google-api-client 0.42.2 → 0.45.0

data/generated/google/apis/cloudasset_v1p1beta1/service.rb

@@ -47,36 +47,30 @@ module Google
           @batch_path = 'batch'
         end
         
-        # Searches all the IAM policies within a given accessible CRM scope
-        # (project/folder/organization). This RPC gives callers especially
-        # administrators the ability to search all the IAM policies within a scope,
-        # even if they don't have `.getIamPolicy` permission of all the IAM policies.
-        # Callers should have `cloud.assets.SearchAllIamPolicies` permission on the
-        # requested scope, otherwise the request will be rejected.
+        # Searches all the IAM policies within a given accessible CRM scope (project/
+        # folder/organization). This RPC gives callers especially administrators the
+        # ability to search all the IAM policies within a scope, even if they don't have
+        # `.getIamPolicy` permission of all the IAM policies. Callers should have `cloud.
+        # assets.SearchAllIamPolicies` permission on the requested scope, otherwise the
+        # request will be rejected.
         # @param [String] scope
         #   Required. The relative name of an asset. The search is limited to the
-        #   resources
-        #   within the `scope`. The allowed value must be:
-        #   * Organization number (such as "organizations/123")
-        #   * Folder number(such as "folders/1234")
-        #   * Project number (such as "projects/12345")
-        #   * Project id (such as "projects/abc")
+        #   resources within the `scope`. The allowed value must be: * Organization number
+        #   (such as "organizations/123") * Folder number(such as "folders/1234") *
+        #   Project number (such as "projects/12345") * Project id (such as "projects/abc")
         # @param [Fixnum] page_size
         #   Optional. The page size for search result pagination. Page size is capped at
-        #   500 even
-        #   if a larger value is given. If set to zero, server will pick an appropriate
-        #   default. Returned results may be fewer than requested. When this happens,
-        #   there could be more results as long as `next_page_token` is returned.
+        #   500 even if a larger value is given. If set to zero, server will pick an
+        #   appropriate default. Returned results may be fewer than requested. When this
+        #   happens, there could be more results as long as `next_page_token` is returned.
         # @param [String] page_token
         #   Optional. If present, retrieve the next batch of results from the preceding
-        #   call to
-        #   this method. `page_token` must be the value of `next_page_token` from the
-        #   previous response. The values of all other method parameters must be
+        #   call to this method. `page_token` must be the value of `next_page_token` from
+        #   the previous response. The values of all other method parameters must be
         #   identical to those in the previous call.
         # @param [String] query
-        #   Optional. The query statement. Examples:
-        #   * "policy:myuser@mydomain.com"
-        #   * "policy:(myuser@mydomain.com viewer)"
+        #   Optional. The query statement. Examples: * "policy:myuser@mydomain.com" * "
+        #   policy:(myuser@mydomain.com viewer)"
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -107,41 +101,35 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Searches all the resources within a given accessible CRM scope
-        # (project/folder/organization). This RPC gives callers especially
-        # administrators the ability to search all the resources within a scope, even
-        # if they don't have `.get` permission of all the resources. Callers should
-        # have `cloud.assets.SearchAllResources` permission on the requested scope,
-        # otherwise the request will be rejected.
+        # Searches all the resources within a given accessible CRM scope (project/folder/
+        # organization). This RPC gives callers especially administrators the ability to
+        # search all the resources within a scope, even if they don't have `.get`
+        # permission of all the resources. Callers should have `cloud.assets.
+        # SearchAllResources` permission on the requested scope, otherwise the request
+        # will be rejected.
         # @param [String] scope
         #   Required. The relative name of an asset. The search is limited to the
-        #   resources
-        #   within the `scope`. The allowed value must be:
-        #   * Organization number (such as "organizations/123")
-        #   * Folder number(such as "folders/1234")
-        #   * Project number (such as "projects/12345")
-        #   * Project id (such as "projects/abc")
+        #   resources within the `scope`. The allowed value must be: * Organization number
+        #   (such as "organizations/123") * Folder number(such as "folders/1234") *
+        #   Project number (such as "projects/12345") * Project id (such as "projects/abc")
         # @param [Array<String>, String] asset_types
         #   Optional. A list of asset types that this request searches for. If empty, it
-        #   will
-        #   search all the supported asset types.
+        #   will search all the supported asset types.
         # @param [String] order_by
         #   Optional. A comma separated list of fields specifying the sorting order of the
-        #   results. The default order is ascending. Add ` DESC` after the field name
-        #   to indicate descending order. Redundant space characters are ignored. For
-        #   example, `  location DESC ,  name  `.
+        #   results. The default order is ascending. Add ` DESC` after the field name to
+        #   indicate descending order. Redundant space characters are ignored. For example,
+        #   ` location DESC , name `.
         # @param [Fixnum] page_size
         #   Optional. The page size for search result pagination. Page size is capped at
-        #   500 even
-        #   if a larger value is given. If set to zero, server will pick an appropriate
-        #   default. Returned results may be fewer than requested. When this happens,
-        #   there could be more results as long as `next_page_token` is returned.
+        #   500 even if a larger value is given. If set to zero, server will pick an
+        #   appropriate default. Returned results may be fewer than requested. When this
+        #   happens, there could be more results as long as `next_page_token` is returned.
         # @param [String] page_token
         #   Optional. If present, then retrieve the next batch of results from the
-        #   preceding call
-        #   to this method.  `page_token` must be the value of `next_page_token` from
-        #   the previous response. The values of all other method parameters, must be
-        #   identical to those in the previous call.
+        #   preceding call to this method. `page_token` must be the value of `
+        #   next_page_token` from the previous response. The values of all other method
+        #   parameters, must be identical to those in the previous call.
         # @param [String] query
         #   Optional. The query statement.
         # @param [String] fields

data/generated/google/apis/cloudasset_v1p4beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p4beta1
       VERSION = 'V1p4beta1'
-      REVISION = '20200613'
+      REVISION = '20200911'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p4beta1/classes.rb

@@ -23,9 +23,10 @@ module Google
     module CloudassetV1p4beta1
       
       # Specifies roles and/or permissions to analyze, to determine both the
-      # identities possessing them and the resources they control. If multiple
-      # values are specified, results will include identities and resources
-      # matching any of them.
+      # identities possessing them and the resources they control. If multiple values
+      # are specified, results will include identities and resources matching any of
+      # them. The total number of roles and permissions should be equal or less than
+      # 10.
       class AccessSelector
         include Google::Apis::Core::Hashable
       
@@ -55,8 +56,8 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Represents whether all entries in the main_analysis and
-        # service_account_impersonation_analysis have been fully explored to
-        # answer the query in the request.
+        # service_account_impersonation_analysis have been fully explored to answer the
+        # query in the request.
         # Corresponds to the JSON property `fullyExplored`
         # @return [Boolean]
         attr_accessor :fully_explored
@@ -67,15 +68,14 @@ module Google
         # @return [Google::Apis::CloudassetV1p4beta1::IamPolicyAnalysis]
         attr_accessor :main_analysis
       
-        # A list of non-critical errors happened during the request handling to
-        # explain why `fully_explored` is false, or empty if no error happened.
+        # A list of non-critical errors happened during the request handling to explain
+        # why `fully_explored` is false, or empty if no error happened.
         # Corresponds to the JSON property `nonCriticalErrors`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AnalysisState>]
         attr_accessor :non_critical_errors
       
-        # The service account impersonation analysis if
-        # AnalyzeIamPolicyRequest.analyze_service_account_impersonation is
-        # enabled.
+        # The service account impersonation analysis if AnalyzeIamPolicyRequest.
+        # analyze_service_account_impersonation is enabled.
         # Corresponds to the JSON property `serviceAccountImpersonationAnalysis`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::IamPolicyAnalysis>]
         attr_accessor :service_account_impersonation_analysis
@@ -97,69 +97,57 @@ module Google
       class Binding
         include Google::Apis::Core::Hashable
       
-        # Represents a textual expression in the Common Expression Language (CEL)
-        # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
-        # are documented at https://github.com/google/cel-spec.
-        # Example (Comparison):
-        # title: "Summary size limit"
-        # description: "Determines if a summary is less than 100 chars"
-        # expression: "document.summary.size() < 100"
-        # Example (Equality):
-        # title: "Requestor is owner"
-        # description: "Determines if requestor is the document owner"
-        # expression: "document.owner == request.auth.claims.email"
-        # Example (Logic):
-        # title: "Public documents"
-        # description: "Determine whether the document should be publicly visible"
-        # expression: "document.type != 'private' && document.type != 'internal'"
-        # Example (Data Manipulation):
-        # title: "Notification string"
-        # description: "Create a notification string with a timestamp."
-        # expression: "'New message received at ' + string(document.create_time)"
-        # The exact variables and functions that may be referenced within an expression
-        # are determined by the service that evaluates it. See the service
-        # documentation for additional information.
+        # Represents a textual expression in the Common Expression Language (CEL) syntax.
+        # CEL is a C-like expression language. The syntax and semantics of CEL are
+        # documented at https://github.com/google/cel-spec. Example (Comparison): title:
+        # "Summary size limit" description: "Determines if a summary is less than 100
+        # chars" expression: "document.summary.size() < 100" Example (Equality): title: "
+        # Requestor is owner" description: "Determines if requestor is the document
+        # owner" expression: "document.owner == request.auth.claims.email" Example (
+        # Logic): title: "Public documents" description: "Determine whether the document
+        # should be publicly visible" expression: "document.type != 'private' &&
+        # document.type != 'internal'" Example (Data Manipulation): title: "Notification
+        # string" description: "Create a notification string with a timestamp."
+        # expression: "'New message received at ' + string(document.create_time)" The
+        # exact variables and functions that may be referenced within an expression are
+        # determined by the service that evaluates it. See the service documentation for
+        # additional information.
         # Corresponds to the JSON property `condition`
         # @return [Google::Apis::CloudassetV1p4beta1::Expr]
         attr_accessor :condition
       
-        # Specifies the identities requesting access for a Cloud Platform resource.
-        # `members` can have the following values:
-        # * `allUsers`: A special identifier that represents anyone who is
-        # on the internet; with or without a Google account.
-        # * `allAuthenticatedUsers`: A special identifier that represents anyone
-        # who is authenticated with a Google account or a service account.
-        # * `user:`emailid``: An email address that represents a specific Google
-        # account. For example, `alice@example.com` .
-        # * `serviceAccount:`emailid``: An email address that represents a service
-        # account. For example, `my-other-app@appspot.gserviceaccount.com`.
-        # * `group:`emailid``: An email address that represents a Google group.
-        # For example, `admins@example.com`.
-        # * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
-        # identifier) representing a user that has been recently deleted. For
-        # example, `alice@example.com?uid=123456789012345678901`. If the user is
-        # recovered, this value reverts to `user:`emailid`` and the recovered user
-        # retains the role in the binding.
-        # * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email address (plus
-        # unique identifier) representing a service account that has been recently
-        # deleted. For example,
-        # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-        # If the service account is undeleted, this value reverts to
-        # `serviceAccount:`emailid`` and the undeleted service account retains the
-        # role in the binding.
-        # * `deleted:group:`emailid`?uid=`uniqueid``: An email address (plus unique
-        # identifier) representing a Google group that has been recently
-        # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-        # the group is recovered, this value reverts to `group:`emailid`` and the
-        # recovered group retains the role in the binding.
-        # * `domain:`domain``: The G Suite domain (primary) that represents all the
-        # users of that domain. For example, `google.com` or `example.com`.
+        # Specifies the identities requesting access for a Cloud Platform resource. `
+        # members` can have the following values: * `allUsers`: A special identifier
+        # that represents anyone who is on the internet; with or without a Google
+        # account. * `allAuthenticatedUsers`: A special identifier that represents
+        # anyone who is authenticated with a Google account or a service account. * `
+        # user:`emailid``: An email address that represents a specific Google account.
+        # For example, `alice@example.com` . * `serviceAccount:`emailid``: An email
+        # address that represents a service account. For example, `my-other-app@appspot.
+        # gserviceaccount.com`. * `group:`emailid``: An email address that represents a
+        # Google group. For example, `admins@example.com`. * `deleted:user:`emailid`?uid=
+        # `uniqueid``: An email address (plus unique identifier) representing a user
+        # that has been recently deleted. For example, `alice@example.com?uid=
+        # 123456789012345678901`. If the user is recovered, this value reverts to `user:`
+        # emailid`` and the recovered user retains the role in the binding. * `deleted:
+        # serviceAccount:`emailid`?uid=`uniqueid``: An email address (plus unique
+        # identifier) representing a service account that has been recently deleted. For
+        # example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+        # If the service account is undeleted, this value reverts to `serviceAccount:`
+        # emailid`` and the undeleted service account retains the role in the binding. *
+        # `deleted:group:`emailid`?uid=`uniqueid``: An email address (plus unique
+        # identifier) representing a Google group that has been recently deleted. For
+        # example, `admins@example.com?uid=123456789012345678901`. If the group is
+        # recovered, this value reverts to `group:`emailid`` and the recovered group
+        # retains the role in the binding. * `domain:`domain``: The G Suite domain (
+        # primary) that represents all the users of that domain. For example, `google.
+        # com` or `example.com`.
         # Corresponds to the JSON property `members`
         # @return [Array<String>]
         attr_accessor :members
       
-        # Role that is assigned to `members`.
-        # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+        # Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`
+        # , or `roles/owner`.
         # Corresponds to the JSON property `role`
         # @return [String]
         attr_accessor :role
@@ -207,52 +195,43 @@ module Google
         end
       end
       
-      # Represents a textual expression in the Common Expression Language (CEL)
-      # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
-      # are documented at https://github.com/google/cel-spec.
-      # Example (Comparison):
-      # title: "Summary size limit"
-      # description: "Determines if a summary is less than 100 chars"
-      # expression: "document.summary.size() < 100"
-      # Example (Equality):
-      # title: "Requestor is owner"
-      # description: "Determines if requestor is the document owner"
-      # expression: "document.owner == request.auth.claims.email"
-      # Example (Logic):
-      # title: "Public documents"
-      # description: "Determine whether the document should be publicly visible"
-      # expression: "document.type != 'private' && document.type != 'internal'"
-      # Example (Data Manipulation):
-      # title: "Notification string"
-      # description: "Create a notification string with a timestamp."
-      # expression: "'New message received at ' + string(document.create_time)"
-      # The exact variables and functions that may be referenced within an expression
-      # are determined by the service that evaluates it. See the service
-      # documentation for additional information.
+      # Represents a textual expression in the Common Expression Language (CEL) syntax.
+      # CEL is a C-like expression language. The syntax and semantics of CEL are
+      # documented at https://github.com/google/cel-spec. Example (Comparison): title:
+      # "Summary size limit" description: "Determines if a summary is less than 100
+      # chars" expression: "document.summary.size() < 100" Example (Equality): title: "
+      # Requestor is owner" description: "Determines if requestor is the document
+      # owner" expression: "document.owner == request.auth.claims.email" Example (
+      # Logic): title: "Public documents" description: "Determine whether the document
+      # should be publicly visible" expression: "document.type != 'private' &&
+      # document.type != 'internal'" Example (Data Manipulation): title: "Notification
+      # string" description: "Create a notification string with a timestamp."
+      # expression: "'New message received at ' + string(document.create_time)" The
+      # exact variables and functions that may be referenced within an expression are
+      # determined by the service that evaluates it. See the service documentation for
+      # additional information.
       class Expr
         include Google::Apis::Core::Hashable
       
-        # Optional. Description of the expression. This is a longer text which
-        # describes the expression, e.g. when hovered over it in a UI.
+        # Optional. Description of the expression. This is a longer text which describes
+        # the expression, e.g. when hovered over it in a UI.
         # Corresponds to the JSON property `description`
         # @return [String]
         attr_accessor :description
       
-        # Textual representation of an expression in Common Expression Language
-        # syntax.
+        # Textual representation of an expression in Common Expression Language syntax.
         # Corresponds to the JSON property `expression`
         # @return [String]
         attr_accessor :expression
       
-        # Optional. String indicating the location of the expression for error
-        # reporting, e.g. a file name and a position in the file.
+        # Optional. String indicating the location of the expression for error reporting,
+        # e.g. a file name and a position in the file.
         # Corresponds to the JSON property `location`
         # @return [String]
         attr_accessor :location
       
-        # Optional. Title for the expression, i.e. a short string describing
-        # its purpose. This can be used e.g. in UIs which allow to enter the
-        # expression.
+        # Optional. Title for the expression, i.e. a short string describing its purpose.
+        # This can be used e.g. in UIs which allow to enter the expression.
         # Corresponds to the JSON property `title`
         # @return [String]
         attr_accessor :title
@@ -275,11 +254,9 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Required. The uri of the Cloud Storage object. It's the same uri that is used
-        # by
-        # gsutil. For example: "gs://bucket_name/object_name". See [Viewing and
-        # Editing Object
-        # Metadata](https://cloud.google.com/storage/docs/viewing-editing-metadata)
-        # for more information.
+        # by gsutil. For example: "gs://bucket_name/object_name". See [Viewing and
+        # Editing Object Metadata](https://cloud.google.com/storage/docs/viewing-editing-
+        # metadata) for more information.
         # Corresponds to the JSON property `uri`
         # @return [String]
         attr_accessor :uri
@@ -298,8 +275,8 @@ module Google
       class GoogleCloudAssetV1p4beta1Access
         include Google::Apis::Core::Hashable
       
-        # Represents the detailed state of an entity under analysis, such as a
-        # resource, an identity or an access.
+        # Represents the detailed state of an entity under analysis, such as a resource,
+        # an identity or an access.
         # Corresponds to the JSON property `analysisState`
         # @return [Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AnalysisState]
         attr_accessor :analysis_state
@@ -327,39 +304,36 @@ module Google
       end
       
       # An access control list, derived from the above IAM policy binding, which
-      # contains a set of resources and accesses. May include one
-      # item from each set to compose an access control entry.
-      # NOTICE that there could be multiple access control lists for one IAM policy
-      # binding. The access control lists are created based on resource and access
-      # combinations.
-      # For example, assume we have the following cases in one IAM policy binding:
-      # - Permission P1 and P2 apply to resource R1 and R2;
-      # - Permission P3 applies to resource R2 and R3;
-      # This will result in the following access control lists:
-      # - AccessControlList 1: [R1, R2], [P1, P2]
-      # - AccessControlList 2: [R2, R3], [P3]
+      # contains a set of resources and accesses. May include one item from each set
+      # to compose an access control entry. NOTICE that there could be multiple access
+      # control lists for one IAM policy binding. The access control lists are created
+      # based on resource and access combinations. For example, assume we have the
+      # following cases in one IAM policy binding: - Permission P1 and P2 apply to
+      # resource R1 and R2; - Permission P3 applies to resource R2 and R3; This will
+      # result in the following access control lists: - AccessControlList 1: [R1, R2],
+      # [P1, P2] - AccessControlList 2: [R2, R3], [P3]
       class GoogleCloudAssetV1p4beta1AccessControlList
         include Google::Apis::Core::Hashable
       
-        # The accesses that match one of the following conditions:
-        # - The access_selector, if it is specified in request;
-        # - Otherwise, access specifiers reachable from the policy binding's role.
+        # The accesses that match one of the following conditions: - The access_selector,
+        # if it is specified in request; - Otherwise, access specifiers reachable from
+        # the policy binding's role.
         # Corresponds to the JSON property `accesses`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1Access>]
         attr_accessor :accesses
       
-        # Resource edges of the graph starting from the policy attached
-        # resource to any descendant resources. The Edge.source_node contains
-        # the full resource name of a parent resource and Edge.target_node
-        # contains the full resource name of a child resource. This field is
-        # present only if the output_resource_edges option is enabled in request.
+        # Resource edges of the graph starting from the policy attached resource to any
+        # descendant resources. The Edge.source_node contains the full resource name of
+        # a parent resource and Edge.target_node contains the full resource name of a
+        # child resource. This field is present only if the output_resource_edges option
+        # is enabled in request.
         # Corresponds to the JSON property `resourceEdges`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1Edge>]
         attr_accessor :resource_edges
       
-        # The resources that match one of the following conditions:
-        # - The resource_selector, if it is specified in request;
-        # - Otherwise, resources reachable from the policy attached resource.
+        # The resources that match one of the following conditions: - The
+        # resource_selector, if it is specified in request; - Otherwise, resources
+        # reachable from the policy attached resource.
         # Corresponds to the JSON property `resources`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1Resource>]
         attr_accessor :resources
@@ -376,8 +350,8 @@ module Google
         end
       end
       
-      # Represents the detailed state of an entity under analysis, such as a
-      # resource, an identity or an access.
+      # Represents the detailed state of an entity under analysis, such as a resource,
+      # an identity or an access.
       class GoogleCloudAssetV1p4beta1AnalysisState
         include Google::Apis::Core::Hashable
       
@@ -386,12 +360,11 @@ module Google
         # @return [String]
         attr_accessor :cause
       
-        # The Google standard error code that best describes the state.
-        # For example:
-        # - OK means the analysis on this entity has been successfully finished;
-        # - PERMISSION_DENIED means an access denied error is encountered;
-        # - DEADLINE_EXCEEDED means the analysis on this entity hasn't been started
-        # in time;
+        # The Google standard error code that best describes the state. For example: -
+        # OK means the analysis on this entity has been successfully finished; -
+        # PERMISSION_DENIED means an access denied error is encountered; -
+        # DEADLINE_EXCEEDED means the analysis on this entity hasn't been started in
+        # time;
         # Corresponds to the JSON property `code`
         # @return [String]
         attr_accessor :code
@@ -436,23 +409,16 @@ module Google
       class GoogleCloudAssetV1p4beta1Identity
         include Google::Apis::Core::Hashable
       
-        # Represents the detailed state of an entity under analysis, such as a
-        # resource, an identity or an access.
+        # Represents the detailed state of an entity under analysis, such as a resource,
+        # an identity or an access.
         # Corresponds to the JSON property `analysisState`
         # @return [Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AnalysisState]
         attr_accessor :analysis_state
       
-        # The identity name in any form of members appear in
-        # [IAM policy
-        # binding](https://cloud.google.com/iam/reference/rest/v1/Binding), such
-        # as:
-        # - user:foo@google.com
-        # - group:group1@google.com
-        # - serviceAccount:s1@prj1.iam.gserviceaccount.com
-        # - projectOwner:some_project_id
-        # - domain:google.com
-        # - allUsers
-        # - etc.
+        # The identity name in any form of members appear in [IAM policy binding](https:/
+        # /cloud.google.com/iam/reference/rest/v1/Binding), such as: - user:foo@google.
+        # com - group:group1@google.com - serviceAccount:s1@prj1.iam.gserviceaccount.com
+        # - projectOwner:some_project_id - domain:google.com - allUsers - etc.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -472,21 +438,18 @@ module Google
       class GoogleCloudAssetV1p4beta1IdentityList
         include Google::Apis::Core::Hashable
       
-        # Group identity edges of the graph starting from the binding's
-        # group members to any node of the identities. The Edge.source_node
-        # contains a group, such as "group:parent@google.com". The
-        # Edge.target_node contains a member of the group,
-        # such as "group:child@google.com" or "user:foo@google.com".
-        # This field is present only if the output_group_edges option is enabled in
-        # request.
+        # Group identity edges of the graph starting from the binding's group members to
+        # any node of the identities. The Edge.source_node contains a group, such as "
+        # group:parent@google.com". The Edge.target_node contains a member of the group,
+        # such as "group:child@google.com" or "user:foo@google.com". This field is
+        # present only if the output_group_edges option is enabled in request.
         # Corresponds to the JSON property `groupEdges`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1Edge>]
         attr_accessor :group_edges
       
         # Only the identities that match one of the following conditions will be
-        # presented:
-        # - The identity_selector, if it is specified in request;
-        # - Otherwise, identities reachable from the policy binding's members.
+        # presented: - The identity_selector, if it is specified in request; - Otherwise,
+        # identities reachable from the policy binding's members.
         # Corresponds to the JSON property `identities`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1Identity>]
         attr_accessor :identities
@@ -506,14 +469,14 @@ module Google
       class GoogleCloudAssetV1p4beta1Resource
         include Google::Apis::Core::Hashable
       
-        # Represents the detailed state of an entity under analysis, such as a
-        # resource, an identity or an access.
+        # Represents the detailed state of an entity under analysis, such as a resource,
+        # an identity or an access.
         # Corresponds to the JSON property `analysisState`
         # @return [Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AnalysisState]
         attr_accessor :analysis_state
       
-        # The [full resource
-        # name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
+        # The [full resource name](https://cloud.google.com/asset-inventory/docs/
+        # resource-name-format)
         # Corresponds to the JSON property `fullResourceName`
         # @return [String]
         attr_accessor :full_resource_name
@@ -538,14 +501,14 @@ module Google
         # @return [Google::Apis::CloudassetV1p4beta1::IamPolicyAnalysisQuery]
         attr_accessor :analysis_query
       
-        # A list of IamPolicyAnalysisResult that matches the analysis query, or
-        # empty if no result is found.
+        # A list of IamPolicyAnalysisResult that matches the analysis query, or empty if
+        # no result is found.
         # Corresponds to the JSON property `analysisResults`
         # @return [Array<Google::Apis::CloudassetV1p4beta1::IamPolicyAnalysisResult>]
         attr_accessor :analysis_results
       
-        # Represents whether all entries in the analysis_results have been
-        # fully explored to answer the query.
+        # Represents whether all entries in the analysis_results have been fully
+        # explored to answer the query.
         # Corresponds to the JSON property `fullyExplored`
         # @return [Boolean]
         attr_accessor :fully_explored
@@ -587,30 +550,30 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Specifies roles and/or permissions to analyze, to determine both the
-        # identities possessing them and the resources they control. If multiple
-        # values are specified, results will include identities and resources
-        # matching any of them.
+        # identities possessing them and the resources they control. If multiple values
+        # are specified, results will include identities and resources matching any of
+        # them. The total number of roles and permissions should be equal or less than
+        # 10.
         # Corresponds to the JSON property `accessSelector`
         # @return [Google::Apis::CloudassetV1p4beta1::AccessSelector]
         attr_accessor :access_selector
       
-        # Specifies an identity for which to determine resource access, based on
-        # roles assigned either directly to them or to the groups they belong to,
-        # directly or indirectly.
+        # Specifies an identity for which to determine resource access, based on roles
+        # assigned either directly to them or to the groups they belong to, directly or
+        # indirectly.
         # Corresponds to the JSON property `identitySelector`
         # @return [Google::Apis::CloudassetV1p4beta1::IdentitySelector]
         attr_accessor :identity_selector
       
         # Required. The relative name of the root asset. Only resources and IAM policies
-        # within
-        # the parent will be analyzed. This can only be an organization number (such
-        # as "organizations/123") or a folder number (such as "folders/123").
-        # To know how to get organization id, visit [here
-        # ](https://cloud.google.com/resource-manager/docs/creating-managing-
-        # organization#retrieving_your_organization_id).
-        # To know how to get folder id, visit [here
-        # ](https://cloud.google.com/resource-manager/docs/creating-managing-folders#
-        # viewing_or_listing_folders_and_projects).
+        # within the parent will be analyzed. This can only be an organization number (
+        # such as "organizations/123"), a folder number (such as "folders/123"), a
+        # project ID (such as "projects/my-project-id"), or a project number (such as "
+        # projects/12345"). To know how to get organization id, visit [here ](https://
+        # cloud.google.com/resource-manager/docs/creating-managing-organization#
+        # retrieving_your_organization_id). To know how to get folder or project id,
+        # visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        # folders#viewing_or_listing_folders_and_projects).
         # Corresponds to the JSON property `parent`
         # @return [String]
         attr_accessor :parent
@@ -646,15 +609,13 @@ module Google
         # @return [Array<Google::Apis::CloudassetV1p4beta1::GoogleCloudAssetV1p4beta1AccessControlList>]
         attr_accessor :access_control_lists
       
-        # The [full resource
-        # name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
-        # of the resource to which the iam_binding policy attaches.
+        # The [full resource name](https://cloud.google.com/asset-inventory/docs/
+        # resource-name-format) of the resource to which the iam_binding policy attaches.
         # Corresponds to the JSON property `attachedResourceFullName`
         # @return [String]
         attr_accessor :attached_resource_full_name
       
-        # Represents whether all analyses on the iam_binding have successfully
-        # finished.
+        # Represents whether all analyses on the iam_binding have successfully finished.
         # Corresponds to the JSON property `fullyExplored`
         # @return [Boolean]
         attr_accessor :fully_explored
@@ -685,22 +646,18 @@ module Google
         end
       end
       
-      # Specifies an identity for which to determine resource access, based on
-      # roles assigned either directly to them or to the groups they belong to,
-      # directly or indirectly.
+      # Specifies an identity for which to determine resource access, based on roles
+      # assigned either directly to them or to the groups they belong to, directly or
+      # indirectly.
       class IdentitySelector
         include Google::Apis::Core::Hashable
       
-        # Required. The identity appear in the form of members in
-        # [IAM policy
-        # binding](https://cloud.google.com/iam/reference/rest/v1/Binding).
-        # The examples of supported forms are:
-        # "user:mike@example.com",
-        # "group:admins@example.com",
-        # "domain:google.com",
-        # "serviceAccount:my-project-id@appspot.gserviceaccount.com".
-        # Notice that wildcard characters (such as * and ?) are not supported.
-        # You must give a specific identity.
+        # Required. The identity appear in the form of members in [IAM policy binding](
+        # https://cloud.google.com/iam/reference/rest/v1/Binding). The examples of
+        # supported forms are: "user:mike@example.com", "group:admins@example.com", "
+        # domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com".
+        # Notice that wildcard characters (such as * and ?) are not supported. You must
+        # give a specific identity.
         # Corresponds to the JSON property `identity`
         # @return [String]
         attr_accessor :identity
@@ -720,47 +677,45 @@ module Google
       class Operation
         include Google::Apis::Core::Hashable
       
-        # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
+        # If the value is `false`, it means the operation is still in progress. If `true`
+        # , the operation is completed, and either `error` or `response` is available.
         # Corresponds to the JSON property `done`
         # @return [Boolean]
         attr_accessor :done
         alias_method :done?, :done
       
-        # The `Status` type defines a logical error model that is suitable for
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+        # The `Status` type defines a logical error model that is suitable for different
+        # programming environments, including REST APIs and RPC APIs. It is used by [
+        # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+        # data: error code, error message, and error details. You can find out more
+        # about this error model and how to work with it in the [API Design Guide](https:
+        # //cloud.google.com/apis/design/errors).
         # Corresponds to the JSON property `error`
         # @return [Google::Apis::CloudassetV1p4beta1::Status]
         attr_accessor :error
       
-        # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
+        # Service-specific metadata associated with the operation. It typically contains
+        # progress information and common metadata such as create time. Some services
+        # might not provide such metadata. Any method that returns a long-running
+        # operation should document the metadata type, if any.
         # Corresponds to the JSON property `metadata`
         # @return [Hash<String,Object>]
         attr_accessor :metadata
       
         # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/`unique_id``.
+        # originally returns it. If you use the default HTTP mapping, the `name` should
+        # be a resource name ending with `operations/`unique_id``.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
       
-        # The normal response of the operation in case of success.  If the original
-        # method returns no data on success, such as `Delete`, the response is
-        # `google.protobuf.Empty`.  If the original method is standard
-        # `Get`/`Create`/`Update`, the response should be the resource.  For other
-        # methods, the response should have the type `XxxResponse`, where `Xxx`
-        # is the original method name.  For example, if the original method name
-        # is `TakeSnapshot()`, the inferred response type is
-        # `TakeSnapshotResponse`.
+        # The normal response of the operation in case of success. If the original
+        # method returns no data on success, such as `Delete`, the response is `google.
+        # protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`,
+        # the response should be the resource. For other methods, the response should
+        # have the type `XxxResponse`, where `Xxx` is the original method name. For
+        # example, if the original method name is `TakeSnapshot()`, the inferred
+        # response type is `TakeSnapshotResponse`.
         # Corresponds to the JSON property `response`
         # @return [Hash<String,Object>]
         attr_accessor :response
@@ -784,75 +739,67 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Optional. If true, the response will include access analysis from identities
-        # to
-        # resources via service account impersonation. This is a very expensive
-        # operation, because many derived queries will be executed.
-        # For example, if the request analyzes for which resources user A has
-        # permission P, and there's an IAM policy states user A has
-        # iam.serviceAccounts.getAccessToken permission to a service account SA,
-        # and there's another IAM policy states service account SA has permission P
-        # to a GCP folder F, then user A potentially has access to the GCP folder
-        # F. And those advanced analysis results will be included in
-        # AnalyzeIamPolicyResponse.service_account_impersonation_analysis.
-        # Another example, if the request analyzes for who has
-        # permission P to a GCP folder F, and there's an IAM policy states user A
-        # has iam.serviceAccounts.actAs permission to a service account SA, and
-        # there's another IAM policy states service account SA has permission P to
-        # the GCP folder F, then user A potentially has access to the GCP folder
-        # F. And those advanced analysis results will be included in
-        # AnalyzeIamPolicyResponse.service_account_impersonation_analysis.
-        # Default is false.
+        # to resources via service account impersonation. This is a very expensive
+        # operation, because many derived queries will be executed. For example, if the
+        # request analyzes for which resources user A has permission P, and there's an
+        # IAM policy states user A has iam.serviceAccounts.getAccessToken permission to
+        # a service account SA, and there's another IAM policy states service account SA
+        # has permission P to a GCP folder F, then user A potentially has access to the
+        # GCP folder F. And those advanced analysis results will be included in
+        # AnalyzeIamPolicyResponse.service_account_impersonation_analysis. Another
+        # example, if the request analyzes for who has permission P to a GCP folder F,
+        # and there's an IAM policy states user A has iam.serviceAccounts.actAs
+        # permission to a service account SA, and there's another IAM policy states
+        # service account SA has permission P to the GCP folder F, then user A
+        # potentially has access to the GCP folder F. And those advanced analysis
+        # results will be included in AnalyzeIamPolicyResponse.
+        # service_account_impersonation_analysis. Default is false.
         # Corresponds to the JSON property `analyzeServiceAccountImpersonation`
         # @return [Boolean]
         attr_accessor :analyze_service_account_impersonation
         alias_method :analyze_service_account_impersonation?, :analyze_service_account_impersonation
       
-        # Optional. If true, the identities section of the result will expand any
-        # Google groups appearing in an IAM policy binding.
-        # If identity_selector is specified, the identity in the result will
-        # be determined by the selector, and this flag will have no effect.
-        # Default is false.
+        # Optional. If true, the identities section of the result will expand any Google
+        # groups appearing in an IAM policy binding. If identity_selector is specified,
+        # the identity in the result will be determined by the selector, and this flag
+        # will have no effect. Default is false.
         # Corresponds to the JSON property `expandGroups`
         # @return [Boolean]
         attr_accessor :expand_groups
         alias_method :expand_groups?, :expand_groups
       
-        # Optional. If true, the resource section of the result will expand any
-        # resource attached to an IAM policy to include resources lower in the
-        # resource hierarchy.
+        # Optional. If true, the resource section of the result will expand any resource
+        # attached to an IAM policy to include resources lower in the resource hierarchy.
         # For example, if the request analyzes for which resources user A has
-        # permission P, and the results include an IAM policy with P on a GCP
-        # folder, the results will also include resources in that folder with
-        # permission P.
-        # If resource_selector is specified, the resource section of the result
-        # will be determined by the selector, and this flag will have no effect.
-        # Default is false.
+        # permission P, and the results include an IAM policy with P on a GCP folder,
+        # the results will also include resources in that folder with permission P. If
+        # resource_selector is specified, the resource section of the result will be
+        # determined by the selector, and this flag will have no effect. Default is
+        # false.
         # Corresponds to the JSON property `expandResources`
         # @return [Boolean]
         attr_accessor :expand_resources
         alias_method :expand_resources?, :expand_resources
       
         # Optional. If true, the access section of result will expand any roles
-        # appearing in IAM policy bindings to include their permissions.
-        # If access_selector is specified, the access section of the result
-        # will be determined by the selector, and this flag will have no effect.
-        # Default is false.
+        # appearing in IAM policy bindings to include their permissions. If
+        # access_selector is specified, the access section of the result will be
+        # determined by the selector, and this flag will have no effect. Default is
+        # false.
         # Corresponds to the JSON property `expandRoles`
         # @return [Boolean]
         attr_accessor :expand_roles
         alias_method :expand_roles?, :expand_roles
       
-        # Optional. If true, the result will output group identity edges, starting
-        # from the binding's group members, to any expanded identities.
-        # Default is false.
+        # Optional. If true, the result will output group identity edges, starting from
+        # the binding's group members, to any expanded identities. Default is false.
         # Corresponds to the JSON property `outputGroupEdges`
         # @return [Boolean]
         attr_accessor :output_group_edges
         alias_method :output_group_edges?, :output_group_edges
       
-        # Optional. If true, the result will output resource edges, starting
-        # from the policy attached resource, to any expanded resources.
-        # Default is false.
+        # Optional. If true, the result will output resource edges, starting from the
+        # policy attached resource, to any expanded resources. Default is false.
         # Corresponds to the JSON property `outputResourceEdges`
         # @return [Boolean]
         attr_accessor :output_resource_edges
@@ -879,10 +826,9 @@ module Google
       class ResourceSelector
         include Google::Apis::Core::Hashable
       
-        # Required. The [full resource
-        # name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
-        # of a resource of [supported resource
-        # types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#
+        # Required. The [full resource name](https://cloud.google.com/asset-inventory/
+        # docs/resource-name-format) of a resource of [supported resource types](https://
+        # cloud.google.com/asset-inventory/docs/supported-asset-types#
         # analyzable_asset_types).
         # Corresponds to the JSON property `fullResourceName`
         # @return [String]
@@ -898,12 +844,12 @@ module Google
         end
       end
       
-      # The `Status` type defines a logical error model that is suitable for
-      # different programming environments, including REST APIs and RPC APIs. It is
-      # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-      # three pieces of data: error code, error message, and error details.
-      # You can find out more about this error model and how to work with it in the
-      # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      # The `Status` type defines a logical error model that is suitable for different
+      # programming environments, including REST APIs and RPC APIs. It is used by [
+      # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+      # data: error code, error message, and error details. You can find out more
+      # about this error model and how to work with it in the [API Design Guide](https:
+      # //cloud.google.com/apis/design/errors).
       class Status
         include Google::Apis::Core::Hashable
       
@@ -912,15 +858,15 @@ module Google
         # @return [Fixnum]
         attr_accessor :code
       
-        # A list of messages that carry the error details.  There is a common set of
+        # A list of messages that carry the error details. There is a common set of
         # message types for APIs to use.
         # Corresponds to the JSON property `details`
         # @return [Array<Hash<String,Object>>]
         attr_accessor :details
       
-        # A developer-facing error message, which should be in English. Any
-        # user-facing error message should be localized and sent in the
-        # google.rpc.Status.details field, or localized by the client.
+        # A developer-facing error message, which should be in English. Any user-facing
+        # error message should be localized and sent in the google.rpc.Status.details
+        # field, or localized by the client.
         # Corresponds to the JSON property `message`
         # @return [String]
         attr_accessor :message