Compute Engine v1 API - Class SecuritySettings (2.14.0) 

public sealed class SecuritySettings : IMessage<SecuritySettings>, IEquatable<SecuritySettings>, IDeepCloneable<SecuritySettings>, IBufferMessage, IMessage

Reference documentation and code samples for the Compute Engine v1 API class SecuritySettings.

The authentication and authorization settings for a BackendService.

Inheritance

object > SecuritySettings

Namespace

Google.Cloud.Compute.V1

Assembly

Google.Cloud.Compute.V1.dll

Constructors

SecuritySettings()

public SecuritySettings()

SecuritySettings(SecuritySettings)

public SecuritySettings(SecuritySettings other)
Parameter
NameDescription
otherSecuritySettings

Properties

AwsV4Authentication

public AWSV4Signature AwsV4Authentication { get; set; }

The configuration needed to generate a signature for access to private storage buckets that support AWS's Signature Version 4 for authentication. Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.

Property Value
TypeDescription
AWSV4Signature

ClientTlsPolicy

public string ClientTlsPolicy { get; set; }

Optional. A URL referring to a networksecurity.ClientTlsPolicy resource that describes how clients should authenticate with this service's backends. clientTlsPolicy only applies to a global BackendService with the loadBalancingScheme set to INTERNAL_SELF_MANAGED. If left blank, communications are not encrypted.

Property Value
TypeDescription
string

HasClientTlsPolicy

public bool HasClientTlsPolicy { get; }

Gets whether the "client_tls_policy" field is set

Property Value
TypeDescription
bool

SubjectAltNames

public RepeatedField<string> SubjectAltNames { get; }

Optional. A list of Subject Alternative Names (SANs) that the client verifies during a mutual TLS handshake with an server/endpoint for this BackendService. When the server presents its X.509 certificate to the client, the client inspects the certificate's subjectAltName field. If the field contains one of the specified values, the communication continues. Otherwise, it fails. This additional check enables the client to verify that the server is authorized to run the requested service. Note that the contents of the server certificate's subjectAltName field are configured by the Public Key Infrastructure which provisions server identities. Only applies to a global BackendService with loadBalancingScheme set to INTERNAL_SELF_MANAGED. Only applies when BackendService has an attached clientTlsPolicy with clientCertificate (mTLS mode).

Property Value
TypeDescription
RepeatedFieldstring