access_level.tf

# Creates an Access Level
# This access level will be used in
# a conditional IAM policy to restrict access
# to authorised users coming from authorised networks

resource "google_access_context_manager_access_level" "access-level" {
    parent  = "accessPolicies/<access-policy-id>"
    name    = "accessPolicies/<access-policy-id>/accessLevels/<my_access_level_name>"
    title   = "secure-iap-access-level"
    description = "This access level lists the authorised network addresses"
    basic {
        conditions {
            ip_subnetworks = [
                "10.0.0.1/32",
                ]
        }
    }
}