NAME gcloud alpha iap settings set - set the setting for an IAP resource SYNOPSIS gcloud alpha iap settings set SETTING_FILE [--folder=FOLDER --organization=ORGANIZATION --project=PROJECT --region=REGION --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Set the setting for an IAP resource. EXAMPLES To set the IAP setting for the resources within an organization, run: $ gcloud alpha iap settings set iap_settings.yaml \ --organization=ORGANIZATION_ID To set the IAP setting for the resources within a folder, run: $ gcloud alpha iap settings set iap_settings.yaml --folder=FOLDER_ID To set the IAP setting for the resources within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID To set the IAP setting for web type resources within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID --resource-type=iap_web To set the IAP setting for all app engine services within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID --resource-type=app-engine To set the IAP setting for an app engine service within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID --resource-type=app-engine \ --service=SERVICE_ID To set the IAP setting for an app engine service version within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID --resource-type=app-engine \ --service=SERVICE_ID --version=VERSION_ID To set the IAP setting for all backend services within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID --resource-type=compute To set the IAP setting for a backend service within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID --resource-type=compute \ --service=SERVICE_ID To set the IAP setting for a region backend service within a project, run: $ gcloud alpha iap settings set iap_settings.yaml \ --project=PROJECT_ID --resource-type=compute \ --service=SERVICE_ID --region=REGION_ID POSITIONAL ARGUMENTS SETTING_FILE JSON or YAML file containing the IAP resource settings. JSON example: { "access_settings" : { "oauth_settings" : { "login_hint" : { "value": "test_hint" } }, "gcip_settings" : { "tenant_ids": ["tenant1-p9puj", "tenant2-y8rxc"], "login_page_uri" : { "value" : "https://test.com/?apiKey=abcd_efgh" } }, "cors_settings": { "allow_http_options" : { "value": true } } }, "application_settings" : { "csm_settings" : { "rctoken_aud" : { "value" : "test_aud" } } } } YAML example: accessSettings : oauthSettings: loginHint: test_hint gcipSettings: tenantIds: - tenant1-p9puj - tenant2-y8rxc loginPageUri: https://test.com/?apiKey=abcd_efgh corsSettings: allowHttpOptions: true applicationSettings: csmSettings: rctokenAud: test_aud FLAGS --folder=FOLDER Folder ID. --organization=ORGANIZATION Organization ID. --project=PROJECT Project ID. --region=REGION Region name. Not applicable for app-engine. Required when resource-type=compute and regional scoped. Not applicable for global scoped compute. Required when resource-type=cloud-run. --resource-type=RESOURCE_TYPE Resource type of the IAP resource. --resource-type=cloud-run is private priview feature and reach out to cloud-run team if you want to test it. RESOURCE_TYPE must be one of: app-engine, iap_web, compute, organization, folder, forwarding-rule, cloud-run. --service=SERVICE Service name. Optional when resource-type is compute or app-engine. --version=VERSION Version name. Not applicable for compute. Optional when resource-type=app-engine. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity. Run $ gcloud help for details. NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available: $ gcloud iap settings set $ gcloud beta iap settings set