googleBeyondcorpAppConnector

A BeyondCorp AppConnector resource represents an application facing component deployed proximal to and with direct access to the application instances. It is used to establish connectivity between the remote enterprise environment and GCP. It initiates connections to the applications and can proxy the data from users over the connection.

To get more information about AppConnector, see:

Example Usage - Beyondcorp App Connector Basic

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as google from "./.gen/providers/google";
/*The following providers are missing schema information and might need manual adjustments to synthesize correctly: google.
For a more precise conversion please use the --provider flag in convert.*/
const googleServiceAccountServiceAccount =
  new google.serviceAccount.ServiceAccount(this, "service_account", {
    account_id: "my-account",
    display_name: "Test Service Account",
  });
new google.beyondcorpAppConnector.BeyondcorpAppConnector(
  this,
  "app_connector",
  {
    name: "my-app-connector",
    principal_info: [
      {
        service_account: [
          {
            email: googleServiceAccountServiceAccount.email,
          },
        ],
      },
    ],
  }
);

Example Usage - Beyondcorp App Connector Full

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as google from "./.gen/providers/google";
/*The following providers are missing schema information and might need manual adjustments to synthesize correctly: google.
For a more precise conversion please use the --provider flag in convert.*/
const googleServiceAccountServiceAccount =
  new google.serviceAccount.ServiceAccount(this, "service_account", {
    account_id: "my-account",
    display_name: "Test Service Account",
  });
new google.beyondcorpAppConnector.BeyondcorpAppConnector(
  this,
  "app_connector",
  {
    display_name: "some display name",
    labels: [
      {
        bar: "baz",
        foo: "bar",
      },
    ],
    name: "my-app-connector",
    principal_info: [
      {
        service_account: [
          {
            email: googleServiceAccountServiceAccount.email,
          },
        ],
      },
    ],
    region: "us-central1",
  }
);

Argument Reference

The following arguments are supported:

name - (Required) ID of the AppConnector.
principalInfo - (Required) Principal information about the Identity of the AppConnector. Structure is documented below.

The principalInfo block supports:

serviceAccount - (Required) ServiceAccount represents a GCP service account. Structure is documented below.

The serviceAccount block supports:

email - (Required) Email address of the service account.

region - (Optional) The region of the AppConnector.
displayName - (Optional) An arbitrary user-provided name for the AppConnector.
labels - (Optional) Resource labels to represent user provided metadata.
project - (Optional) The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

id - an identifier for the resource with format projects/{{project}}/locations/{{region}}/appConnectors/{{name}}
state - Represents the different states of a AppConnector.

Timeouts

This resource provides the following Timeouts configuration options:

create - Default is 20 minutes.
update - Default is 20 minutes.
delete - Default is 20 minutes.

Import

AppConnector can be imported using any of these accepted formats:

$ terraform import google_beyondcorp_app_connector.default projects/{{project}}/locations/{{region}}/appConnectors/{{name}}
$ terraform import google_beyondcorp_app_connector.default {{project}}/{{region}}/{{name}}
$ terraform import google_beyondcorp_app_connector.default {{region}}/{{name}}
$ terraform import google_beyondcorp_app_connector.default {{name}}

User Project Overrides

This resource supports User Project Overrides.