---
title: "POST /v1/{+parent}/interceptEndpointGroups"
method: POST
path: "/v1/{+parent}/interceptEndpointGroups"
tags: ["projects"]
---

# POST /v1/{+parent}/interceptEndpointGroups

`POST /v1/{+parent}/interceptEndpointGroups`

Creates an endpoint group in a given project and location. See https://google.aip.dev/133.

## Path parameters

- `parent` string, required

## Query parameters

- `interceptEndpointGroupId` string
- `requestId` string

## Request body

- InterceptEndpointGroup — An endpoint group is a consumer frontend for a deployment group (backend). In order to configure intercept for a network, consumers must create: - An association between their network and the endpoint group. - A security profile that points to the endpoint group. - A firewall rule that references the security profile (group).
  - `reconciling` boolean — Output only. The current state of the resource does not match the user's intended state, and the system is working to reconcile them. This is part of the normal operation (e.g. adding a new association to the group). See https://google.aip.dev/128.
  - `associations` InterceptEndpointGroupAssociationDetails[] — Output only. List of associations to this endpoint group.
    - `name` string — Output only. The connected association's resource name, for example: `projects/123456789/locations/global/interceptEndpointGroupAssociations/my-ega`. See https://google.aip.dev/124.
    - `network` string — Output only. The associated network, for example: projects/123456789/global/networks/my-network. See https://google.aip.dev/124.
    - `state` 'STATE_UNSPECIFIED' | 'ACTIVE' | 'CREATING' | 'DELETING' | 'CLOSED' | 'OUT_OF_SYNC' | 'DELETE_FAILED' — Output only. Most recent known state of the association.
  - `labels` object — Optional. Labels are key/value pairs that help to organize and filter resources.
  - `description` string — Optional. User-provided description of the endpoint group. Used as additional context for the endpoint group.
  - `createTime` string, google-datetime — Output only. The timestamp when the resource was created. See https://google.aip.dev/148#timestamps.
  - `state` 'STATE_UNSPECIFIED' | 'ACTIVE' | 'CLOSED' | 'CREATING' | 'DELETING' | 'OUT_OF_SYNC' | 'DELETE_FAILED' — Output only. The current state of the endpoint group. See https://google.aip.dev/216.
  - `updateTime` string, google-datetime — Output only. The timestamp when the resource was most recently updated. See https://google.aip.dev/148#timestamps.
  - `name` string — Immutable. Identifier. The resource name of this endpoint group, for example: `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. See https://google.aip.dev/122 for more details.
  - `interceptDeploymentGroup` string — Required. Immutable. The deployment group that this endpoint group is connected to, for example: `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. See https://google.aip.dev/124.
  - `connectedDeploymentGroup` InterceptEndpointGroupConnectedDeploymentGroup — The endpoint group's view of a connected deployment group.
    - `name` string — Output only. The connected deployment group's resource name, for example: `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. See https://google.aip.dev/124.
    - `locations` InterceptLocation[] — Output only. The list of locations where the deployment group is present.
      - `state` 'STATE_UNSPECIFIED' | 'ACTIVE' | 'OUT_OF_SYNC' — Output only. The current state of the association in this location.
      - `location` string — Output only. The cloud location, e.g. "us-central1-a" or "asia-south1".

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/networksecurity.md) · [All operations](https://skmtc.net/google/apis/networksecurity/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/networksecurity/versions/4afd54463fe6/schema)