idstring · min length: 32 · max length: 32required
The traffic filter ID
namestring · min length: 1 · max length: 128required
Name of the traffic filter
descriptionstring · min length: 0 · max length: 512
Description of the traffic filter
typeenum · min length: 1 · max length: 32required
Type of the traffic filter. Determines which rule fields are valid:
ip — IP/CIDR allowlist (source)
vpce — AWS PrivateLink VPC endpoint (source)
private_endpoint — Azure Private Link (azure_endpoint_name, azure_endpoint_guid)
psc_endpoint — GCP Private Service Connect endpoint (source)
Values:ipvpceprivate_endpointpsc_endpoint
include_by_defaultbooleanrequired
Should the traffic filter be automatically included in the new projects
regionstring · min length: 1 · max length: 32required
The traffic filter can be attached only to projects in the specific region
rulesobject[]required
List of rules
descriptionstring
Optional human-readable description of the rule.
sourcestring
Allowed source for ip, vpce, or psc_endpoint filters: an IP address, CIDR
mask, AWS VPC endpoint ID (vpce- followed by 17 lowercase hex characters), or
GCP PSC connection ID.
Must not be set for private_endpoint filters.
azure_endpoint_namestring · min length: 2 · max length: 80 · pattern: ^[a-zA-Z0-9][-\w.]{0,78}[\w]$
Azure Private Endpoint resource name. Required for private_endpoint filters;
not applicable to ip, vpce, or psc_endpoint filters.
Must be 2–80 characters, start with an alphanumeric character, and end with an
alphanumeric character or underscore. May contain alphanumerics, underscores,
periods, and hyphens.
Azure Private Endpoint resource GUID (properties.resourceGuid from the Azure
resource). Required for private_endpoint filters. Must be a lowercase UUID.
This is not the ARM resource ID.