google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo */ class EgressTo extends \Google\Protobuf\Internal\Message { /** * A list of resources, currently only projects in the form * `projects/`, that are allowed to be accessed by sources * defined in the corresponding [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it contains a resource in this list. If `*` is * specified for `resources`, then this [EgressTo] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo] * rule will authorize access to all resources outside the perimeter. * * Generated from protobuf field repeated string resources = 1; */ private $resources; /** * A list of [ApiOperations] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] * allowed to be performed by the sources specified in the corresponding * [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it uses an operation/service in this list. * * Generated from protobuf field repeated .google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation operations = 2; */ private $operations; /** * A list of external resources that are allowed to be accessed. Only AWS * and Azure resources are supported. For Amazon S3, the supported format is * s3://BUCKET_NAME. For Azure Storage, the supported format is * azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches * if it contains an external resource in this list (Example: * s3://bucket/path). Currently '*' is not allowed. * * Generated from protobuf field repeated string external_resources = 3; */ private $external_resources; /** * Constructor. * * @param array $data { * Optional. Data for populating the Message object. * * @type array|\Google\Protobuf\Internal\RepeatedField $resources * A list of resources, currently only projects in the form * `projects/`, that are allowed to be accessed by sources * defined in the corresponding [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it contains a resource in this list. If `*` is * specified for `resources`, then this [EgressTo] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo] * rule will authorize access to all resources outside the perimeter. * @type array<\Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\ApiOperation>|\Google\Protobuf\Internal\RepeatedField $operations * A list of [ApiOperations] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] * allowed to be performed by the sources specified in the corresponding * [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it uses an operation/service in this list. * @type array|\Google\Protobuf\Internal\RepeatedField $external_resources * A list of external resources that are allowed to be accessed. Only AWS * and Azure resources are supported. For Amazon S3, the supported format is * s3://BUCKET_NAME. For Azure Storage, the supported format is * azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches * if it contains an external resource in this list (Example: * s3://bucket/path). Currently '*' is not allowed. * } */ public function __construct($data = NULL) { \GPBMetadata\Google\Identity\Accesscontextmanager\V1\ServicePerimeter::initOnce(); parent::__construct($data); } /** * A list of resources, currently only projects in the form * `projects/`, that are allowed to be accessed by sources * defined in the corresponding [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it contains a resource in this list. If `*` is * specified for `resources`, then this [EgressTo] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo] * rule will authorize access to all resources outside the perimeter. * * Generated from protobuf field repeated string resources = 1; * @return \Google\Protobuf\Internal\RepeatedField */ public function getResources() { return $this->resources; } /** * A list of resources, currently only projects in the form * `projects/`, that are allowed to be accessed by sources * defined in the corresponding [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it contains a resource in this list. If `*` is * specified for `resources`, then this [EgressTo] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo] * rule will authorize access to all resources outside the perimeter. * * Generated from protobuf field repeated string resources = 1; * @param array|\Google\Protobuf\Internal\RepeatedField $var * @return $this */ public function setResources($var) { $arr = GPBUtil::checkRepeatedField($var, \Google\Protobuf\Internal\GPBType::STRING); $this->resources = $arr; return $this; } /** * A list of [ApiOperations] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] * allowed to be performed by the sources specified in the corresponding * [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it uses an operation/service in this list. * * Generated from protobuf field repeated .google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation operations = 2; * @return \Google\Protobuf\Internal\RepeatedField */ public function getOperations() { return $this->operations; } /** * A list of [ApiOperations] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation] * allowed to be performed by the sources specified in the corresponding * [EgressFrom] * [google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom]. * A request matches if it uses an operation/service in this list. * * Generated from protobuf field repeated .google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation operations = 2; * @param array<\Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\ApiOperation>|\Google\Protobuf\Internal\RepeatedField $var * @return $this */ public function setOperations($var) { $arr = GPBUtil::checkRepeatedField($var, \Google\Protobuf\Internal\GPBType::MESSAGE, \Google\Identity\AccessContextManager\V1\ServicePerimeterConfig\ApiOperation::class); $this->operations = $arr; return $this; } /** * A list of external resources that are allowed to be accessed. Only AWS * and Azure resources are supported. For Amazon S3, the supported format is * s3://BUCKET_NAME. For Azure Storage, the supported format is * azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches * if it contains an external resource in this list (Example: * s3://bucket/path). Currently '*' is not allowed. * * Generated from protobuf field repeated string external_resources = 3; * @return \Google\Protobuf\Internal\RepeatedField */ public function getExternalResources() { return $this->external_resources; } /** * A list of external resources that are allowed to be accessed. Only AWS * and Azure resources are supported. For Amazon S3, the supported format is * s3://BUCKET_NAME. For Azure Storage, the supported format is * azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches * if it contains an external resource in this list (Example: * s3://bucket/path). Currently '*' is not allowed. * * Generated from protobuf field repeated string external_resources = 3; * @param array|\Google\Protobuf\Internal\RepeatedField $var * @return $this */ public function setExternalResources($var) { $arr = GPBUtil::checkRepeatedField($var, \Google\Protobuf\Internal\GPBType::STRING); $this->external_resources = $arr; return $this; } } // Adding a class alias for backwards compatibility with the previous class name. class_alias(EgressTo::class, \Google\Identity\AccessContextManager\V1\ServicePerimeterConfig_EgressTo::class);