Endpoint Policy

Docs > DDSQL Reference > Data Directory > Endpoint Policy

An Endpoint Policy in Google Cloud defines access control and security rules for network endpoints. It allows administrators to specify which clients or services can connect to particular endpoints, enforcing conditions such as identity, device attributes, or location. This helps ensure secure and compliant communication across services.

gcp.networkservices_endpoint_policy

Fields

ID	Type	Data Type	Description
_key	core	string
ancestors	core	array<string>
authorization_policy	core	string	Optional. This field specifies the URL of AuthorizationPolicy resource that applies authorization policies to the inbound traffic at the matched endpoints. Refer to Authorization. If this field is not specified, authorization is disabled(no authz checks) for this endpoint.
client_tls_policy	core	string	Optional. A URL referring to a ClientTlsPolicy resource. ClientTlsPolicy can be set to specify the authentication for traffic from the proxy to the actual endpoints. More specifically, it is applied to the outgoing traffic from the proxy to the endpoint. This is typically used for sidecar model where the proxy identifies itself as endpoint to the control plane, with the connection between sidecar and endpoint requiring authentication. If this field is not set, authentication is disabled(open). Applicable only when EndpointPolicyType is SIDECAR_PROXY.
create_time	core	timestamp	Output only. The timestamp when the resource was created.
datadog_display_name	core	string
description	core	string	Optional. A free-text description of the resource. Max length 1024 characters.
endpoint_matcher	core	json	Required. A matcher that selects endpoints to which the policies should be applied.
labels	core	array<string>	Optional. Set of label tags associated with the EndpointPolicy resource.
name	core	string	Identifier. Name of the EndpointPolicy resource. It matches pattern `projects/{project}/locations/*/endpointPolicies/{endpoint_policy}`.
organization_id	core	string
parent	core	string
project_id	core	string
project_number	core	string
region_id	core	string
resource_name	core	string
server_tls_policy	core	string	Optional. A URL referring to ServerTlsPolicy resource. ServerTlsPolicy is used to determine the authentication policy to be applied to terminate the inbound traffic at the identified backends. If this field is not set, authentication is disabled(open) for this endpoint.
tags	core	hstore_csv
traffic_port_selector	core	json	Optional. Port selector for the (matched) endpoints. If no port selector is provided, the matched config is applied to all ports.
type	core	string	Required. The type of endpoint policy. This is primarily used to validate the configuration.
update_time	core	timestamp	Output only. The timestamp when the resource was updated.
zone_id	core	string