Target(mapping=None, *, ignore_unknown_fields=False, **kwargs)The full resource name of the resource to which the policy will be bound. Immutable once set.
This message has oneof_ fields (mutually exclusive fields).
For each oneof, at most one member field can be set at the same time.
Setting any member of the oneof automatically clears all other
members.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
Attributes |
|
|---|---|
| Name | Description |
principal_set |
str
Immutable. The full resource name that's used for principal access boundary policy bindings. The principal set must be directly parented by the policy binding's parent or same as the parent if the target is a project, folder, or organization. Examples: - For bindings parented by an organization: - Organization: //cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID
- Workforce Identity:
//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID
- Workspace Identity:
//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID
- For bindings parented by a folder:
- Folder:
//cloudresourcemanager.googleapis.com/folders/FOLDER_ID
- For bindings parented by a project:
- Project:
- //cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER
- //cloudresourcemanager.googleapis.com/projects/PROJECT_ID
- Workload Identity Pool:
//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID
This field is a member of oneof_ target.
|
resource |
str
Immutable. The full resource name that's used for access policy bindings. Examples: - Organization: //cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID
- Folder:
//cloudresourcemanager.googleapis.com/folders/FOLDER_ID
- Project:
- //cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER
- //cloudresourcemanager.googleapis.com/projects/PROJECT_ID
This field is a member of oneof_ target.
|