{
	"allowed": [
		{
			"IPProtocol": "The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp) or the IP protocol number.",
			"ports": [
				"string"
			]
		}
	],
	"creationTimestamp": "[Output Only] Creation timestamp in RFC3339 text format.",
	"denied": [
		{
			"IPProtocol": "The IP protocol to which this rule applies. The protocol type is required when creating a firewall rule. This value can either be one of the following well known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp) or the IP protocol number.",
			"ports": [
				"string"
			]
		}
	],
	"description": "An optional description of this resource. Provide this field when you create the resource.",
	"destinationRanges": [
		"string"
	],
	"direction": "Direction of traffic to which this firewall applies, either `INGRESS` or `EGRESS`. The default is `INGRESS`. For `INGRESS` traffic, you cannot specify the destinationRanges field, and for `EGRESS` traffic, you cannot specify the sourceRanges or sourceTags fields.",
	"disabled": false,
	"id": "[Output Only] The unique identifier for the resource. This identifier is defined by the server.",
	"kind": "compute#firewall",
	"logConfig": {
		"enable": false,
		"metadata": "This field can only be specified for a particular firewall rule if logging is enabled for that rule. This field denotes whether to include or exclude metadata for firewall logs."
	},
	"name": "Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?`. The first character must be a lowercase letter, and all following characters (except for the last character) must be a dash, lowercase letter, or digit. The last character must be a lowercase letter or digit.",
	"network": "URL of the network resource for this firewall rule. If not specified when creating a firewall rule, the default network is used: global/networks/default If you choose to specify this field, you can specify the network as a full or partial URL. For example, the following are all valid URLs: - https://www.googleapis.com/compute/v1/projects/myproject/global/networks/my-network - projects/myproject/global/networks/my-network - global/networks/default ",
	"priority": 0,
	"selfLink": "[Output Only] Server-defined URL for the resource.",
	"sourceRanges": [
		"string"
	],
	"sourceServiceAccounts": [
		"string"
	],
	"sourceTags": [
		"string"
	],
	"targetServiceAccounts": [
		"string"
	],
	"targetTags": [
		"string"
	]
}