- NAME
-
- gcloud access-context-manager perimeters dry-run describe - display the dry-run mode configuration for a Service Perimeter
- SYNOPSIS
-
-
gcloud access-context-manager perimeters dry-run describe(PERIMETER:--policy=POLICY) [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- The dry-run mode configuration is presented as a diff against the enforcement
mode configuration. '+' indicates additions in
spec,'-' indicates removals fromstatusand entries without either of those indicate that they are the same across the dry-run and the enforcement mode configurations. When a particular field is completely empty, it will not be displayed.Note: When this command is executed on a Service Perimeter with no explicit dry-run mode configuration, the effective dry-run mode configuration is inherited from the enforcement mode configuration, and thus, the enforcement mode configuration is displayed in such cases.
- EXAMPLES
- To display the dry-run mode configuration for a Service Perimeter:
gcloud access-context-manager perimeters dry-run describe my-perimeterSample output:
=== name: my_perimeter title: My Perimeter type: PERIMETER_TYPE_REGULAR resources: + projects/123 - projects/456 projects/789 restrictedServices: + bigquery.googleapis.com - storage.googleapis.com bigtable.googleapis.com vpcAccessibleServices: + allowedServices: + bigquery.googleapis.com - storage.googleapis.com + enableRestriction: true
- POSITIONAL ARGUMENTS
-
- Perimeter resource - The service perimeter to describe. The arguments in this
group can be used to specify the attributes of this resource.
This must be specified.
-
PERIMETER - ID of the perimeter or fully qualified identifier for the perimeter.
To set the
perimeterattribute:- provide the argument
perimeteron the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--policy=POLICY - The ID of the access policy.
To set the
policyattribute:- provide the argument
perimeteron the command line with a fully specified name; - provide the argument
--policyon the command line; - set the property
access_context_manager/policy.
- provide the argument
-
- Perimeter resource - The service perimeter to describe. The arguments in this
group can be used to specify the attributes of this resource.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- These variants are also available:
gcloud alpha access-context-manager perimeters dry-run describegcloud beta access-context-manager perimeters dry-run describe
gcloud access-context-manager perimeters dry-run describe
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

