google-api-client 0.39.5 → 0.41.1

data/generated/google/apis/cloudasset_v1beta1/representations.rb

@@ -70,6 +70,90 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GoogleCloudOrgpolicyV1BooleanPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudOrgpolicyV1ListPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudOrgpolicyV1Policy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudOrgpolicyV1RestoreDefault
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessLevel
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1BasicLevel
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1Condition
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1CustomLevel
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1DevicePolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1OsConstraint
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeter
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Operation
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -115,12 +199,20 @@ module Google
       class Asset
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :access_level, as: 'accessLevel', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessLevel, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessLevel::Representation
+      
+          property :access_policy, as: 'accessPolicy', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessPolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1AccessPolicy::Representation
+      
           property :asset_type, as: 'assetType'
           property :iam_policy, as: 'iamPolicy', class: Google::Apis::CloudassetV1beta1::Policy, decorator: Google::Apis::CloudassetV1beta1::Policy::Representation
       
           property :name, as: 'name'
+          collection :org_policy, as: 'orgPolicy', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1Policy, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1Policy::Representation
+      
           property :resource, as: 'resource', class: Google::Apis::CloudassetV1beta1::Resource, decorator: Google::Apis::CloudassetV1beta1::Resource::Representation
       
+          property :service_perimeter, as: 'servicePerimeter', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter::Representation
+      
         end
       end
       
@@ -188,6 +280,155 @@ module Google
         end
       end
       
+      class GoogleCloudOrgpolicyV1BooleanPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :enforced, as: 'enforced'
+        end
+      end
+      
+      class GoogleCloudOrgpolicyV1ListPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :all_values, as: 'allValues'
+          collection :allowed_values, as: 'allowedValues'
+          collection :denied_values, as: 'deniedValues'
+          property :inherit_from_parent, as: 'inheritFromParent'
+          property :suggested_value, as: 'suggestedValue'
+        end
+      end
+      
+      class GoogleCloudOrgpolicyV1Policy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :boolean_policy, as: 'booleanPolicy', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1BooleanPolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1BooleanPolicy::Representation
+      
+          property :constraint, as: 'constraint'
+          property :etag, :base64 => true, as: 'etag'
+          property :list_policy, as: 'listPolicy', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1ListPolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1ListPolicy::Representation
+      
+          property :restore_default, as: 'restoreDefault', class: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1RestoreDefault, decorator: Google::Apis::CloudassetV1beta1::GoogleCloudOrgpolicyV1RestoreDefault::Representation
+      
+          property :update_time, as: 'updateTime'
+          property :version, as: 'version'
+        end
+      end
+      
+      class GoogleCloudOrgpolicyV1RestoreDefault
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessLevel
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :basic, as: 'basic', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1BasicLevel, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1BasicLevel::Representation
+      
+          property :custom, as: 'custom', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1CustomLevel, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1CustomLevel::Representation
+      
+          property :description, as: 'description'
+          property :name, as: 'name'
+          property :title, as: 'title'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1AccessPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :etag, as: 'etag'
+          property :name, as: 'name'
+          property :parent, as: 'parent'
+          property :title, as: 'title'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1BasicLevel
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :combining_function, as: 'combiningFunction'
+          collection :conditions, as: 'conditions', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1Condition, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1Condition::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1Condition
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :device_policy, as: 'devicePolicy', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1DevicePolicy, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1DevicePolicy::Representation
+      
+          collection :ip_subnetworks, as: 'ipSubnetworks'
+          collection :members, as: 'members'
+          property :negate, as: 'negate'
+          collection :regions, as: 'regions'
+          collection :required_access_levels, as: 'requiredAccessLevels'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1CustomLevel
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :expr, as: 'expr', class: Google::Apis::CloudassetV1beta1::Expr, decorator: Google::Apis::CloudassetV1beta1::Expr::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1DevicePolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :allowed_device_management_levels, as: 'allowedDeviceManagementLevels'
+          collection :allowed_encryption_statuses, as: 'allowedEncryptionStatuses'
+          collection :os_constraints, as: 'osConstraints', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1OsConstraint, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1OsConstraint::Representation
+      
+          property :require_admin_approval, as: 'requireAdminApproval'
+          property :require_corp_owned, as: 'requireCorpOwned'
+          property :require_screenlock, as: 'requireScreenlock'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1OsConstraint
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :minimum_version, as: 'minimumVersion'
+          property :os_type, as: 'osType'
+          property :require_verified_chrome_os, as: 'requireVerifiedChromeOs'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeter
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :description, as: 'description'
+          property :name, as: 'name'
+          property :perimeter_type, as: 'perimeterType'
+          property :spec, as: 'spec', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig::Representation
+      
+          property :status, as: 'status', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig::Representation
+      
+          property :title, as: 'title'
+          property :use_explicit_dry_run_spec, as: 'useExplicitDryRunSpec'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :access_levels, as: 'accessLevels'
+          collection :resources, as: 'resources'
+          collection :restricted_services, as: 'restrictedServices'
+          property :vpc_accessible_services, as: 'vpcAccessibleServices', class: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices, decorator: Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :allowed_services, as: 'allowedServices'
+          property :enable_restriction, as: 'enableRestriction'
+        end
+      end
+      
       class Operation
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/cloudasset_v1beta1/service.rb

@@ -122,10 +122,10 @@ module Google
         end
         
         # Batch gets the update history of assets that overlap a time window.
-        # For RESOURCE content, this API outputs history with asset in both
-        # non-delete or deleted status.
         # For IAM_POLICY content, this API outputs history when the asset and its
         # attached IAM POLICY both exist. This can create gaps in the output history.
+        # Otherwise, this API outputs history with asset in both non-delete or
+        # deleted status.
         # If a specified asset does not exist, this API returns an INVALID_ARGUMENT
         # error.
         # @param [String] parent
@@ -144,8 +144,8 @@ module Google
         # @param [String] content_type
         #   Optional. The content type.
         # @param [String] read_time_window_end_time
-        #   End time of the time window (inclusive).
-        #   Current timestamp if not specified.
+        #   End time of the time window (inclusive). If not specified, the current
+        #   timestamp is used instead.
         # @param [String] read_time_window_start_time
         #   Start time of the time window (exclusive).
         # @param [String] fields
@@ -254,10 +254,10 @@ module Google
         end
         
         # Batch gets the update history of assets that overlap a time window.
-        # For RESOURCE content, this API outputs history with asset in both
-        # non-delete or deleted status.
         # For IAM_POLICY content, this API outputs history when the asset and its
         # attached IAM POLICY both exist. This can create gaps in the output history.
+        # Otherwise, this API outputs history with asset in both non-delete or
+        # deleted status.
         # If a specified asset does not exist, this API returns an INVALID_ARGUMENT
         # error.
         # @param [String] parent
@@ -276,8 +276,8 @@ module Google
         # @param [String] content_type
         #   Optional. The content type.
         # @param [String] read_time_window_end_time
-        #   End time of the time window (inclusive).
-        #   Current timestamp if not specified.
+        #   End time of the time window (inclusive). If not specified, the current
+        #   timestamp is used instead.
         # @param [String] read_time_window_start_time
         #   Start time of the time window (exclusive).
         # @param [String] fields

data/generated/google/apis/cloudasset_v1p1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p1beta1
       VERSION = 'V1p1beta1'
-      REVISION = '20200515'
+      REVISION = '20200605'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p1beta1/classes.rb

@@ -34,7 +34,7 @@ module Google
       # `
       # "audit_configs": [
       # `
-      # "service": "allServices"
+      # "service": "allServices",
       # "audit_log_configs": [
       # `
       # "log_type": "DATA_READ",
@@ -43,18 +43,18 @@ module Google
       # ]
       # `,
       # `
-      # "log_type": "DATA_WRITE",
+      # "log_type": "DATA_WRITE"
       # `,
       # `
-      # "log_type": "ADMIN_READ",
+      # "log_type": "ADMIN_READ"
       # `
       # ]
       # `,
       # `
-      # "service": "sampleservice.googleapis.com"
+      # "service": "sampleservice.googleapis.com",
       # "audit_log_configs": [
       # `
-      # "log_type": "DATA_READ",
+      # "log_type": "DATA_READ"
       # `,
       # `
       # "log_type": "DATA_WRITE",
@@ -106,7 +106,7 @@ module Google
       # ]
       # `,
       # `
-      # "log_type": "DATA_WRITE",
+      # "log_type": "DATA_WRITE"
       # `
       # ]
       # `

data/generated/google/apis/cloudasset_v1p1beta1/service.rb

@@ -47,12 +47,12 @@ module Google
           @batch_path = 'batch'
         end
         
-        # Searches all the IAM policies under a given accessible CRM scope
-        # (project/folder/organization). This RPC gives callers
-        # especially admins the ability to search all the IAM policies under a scope,
-        # even if they don't have .getIamPolicy permission of all the IAM policies.
-        # Callers should have cloud.assets.SearchAllIamPolicies permission on the
-        # requested scope, otherwise it will be rejected.
+        # Searches all the IAM policies within a given accessible CRM scope
+        # (project/folder/organization). This RPC gives callers especially
+        # administrators the ability to search all the IAM policies within a scope,
+        # even if they don't have `.getIamPolicy` permission of all the IAM policies.
+        # Callers should have `cloud.assets.SearchAllIamPolicies` permission on the
+        # requested scope, otherwise the request will be rejected.
         # @param [String] scope
         #   Required. The relative name of an asset. The search is limited to the
         #   resources
@@ -74,8 +74,7 @@ module Google
         #   previous response. The values of all other method parameters must be
         #   identical to those in the previous call.
         # @param [String] query
-        #   Optional. The query statement.
-        #   Examples:
+        #   Optional. The query statement. Examples:
         #   * "policy:myuser@mydomain.com"
         #   * "policy:(myuser@mydomain.com viewer)"
         # @param [String] fields
@@ -108,12 +107,12 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Searches all the resources under a given accessible CRM scope
-        # (project/folder/organization). This RPC gives callers
-        # especially admins the ability to search all the resources under a scope,
-        # even if they don't have .get permission of all the resources. Callers
-        # should have cloud.assets.SearchAllResources permission on the requested
-        # scope, otherwise it will be rejected.
+        # Searches all the resources within a given accessible CRM scope
+        # (project/folder/organization). This RPC gives callers especially
+        # administrators the ability to search all the resources within a scope, even
+        # if they don't have `.get` permission of all the resources. Callers should
+        # have `cloud.assets.SearchAllResources` permission on the requested scope,
+        # otherwise the request will be rejected.
         # @param [String] scope
         #   Required. The relative name of an asset. The search is limited to the
         #   resources
@@ -128,9 +127,9 @@ module Google
         #   search all the supported asset types.
         # @param [String] order_by
         #   Optional. A comma separated list of fields specifying the sorting order of the
-        #   results. The default order is ascending. Add " desc" after the field name
+        #   results. The default order is ascending. Add ` DESC` after the field name
         #   to indicate descending order. Redundant space characters are ignored. For
-        #   example, "  foo ,  bar  desc  ".
+        #   example, `  location DESC ,  name  `.
         # @param [Fixnum] page_size
         #   Optional. The page size for search result pagination. Page size is capped at
         #   500 even

data/generated/google/apis/cloudasset_v1p4beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p4beta1
       VERSION = 'V1p4beta1'
-      REVISION = '20200515'
+      REVISION = '20200613'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p4beta1/classes.rb

@@ -294,12 +294,12 @@ module Google
         end
       end
       
-      # A role or permission that appears in an access control list.
+      # An IAM role or permission under analysis.
       class GoogleCloudAssetV1p4beta1Access
         include Google::Apis::Core::Hashable
       
-        # Represents analysis state of each node in the result graph or non-critical
-        # errors in the response.
+        # Represents the detailed state of an entity under analysis, such as a
+        # resource, an identity or an access.
         # Corresponds to the JSON property `analysisState`
         # @return [Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AnalysisState]
         attr_accessor :analysis_state
@@ -376,8 +376,8 @@ module Google
         end
       end
       
-      # Represents analysis state of each node in the result graph or non-critical
-      # errors in the response.
+      # Represents the detailed state of an entity under analysis, such as a
+      # resource, an identity or an access.
       class GoogleCloudAssetV1p4beta1AnalysisState
         include Google::Apis::Core::Hashable
       
@@ -388,9 +388,10 @@ module Google
       
         # The Google standard error code that best describes the state.
         # For example:
-        # - OK means the node has been successfully explored;
+        # - OK means the analysis on this entity has been successfully finished;
         # - PERMISSION_DENIED means an access denied error is encountered;
-        # - DEADLINE_EXCEEDED means the node hasn't been explored in time;
+        # - DEADLINE_EXCEEDED means the analysis on this entity hasn't been started
+        # in time;
         # Corresponds to the JSON property `code`
         # @return [String]
         attr_accessor :code
@@ -431,12 +432,12 @@ module Google
         end
       end
       
-      # An identity that appears in an access control list.
+      # An identity under analysis.
       class GoogleCloudAssetV1p4beta1Identity
         include Google::Apis::Core::Hashable
       
-        # Represents analysis state of each node in the result graph or non-critical
-        # errors in the response.
+        # Represents the detailed state of an entity under analysis, such as a
+        # resource, an identity or an access.
         # Corresponds to the JSON property `analysisState`
         # @return [Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AnalysisState]
         attr_accessor :analysis_state
@@ -501,17 +502,18 @@ module Google
         end
       end
       
-      # A GCP resource that appears in an access control list.
+      # A Google Cloud resource under analysis.
       class GoogleCloudAssetV1p4beta1Resource
         include Google::Apis::Core::Hashable
       
-        # Represents analysis state of each node in the result graph or non-critical
-        # errors in the response.
+        # Represents the detailed state of an entity under analysis, such as a
+        # resource, an identity or an access.
         # Corresponds to the JSON property `analysisState`
         # @return [Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AnalysisState]
         attr_accessor :analysis_state
       
-        # The [full resource name](https://aip.dev/122#full-resource-names).
+        # The [full resource
+        # name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
         # Corresponds to the JSON property `fullResourceName`
         # @return [String]
         attr_accessor :full_resource_name
@@ -603,14 +605,19 @@ module Google
         # within
         # the parent will be analyzed. This can only be an organization number (such
         # as "organizations/123") or a folder number (such as "folders/123").
+        # To know how to get organization id, visit [here
+        # ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        # organization#retrieving_your_organization_id).
+        # To know how to get folder id, visit [here
+        # ](https://cloud.google.com/resource-manager/docs/creating-managing-folders#
+        # viewing_or_listing_folders_and_projects).
         # Corresponds to the JSON property `parent`
         # @return [String]
         attr_accessor :parent
       
         # Specifies the resource to analyze for access policies, which may be set
         # directly on the resource, or on ancestors such as organizations, folders or
-        # projects. At least one of ResourceSelector, IdentitySelector or
-        # AccessSelector must be specified in a request.
+        # projects.
         # Corresponds to the JSON property `resourceSelector`
         # @return [Google::Apis::CloudassetV1p4beta1::ResourceSelector]
         attr_accessor :resource_selector
@@ -639,13 +646,15 @@ module Google
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AccessControlList>]
         attr_accessor :access_control_lists
       
-        # The full name of the resource to which the iam_binding policy attaches.
+        # The [full resource
+        # name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
+        # of the resource to which the iam_binding policy attaches.
         # Corresponds to the JSON property `attachedResourceFullName`
         # @return [String]
         attr_accessor :attached_resource_full_name
       
-        # Represents whether all nodes in the transitive closure of the
-        # iam_binding node have been explored.
+        # Represents whether all analyses on the iam_binding have successfully
+        # finished.
         # Corresponds to the JSON property `fullyExplored`
         # @return [Boolean]
         attr_accessor :fully_explored
@@ -685,6 +694,13 @@ module Google
         # Required. The identity appear in the form of members in
         # [IAM policy
         # binding](https://cloud.google.com/iam/reference/rest/v1/Binding).
+        # The examples of supported forms are:
+        # "user:mike@example.com",
+        # "group:admins@example.com",
+        # "domain:google.com",
+        # "serviceAccount:my-project-id@appspot.gserviceaccount.com".
+        # Notice that wildcard characters (such as * and ?) are not supported.
+        # You must give a specific identity.
         # Corresponds to the JSON property `identity`
         # @return [String]
         attr_accessor :identity
@@ -859,14 +875,15 @@ module Google
       
       # Specifies the resource to analyze for access policies, which may be set
       # directly on the resource, or on ancestors such as organizations, folders or
-      # projects. At least one of ResourceSelector, IdentitySelector or
-      # AccessSelector must be specified in a request.
+      # projects.
       class ResourceSelector
         include Google::Apis::Core::Hashable
       
         # Required. The [full resource
-        # name](https://cloud.google.com/apis/design/resource_names#full_resource_name)
-        # .
+        # name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
+        # of a resource of [supported resource
+        # types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#
+        # analyzable_asset_types).
         # Corresponds to the JSON property `fullResourceName`
         # @return [String]
         attr_accessor :full_resource_name