SecurityPolicyRuleMatcher(mapping=None, *, ignore_unknown_fields=False, **kwargs)Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
Attributes |
|
|---|---|
| Name | Description |
config |
google.cloud.compute_v1.types.SecurityPolicyRuleMatcherConfig
The configuration options available when specifying versioned_expr. This field must be specified if versioned_expr is specified and cannot be specified if versioned_expr is not specified. This field is a member of oneof_ _config.
|
expr |
google.cloud.compute_v1.types.Expr
User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing evaluateThreatIntelligence require Cloud Armor Managed
Protection Plus tier and are not supported in Edge Policies
nor in Regional Policies. Expressions containing
evaluatePreconfiguredExpr('sourceiplist-*') require
Cloud Armor Managed Protection Plus tier and are only
supported in Global Security Policies.
This field is a member of oneof_ _expr.
|
expr_options |
google.cloud.compute_v1.types.SecurityPolicyRuleMatcherExprOptions
The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr'). This field is a member of oneof_ _expr_options.
|
versioned_expr |
str
Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config. Check the VersionedExpr enum for the list of possible values. This field is a member of oneof_ _versioned_expr.
|
Classes
VersionedExpr
VersionedExpr(value)Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config.