Access Context Manager: add support for access level condition 'regions'

products/accesscontextmanager/api.yaml

@@ -286,6 +286,13 @@ objects:
                     name: 'requireCorpOwned'
                     description: |
                       Whether the device needs to be corp owned.
+              - !ruby/object:Api::Type::Array
+                name: 'regions'
+                description: |
+                  The request must originate from one of the provided
+                  countries/regions.
+                  Format: A valid ISO 3166-1 alpha-2 code.
+                item_type: Api::Type::String
   - !ruby/object:Api::Resource
     name: 'ServicePerimeter'
     # This is an unusual API, so we need to use a few fields to map the methods

templates/terraform/examples/access_context_manager_access_level_basic.tf.erb

@@ -10,6 +10,11 @@ resource "google_access_context_manager_access_level" "<%= ctx[:primary_resource
           os_type = "DESKTOP_CHROME_OS"
         }
       }
+      regions = [
+	"CH",
+	"IT",
+	"US",
+      ]
     }
   }
 }

templates/terraform/examples/access_context_manager_service_perimeter_basic.tf.erb

@@ -19,7 +19,12 @@ resource "google_access_context_manager_access_level" "access-level" {
           os_type = "DESKTOP_CHROME_OS"
         }
       }
-    }
+      regions = [
+	"CH",
+	"IT",
+	"US",
+      ]
+  }
   }
 }
 

third_party/terraform/tests/resource_access_context_manager_access_level_test.go.erb

@@ -152,6 +152,10 @@ resource "google_access_context_manager_access_level" "test-access" {
           os_type = "DESKTOP_CHROME_OS"
         }
       }
+      regions = [
+        "IT",
+        "US",
+      ]
     }
   }
 }