SecuritySettings

Project/Location level security settings for CES.

JSON representation 
{
  "name": string,
  "endpointControlPolicy": {
    object (EndpointControlPolicy)
  },
  "createTime": string,
  "updateTime": string,
  "etag": string
}
Fields
name

string

Identifier. The unique identifier of the security settings. Format: projects/{project}/locations/{location}/securitySettings
endpointControlPolicy

object (EndpointControlPolicy)

Optional. Endpoint control related settings.
createTime

string (Timestamp format)

Output only. Create time of the security settings.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
updateTime

string (Timestamp format)

Output only. Last update time of the security settings.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
etag

string

Output only. Etag of the security settings.

EndpointControlPolicy

Defines project/location level endpoint control policy.

JSON representation 
{
  "enforcementScope": enum (EndpointControlPolicy.EnforcementScope),
  "allowedOrigins": [
    string
  ]
}
Fields
enforcementScope

enum (EndpointControlPolicy.EnforcementScope)

Optional. The scope in which this policy's allowedOrigins list is enforced.
allowedOrigins[]

string

Optional. The allowed HTTP(s) origins that tools in the App are able to directly call. The enforcement depends on the value of enforcementScope and the VPC-SC status of the project. If a port number is not provided, all ports will be allowed. Otherwise, the port number must match exactly. For example, "https://example.com" will match "https://example.com:443" and any other port. "https://example.com:443" will only match "https://example.com:443".

EndpointControlPolicy.EnforcementScope

Defines the scope in which this policy's allowedOrigins list is enforced.

Enums
ENFORCEMENT_SCOPE_UNSPECIFIED Unspecified. This policy will be treated as VPCSC_ONLY.
VPCSC_ONLY This policy applies only when VPC-SC is active.
ALWAYS This policy ALWAYS applies, regardless of VPC-SC status.