export declare const AuditLogConfigLogType: {
    /**
     * Default case. Should never be this.
     */
    readonly LogTypeUnspecified: "LOG_TYPE_UNSPECIFIED";
    /**
     * Admin reads. Example: CloudIAM getIamPolicy
     */
    readonly AdminRead: "ADMIN_READ";
    /**
     * Data writes. Example: CloudSQL Users create
     */
    readonly DataWrite: "DATA_WRITE";
    /**
     * Data reads. Example: CloudSQL Users list
     */
    readonly DataRead: "DATA_READ";
};
/**
 * The log type that this config enables.
 */
export type AuditLogConfigLogType = (typeof AuditLogConfigLogType)[keyof typeof AuditLogConfigLogType];
export declare const AuthorizedOrgsDescAssetType: {
    /**
     * No asset type specified.
     */
    readonly AssetTypeUnspecified: "ASSET_TYPE_UNSPECIFIED";
    /**
     * Device asset type.
     */
    readonly AssetTypeDevice: "ASSET_TYPE_DEVICE";
    /**
     * Credential strength asset type.
     */
    readonly AssetTypeCredentialStrength: "ASSET_TYPE_CREDENTIAL_STRENGTH";
};
/**
 * The asset type of this authorized orgs desc. Valid values are `ASSET_TYPE_DEVICE`, and `ASSET_TYPE_CREDENTIAL_STRENGTH`.
 */
export type AuthorizedOrgsDescAssetType = (typeof AuthorizedOrgsDescAssetType)[keyof typeof AuthorizedOrgsDescAssetType];
export declare const AuthorizedOrgsDescAuthorizationDirection: {
    /**
     * No direction specified.
     */
    readonly AuthorizationDirectionUnspecified: "AUTHORIZATION_DIRECTION_UNSPECIFIED";
    /**
     * The specified organizations are authorized to evaluate traffic in this organization.
     */
    readonly AuthorizationDirectionTo: "AUTHORIZATION_DIRECTION_TO";
    /**
     * The traffic of the specified organizations can be evaluated by this organization.
     */
    readonly AuthorizationDirectionFrom: "AUTHORIZATION_DIRECTION_FROM";
};
/**
 * The direction of the authorization relationship between this organization and the organizations listed in the `orgs` field. The valid values for this field include the following: `AUTHORIZATION_DIRECTION_FROM`: Allows this organization to evaluate traffic in the organizations listed in the `orgs` field. `AUTHORIZATION_DIRECTION_TO`: Allows the organizations listed in the `orgs` field to evaluate the traffic in this organization. For the authorization relationship to take effect, all of the organizations must authorize and specify the appropriate relationship direction. For example, if organization A authorized organization B and C to evaluate its traffic, by specifying `AUTHORIZATION_DIRECTION_TO` as the authorization direction, organizations B and C must specify `AUTHORIZATION_DIRECTION_FROM` as the authorization direction in their `AuthorizedOrgsDesc` resource.
 */
export type AuthorizedOrgsDescAuthorizationDirection = (typeof AuthorizedOrgsDescAuthorizationDirection)[keyof typeof AuthorizedOrgsDescAuthorizationDirection];
export declare const AuthorizedOrgsDescAuthorizationType: {
    /**
     * No authorization type specified.
     */
    readonly AuthorizationTypeUnspecified: "AUTHORIZATION_TYPE_UNSPECIFIED";
    /**
     * This authorization relationship is "trust".
     */
    readonly AuthorizationTypeTrust: "AUTHORIZATION_TYPE_TRUST";
};
/**
 * A granular control type for authorization levels. Valid value is `AUTHORIZATION_TYPE_TRUST`.
 */
export type AuthorizedOrgsDescAuthorizationType = (typeof AuthorizedOrgsDescAuthorizationType)[keyof typeof AuthorizedOrgsDescAuthorizationType];
export declare const BasicLevelCombiningFunction: {
    /**
     * All `Conditions` must be true for the `BasicLevel` to be true.
     */
    readonly And: "AND";
    /**
     * If at least one `Condition` is true, then the `BasicLevel` is true.
     */
    readonly Or: "OR";
};
/**
 * How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND.
 */
export type BasicLevelCombiningFunction = (typeof BasicLevelCombiningFunction)[keyof typeof BasicLevelCombiningFunction];
export declare const DevicePolicyAllowedDeviceManagementLevelsItem: {
    /**
     * The device's management level is not specified or not known.
     */
    readonly ManagementUnspecified: "MANAGEMENT_UNSPECIFIED";
    /**
     * The device is not managed.
     */
    readonly None: "NONE";
    /**
     * Basic management is enabled, which is generally limited to monitoring and wiping the corporate account.
     */
    readonly Basic: "BASIC";
    /**
     * Complete device management. This includes more thorough monitoring and the ability to directly manage the device (such as remote wiping). This can be enabled through the Android Enterprise Platform.
     */
    readonly Complete: "COMPLETE";
};
export type DevicePolicyAllowedDeviceManagementLevelsItem = (typeof DevicePolicyAllowedDeviceManagementLevelsItem)[keyof typeof DevicePolicyAllowedDeviceManagementLevelsItem];
export declare const DevicePolicyAllowedEncryptionStatusesItem: {
    /**
     * The encryption status of the device is not specified or not known.
     */
    readonly EncryptionUnspecified: "ENCRYPTION_UNSPECIFIED";
    /**
     * The device does not support encryption.
     */
    readonly EncryptionUnsupported: "ENCRYPTION_UNSUPPORTED";
    /**
     * The device supports encryption, but is currently unencrypted.
     */
    readonly Unencrypted: "UNENCRYPTED";
    /**
     * The device is encrypted.
     */
    readonly Encrypted: "ENCRYPTED";
};
export type DevicePolicyAllowedEncryptionStatusesItem = (typeof DevicePolicyAllowedEncryptionStatusesItem)[keyof typeof DevicePolicyAllowedEncryptionStatusesItem];
export declare const EgressFromIdentityType: {
    /**
     * No blanket identity group specified.
     */
    readonly IdentityTypeUnspecified: "IDENTITY_TYPE_UNSPECIFIED";
    /**
     * Authorize access from all identities outside the perimeter.
     */
    readonly AnyIdentity: "ANY_IDENTITY";
    /**
     * Authorize access from all human users outside the perimeter.
     */
    readonly AnyUserAccount: "ANY_USER_ACCOUNT";
    /**
     * Authorize access from all service accounts outside the perimeter.
     */
    readonly AnyServiceAccount: "ANY_SERVICE_ACCOUNT";
};
/**
 * Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access.
 */
export type EgressFromIdentityType = (typeof EgressFromIdentityType)[keyof typeof EgressFromIdentityType];
export declare const EgressFromSourceRestriction: {
    /**
     * Enforcement preference unspecified, will not enforce traffic restrictions based on `sources` in EgressFrom.
     */
    readonly SourceRestrictionUnspecified: "SOURCE_RESTRICTION_UNSPECIFIED";
    /**
     * Enforcement preference enabled, traffic restrictions will be enforced based on `sources` in EgressFrom.
     */
    readonly SourceRestrictionEnabled: "SOURCE_RESTRICTION_ENABLED";
    /**
     * Enforcement preference disabled, will not enforce traffic restrictions based on `sources` in EgressFrom.
     */
    readonly SourceRestrictionDisabled: "SOURCE_RESTRICTION_DISABLED";
};
/**
 * Whether to enforce traffic restrictions based on `sources` field. If the `sources` fields is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`.
 */
export type EgressFromSourceRestriction = (typeof EgressFromSourceRestriction)[keyof typeof EgressFromSourceRestriction];
export declare const IngressFromIdentityType: {
    /**
     * No blanket identity group specified.
     */
    readonly IdentityTypeUnspecified: "IDENTITY_TYPE_UNSPECIFIED";
    /**
     * Authorize access from all identities outside the perimeter.
     */
    readonly AnyIdentity: "ANY_IDENTITY";
    /**
     * Authorize access from all human users outside the perimeter.
     */
    readonly AnyUserAccount: "ANY_USER_ACCOUNT";
    /**
     * Authorize access from all service accounts outside the perimeter.
     */
    readonly AnyServiceAccount: "ANY_SERVICE_ACCOUNT";
};
/**
 * Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access.
 */
export type IngressFromIdentityType = (typeof IngressFromIdentityType)[keyof typeof IngressFromIdentityType];
export declare const OsConstraintOsType: {
    /**
     * The operating system of the device is not specified or not known.
     */
    readonly OsUnspecified: "OS_UNSPECIFIED";
    /**
     * A desktop Mac operating system.
     */
    readonly DesktopMac: "DESKTOP_MAC";
    /**
     * A desktop Windows operating system.
     */
    readonly DesktopWindows: "DESKTOP_WINDOWS";
    /**
     * A desktop Linux operating system.
     */
    readonly DesktopLinux: "DESKTOP_LINUX";
    /**
     * A desktop ChromeOS operating system.
     */
    readonly DesktopChromeOs: "DESKTOP_CHROME_OS";
    /**
     * An Android operating system.
     */
    readonly Android: "ANDROID";
    /**
     * An iOS operating system.
     */
    readonly Ios: "IOS";
};
/**
 * Required. The allowed OS type.
 */
export type OsConstraintOsType = (typeof OsConstraintOsType)[keyof typeof OsConstraintOsType];
export declare const ServicePerimeterPerimeterType: {
    /**
     * Regular Perimeter. When no value is specified, the perimeter uses this type.
     */
    readonly PerimeterTypeRegular: "PERIMETER_TYPE_REGULAR";
    /**
     * Perimeter Bridge.
     */
    readonly PerimeterTypeBridge: "PERIMETER_TYPE_BRIDGE";
};
/**
 * Perimeter type indicator. A single project or VPC network is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be a included in a perimeter bridge without being included in regular perimeter. For perimeter bridges, the restricted service list as well as access level lists must be empty.
 */
export type ServicePerimeterPerimeterType = (typeof ServicePerimeterPerimeterType)[keyof typeof ServicePerimeterPerimeterType];