.TH "GCLOUD_ACCESS\-CONTEXT\-MANAGER_PERIMETERS_DRY\-RUN_DESCRIBE" 1



.SH "NAME"
.HP
gcloud access\-context\-manager perimeters dry\-run describe \- display the dry\-run mode configuration for a Service Perimeter



.SH "SYNOPSIS"
.HP
\f5gcloud access\-context\-manager perimeters dry\-run describe\fR (\fIPERIMETER\fR\ :\ \fB\-\-policy\fR=\fIPOLICY\fR) [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

The dry\-run mode configuration is presented as a diff against the enforcement
mode configuration. '+' indicates additions in \f5spec\fR,'\-' indicates
removals from \f5status\fR and entries without either of those indicate that
they are the same across the dry\-run and the enforcement mode configurations.
When a particular field is completely empty, it will not be displayed.

Note: When this command is executed on a Service Perimeter with no explicit
dry\-run mode configuration, the effective dry\-run mode configuration is
inherited from the enforcement mode configuration, and thus, the enforcement
mode configuration is displayed in such cases.



.SH "EXAMPLES"

To display the dry\-run mode configuration for a Service Perimeter:

.RS 2m
$ gcloud access\-context\-manager perimeters dry\-run describe \e
    my\-perimeter
.RE

Sample output:

.RS 2m
===
  name: my_perimeter
  title: My Perimeter
  type: PERIMETER_TYPE_REGULAR
  resources:
+   projects/123
\-   projects/456
    projects/789
  restrictedServices:
+   bigquery.googleapis.com
\-   storage.googleapis.com
    bigtable.googleapis.com
  vpcAccessibleServices:
+   allowedServices:
+     bigquery.googleapis.com
\-     storage.googleapis.com
+   enableRestriction: true
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m

Perimeter resource \- The service perimeter to describe. The arguments in this
group can be used to specify the attributes of this resource.

This must be specified.


.RS 2m
.TP 2m
\fIPERIMETER\fR

ID of the perimeter or fully qualified identifier for the perimeter.

To set the \f5perimeter\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5perimeter\fR on the command line.
.RE
.sp

This positional argument must be specified if any of the other arguments in this
group are specified.

.TP 2m
\fB\-\-policy\fR=\fIPOLICY\fR

The ID of the access policy.

To set the \f5policy\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5perimeter\fR on the command line with a fully specified
name;
.IP "\(bu" 2m
provide the argument \f5\-\-policy\fR on the command line;
.IP "\(bu" 2m
set the property \f5access_context_manager/policy\fR.
.RE
.sp


.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha access\-context\-manager perimeters dry\-run describe
.RE

.RS 2m
$ gcloud beta access\-context\-manager perimeters dry\-run describe
.RE