServerDeploymentIamPolicyArgs args, InvokeOptions options)
fn::invoke:
function: google-native:gameservices/v1beta:getGameServerDeploymentIamPolicy
arguments:
# arguments dictionary
The following arguments are supported:
- Game
Server Deployment Id This property is required. string - Location
This property is required. string - Options
Requested intPolicy Version - Project string
- Game
Server Deployment Id This property is required. string - Location
This property is required. string - Options
Requested intPolicy Version - Project string
- game
Server Deployment Id This property is required. String - location
This property is required. String - options
Requested IntegerPolicy Version - project String
- game
Server Deployment Id This property is required. string - location
This property is required. string - options
Requested numberPolicy Version - project string
- game_
server_ deployment_ id This property is required. str - location
This property is required. str - options_
requested_ intpolicy_ version - project str
- game
Server Deployment Id This property is required. String - location
This property is required. String - options
Requested NumberPolicy Version - project String
getGameServerDeploymentIamPolicy Result
The following output properties are available:
- Audit
Configs List<Pulumi.Google Native. Game Services. V1Beta. Outputs. Audit Config Response> - Specifies cloud audit logging configuration for this policy.
- Bindings
List<Pulumi.
Google Native. Game Services. V1Beta. Outputs. Binding Response> - Associates a list of
members
, or principals, with arole
. Optionally, may specify acondition
that determines how and when thebindings
are applied. Each of thebindings
must contain at least one principal. Thebindings
in aPolicy
can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if thebindings
grant 50 different roles touser:alice@example.com
, and not to any other principal, then you can add another 1,450 principals to thebindings
in thePolicy
. - Etag string
etag
is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of theetag
in the read-modify-write cycle to perform policy updates in order to avoid race conditions: Anetag
is returned in the response togetIamPolicy
, and systems are expected to put that etag in the request tosetIamPolicy
to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost.- Rules
List<Pulumi.
Google Native. Game Services. V1Beta. Outputs. Rule Response> - If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
- Version int
- Specifies the format of the policy. Valid values are
0
,1
, and3
. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version3
. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
- Audit
Configs []AuditConfig Response - Specifies cloud audit logging configuration for this policy.
- Bindings
[]Binding
Response - Associates a list of
members
, or principals, with arole
. Optionally, may specify acondition
that determines how and when thebindings
are applied. Each of thebindings
must contain at least one principal. Thebindings
in aPolicy
can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if thebindings
grant 50 different roles touser:alice@example.com
, and not to any other principal, then you can add another 1,450 principals to thebindings
in thePolicy
. - Etag string
etag
is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of theetag
in the read-modify-write cycle to perform policy updates in order to avoid race conditions: Anetag
is returned in the response togetIamPolicy
, and systems are expected to put that etag in the request tosetIamPolicy
to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost.- Rules
[]Rule
Response - If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
- Version int
- Specifies the format of the policy. Valid values are
0
,1
, and3
. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version3
. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
- audit
Configs List<AuditConfig Response> - Specifies cloud audit logging configuration for this policy.
- bindings
List<Binding
Response> - Associates a list of
members
, or principals, with arole
. Optionally, may specify acondition
that determines how and when thebindings
are applied. Each of thebindings
must contain at least one principal. Thebindings
in aPolicy
can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if thebindings
grant 50 different roles touser:alice@example.com
, and not to any other principal, then you can add another 1,450 principals to thebindings
in thePolicy
. - etag String
etag
is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of theetag
in the read-modify-write cycle to perform policy updates in order to avoid race conditions: Anetag
is returned in the response togetIamPolicy
, and systems are expected to put that etag in the request tosetIamPolicy
to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost.- rules
List<Rule
Response> - If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
- version Integer
- Specifies the format of the policy. Valid values are
0
,1
, and3
. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version3
. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
- audit
Configs AuditConfig Response[] - Specifies cloud audit logging configuration for this policy.
- bindings
Binding
Response[] - Associates a list of
members
, or principals, with arole
. Optionally, may specify acondition
that determines how and when thebindings
are applied. Each of thebindings
must contain at least one principal. Thebindings
in aPolicy
can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if thebindings
grant 50 different roles touser:alice@example.com
, and not to any other principal, then you can add another 1,450 principals to thebindings
in thePolicy
. - etag string
etag
is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of theetag
in the read-modify-write cycle to perform policy updates in order to avoid race conditions: Anetag
is returned in the response togetIamPolicy
, and systems are expected to put that etag in the request tosetIamPolicy
to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost.- rules
Rule
Response[] - If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
- version number
- Specifies the format of the policy. Valid values are
0
,1
, and3
. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version3
. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
- audit_
configs Sequence[AuditConfig Response] - Specifies cloud audit logging configuration for this policy.
- bindings
Sequence[Binding
Response] - Associates a list of
members
, or principals, with arole
. Optionally, may specify acondition
that determines how and when thebindings
are applied. Each of thebindings
must contain at least one principal. Thebindings
in aPolicy
can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if thebindings
grant 50 different roles touser:alice@example.com
, and not to any other principal, then you can add another 1,450 principals to thebindings
in thePolicy
. - etag str
etag
is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of theetag
in the read-modify-write cycle to perform policy updates in order to avoid race conditions: Anetag
is returned in the response togetIamPolicy
, and systems are expected to put that etag in the request tosetIamPolicy
to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost.- rules
Sequence[Rule
Response] - If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
- version int
- Specifies the format of the policy. Valid values are
0
,1
, and3
. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version3
. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
- audit
Configs List<Property Map> - Specifies cloud audit logging configuration for this policy.
- bindings List<Property Map>
- Associates a list of
members
, or principals, with arole
. Optionally, may specify acondition
that determines how and when thebindings
are applied. Each of thebindings
must contain at least one principal. Thebindings
in aPolicy
can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if thebindings
grant 50 different roles touser:alice@example.com
, and not to any other principal, then you can add another 1,450 principals to thebindings
in thePolicy
. - etag String
etag
is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of theetag
in the read-modify-write cycle to perform policy updates in order to avoid race conditions: Anetag
is returned in the response togetIamPolicy
, and systems are expected to put that etag in the request tosetIamPolicy
to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost.- rules List<Property Map>
- If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.
- version Number
- Specifies the format of the policy. Valid values are
0
,1
, and3
. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version3
. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include theetag
field whenever you callsetIamPolicy
. If you omit this field, then IAM allows you to overwrite a version3
policy with a version1
policy, and all of the conditions in the version3
policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
Supporting Types
AuditConfigResponse
- Audit
Log Configs This property is required. List<Pulumi.Google Native. Game Services. V1Beta. Inputs. Audit Log Config Response> - The configuration for logging of each type of permission.
- Service
This property is required. string - Specifies a service that will be enabled for audit logging. For example,
storage.googleapis.com
,cloudsql.googleapis.com
.allServices
is a special value that covers all services.
- Audit
Log Configs This property is required. []AuditLog Config Response - The configuration for logging of each type of permission.
- Service
This property is required. string - Specifies a service that will be enabled for audit logging. For example,
storage.googleapis.com
,cloudsql.googleapis.com
.allServices
is a special value that covers all services.
- audit
Log Configs This property is required. List<AuditLog Config Response> - The configuration for logging of each type of permission.
- service
This property is required. String - Specifies a service that will be enabled for audit logging. For example,
storage.googleapis.com
,cloudsql.googleapis.com
.allServices
is a special value that covers all services.
- audit
Log Configs This property is required. AuditLog Config Response[] - The configuration for logging of each type of permission.
- service
This property is required. string - Specifies a service that will be enabled for audit logging. For example,
storage.googleapis.com
,cloudsql.googleapis.com
.allServices
is a special value that covers all services.
- audit_
log_ configs This property is required. Sequence[AuditLog Config Response] - The configuration for logging of each type of permission.
- service
This property is required. str - Specifies a service that will be enabled for audit logging. For example,
storage.googleapis.com
,cloudsql.googleapis.com
.allServices
is a special value that covers all services.
- audit
Log Configs This property is required. List<Property Map> - The configuration for logging of each type of permission.
- service
This property is required. String - Specifies a service that will be enabled for audit logging. For example,
storage.googleapis.com
,cloudsql.googleapis.com
.allServices
is a special value that covers all services.
AuditLogConfigResponse
- Exempted
Members This property is required. List<string> - Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
- Ignore
Child Exemptions This property is required. bool - Log
Type This property is required. string - The log type that this config enables.
- Exempted
Members This property is required. []string - Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
- Ignore
Child Exemptions This property is required. bool - Log
Type This property is required. string - The log type that this config enables.
- exempted
Members This property is required. List<String> - Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
- ignore
Child Exemptions This property is required. Boolean - log
Type This property is required. String - The log type that this config enables.
- exempted
Members This property is required. string[] - Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
- ignore
Child Exemptions This property is required. boolean - log
Type This property is required. string - The log type that this config enables.
- exempted_
members This property is required. Sequence[str] - Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
- ignore_
child_ exemptions This property is required. bool - log_
type This property is required. str - The log type that this config enables.
- exempted
Members This property is required. List<String> - Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
- ignore
Child Exemptions This property is required. Boolean - log
Type This property is required. String - The log type that this config enables.
AuthorizationLoggingOptionsResponse
- Permission
Type This property is required. string - The type of the permission that was checked.
- Permission
Type This property is required. string - The type of the permission that was checked.
- permission
Type This property is required. String - The type of the permission that was checked.
- permission
Type This property is required. string - The type of the permission that was checked.
- permission_
type This property is required. str - The type of the permission that was checked.
- permission
Type This property is required. String - The type of the permission that was checked.
BindingResponse
- Binding
Id This property is required. string - Condition
This property is required. Pulumi.Google Native. Game Services. V1Beta. Inputs. Expr Response - The condition that is associated with this binding. If the condition evaluates to
true
, then this binding applies to the current request. If the condition evaluates tofalse
, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation. - Members
This property is required. List<string> - Specifies the principals requesting access for a Google Cloud resource.
members
can have the following values: *allUsers
: A special identifier that represents anyone who is on the internet; with or without a Google account. *allAuthenticatedUsers
: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. *user:{emailid}
: An email address that represents a specific Google account. For example,alice@example.com
. *serviceAccount:{emailid}
: An email address that represents a Google service account. For example,my-other-app@appspot.gserviceaccount.com
. *serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]
: An identifier for a Kubernetes service account. For example,my-project.svc.id.goog[my-namespace/my-kubernetes-sa]
. *group:{emailid}
: An email address that represents a Google group. For example,admins@example.com
. *domain:{domain}
: The G Suite domain (primary) that represents all the users of that domain. For example,google.com
orexample.com
. *deleted:user:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a user that has been recently deleted. For example,alice@example.com?uid=123456789012345678901
. If the user is recovered, this value reverts touser:{emailid}
and the recovered user retains the role in the binding. *deleted:serviceAccount:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a service account that has been recently deleted. For example,my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901
. If the service account is undeleted, this value reverts toserviceAccount:{emailid}
and the undeleted service account retains the role in the binding. *deleted:group:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example,admins@example.com?uid=123456789012345678901
. If the group is recovered, this value reverts togroup:{emailid}
and the recovered group retains the role in the binding. - Role
This property is required. string - Role that is assigned to the list of
members
, or principals. For example,roles/viewer
,roles/editor
, orroles/owner
.
- Binding
Id This property is required. string - Condition
This property is required. ExprResponse - The condition that is associated with this binding. If the condition evaluates to
true
, then this binding applies to the current request. If the condition evaluates tofalse
, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation. - Members
This property is required. []string - Specifies the principals requesting access for a Google Cloud resource.
members
can have the following values: *allUsers
: A special identifier that represents anyone who is on the internet; with or without a Google account. *allAuthenticatedUsers
: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. *user:{emailid}
: An email address that represents a specific Google account. For example,alice@example.com
. *serviceAccount:{emailid}
: An email address that represents a Google service account. For example,my-other-app@appspot.gserviceaccount.com
. *serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]
: An identifier for a Kubernetes service account. For example,my-project.svc.id.goog[my-namespace/my-kubernetes-sa]
. *group:{emailid}
: An email address that represents a Google group. For example,admins@example.com
. *domain:{domain}
: The G Suite domain (primary) that represents all the users of that domain. For example,google.com
orexample.com
. *deleted:user:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a user that has been recently deleted. For example,alice@example.com?uid=123456789012345678901
. If the user is recovered, this value reverts touser:{emailid}
and the recovered user retains the role in the binding. *deleted:serviceAccount:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a service account that has been recently deleted. For example,my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901
. If the service account is undeleted, this value reverts toserviceAccount:{emailid}
and the undeleted service account retains the role in the binding. *deleted:group:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example,admins@example.com?uid=123456789012345678901
. If the group is recovered, this value reverts togroup:{emailid}
and the recovered group retains the role in the binding. - Role
This property is required. string - Role that is assigned to the list of
members
, or principals. For example,roles/viewer
,roles/editor
, orroles/owner
.
- binding
Id This property is required. String - condition
This property is required. ExprResponse - The condition that is associated with this binding. If the condition evaluates to
true
, then this binding applies to the current request. If the condition evaluates tofalse
, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation. - members
This property is required. List<String> - Specifies the principals requesting access for a Google Cloud resource.
members
can have the following values: *allUsers
: A special identifier that represents anyone who is on the internet; with or without a Google account. *allAuthenticatedUsers
: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. *user:{emailid}
: An email address that represents a specific Google account. For example,alice@example.com
. *serviceAccount:{emailid}
: An email address that represents a Google service account. For example,my-other-app@appspot.gserviceaccount.com
. *serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]
: An identifier for a Kubernetes service account. For example,my-project.svc.id.goog[my-namespace/my-kubernetes-sa]
. *group:{emailid}
: An email address that represents a Google group. For example,admins@example.com
. *domain:{domain}
: The G Suite domain (primary) that represents all the users of that domain. For example,google.com
orexample.com
. *deleted:user:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a user that has been recently deleted. For example,alice@example.com?uid=123456789012345678901
. If the user is recovered, this value reverts touser:{emailid}
and the recovered user retains the role in the binding. *deleted:serviceAccount:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a service account that has been recently deleted. For example,my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901
. If the service account is undeleted, this value reverts toserviceAccount:{emailid}
and the undeleted service account retains the role in the binding. *deleted:group:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example,admins@example.com?uid=123456789012345678901
. If the group is recovered, this value reverts togroup:{emailid}
and the recovered group retains the role in the binding. - role
This property is required. String - Role that is assigned to the list of
members
, or principals. For example,roles/viewer
,roles/editor
, orroles/owner
.
- binding
Id This property is required. string - condition
This property is required. ExprResponse - The condition that is associated with this binding. If the condition evaluates to
true
, then this binding applies to the current request. If the condition evaluates tofalse
, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation. - members
This property is required. string[] - Specifies the principals requesting access for a Google Cloud resource.
members
can have the following values: *allUsers
: A special identifier that represents anyone who is on the internet; with or without a Google account. *allAuthenticatedUsers
: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. *user:{emailid}
: An email address that represents a specific Google account. For example,alice@example.com
. *serviceAccount:{emailid}
: An email address that represents a Google service account. For example,my-other-app@appspot.gserviceaccount.com
. *serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]
: An identifier for a Kubernetes service account. For example,my-project.svc.id.goog[my-namespace/my-kubernetes-sa]
. *group:{emailid}
: An email address that represents a Google group. For example,admins@example.com
. *domain:{domain}
: The G Suite domain (primary) that represents all the users of that domain. For example,google.com
orexample.com
. *deleted:user:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a user that has been recently deleted. For example,alice@example.com?uid=123456789012345678901
. If the user is recovered, this value reverts touser:{emailid}
and the recovered user retains the role in the binding. *deleted:serviceAccount:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a service account that has been recently deleted. For example,my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901
. If the service account is undeleted, this value reverts toserviceAccount:{emailid}
and the undeleted service account retains the role in the binding. *deleted:group:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example,admins@example.com?uid=123456789012345678901
. If the group is recovered, this value reverts togroup:{emailid}
and the recovered group retains the role in the binding. - role
This property is required. string - Role that is assigned to the list of
members
, or principals. For example,roles/viewer
,roles/editor
, orroles/owner
.
- binding_
id This property is required. str - condition
This property is required. ExprResponse - The condition that is associated with this binding. If the condition evaluates to
true
, then this binding applies to the current request. If the condition evaluates tofalse
, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation. - members
This property is required. Sequence[str] - Specifies the principals requesting access for a Google Cloud resource.
members
can have the following values: *allUsers
: A special identifier that represents anyone who is on the internet; with or without a Google account. *allAuthenticatedUsers
: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. *user:{emailid}
: An email address that represents a specific Google account. For example,alice@example.com
. *serviceAccount:{emailid}
: An email address that represents a Google service account. For example,my-other-app@appspot.gserviceaccount.com
. *serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]
: An identifier for a Kubernetes service account. For example,my-project.svc.id.goog[my-namespace/my-kubernetes-sa]
. *group:{emailid}
: An email address that represents a Google group. For example,admins@example.com
. *domain:{domain}
: The G Suite domain (primary) that represents all the users of that domain. For example,google.com
orexample.com
. *deleted:user:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a user that has been recently deleted. For example,alice@example.com?uid=123456789012345678901
. If the user is recovered, this value reverts touser:{emailid}
and the recovered user retains the role in the binding. *deleted:serviceAccount:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a service account that has been recently deleted. For example,my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901
. If the service account is undeleted, this value reverts toserviceAccount:{emailid}
and the undeleted service account retains the role in the binding. *deleted:group:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example,admins@example.com?uid=123456789012345678901
. If the group is recovered, this value reverts togroup:{emailid}
and the recovered group retains the role in the binding. - role
This property is required. str - Role that is assigned to the list of
members
, or principals. For example,roles/viewer
,roles/editor
, orroles/owner
.
- binding
Id This property is required. String - condition
This property is required. Property Map - The condition that is associated with this binding. If the condition evaluates to
true
, then this binding applies to the current request. If the condition evaluates tofalse
, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation. - members
This property is required. List<String> - Specifies the principals requesting access for a Google Cloud resource.
members
can have the following values: *allUsers
: A special identifier that represents anyone who is on the internet; with or without a Google account. *allAuthenticatedUsers
: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. *user:{emailid}
: An email address that represents a specific Google account. For example,alice@example.com
. *serviceAccount:{emailid}
: An email address that represents a Google service account. For example,my-other-app@appspot.gserviceaccount.com
. *serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]
: An identifier for a Kubernetes service account. For example,my-project.svc.id.goog[my-namespace/my-kubernetes-sa]
. *group:{emailid}
: An email address that represents a Google group. For example,admins@example.com
. *domain:{domain}
: The G Suite domain (primary) that represents all the users of that domain. For example,google.com
orexample.com
. *deleted:user:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a user that has been recently deleted. For example,alice@example.com?uid=123456789012345678901
. If the user is recovered, this value reverts touser:{emailid}
and the recovered user retains the role in the binding. *deleted:serviceAccount:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a service account that has been recently deleted. For example,my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901
. If the service account is undeleted, this value reverts toserviceAccount:{emailid}
and the undeleted service account retains the role in the binding. *deleted:group:{emailid}?uid={uniqueid}
: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example,admins@example.com?uid=123456789012345678901
. If the group is recovered, this value reverts togroup:{emailid}
and the recovered group retains the role in the binding. - role
This property is required. String - Role that is assigned to the list of
members
, or principals. For example,roles/viewer
,roles/editor
, orroles/owner
.
CloudAuditOptionsResponse
This property is required. Pulumi.Google Native. Game Services. V1Beta. Inputs. Authorization Logging Options Response - Information used by the Cloud Audit Logging pipeline.
- Log
Name This property is required. string - The log_name to populate in the Cloud Audit Record.
This property is required. AuthorizationLogging Options Response - Information used by the Cloud Audit Logging pipeline.
- Log
Name This property is required. string - The log_name to populate in the Cloud Audit Record.
This property is required. AuthorizationLogging Options Response - Information used by the Cloud Audit Logging pipeline.
- log
Name This property is required. String - The log_name to populate in the Cloud Audit Record.
This property is required. AuthorizationLogging Options Response - Information used by the Cloud Audit Logging pipeline.
- log
Name This property is required. string - The log_name to populate in the Cloud Audit Record.
This property is required. AuthorizationLogging Options Response - Information used by the Cloud Audit Logging pipeline.
- log_
name This property is required. str - The log_name to populate in the Cloud Audit Record.
This property is required. Property Map- Information used by the Cloud Audit Logging pipeline.
- log
Name This property is required. String - The log_name to populate in the Cloud Audit Record.
ConditionResponse
- Iam
This property is required. string - Trusted attributes supplied by the IAM system.
- Op
This property is required. string - An operator to apply the subject with.
- Svc
This property is required. string - Trusted attributes discharged by the service.
- Sys
This property is required. string - Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
- Values
This property is required. List<string> - The objects of the condition.
- Iam
This property is required. string - Trusted attributes supplied by the IAM system.
- Op
This property is required. string - An operator to apply the subject with.
- Svc
This property is required. string - Trusted attributes discharged by the service.
- Sys
This property is required. string - Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
- Values
This property is required. []string - The objects of the condition.
- iam
This property is required. String - Trusted attributes supplied by the IAM system.
- op
This property is required. String - An operator to apply the subject with.
- svc
This property is required. String - Trusted attributes discharged by the service.
- sys
This property is required. String - Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
- values
This property is required. List<String> - The objects of the condition.
- iam
This property is required. string - Trusted attributes supplied by the IAM system.
- op
This property is required. string - An operator to apply the subject with.
- svc
This property is required. string - Trusted attributes discharged by the service.
- sys
This property is required. string - Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
- values
This property is required. string[] - The objects of the condition.
- iam
This property is required. str - Trusted attributes supplied by the IAM system.
- op
This property is required. str - An operator to apply the subject with.
- svc
This property is required. str - Trusted attributes discharged by the service.
- sys
This property is required. str - Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
- values
This property is required. Sequence[str] - The objects of the condition.
- iam
This property is required. String - Trusted attributes supplied by the IAM system.
- op
This property is required. String - An operator to apply the subject with.
- svc
This property is required. String - Trusted attributes discharged by the service.
- sys
This property is required. String - Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
- values
This property is required. List<String> - The objects of the condition.
CounterOptionsResponse
- Custom
Fields This property is required. List<Pulumi.Google Native. Game Services. V1Beta. Inputs. Custom Field Response> - Custom fields.
- Field
This property is required. string - The field value to attribute.
- Metric
This property is required. string - The metric to update.
- Custom
Fields This property is required. []CustomField Response - Custom fields.
- Field
This property is required. string - The field value to attribute.
- Metric
This property is required. string - The metric to update.
- custom
Fields This property is required. List<CustomField Response> - Custom fields.
- field
This property is required. String - The field value to attribute.
- metric
This property is required. String - The metric to update.
- custom
Fields This property is required. CustomField Response[] - Custom fields.
- field
This property is required. string - The field value to attribute.
- metric
This property is required. string - The metric to update.
- custom_
fields This property is required. Sequence[CustomField Response] - Custom fields.
- field
This property is required. str - The field value to attribute.
- metric
This property is required. str - The metric to update.
- custom
Fields This property is required. List<Property Map> - Custom fields.
- field
This property is required. String - The field value to attribute.
- metric
This property is required. String - The metric to update.
CustomFieldResponse
DataAccessOptionsResponse
- Log
Mode This property is required. string
- Log
Mode This property is required. string
- log
Mode This property is required. String
- log
Mode This property is required. string
- log_
mode This property is required. str
- log
Mode This property is required. String
ExprResponse
- Description
This property is required. string - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- Expression
This property is required. string - Textual representation of an expression in Common Expression Language syntax.
- Location
This property is required. string - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- Title
This property is required. string - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- Description
This property is required. string - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- Expression
This property is required. string - Textual representation of an expression in Common Expression Language syntax.
- Location
This property is required. string - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- Title
This property is required. string - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. String - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. String - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. String - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. String - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. string - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. string - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. string - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. string - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. str - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. str - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. str - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. str - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
- description
This property is required. String - Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
- expression
This property is required. String - Textual representation of an expression in Common Expression Language syntax.
- location
This property is required. String - Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
- title
This property is required. String - Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
LogConfigResponse
- Cloud
Audit This property is required. Pulumi.Google Native. Game Services. V1Beta. Inputs. Cloud Audit Options Response - Cloud audit options.
- Counter
This property is required. Pulumi.Google Native. Game Services. V1Beta. Inputs. Counter Options Response - Counter options.
- Data
Access This property is required. Pulumi.Google Native. Game Services. V1Beta. Inputs. Data Access Options Response - Data access options.
- Cloud
Audit This property is required. CloudAudit Options Response - Cloud audit options.
- Counter
This property is required. CounterOptions Response - Counter options.
- Data
Access This property is required. DataAccess Options Response - Data access options.
- cloud
Audit This property is required. CloudAudit Options Response - Cloud audit options.
- counter
This property is required. CounterOptions Response - Counter options.
- data
Access This property is required. DataAccess Options Response - Data access options.
- cloud
Audit This property is required. CloudAudit Options Response - Cloud audit options.
- counter
This property is required. CounterOptions Response - Counter options.
- data
Access This property is required. DataAccess Options Response - Data access options.
- cloud_
audit This property is required. CloudAudit Options Response - Cloud audit options.
- counter
This property is required. CounterOptions Response - Counter options.
- data_
access This property is required. DataAccess Options Response - Data access options.
- cloud
Audit This property is required. Property Map - Cloud audit options.
- counter
This property is required. Property Map - Counter options.
- data
Access This property is required. Property Map - Data access options.
RuleResponse
- Action
This property is required. string - Required
- Conditions
This property is required. List<Pulumi.Google Native. Game Services. V1Beta. Inputs. Condition Response> - Additional restrictions that must be met. All conditions must pass for the rule to match.
- Description
This property is required. string - Human-readable description of the rule.
- In
This property is required. List<string> - If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
- Log
Config This property is required. List<Pulumi.Google Native. Game Services. V1Beta. Inputs. Log Config Response> - The config returned to callers of CheckPolicy for any entries that match the LOG action.
- Not
In This property is required. List<string> - If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
- Permissions
This property is required. List<string> - A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.
- Action
This property is required. string - Required
- Conditions
This property is required. []ConditionResponse - Additional restrictions that must be met. All conditions must pass for the rule to match.
- Description
This property is required. string - Human-readable description of the rule.
- In
This property is required. []string - If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
- Log
Config This property is required. []LogConfig Response - The config returned to callers of CheckPolicy for any entries that match the LOG action.
- Not
In This property is required. []string - If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
- Permissions
This property is required. []string - A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.
- action
This property is required. String - Required
- conditions
This property is required. List<ConditionResponse> - Additional restrictions that must be met. All conditions must pass for the rule to match.
- description
This property is required. String - Human-readable description of the rule.
- in
This property is required. List<String> - If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
- log
Config This property is required. List<LogConfig Response> - The config returned to callers of CheckPolicy for any entries that match the LOG action.
- not
In This property is required. List<String> - If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
- permissions
This property is required. List<String> - A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.
- action
This property is required. string - Required
- conditions
This property is required. ConditionResponse[] - Additional restrictions that must be met. All conditions must pass for the rule to match.
- description
This property is required. string - Human-readable description of the rule.
- in
This property is required. string[] - If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
- log
Config This property is required. LogConfig Response[] - The config returned to callers of CheckPolicy for any entries that match the LOG action.
- not
In This property is required. string[] - If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
- permissions
This property is required. string[] - A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.
- action
This property is required. str - Required
- conditions
This property is required. Sequence[ConditionResponse] - Additional restrictions that must be met. All conditions must pass for the rule to match.
- description
This property is required. str - Human-readable description of the rule.
- in_
This property is required. Sequence[str] - If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
- log_
config This property is required. Sequence[LogConfig Response] - The config returned to callers of CheckPolicy for any entries that match the LOG action.
- not_
in This property is required. Sequence[str] - If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
- permissions
This property is required. Sequence[str] - A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.
- action
This property is required. String - Required
- conditions
This property is required. List<Property Map> - Additional restrictions that must be met. All conditions must pass for the rule to match.
- description
This property is required. String - Human-readable description of the rule.
- in
This property is required. List<String> - If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.
- log
Config This property is required. List<Property Map> - The config returned to callers of CheckPolicy for any entries that match the LOG action.
- not
In This property is required. List<String> - If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries. The format for in and not_in entries can be found at in the Local IAM documentation (see go/local-iam#features).
- permissions
This property is required. List<String> - A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '' matches all permissions, and a verb part of '' (e.g., 'storage.buckets.*') matches all verbs.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.