import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * A rule for the OrganizationSecurityPolicy. * * To get more information about OrganizationSecurityPolicyRule, see: * * * [API documentation](https://cloud.google.com/compute/docs/reference/rest/beta/organizationSecurityPolicies/addRule) * * How-to Guides * * [Creating firewall rules](https://cloud.google.com/vpc/docs/using-firewall-policies#create-rules) * * ## Example Usage * * ### Organization Security Policy Rule Basic * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as gcp from "@pulumi/gcp"; * * const policy = new gcp.compute.OrganizationSecurityPolicy("policy", { * displayName: "tf-test", * parent: "organizations/123456789", * }); * const policyOrganizationSecurityPolicyRule = new gcp.compute.OrganizationSecurityPolicyRule("policy", { * policyId: policy.id, * action: "allow", * direction: "INGRESS", * enableLogging: true, * match: { * config: { * srcIpRanges: [ * "192.168.0.0/16", * "10.0.0.0/8", * ], * layer4Configs: [ * { * ipProtocol: "tcp", * ports: ["22"], * }, * { * ipProtocol: "icmp", * }, * ], * }, * }, * priority: 100, * }); * ``` * * ## Import * * OrganizationSecurityPolicyRule can be imported using any of these accepted formats: * * * `{{policy_id}}/priority/{{priority}}` * * When using the `pulumi import` command, OrganizationSecurityPolicyRule can be imported using one of the formats above. For example: * * ```sh * $ pulumi import gcp:compute/organizationSecurityPolicyRule:OrganizationSecurityPolicyRule default {{policy_id}}/priority/{{priority}} * ``` */ export declare class OrganizationSecurityPolicyRule extends pulumi.CustomResource { /** * Get an existing OrganizationSecurityPolicyRule resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: OrganizationSecurityPolicyRuleState, opts?: pulumi.CustomResourceOptions): OrganizationSecurityPolicyRule; /** * Returns true if the given object is an instance of OrganizationSecurityPolicyRule. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is OrganizationSecurityPolicyRule; /** * The Action to perform when the client connection triggers the rule. Can currently be either * "allow", "deny" or "gotoNext". */ readonly action: pulumi.Output; /** * A description of the rule. */ readonly description: pulumi.Output; /** * The direction in which this rule applies. If unspecified an INGRESS rule is created. Possible values: ["INGRESS", * "EGRESS"] */ readonly direction: pulumi.Output; /** * Denotes whether to enable logging for a particular rule. If logging is enabled, logs will be exported to the configured * export destination in Stackdriver. */ readonly enableLogging: pulumi.Output; /** * A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced. * Structure is documented below. */ readonly match: pulumi.Output; /** * The ID of the OrganizationSecurityPolicy this rule applies to. */ readonly policyId: pulumi.Output; /** * If set to true, the specified action is not enforced. */ readonly preview: pulumi.Output; /** * An integer indicating the priority of a rule in the list. The priority must be a value * between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the * highest priority and 2147483647 is the lowest prority. */ readonly priority: pulumi.Output; /** * A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get * this rule. If this field is left blank, all VMs within the organization will receive the rule. */ readonly targetResources: pulumi.Output; /** * A list of service accounts indicating the sets of instances that are applied with this rule. */ readonly targetServiceAccounts: pulumi.Output; /** * Create a OrganizationSecurityPolicyRule resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: OrganizationSecurityPolicyRuleArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering OrganizationSecurityPolicyRule resources. */ export interface OrganizationSecurityPolicyRuleState { /** * The Action to perform when the client connection triggers the rule. Can currently be either * "allow", "deny" or "gotoNext". */ action?: pulumi.Input; /** * A description of the rule. */ description?: pulumi.Input; /** * The direction in which this rule applies. If unspecified an INGRESS rule is created. Possible values: ["INGRESS", * "EGRESS"] */ direction?: pulumi.Input; /** * Denotes whether to enable logging for a particular rule. If logging is enabled, logs will be exported to the configured * export destination in Stackdriver. */ enableLogging?: pulumi.Input; /** * A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced. * Structure is documented below. */ match?: pulumi.Input; /** * The ID of the OrganizationSecurityPolicy this rule applies to. */ policyId?: pulumi.Input; /** * If set to true, the specified action is not enforced. */ preview?: pulumi.Input; /** * An integer indicating the priority of a rule in the list. The priority must be a value * between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the * highest priority and 2147483647 is the lowest prority. */ priority?: pulumi.Input; /** * A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get * this rule. If this field is left blank, all VMs within the organization will receive the rule. */ targetResources?: pulumi.Input[]>; /** * A list of service accounts indicating the sets of instances that are applied with this rule. */ targetServiceAccounts?: pulumi.Input[]>; } /** * The set of arguments for constructing a OrganizationSecurityPolicyRule resource. */ export interface OrganizationSecurityPolicyRuleArgs { /** * The Action to perform when the client connection triggers the rule. Can currently be either * "allow", "deny" or "gotoNext". */ action: pulumi.Input; /** * A description of the rule. */ description?: pulumi.Input; /** * The direction in which this rule applies. If unspecified an INGRESS rule is created. Possible values: ["INGRESS", * "EGRESS"] */ direction?: pulumi.Input; /** * Denotes whether to enable logging for a particular rule. If logging is enabled, logs will be exported to the configured * export destination in Stackdriver. */ enableLogging?: pulumi.Input; /** * A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced. * Structure is documented below. */ match: pulumi.Input; /** * The ID of the OrganizationSecurityPolicy this rule applies to. */ policyId: pulumi.Input; /** * If set to true, the specified action is not enforced. */ preview?: pulumi.Input; /** * An integer indicating the priority of a rule in the list. The priority must be a value * between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the * highest priority and 2147483647 is the lowest prority. */ priority: pulumi.Input; /** * A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get * this rule. If this field is left blank, all VMs within the organization will receive the rule. */ targetResources?: pulumi.Input[]>; /** * A list of service accounts indicating the sets of instances that are applied with this rule. */ targetServiceAccounts?: pulumi.Input[]>; }