Added base support for VPC SC Secure Data Exchange (#4509) (#8723)

Signed-off-by: Modular Magician <[email protected]>

.changelog/4509.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+accesscontextmanager: added support for ingress and egress policies to `google_access_context_manager_service_perimeter`
+```

google/resource_access_context_manager_service_perimeter_test.go

@@ -197,13 +197,55 @@ resource "google_access_context_manager_service_perimeter" "test-access" {
   title          = "%s"
   perimeter_type = "PERIMETER_TYPE_REGULAR"
   status {
-    restricted_services = ["bigquery.googleapis.com"]
-	access_levels       = [google_access_context_manager_access_level.test-access.name]
+    restricted_services = ["bigquery.googleapis.com", "storage.googleapis.com"]
+		access_levels       = [google_access_context_manager_access_level.test-access.name]
 
-	vpc_accessible_services {
-	  enable_restriction = true
-	  allowed_services   = ["bigquery.googleapis.com"]
-	}
+		vpc_accessible_services {
+			enable_restriction = true
+			allowed_services   = ["bigquery.googleapis.com", "storage.googleapis.com"]
+		}
+
+		ingress_policies {
+			ingress_from {
+				sources {
+					access_level = google_access_context_manager_access_level.test-access.name
+				}
+				identity_type = "ANY_IDENTITY"
+			}
+
+			ingress_to {
+				resources = [ "*" ]
+				operations {
+					service_name = "bigquery.googleapis.com"
+
+					method_selectors {
+						method = "BigQueryStorage.ReadRows"
+					}
+
+					method_selectors {
+						method = "TableService.ListTables"
+					}
+
+					method_selectors {
+						permission = "bigquery.jobs.get"
+					}
+				}
+
+				operations {
+					service_name = "storage.googleapis.com"
+
+					method_selectors {
+						method = "google.storage.objects.create"
+					}
+				}
+			}
+		}
+
+		egress_policies {
+			egress_from {
+				identity_type = "ANY_USER_ACCOUNT"
+			}
+		}
   }
 }
 `, org, policyTitle, levelTitleName, levelTitleName, perimeterTitleName, perimeterTitleName)