SecurityPolicyRuleMatcher

import type { SecurityPolicyRuleMatcher } from "https://googleapis.deno.dev/v1/compute:v1.ts";

Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.

interface SecurityPolicyRuleMatcher {

config?: SecurityPolicyRuleMatcherConfig;

expr?: Expr;

exprOptions?: SecurityPolicyRuleMatcherExprOptions;

versionedExpr?: "SRC_IPS_V1";

}

§Properties

config?: SecurityPolicyRuleMatcherConfig

[src]

The configuration options available when specifying versioned_expr. This field must be specified if versioned_expr is specified and cannot be specified if versioned_expr is not specified.

expr?: Expr

[src]

User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing evaluateThreatIntelligence require a Cloud Armor Enterprise subscription and are not supported in Edge Policies nor in Regional Policies. Expressions containing evaluatePreconfiguredExpr('sourceiplist-*') require a Cloud Armor Enterprise subscription and are only supported in Global Security Policies.

exprOptions?: SecurityPolicyRuleMatcherExprOptions

[src]

The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr').

versionedExpr?: "SRC_IPS_V1"

[src]

Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config.