ingressControlConfig property

The configuration for private ingress (PSC-E) of this template.

When set, the sandbox router is exposed privately via a PSC service attachment so VPC-SC customers can connect from their VPC over a private endpoint instead of the public internet. The resulting service attachment is surfaced on SandboxEnvironment.connection_info.service_attachment. Only the PSC-E (service-attachment/ingress) portion of PrivateServiceConnectConfig applies here: enable_private_service_connect and project_allowlist (the consumer projects allowed to connect). The nested psc_interface_config (PSC-I / egress) is not used for sandbox ingress; sandbox egress is configured via egress_control_config instead.

Optional.