Copyright | (c) 2015-2016 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
Language | Haskell2010 |
- Service Configuration
- OAuth Scopes
- Status
- BasicLevel
- AccessLevel
- BasicLevelCombiningFunction
- ServicePerimeterConfig
- Operation
- ServicePerimeterPerimeterType
- OSConstraintOSType
- ServicePerimeter
- ListAccessPoliciesResponse
- StatusDetailsItem
- OSConstraint
- AccessPolicy
- Xgafv
- ListServicePerimetersResponse
- ListAccessLevelsResponse
- OperationMetadata
- DevicePolicy
- Condition
- OperationResponse
Synopsis
- accessContextManagerService :: ServiceConfig
- cloudPlatformScope :: Proxy '["https://www.googleapis.com/auth/cloud-platform"]
- data Status
- status :: Status
- sDetails :: Lens' Status [StatusDetailsItem]
- sCode :: Lens' Status (Maybe Int32)
- sMessage :: Lens' Status (Maybe Text)
- data BasicLevel
- basicLevel :: BasicLevel
- blConditions :: Lens' BasicLevel [Condition]
- blCombiningFunction :: Lens' BasicLevel (Maybe BasicLevelCombiningFunction)
- data AccessLevel
- accessLevel :: AccessLevel
- alBasic :: Lens' AccessLevel (Maybe BasicLevel)
- alUpdateTime :: Lens' AccessLevel (Maybe UTCTime)
- alName :: Lens' AccessLevel (Maybe Text)
- alTitle :: Lens' AccessLevel (Maybe Text)
- alDescription :: Lens' AccessLevel (Maybe Text)
- alCreateTime :: Lens' AccessLevel (Maybe UTCTime)
- data BasicLevelCombiningFunction
- data ServicePerimeterConfig
- servicePerimeterConfig :: ServicePerimeterConfig
- spcUnrestrictedServices :: Lens' ServicePerimeterConfig [Text]
- spcResources :: Lens' ServicePerimeterConfig [Text]
- spcRestrictedServices :: Lens' ServicePerimeterConfig [Text]
- spcAccessLevels :: Lens' ServicePerimeterConfig [Text]
- data Operation
- operation :: Operation
- oDone :: Lens' Operation (Maybe Bool)
- oError :: Lens' Operation (Maybe Status)
- oResponse :: Lens' Operation (Maybe OperationResponse)
- oName :: Lens' Operation (Maybe Text)
- oMetadata :: Lens' Operation (Maybe OperationMetadata)
- data ServicePerimeterPerimeterType
- data OSConstraintOSType
- data ServicePerimeter
- servicePerimeter :: ServicePerimeter
- spStatus :: Lens' ServicePerimeter (Maybe ServicePerimeterConfig)
- spPerimeterType :: Lens' ServicePerimeter (Maybe ServicePerimeterPerimeterType)
- spUpdateTime :: Lens' ServicePerimeter (Maybe UTCTime)
- spName :: Lens' ServicePerimeter (Maybe Text)
- spTitle :: Lens' ServicePerimeter (Maybe Text)
- spDescription :: Lens' ServicePerimeter (Maybe Text)
- spCreateTime :: Lens' ServicePerimeter (Maybe UTCTime)
- data ListAccessPoliciesResponse
- listAccessPoliciesResponse :: ListAccessPoliciesResponse
- laprNextPageToken :: Lens' ListAccessPoliciesResponse (Maybe Text)
- laprAccessPolicies :: Lens' ListAccessPoliciesResponse [AccessPolicy]
- data StatusDetailsItem
- statusDetailsItem :: HashMap Text JSONValue -> StatusDetailsItem
- sdiAddtional :: Lens' StatusDetailsItem (HashMap Text JSONValue)
- data OSConstraint
- osConstraint :: OSConstraint
- ocOSType :: Lens' OSConstraint (Maybe OSConstraintOSType)
- ocMinimumVersion :: Lens' OSConstraint (Maybe Text)
- data AccessPolicy
- accessPolicy :: AccessPolicy
- apParent :: Lens' AccessPolicy (Maybe Text)
- apUpdateTime :: Lens' AccessPolicy (Maybe UTCTime)
- apName :: Lens' AccessPolicy (Maybe Text)
- apTitle :: Lens' AccessPolicy (Maybe Text)
- apCreateTime :: Lens' AccessPolicy (Maybe UTCTime)
- data Xgafv
- data ListServicePerimetersResponse
- listServicePerimetersResponse :: ListServicePerimetersResponse
- lsprNextPageToken :: Lens' ListServicePerimetersResponse (Maybe Text)
- lsprServicePerimeters :: Lens' ListServicePerimetersResponse [ServicePerimeter]
- data ListAccessLevelsResponse
- listAccessLevelsResponse :: ListAccessLevelsResponse
- lalrNextPageToken :: Lens' ListAccessLevelsResponse (Maybe Text)
- lalrAccessLevels :: Lens' ListAccessLevelsResponse [AccessLevel]
- data OperationMetadata
- operationMetadata :: HashMap Text JSONValue -> OperationMetadata
- omAddtional :: Lens' OperationMetadata (HashMap Text JSONValue)
- data DevicePolicy
- devicePolicy :: DevicePolicy
- dpOSConstraints :: Lens' DevicePolicy [OSConstraint]
- dpRequireScreenlock :: Lens' DevicePolicy (Maybe Bool)
- dpAllowedEncryptionStatuses :: Lens' DevicePolicy [Text]
- dpAllowedDeviceManagementLevels :: Lens' DevicePolicy [Text]
- data Condition
- condition :: Condition
- cMembers :: Lens' Condition [Text]
- cNegate :: Lens' Condition (Maybe Bool)
- cIPSubnetworks :: Lens' Condition [Text]
- cDevicePolicy :: Lens' Condition (Maybe DevicePolicy)
- cRequiredAccessLevels :: Lens' Condition [Text]
- data OperationResponse
- operationResponse :: HashMap Text JSONValue -> OperationResponse
- orAddtional :: Lens' OperationResponse (HashMap Text JSONValue)
Service Configuration
accessContextManagerService :: ServiceConfig Source #
Default request referring to version v1beta
of the Access Context Manager API. This contains the host and root path used as a starting point for constructing service requests.
OAuth Scopes
cloudPlatformScope :: Proxy '["https://www.googleapis.com/auth/cloud-platform"] Source #
View and manage your data across Google Cloud Platform services
Status
The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. The error model is designed to be: - Simple to use and understand for most users - Flexible enough to meet unexpected needs # Overview The `Status` message contains three pieces of data: error code, error message, and error details. The error code should be an enum value of google.rpc.Code, but it may accept additional error codes if needed. The error message should be a developer-facing English message that helps developers *understand* and *resolve* the error. If a localized user-facing error message is needed, put the localized message in the error details or localize it in the client. The optional error details may contain arbitrary information about the error. There is a predefined set of error detail types in the package `google.rpc` that can be used for common error conditions. # Language mapping The `Status` message is the logical representation of the error model, but it is not necessarily the actual wire format. When the `Status` message is exposed in different client libraries and different wire protocols, it can be mapped differently. For example, it will likely be mapped to some exceptions in Java, but more likely mapped to some error codes in C. # Other uses The error model and the `Status` message can be used in a variety of environments, either with or without APIs, to provide a consistent developer experience across different environments. Example uses of this error model include: - Partial errors. If a service needs to return partial errors to the client, it may embed the `Status` in the normal response to indicate the partial errors. - Workflow errors. A typical workflow has multiple steps. Each step may have a `Status` message for error reporting. - Batch operations. If a client uses batch request and batch response, the `Status` message should be used directly inside batch response, one for each error sub-response. - Asynchronous operations. If an API call embeds asynchronous operation results in its response, the status of those operations should be represented directly using the `Status` message. - Logging. If some API errors are stored in logs, the message `Status` could be used directly after any stripping needed for security/privacy reasons.
See: status
smart constructor.
Instances
Eq Status Source # | |
Data Status Source # | |
Defined in Network.Google.AccessContextManager.Types.Product gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Status -> c Status # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Status # toConstr :: Status -> Constr # dataTypeOf :: Status -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c Status) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Status) # gmapT :: (forall b. Data b => b -> b) -> Status -> Status # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Status -> r # gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Status -> r # gmapQ :: (forall d. Data d => d -> u) -> Status -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> Status -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> Status -> m Status # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Status -> m Status # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Status -> m Status # | |
Show Status Source # | |
Generic Status Source # | |
ToJSON Status Source # | |
FromJSON Status Source # | |
type Rep Status Source # | |
Defined in Network.Google.AccessContextManager.Types.Product type Rep Status = D1 (MetaData "Status" "Network.Google.AccessContextManager.Types.Product" "gogol-accesscontextmanager-0.4.0-34HzU3tNZ3QCokPfddM6sJ" False) (C1 (MetaCons "Status'" PrefixI True) (S1 (MetaSel (Just "_sDetails") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe [StatusDetailsItem])) :*: (S1 (MetaSel (Just "_sCode") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe (Textual Int32))) :*: S1 (MetaSel (Just "_sMessage") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text))))) |
sDetails :: Lens' Status [StatusDetailsItem] Source #
A list of messages that carry the error details. There is a common set of message types for APIs to use.
sCode :: Lens' Status (Maybe Int32) Source #
The status code, which should be an enum value of google.rpc.Code.
sMessage :: Lens' Status (Maybe Text) Source #
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
BasicLevel
data BasicLevel Source #
`BasicLevel` is an `AccessLevel` using a set of recommended features.
See: basicLevel
smart constructor.
Instances
basicLevel :: BasicLevel Source #
Creates a value of BasicLevel
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
blConditions :: Lens' BasicLevel [Condition] Source #
Required. A list of requirements for the `AccessLevel` to be granted.
blCombiningFunction :: Lens' BasicLevel (Maybe BasicLevelCombiningFunction) Source #
How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND.
AccessLevel
data AccessLevel Source #
An `AccessLevel` is a label that can be applied to requests to GCP services, along with a list of requirements necessary for the label to be applied.
See: accessLevel
smart constructor.
Instances
accessLevel :: AccessLevel Source #
Creates a value of AccessLevel
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
alBasic :: Lens' AccessLevel (Maybe BasicLevel) Source #
A `BasicLevel` composed of `Conditions`.
alUpdateTime :: Lens' AccessLevel (Maybe UTCTime) Source #
Output only. Time the `AccessLevel` was updated in UTC.
alName :: Lens' AccessLevel (Maybe Text) Source #
Required. Resource name for the Access Level. The `short_name` component must begin with a letter and only include alphanumeric and '_'. Format: `accessPolicies/{policy_id}/accessLevels/{short_name}`
alTitle :: Lens' AccessLevel (Maybe Text) Source #
Human readable title. Must be unique within the Policy.
alDescription :: Lens' AccessLevel (Maybe Text) Source #
Description of the `AccessLevel` and its use. Does not affect behavior.
alCreateTime :: Lens' AccessLevel (Maybe UTCTime) Source #
Output only. Time the `AccessLevel` was created in UTC.
BasicLevelCombiningFunction
data BasicLevelCombiningFunction Source #
How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND.
And |
|
OR |
|
Instances
ServicePerimeterConfig
data ServicePerimeterConfig Source #
`ServicePerimeterConfig` specifies a set of GCP resources that describe specific Service Perimeter configuration.
See: servicePerimeterConfig
smart constructor.
Instances
servicePerimeterConfig :: ServicePerimeterConfig Source #
Creates a value of ServicePerimeterConfig
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
spcUnrestrictedServices :: Lens' ServicePerimeterConfig [Text] Source #
GCP services that are not subject to the Service Perimeter restrictions. May contain a list of services or a single wildcard "*". For example, if `logging.googleapis.com` is unrestricted, users can access logs inside the perimeter as if the perimeter doesn't exist, and it also means VMs inside the perimeter can access logs outside the perimeter. The wildcard means that unless explicitly specified by "restricted_services" list, any service is treated as unrestricted. One of the fields "restricted_services", "unrestricted_services" must contain a wildcard "*", otherwise the Service Perimeter specification is invalid. It also means that both field being empty is invalid as well. "unrestricted_services" can be empty if and only if "restricted_services" list contains a "*" wildcard.
spcResources :: Lens' ServicePerimeterConfig [Text] Source #
A list of GCP resources that are inside of the service perimeter. Currently only projects are allowed. Format: `projects/{project_number}`
spcRestrictedServices :: Lens' ServicePerimeterConfig [Text] Source #
GCP services that are subject to the Service Perimeter restrictions. May contain a list of services or a single wildcard "*". For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions. Wildcard means that unless explicitly specified by "unrestricted_services" list, any service is treated as restricted. One of the fields "restricted_services", "unrestricted_services" must contain a wildcard "*", otherwise the Service Perimeter specification is invalid. It also means that both field being empty is invalid as well. "restricted_services" can be empty if and only if "unrestricted_services" list contains a "*" wildcard.
spcAccessLevels :: Lens' ServicePerimeterConfig [Text] Source #
A list of `AccessLevel` resource names that allow resources within the `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed must be in the same policy as this `ServicePerimeter`. Referencing a nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are listed, resources within the perimeter can only be accessed via GCP calls with request origins within the perimeter. Example: `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. For Service Perimeter Bridge, must be empty.
Operation
This resource represents a long-running operation that is the result of a network API call.
See: operation
smart constructor.
Instances
oDone :: Lens' Operation (Maybe Bool) Source #
If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
oError :: Lens' Operation (Maybe Status) Source #
The error result of the operation in case of failure or cancellation.
oResponse :: Lens' Operation (Maybe OperationResponse) Source #
The normal response of the operation in case of success. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
oName :: Lens' Operation (Maybe Text) Source #
The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should have the format of `operations/some/unique/name`.
oMetadata :: Lens' Operation (Maybe OperationMetadata) Source #
Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
ServicePerimeterPerimeterType
data ServicePerimeterPerimeterType Source #
Perimeter type indicator. A single project is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be a included in a perimeter bridge without being included in regular perimeter. For perimeter bridges, restricted/unrestricted service lists as well as access lists must be empty.
PerimeterTypeRegular |
|
PerimeterTypeBridge |
|
Instances
OSConstraintOSType
data OSConstraintOSType Source #
Required. The allowed OS type.
OSUnspecified |
|
DesktopMAC |
|
DesktopWindows |
|
DesktopLinux |
|
DesktopChromeOS |
|
Android |
|
Ios |
|
Instances
ServicePerimeter
data ServicePerimeter Source #
`ServicePerimeter` describes a set of GCP resources which can freely import and export data amongst themselves, but not export outside of the `ServicePerimeter`. If a request with a source within this `ServicePerimeter` has a target outside of the `ServicePerimeter`, the request will be blocked. Otherwise the request is allowed. There are two types of Service Perimeter - Regular and Bridge. Regular Service Perimeters cannot overlap, a single GCP project can only belong to a single regular Service Perimeter. Service Perimeter Bridges can contain only GCP projects as members, a single GCP project may belong to multiple Service Perimeter Bridges.
See: servicePerimeter
smart constructor.
Instances
servicePerimeter :: ServicePerimeter Source #
Creates a value of ServicePerimeter
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
spStatus :: Lens' ServicePerimeter (Maybe ServicePerimeterConfig) Source #
Current ServicePerimeter configuration. Specifies sets of resources, restricted/unrestricted services and access levels that determine perimeter content and boundaries.
spPerimeterType :: Lens' ServicePerimeter (Maybe ServicePerimeterPerimeterType) Source #
Perimeter type indicator. A single project is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be a included in a perimeter bridge without being included in regular perimeter. For perimeter bridges, restricted/unrestricted service lists as well as access lists must be empty.
spUpdateTime :: Lens' ServicePerimeter (Maybe UTCTime) Source #
Output only. Time the `ServicePerimeter` was updated in UTC.
spName :: Lens' ServicePerimeter (Maybe Text) Source #
Required. Resource name for the ServicePerimeter. The `short_name` component must begin with a letter and only include alphanumeric and '_'. Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
spTitle :: Lens' ServicePerimeter (Maybe Text) Source #
Human readable title. Must be unique within the Policy.
spDescription :: Lens' ServicePerimeter (Maybe Text) Source #
Description of the `ServicePerimeter` and its use. Does not affect behavior.
spCreateTime :: Lens' ServicePerimeter (Maybe UTCTime) Source #
Output only. Time the `ServicePerimeter` was created in UTC.
ListAccessPoliciesResponse
data ListAccessPoliciesResponse Source #
A response to `ListAccessPoliciesRequest`.
See: listAccessPoliciesResponse
smart constructor.
Instances
listAccessPoliciesResponse :: ListAccessPoliciesResponse Source #
Creates a value of ListAccessPoliciesResponse
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
laprNextPageToken :: Lens' ListAccessPoliciesResponse (Maybe Text) Source #
The pagination token to retrieve the next page of results. If the value is empty, no further results remain.
laprAccessPolicies :: Lens' ListAccessPoliciesResponse [AccessPolicy] Source #
List of the AccessPolicy instances.
StatusDetailsItem
data StatusDetailsItem Source #
Instances
Creates a value of StatusDetailsItem
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sdiAddtional :: Lens' StatusDetailsItem (HashMap Text JSONValue) Source #
Properties of the object. Contains field 'type with type URL.
OSConstraint
data OSConstraint Source #
A restriction on the OS type and version of devices making requests.
See: osConstraint
smart constructor.
Instances
osConstraint :: OSConstraint Source #
Creates a value of OSConstraint
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
ocOSType :: Lens' OSConstraint (Maybe OSConstraintOSType) Source #
Required. The allowed OS type.
ocMinimumVersion :: Lens' OSConstraint (Maybe Text) Source #
The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: `"major.minor.patch"`. Examples: `"10.5.301"`, `"9.2.1"`.
AccessPolicy
data AccessPolicy Source #
`AccessPolicy` is a container for `AccessLevels` (which define the necessary attributes to use GCP services) and `ServicePerimeters` (which define regions of services able to freely pass data within a perimeter). An access policy is globally visible within an organization, and the restrictions it specifies apply to all projects within an organization.
See: accessPolicy
smart constructor.
Instances
accessPolicy :: AccessPolicy Source #
Creates a value of AccessPolicy
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
apParent :: Lens' AccessPolicy (Maybe Text) Source #
Required. The parent of this `AccessPolicy` in the Cloud Resource Hierarchy. Currently immutable once created. Format: `organizations/{organization_id}`
apUpdateTime :: Lens' AccessPolicy (Maybe UTCTime) Source #
Output only. Time the `AccessPolicy` was updated in UTC.
apName :: Lens' AccessPolicy (Maybe Text) Source #
Output only. Resource name of the `AccessPolicy`. Format: `accessPolicies/{policy_id}`
apTitle :: Lens' AccessPolicy (Maybe Text) Source #
Required. Human readable title. Does not affect behavior.
apCreateTime :: Lens' AccessPolicy (Maybe UTCTime) Source #
Output only. Time the `AccessPolicy` was created in UTC.
Xgafv
V1 error format.
Instances
ListServicePerimetersResponse
data ListServicePerimetersResponse Source #
A response to `ListServicePerimetersRequest`.
See: listServicePerimetersResponse
smart constructor.
Instances
listServicePerimetersResponse :: ListServicePerimetersResponse Source #
Creates a value of ListServicePerimetersResponse
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
lsprNextPageToken :: Lens' ListServicePerimetersResponse (Maybe Text) Source #
The pagination token to retrieve the next page of results. If the value is empty, no further results remain.
lsprServicePerimeters :: Lens' ListServicePerimetersResponse [ServicePerimeter] Source #
List of the Service Perimeter instances.
ListAccessLevelsResponse
data ListAccessLevelsResponse Source #
A response to `ListAccessLevelsRequest`.
See: listAccessLevelsResponse
smart constructor.
Instances
listAccessLevelsResponse :: ListAccessLevelsResponse Source #
Creates a value of ListAccessLevelsResponse
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
lalrNextPageToken :: Lens' ListAccessLevelsResponse (Maybe Text) Source #
The pagination token to retrieve the next page of results. If the value is empty, no further results remain.
lalrAccessLevels :: Lens' ListAccessLevelsResponse [AccessLevel] Source #
List of the Access Level instances.
OperationMetadata
data OperationMetadata Source #
Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
See: operationMetadata
smart constructor.
Instances
Creates a value of OperationMetadata
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
omAddtional :: Lens' OperationMetadata (HashMap Text JSONValue) Source #
Properties of the object. Contains field 'type with type URL.
DevicePolicy
data DevicePolicy Source #
`DevicePolicy` specifies device specific restrictions necessary to acquire a given access level. A `DevicePolicy` specifies requirements for requests from devices to be granted access levels, it does not do any enforcement on the device. `DevicePolicy` acts as an AND over all specified fields, and each repeated field is an OR over its elements. Any unset fields are ignored. For example, if the proto is { os_type : DESKTOP_WINDOWS, os_type : DESKTOP_LINUX, encryption_status: ENCRYPTED}, then the DevicePolicy will be true for requests originating from encrypted Linux desktops and encrypted Windows desktops.
See: devicePolicy
smart constructor.
Instances
devicePolicy :: DevicePolicy Source #
Creates a value of DevicePolicy
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
dpOSConstraints :: Lens' DevicePolicy [OSConstraint] Source #
Allowed OS versions, an empty list allows all types and all versions.
dpRequireScreenlock :: Lens' DevicePolicy (Maybe Bool) Source #
Whether or not screenlock is required for the DevicePolicy to be true. Defaults to `false`.
dpAllowedEncryptionStatuses :: Lens' DevicePolicy [Text] Source #
Allowed encryptions statuses, an empty list allows all statuses.
dpAllowedDeviceManagementLevels :: Lens' DevicePolicy [Text] Source #
Allowed device management levels, an empty list allows all management levels.
Condition
A condition necessary for an `AccessLevel` to be granted. The Condition is an AND over its fields. So a Condition is true if: 1) the request IP is from one of the listed subnetworks AND 2) the originating device complies with the listed device policy AND 3) all listed access levels are granted AND 4) the request was sent at a time allowed by the DateTimeRestriction.
See: condition
smart constructor.
Instances
condition :: Condition Source #
Creates a value of Condition
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cMembers :: Lens' Condition [Text] Source #
The signed-in user originating the request must be a part of one of the provided members. Syntax: `user:{emailid}` `group:{emailid}` `serviceAccount:{emailid}` If not specified, a request may come from any user (logged in/not logged in, not present in any groups, etc.).
cNegate :: Lens' Condition (Maybe Bool) Source #
Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields, each field must be false for the Condition overall to be satisfied. Defaults to false.
cIPSubnetworks :: Lens' Condition [Text] Source #
CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed.
cDevicePolicy :: Lens' Condition (Maybe DevicePolicy) Source #
Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed.
cRequiredAccessLevels :: Lens' Condition [Text] Source #
A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
OperationResponse
data OperationResponse Source #
The normal response of the operation in case of success. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
See: operationResponse
smart constructor.
Instances
Creates a value of OperationResponse
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
orAddtional :: Lens' OperationResponse (HashMap Text JSONValue) Source #
Properties of the object. Contains field 'type with type URL.