138 lines
4.2 KiB
PHP
138 lines
4.2 KiB
PHP
<?php
|
|
/*
|
|
* Copyright 2014 Google Inc.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
|
* use this file except in compliance with the License. You may obtain a copy of
|
|
* the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
* License for the specific language governing permissions and limitations under
|
|
* the License.
|
|
*/
|
|
|
|
namespace Google\Service\AccessContextManager;
|
|
|
|
class EgressTo extends \Google\Collection
|
|
{
|
|
protected $collection_key = 'roles';
|
|
/**
|
|
* A list of external resources that are allowed to be accessed. Only AWS and
|
|
* Azure resources are supported. For Amazon S3, the supported formats are
|
|
* s3://BUCKET_NAME, s3a://BUCKET_NAME, and s3n://BUCKET_NAME. For Azure
|
|
* Storage, the supported format is
|
|
* azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches
|
|
* if it contains an external resource in this list (Example:
|
|
* s3://bucket/path). Currently '*' is not allowed.
|
|
*
|
|
* @var string[]
|
|
*/
|
|
public $externalResources;
|
|
protected $operationsType = ApiOperation::class;
|
|
protected $operationsDataType = 'array';
|
|
/**
|
|
* A list of resources, currently only projects in the form `projects/`, that
|
|
* are allowed to be accessed by sources defined in the corresponding
|
|
* EgressFrom. A request matches if it contains a resource in this list. If
|
|
* `*` is specified for `resources`, then this EgressTo rule will authorize
|
|
* access to all resources outside the perimeter.
|
|
*
|
|
* @var string[]
|
|
*/
|
|
public $resources;
|
|
/**
|
|
* IAM roles that represent the set of operations that the sources specified
|
|
* in the corresponding EgressFrom. are allowed to perform in this
|
|
* ServicePerimeter.
|
|
*
|
|
* @var string[]
|
|
*/
|
|
public $roles;
|
|
|
|
/**
|
|
* A list of external resources that are allowed to be accessed. Only AWS and
|
|
* Azure resources are supported. For Amazon S3, the supported formats are
|
|
* s3://BUCKET_NAME, s3a://BUCKET_NAME, and s3n://BUCKET_NAME. For Azure
|
|
* Storage, the supported format is
|
|
* azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches
|
|
* if it contains an external resource in this list (Example:
|
|
* s3://bucket/path). Currently '*' is not allowed.
|
|
*
|
|
* @param string[] $externalResources
|
|
*/
|
|
public function setExternalResources($externalResources)
|
|
{
|
|
$this->externalResources = $externalResources;
|
|
}
|
|
/**
|
|
* @return string[]
|
|
*/
|
|
public function getExternalResources()
|
|
{
|
|
return $this->externalResources;
|
|
}
|
|
/**
|
|
* A list of ApiOperations allowed to be performed by the sources specified in
|
|
* the corresponding EgressFrom. A request matches if it uses an
|
|
* operation/service in this list.
|
|
*
|
|
* @param ApiOperation[] $operations
|
|
*/
|
|
public function setOperations($operations)
|
|
{
|
|
$this->operations = $operations;
|
|
}
|
|
/**
|
|
* @return ApiOperation[]
|
|
*/
|
|
public function getOperations()
|
|
{
|
|
return $this->operations;
|
|
}
|
|
/**
|
|
* A list of resources, currently only projects in the form `projects/`, that
|
|
* are allowed to be accessed by sources defined in the corresponding
|
|
* EgressFrom. A request matches if it contains a resource in this list. If
|
|
* `*` is specified for `resources`, then this EgressTo rule will authorize
|
|
* access to all resources outside the perimeter.
|
|
*
|
|
* @param string[] $resources
|
|
*/
|
|
public function setResources($resources)
|
|
{
|
|
$this->resources = $resources;
|
|
}
|
|
/**
|
|
* @return string[]
|
|
*/
|
|
public function getResources()
|
|
{
|
|
return $this->resources;
|
|
}
|
|
/**
|
|
* IAM roles that represent the set of operations that the sources specified
|
|
* in the corresponding EgressFrom. are allowed to perform in this
|
|
* ServicePerimeter.
|
|
*
|
|
* @param string[] $roles
|
|
*/
|
|
public function setRoles($roles)
|
|
{
|
|
$this->roles = $roles;
|
|
}
|
|
/**
|
|
* @return string[]
|
|
*/
|
|
public function getRoles()
|
|
{
|
|
return $this->roles;
|
|
}
|
|
}
|
|
|
|
// Adding a class alias for backwards compatibility with the previous class name.
|
|
class_alias(EgressTo::class, 'Google_Service_AccessContextManager_EgressTo');
|