SecurityPolicyRuleMatcher

import type { SecurityPolicyRuleMatcher } from "https://googleapis.deno.dev/v1/compute:v1.ts";

Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.

interface SecurityPolicyRuleMatcher {

config?: SecurityPolicyRuleMatcherConfig;

expr?: Expr;

exprOptions?: SecurityPolicyRuleMatcherExprOptions;

versionedExpr?: "SRC_IPS_V1";

}

§Properties

config?: SecurityPolicyRuleMatcherConfig

[src]

The configuration options available when specifying versioned_expr. This field must be specified if versioned_expr is specified and cannot be specified if versioned_expr is not specified.

expr?: Expr

[src]

User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing evaluateThreatIntelligence require Cloud Armor Managed Protection Plus tier and are not supported in Edge Policies nor in Regional Policies. Expressions containing evaluatePreconfiguredExpr('sourceiplist-*') require Cloud Armor Managed Protection Plus tier and are only supported in Global Security Policies.

exprOptions?: SecurityPolicyRuleMatcherExprOptions

[src]

The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr').

versionedExpr?: "SRC_IPS_V1"

[src]

Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config.