pub struct SecurityPolicyResult {
pub adaptive_protection_config: Output<Option<SecurityPolicyAdaptiveProtectionConfig>>,
pub advanced_options_config: Output<SecurityPolicyAdvancedOptionsConfig>,
pub description: Output<Option<String>>,
pub fingerprint: Output<String>,
pub name: Output<String>,
pub project: Output<String>,
pub recaptcha_options_config: Output<Option<SecurityPolicyRecaptchaOptionsConfig>>,
pub rules: Output<Vec<SecurityPolicyRule>>,
pub self_link: Output<String>,
pub type_: Output<String>,
}
Fields§
§adaptive_protection_config: Output<Option<SecurityPolicyAdaptiveProtectionConfig>>
Configuration for Google Cloud Armor Adaptive Protection. Structure is documented below.
advanced_options_config: Output<SecurityPolicyAdvancedOptionsConfig>
Advanced Configuration Options. Structure is documented below.
description: Output<Option<String>>
An optional description of this security policy. Max size is 2048.
fingerprint: Output<String>
Fingerprint of this resource.
name: Output<String>
The name of the security policy.
project: Output<String>
The project in which the resource belongs. If it is not provided, the provider project is used.
recaptcha_options_config: Output<Option<SecurityPolicyRecaptchaOptionsConfig>>
reCAPTCHA Configuration Options. Structure is documented below.
rules: Output<Vec<SecurityPolicyRule>>
The set of rules that belong to this policy. There must always be a default rule (rule with priority 2147483647 and match “*”). If no rules are provided when creating a security policy, a default rule with action “allow” will be added. Structure is documented below.
self_link: Output<String>
The URI of the created resource.
type_: Output<String>
The type indicates the intended use of the security policy. This field can be set only at resource creation time.
CLOUD_ARMOR
- Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services. They filter requests before they hit the origin servers.CLOUD_ARMOR_EDGE
- Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage). They filter requests before the request is served from Google’s cache.CLOUD_ARMOR_INTERNAL_SERVICE
- Cloud Armor internal service policies can be configured to filter HTTP requests targeting services managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.