---
title: "POST /v1/{+parent}/securityGateways"
method: POST
path: "/v1/{+parent}/securityGateways"
tags: ["projects"]
---

# POST /v1/{+parent}/securityGateways

`POST /v1/{+parent}/securityGateways`

Creates a new Security Gateway in a given project and location.

## Path parameters

- `parent` string, required

## Query parameters

- `requestId` string
- `securityGatewayId` string

## Request body

- GoogleCloudBeyondcorpSecuritygatewaysV1SecurityGateway — The information about a security gateway resource.
  - `proxyProtocolConfig` GoogleCloudBeyondcorpSecuritygatewaysV1ProxyProtocolConfig — The configuration for the proxy.
    - `metadataHeaders` object — Optional. Custom resource specific headers along with the values. The names should conform to RFC 9110: >Field names can contain alphanumeric characters, hyphens, and periods, can contain only ASCII-printable characters and tabs, and must start with a letter.
    - `gatewayIdentity` 'GATEWAY_IDENTITY_UNSPECIFIED' | 'RESOURCE_NAME' — Optional. The security gateway identity configuration.
    - `contextualHeaders` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeaders — Contextual headers configuration.
      - `deviceInfo` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeadersDelegatedDeviceInfo — The delegated device information configuration.
        - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. The output type details for the delegated device.
      - `userInfo` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeadersDelegatedUserInfo — The configuration information for the delegated user.
        - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. The delegated user's information.
      - `groupInfo` GoogleCloudBeyondcorpSecuritygatewaysV1ContextualHeadersDelegatedGroupInfo — The delegated group configuration details.
        - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. The output type of the delegated group information.
      - `outputType` 'OUTPUT_TYPE_UNSPECIFIED' | 'PROTOBUF' | 'JSON' | 'NONE' — Optional. Default output type for all enabled headers.
    - `allowedClientHeaders` string[] — Optional. List of the allowed client header names.
    - `clientIp` boolean — Optional. Client IP configuration. The client IP address is included if true.
  - `hubs` object — Optional. Map of Hubs that represents regional data path deployment with GCP region as a key.
  - `logging` GoogleCloudBeyondcorpSecuritygatewaysV1LoggingConfig — Configuration for Cloud Logging.
  - `createTime` string, google-datetime — Output only. Timestamp when the resource was created.
  - `externalIps` string[] — Output only. IP addresses that will be used for establishing connection to the endpoints.
  - `serviceDiscovery` GoogleCloudBeyondcorpSecuritygatewaysV1ServiceDiscovery — Settings related to the Service Discovery.
    - `apiGateway` GoogleCloudBeyondcorpSecuritygatewaysV1ServiceDiscoveryApiGateway — If Service Discovery is done through API, defines its settings.
      - `resourceOverride` GoogleCloudBeyondcorpSecuritygatewaysV1ServiceDiscoveryApiGatewayOperationDescriptor — API operation descriptor.
        - `path` string — Optional. Contains the URI path fragment where HTTP request is sent.
  - `name` string — Identifier. Name of the resource.
  - `displayName` string — Optional. An arbitrary user-provided name for the SecurityGateway. Cannot exceed 64 characters.
  - `state` 'STATE_UNSPECIFIED' | 'CREATING' | 'UPDATING' | 'DELETING' | 'RUNNING' | 'DOWN' | 'ERROR' — Output only. The operational state of the SecurityGateway.
  - `delegatingServiceAccount` string — Output only. Service account used for operations that involve resources in consumer projects.
  - `updateTime` string, google-datetime — Output only. Timestamp when the resource was last modified.

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/beyondcorp.md) · [All operations](https://skmtc.dev/google/apis/beyondcorp/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/beyondcorp/revisions/e86980a523a5/schema)