bool
Indicates whether or not the name constraints
are marked critical.
permitted_dns_names
MutableSequence[str]
Contains permitted DNS names. Any DNS name that can be
constructed by simply adding zero or more labels to the
left-hand side of the name satisfies the name constraint.
For example, example.com, www.example.com,
www.sub.example.com would satisfy example.com while
example1.com does not.
excluded_dns_names
MutableSequence[str]
Contains excluded DNS names. Any DNS name that can be
constructed by simply adding zero or more labels to the
left-hand side of the name satisfies the name constraint.
For example, example.com, www.example.com,
www.sub.example.com would satisfy example.com while
example1.com does not.
permitted_ip_ranges
MutableSequence[str]
Contains the permitted IP ranges. For IPv4
addresses, the ranges are expressed using CIDR
notation as specified in RFC 4632. For IPv6
addresses, the ranges are expressed in similar
encoding as IPv4 addresses.
excluded_ip_ranges
MutableSequence[str]
Contains the excluded IP ranges. For IPv4
addresses, the ranges are expressed using CIDR
notation as specified in RFC 4632. For IPv6
addresses, the ranges are expressed in similar
encoding as IPv4 addresses.
permitted_email_addresses
MutableSequence[str]
Contains the permitted email addresses. The value can be a
particular email address, a hostname to indicate all email
addresses on that host or a domain with a leading period
(e.g. .example.com) to indicate all email addresses in
that domain.
excluded_email_addresses
MutableSequence[str]
Contains the excluded email addresses. The value can be a
particular email address, a hostname to indicate all email
addresses on that host or a domain with a leading period
(e.g. .example.com) to indicate all email addresses in
that domain.
permitted_uris
MutableSequence[str]
Contains the permitted URIs that apply to the host part of
the name. The value can be a hostname or a domain with a
leading period (like .example.com)
excluded_uris
MutableSequence[str]
Contains the excluded URIs that apply to the host part of
the name. The value can be a hostname or a domain with a
leading period (like .example.com)
