google_deploymentmanager_api::AuditConfig Class Reference

#include <audit_config.h>

Inheritance diagram for google_deploymentmanager_api::AuditConfig:

Public Member Functions
	AuditConfig (const Json::Value &storage)
	AuditConfig (Json::Value *storage)
virtual	~AuditConfig ()
const StringPiece	GetTypeName () const
bool	has_audit_log_configs () const
void	clear_audit_log_configs ()
const client::JsonCppArray< AuditLogConfig >	get_audit_log_configs () const
client::JsonCppArray< AuditLogConfig >	mutable_auditLogConfigs ()
bool	has_exempted_members () const
void	clear_exempted_members ()
const client::JsonCppArray< string >	get_exempted_members () const
client::JsonCppArray< string >	mutable_exemptedMembers ()
bool	has_service () const
void	clear_service ()
const StringPiece	get_service () const
void	set_service (const StringPiece &value)

Static Public Member Functions
static AuditConfig *	New ()

Detailed Description

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs.

If there are AuditConfigs for both allServices and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted.

Example Policy with multiple AuditConfigs:

{ "audit_configs": [ { "service": "allServices" "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:foo@gmail.com" ] }, { "log_type": "DATA_WRITE", }, { "log_type": "ADMIN_READ", } ] }, { "service": "fooservice.googleapis.com" "audit_log_configs": [ { "log_type": "DATA_READ", }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:bar@gmail.com" ] } ] } ] }

For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts foo@g.nosp@m.mail.nosp@m..com from DATA_READ logging, and bar@g.nosp@m.mail.nosp@m..com from DATA_WRITE logging.

Constructor & Destructor Documentation

AuditConfig() [1/2]

google_deploymentmanager_api::AuditConfig::AuditConfig ( const Json::Value &  storage )

explicit

Standard constructor for an immutable data object instance.

Parameters

[in]

storage

The underlying data storage for this instance.

AuditConfig() [2/2]

google_deploymentmanager_api::AuditConfig::AuditConfig ( Json::Value *  storage )

explicit

Standard constructor for a mutable data object instance.

Parameters

[in]

storage

The underlying data storage for this instance.

~AuditConfig()

google_deploymentmanager_api::AuditConfig::~AuditConfig ( )

virtual

Standard destructor.

Member Function Documentation

clear_audit_log_configs()

void google_deploymentmanager_api::AuditConfig::clear_audit_log_configs ( )

inline

Clears the 'auditLogConfigs' attribute.

clear_exempted_members()

void google_deploymentmanager_api::AuditConfig::clear_exempted_members ( )

inline

Clears the 'exemptedMembers' attribute.

clear_service()

void google_deploymentmanager_api::AuditConfig::clear_service ( )

inline

Clears the 'service' attribute.

get_audit_log_configs()

const client::JsonCppArray<AuditLogConfig > google_deploymentmanager_api::AuditConfig::get_audit_log_configs

(

)

const

Get a reference to the value of the 'auditLogConfigs' attribute.

get_exempted_members()

const client::JsonCppArray<string > google_deploymentmanager_api::AuditConfig::get_exempted_members ( ) const

inline

Get a reference to the value of the 'exemptedMembers' attribute.

get_service()

const StringPiece google_deploymentmanager_api::AuditConfig::get_service ( ) const

inline

Get the value of the 'service' attribute.

GetTypeName()

const StringPiece google_deploymentmanager_api::AuditConfig::GetTypeName ( ) const

inline

Returns a string denoting the type of this data object.

Returns

google_deploymentmanager_api::AuditConfig

has_audit_log_configs()

bool google_deploymentmanager_api::AuditConfig::has_audit_log_configs ( ) const

inline

Determine if the 'auditLogConfigs' attribute was set.

Returns

true if the 'auditLogConfigs' attribute was set.

has_exempted_members()

bool google_deploymentmanager_api::AuditConfig::has_exempted_members ( ) const

inline

Determine if the 'exemptedMembers' attribute was set.

Returns

true if the 'exemptedMembers' attribute was set.

has_service()

bool google_deploymentmanager_api::AuditConfig::has_service ( ) const

inline

Determine if the 'service' attribute was set.

Returns

true if the 'service' attribute was set.

mutable_auditLogConfigs()

client::JsonCppArray<AuditLogConfig > google_deploymentmanager_api::AuditConfig::mutable_auditLogConfigs

(

)

Gets a reference to a mutable value of the 'auditLogConfigs' property.

The configuration for logging of each type of permission.

Returns

The result can be modified to change the attribute value.

mutable_exemptedMembers()

client::JsonCppArray<string > google_deploymentmanager_api::AuditConfig::mutable_exemptedMembers ( )

inline

Gets a reference to a mutable value of the 'exemptedMembers' property.

Returns

The result can be modified to change the attribute value.

New()

AuditConfig * google_deploymentmanager_api::AuditConfig::New ( )

static

Creates a new default instance.

Returns

Ownership is passed back to the caller.

set_service()

void google_deploymentmanager_api::AuditConfig::set_service ( const StringPiece &  value )

inline

Change the 'service' attribute.

Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.

Parameters

[in]

value

The new value.

---

The documentation for this class was generated from the following files:

• google/deploymentmanager_api/audit_config.h
• google/deploymentmanager_api/audit_config.cc