Added support for VPC Service Controls (VPC SC) Secure Data Exchange

.changelog/4509.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+accesscontextmanager: added support for ingress and egress policies to `google_access_context_manager_service_perimeter`
+```

google-beta/resource_access_context_manager_service_perimeter_test.go

@@ -197,13 +197,55 @@ resource "google_access_context_manager_service_perimeter" "test-access" {
   title          = "%s"
   perimeter_type = "PERIMETER_TYPE_REGULAR"
   status {
-    restricted_services = ["bigquery.googleapis.com"]
-	access_levels       = [google_access_context_manager_access_level.test-access.name]
+    restricted_services = ["bigquery.googleapis.com", "storage.googleapis.com"]
+		access_levels       = [google_access_context_manager_access_level.test-access.name]
 
-	vpc_accessible_services {
-	  enable_restriction = true
-	  allowed_services   = ["bigquery.googleapis.com"]
-	}
+		vpc_accessible_services {
+			enable_restriction = true
+			allowed_services   = ["bigquery.googleapis.com", "storage.googleapis.com"]
+		}
+
+		ingress_policies {
+			ingress_from {
+				sources {
+					access_level = google_access_context_manager_access_level.test-access.name
+				}
+				identity_type = "ANY_IDENTITY"
+			}
+
+			ingress_to {
+				resources = [ "*" ]
+				operations {
+					service_name = "bigquery.googleapis.com"
+
+					method_selectors {
+						method = "BigQueryStorage.ReadRows"
+					}
+
+					method_selectors {
+						method = "TableService.ListTables"
+					}
+
+					method_selectors {
+						permission = "bigquery.jobs.get"
+					}
+				}
+
+				operations {
+					service_name = "storage.googleapis.com"
+
+					method_selectors {
+						method = "google.storage.objects.create"
+					}
+				}
+			}
+		}
+
+		egress_policies {
+			egress_from {
+				identity_type = "ANY_USER_ACCOUNT"
+			}
+		}
   }
 }
 `, org, policyTitle, levelTitleName, levelTitleName, perimeterTitleName, perimeterTitleName)

google-beta/resource_dataproc_cluster_test.go

@@ -13,8 +13,9 @@ import (
 	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
 	"github.com/hashicorp/terraform-plugin-sdk/v2/terraform"
 
-	dataproc "google.golang.org/api/dataproc/v1beta2"
 	"google.golang.org/api/googleapi"
+
+	dataproc "google.golang.org/api/dataproc/v1beta2"
 )
 
 func TestDataprocExtractInitTimeout(t *testing.T) {