import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * An AccessLevel is a label that can be applied to requests to GCP services, * along with a list of requirements necessary for the label to be applied. * * To get more information about AccessLevel, see: * * * [API documentation](https://cloud.google.com/access-context-manager/docs/reference/rest/v1/accessPolicies.accessLevels) * * How-to Guides * * [Access Policy Quickstart](https://cloud.google.com/access-context-manager/docs/quickstart) * * > **Warning:** If you are using User ADCs (Application Default Credentials) with this resource, * you must specify a `billingProject` and set `userProjectOverride` to true * in the provider configuration. Otherwise the ACM API will return a 403 error. * Your account must have the `serviceusage.services.use` permission on the * `billingProject` you defined. * * ## Example Usage * * ### Access Context Manager Access Level Basic * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as gcp from "@pulumi/gcp"; * * const access_policy = new gcp.accesscontextmanager.AccessPolicy("access-policy", { * parent: "organizations/123456789", * title: "my policy", * }); * const access_level = new gcp.accesscontextmanager.AccessLevel("access-level", { * parent: pulumi.interpolate`accessPolicies/${access_policy.name}`, * name: pulumi.interpolate`accessPolicies/${access_policy.name}/accessLevels/chromeos_no_lock`, * title: "chromeos_no_lock", * basic: { * conditions: [{ * devicePolicy: { * requireScreenLock: true, * osConstraints: [{ * osType: "DESKTOP_CHROME_OS", * }], * }, * regions: [ * "CH", * "IT", * "US", * ], * }], * }, * }); * ``` * * ## Import * * AccessLevel can be imported using any of these accepted formats: * * * `{{name}}` * * When using the `pulumi import` command, AccessLevel can be imported using one of the formats above. For example: * * ```sh * $ pulumi import gcp:accesscontextmanager/accessLevel:AccessLevel default {{name}} * ``` */ export declare class AccessLevel extends pulumi.CustomResource { /** * Get an existing AccessLevel resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: AccessLevelState, opts?: pulumi.CustomResourceOptions): AccessLevel; /** * Returns true if the given object is an instance of AccessLevel. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is AccessLevel; /** * A set of predefined conditions for the access level and a combining function. * Structure is documented below. */ readonly basic: pulumi.Output; /** * Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. * See CEL spec at: https://github.com/google/cel-spec. * Structure is documented below. */ readonly custom: pulumi.Output; /** * Description of the AccessLevel and its use. Does not affect behavior. */ readonly description: pulumi.Output; /** * Resource name for the Access Level. The shortName component must begin * with a letter and only include alphanumeric and '_'. * Format: accessPolicies/{policy_id}/accessLevels/{short_name} */ readonly name: pulumi.Output; /** * The AccessPolicy this AccessLevel lives in. * Format: accessPolicies/{policy_id} */ readonly parent: pulumi.Output; /** * Human readable title. Must be unique within the Policy. */ readonly title: pulumi.Output; /** * Create a AccessLevel resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: AccessLevelArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering AccessLevel resources. */ export interface AccessLevelState { /** * A set of predefined conditions for the access level and a combining function. * Structure is documented below. */ basic?: pulumi.Input; /** * Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. * See CEL spec at: https://github.com/google/cel-spec. * Structure is documented below. */ custom?: pulumi.Input; /** * Description of the AccessLevel and its use. Does not affect behavior. */ description?: pulumi.Input; /** * Resource name for the Access Level. The shortName component must begin * with a letter and only include alphanumeric and '_'. * Format: accessPolicies/{policy_id}/accessLevels/{short_name} */ name?: pulumi.Input; /** * The AccessPolicy this AccessLevel lives in. * Format: accessPolicies/{policy_id} */ parent?: pulumi.Input; /** * Human readable title. Must be unique within the Policy. */ title?: pulumi.Input; } /** * The set of arguments for constructing a AccessLevel resource. */ export interface AccessLevelArgs { /** * A set of predefined conditions for the access level and a combining function. * Structure is documented below. */ basic?: pulumi.Input; /** * Custom access level conditions are set using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. * See CEL spec at: https://github.com/google/cel-spec. * Structure is documented below. */ custom?: pulumi.Input; /** * Description of the AccessLevel and its use. Does not affect behavior. */ description?: pulumi.Input; /** * Resource name for the Access Level. The shortName component must begin * with a letter and only include alphanumeric and '_'. * Format: accessPolicies/{policy_id}/accessLevels/{short_name} */ name?: pulumi.Input; /** * The AccessPolicy this AccessLevel lives in. * Format: accessPolicies/{policy_id} */ parent: pulumi.Input; /** * Human readable title. Must be unique within the Policy. */ title: pulumi.Input; }