gcloud recaptcha firewall-policies create

NAME
gcloud recaptcha firewall-policies create - create a Firewall Policy
SYNOPSIS
gcloud recaptcha firewall-policies create[--actions=ACTIONS][--condition=CONDITION][--description=DESCRIPTION][--path=PATH][GCLOUD_WIDE_FLAG]
DESCRIPTION
Create a reCAPTCHA Firewall Policy.
EXAMPLES
To create a new reCAPTCHA firewall policy covering the path "/login/" forall requests with a reCAPTCHA Lite score of >= 0.5 to allow the requests andset the header 'foo' to the value 'bar':
gcloudrecaptchafirewall-policiescreate--path='/login/*'--condition='recaptcha.assessment_type == AssessmentType.LITE&& recaptcha.score >= 0.5'--actions=allow,set_header=foo=bar
FLAGS
--actions=ACTIONS
The actions that the caller should take regarding the user. There should be atmost 1 terminal action. A terminal action is any action that forces a response,such as Allow, Block or Substitute. If it makes sense for it to happen multpletimes, such as SetHeader, the action is non-terminal.

Examples:

  • Block and set the header with key foo to value bar
    • --actions=block,set_header=foo=bar
  • Substitute with path google.com and set two headers, one with key key1 to valuevalue1 and one with key key2 to value value2
    • --actions=substitute=google.com,set_header=key1=value1,set_header=key2=value2
--condition=CONDITION
A CEL (Common Expression Language) conditional expression that specifies if thispolicy applies to an incoming user request. If this condition evaluates to trueand the requested path matched the path pattern, the associated actions shouldbe executed by the caller. The condition string is checked for CEL syntaxcorrectness on creation. For more information, see the CEL spec:https://github.com/google/cel-specand its language definition:https://github.com/google/cel-spec/blob/master/doc/langdef.md
--description=DESCRIPTION
A description of what this policy aims to achieve, for convenience purposes. Thedescription can at most include 256 UTF-8 characters.
--path=PATH
The path for which this policy applies, specified as a glob pattern. For moreinformation on glob, see the manual page:https://man7.org/linux/man-pages/man7/glob.7.html.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

API REFERENCE
This command uses therecaptchaenterprise/v1 API. The fulldocumentation for this API can be found at:https://cloud.google.com/recaptcha-enterprise/
NOTES
This variant is also available:
gcloudalpharecaptchafirewall-policiescreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.