---
title: "POST /v1/{+parent}/applications"
method: POST
path: "/v1/{+parent}/applications"
tags: ["projects"]
---

# POST /v1/{+parent}/applications

`POST /v1/{+parent}/applications`

Creates a new Application in a given project and location.

## Path parameters

- `parent` string, required

## Query parameters

- `applicationId` string
- `requestId` string

## Request body

- GoogleCloudBeyondcorpSecuritygatewaysV1Application — The information about an application resource.
  - `updateTime` string, google-datetime — Output only. Timestamp when the resource was last modified.
  - `upstreams` GoogleCloudBeyondcorpSecuritygatewaysV1ApplicationUpstream[] — Optional. Which upstream resources to forward traffic to.
    - `network` GoogleCloudBeyondcorpSecuritygatewaysV1ApplicationUpstreamNetwork — Network to forward traffic to.
      - `name` string — Required. Network name is of the format: `projects/{project}/global/networks/{network}
    - `proxyProtocol` GoogleCloudBeyondcorpSecuritygatewaysV1ProxyProtocolConfig — The configuration for the proxy.
      - `metadataHeaders` object — Optional. Custom resource specific headers along with the values. The names should conform to RFC 9110: >Field names can contain alphanumeric characters, hyphens, and periods, can contain only ASCII-printable characters and tabs, and must start with a letter.
      - `gatewayIdentity` 'GATEWAY_IDENTITY_UNSPECIFIED' | 'RESOURCE_NAME' — Optional. The security gateway identity configuration.
      - `contextualHeaders` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeaders — Contextual headers configuration.
        - `deviceInfo` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeadersDelegatedDeviceInfo — The delegated device information configuration.
          - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. The output type details for the delegated device.
        - `userInfo` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeadersDelegatedUserInfo — The configuration information for the delegated user.
          - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. The delegated user's information.
        - `groupInfo` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeadersDelegatedGroupInfo — The delegated group configuration details.
          - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. The output type of the delegated group information.
        - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. Default output type for all enabled headers.
      - `allowedClientHeaders` string[] — Optional. List of the allowed client header names.
      - `clientIp` boolean — Optional. Client IP configuration. The client IP address is included if true.
    - `egressPolicy` GoogleCloudBeyondcorpSecuritygatewaysV1EgressPolicy — Routing policy information.
      - `regions` string[] — Required. List of the regions where the application sends traffic.
    - `external` GoogleCloudBeyondcorpSecuritygatewaysV1ApplicationUpstreamExternal — Endpoints to forward traffic to.
      - `endpoints` GoogleCloudBeyondcorpSecuritygatewaysV1Endpoint[] — Required. List of the endpoints to forward traffic to.
        - `hostname` string — Required. Hostname of the endpoint.
        - `port` integer — Required. Port of the endpoint.
  - `endpointMatchers` GoogleCloudBeyondcorpSecuritygatewaysV1EndpointMatcher[] — Optional. An array of conditions to match the application's network endpoint. Each element in the array is an EndpointMatcher object, which defines a specific combination of a hostname pattern and one or more ports. The application is considered matched if at least one of the EndpointMatcher conditions in this array is met (the conditions are combined using OR logic). Each EndpointMatcher must contain a hostname pattern, such as "example.com", and one or more port numbers specified as a string, such as "443". Hostname and port number examples: "*.example.com", "443" "example.com" and "22" "example.com" and "22,33"
    - `hostname` string — Required. Hostname of the application.
    - `ports` integer[] — Required. The ports of the application.
  - `createTime` string, google-datetime — Output only. Timestamp when the resource was created.
  - `schema` 'SCHEMA_UNSPECIFIED' | 'PROXY_GATEWAY' | 'API_GATEWAY' — Optional. Type of the external application.
  - `name` string — Identifier. Name of the resource.
  - `displayName` string — Optional. An arbitrary user-provided name for the application resource. Cannot exceed 64 characters.

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/beyondcorp.md) · [All operations](https://skmtc.dev/google/apis/beyondcorp/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/beyondcorp/revisions/e86980a523a5/schema)