google-api-client 0.43.0 → 0.48.0

data/generated/google/apis/cloudasset_v1p4beta1/service.rb

@@ -47,102 +47,86 @@ module Google
           @batch_path = 'batch'
         end
         
-        # Analyzes IAM policies to answer which identities have what accesses on
-        # which resources.
+        # Analyzes IAM policies to answer which identities have what accesses on which
+        # resources.
         # @param [String] parent
         #   Required. The relative name of the root asset. Only resources and IAM policies
-        #   within
-        #   the parent will be analyzed. This can only be an organization number (such
-        #   as "organizations/123") or a folder number (such as "folders/123").
-        #   To know how to get organization id, visit [here
-        #   ](https://cloud.google.com/resource-manager/docs/creating-managing-
-        #   organization#retrieving_your_organization_id).
-        #   To know how to get folder id, visit [here
-        #   ](https://cloud.google.com/resource-manager/docs/creating-managing-folders#
-        #   viewing_or_listing_folders_and_projects).
+        #   within the parent will be analyzed. This can only be an organization number (
+        #   such as "organizations/123"), a folder number (such as "folders/123"), a
+        #   project ID (such as "projects/my-project-id"), or a project number (such as "
+        #   projects/12345"). To know how to get organization id, visit [here ](https://
+        #   cloud.google.com/resource-manager/docs/creating-managing-organization#
+        #   retrieving_your_organization_id). To know how to get folder or project id,
+        #   visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        #   folders#viewing_or_listing_folders_and_projects).
         # @param [Array<String>, String] analysis_query_access_selector_permissions
         #   Optional. The permissions to appear in result.
         # @param [Array<String>, String] analysis_query_access_selector_roles
         #   Optional. The roles to appear in result.
         # @param [String] analysis_query_identity_selector_identity
-        #   Required. The identity appear in the form of members in
-        #   [IAM policy
-        #   binding](https://cloud.google.com/iam/reference/rest/v1/Binding).
-        #   The examples of supported forms are:
-        #   "user:mike@example.com",
-        #   "group:admins@example.com",
-        #   "domain:google.com",
-        #   "serviceAccount:my-project-id@appspot.gserviceaccount.com".
-        #   Notice that wildcard characters (such as * and ?) are not supported.
-        #   You must give a specific identity.
+        #   Required. The identity appear in the form of members in [IAM policy binding](
+        #   https://cloud.google.com/iam/reference/rest/v1/Binding). The examples of
+        #   supported forms are: "user:mike@example.com", "group:admins@example.com", "
+        #   domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com".
+        #   Notice that wildcard characters (such as * and ?) are not supported. You must
+        #   give a specific identity.
         # @param [String] analysis_query_resource_selector_full_resource_name
-        #   Required. The [full resource
-        #   name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
-        #   of a resource of [supported resource
-        #   types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#
+        #   Required. The [full resource name](https://cloud.google.com/asset-inventory/
+        #   docs/resource-name-format) of a resource of [supported resource types](https://
+        #   cloud.google.com/asset-inventory/docs/supported-asset-types#
         #   analyzable_asset_types).
         # @param [Boolean] options_analyze_service_account_impersonation
         #   Optional. If true, the response will include access analysis from identities
-        #   to
-        #   resources via service account impersonation. This is a very expensive
-        #   operation, because many derived queries will be executed. We highly
-        #   recommend you use AssetService.ExportIamPolicyAnalysis rpc instead.
-        #   For example, if the request analyzes for which resources user A has
-        #   permission P, and there's an IAM policy states user A has
-        #   iam.serviceAccounts.getAccessToken permission to a service account SA,
-        #   and there's another IAM policy states service account SA has permission P
-        #   to a GCP folder F, then user A potentially has access to the GCP folder
-        #   F. And those advanced analysis results will be included in
-        #   AnalyzeIamPolicyResponse.service_account_impersonation_analysis.
-        #   Another example, if the request analyzes for who has
-        #   permission P to a GCP folder F, and there's an IAM policy states user A
-        #   has iam.serviceAccounts.actAs permission to a service account SA, and
-        #   there's another IAM policy states service account SA has permission P to
-        #   the GCP folder F, then user A potentially has access to the GCP folder
-        #   F. And those advanced analysis results will be included in
-        #   AnalyzeIamPolicyResponse.service_account_impersonation_analysis.
-        #   Default is false.
+        #   to resources via service account impersonation. This is a very expensive
+        #   operation, because many derived queries will be executed. We highly recommend
+        #   you use AssetService.ExportIamPolicyAnalysis rpc instead. For example, if the
+        #   request analyzes for which resources user A has permission P, and there's an
+        #   IAM policy states user A has iam.serviceAccounts.getAccessToken permission to
+        #   a service account SA, and there's another IAM policy states service account SA
+        #   has permission P to a GCP folder F, then user A potentially has access to the
+        #   GCP folder F. And those advanced analysis results will be included in
+        #   AnalyzeIamPolicyResponse.service_account_impersonation_analysis. Another
+        #   example, if the request analyzes for who has permission P to a GCP folder F,
+        #   and there's an IAM policy states user A has iam.serviceAccounts.actAs
+        #   permission to a service account SA, and there's another IAM policy states
+        #   service account SA has permission P to the GCP folder F, then user A
+        #   potentially has access to the GCP folder F. And those advanced analysis
+        #   results will be included in AnalyzeIamPolicyResponse.
+        #   service_account_impersonation_analysis. Default is false.
         # @param [String] options_execution_timeout
-        #   Optional. Amount of time executable has to complete.  See JSON representation
-        #   of
-        #   [Duration](https://developers.google.com/protocol-buffers/docs/proto3#json).
+        #   Optional. Amount of time executable has to complete. See JSON representation
+        #   of [Duration](https://developers.google.com/protocol-buffers/docs/proto3#json).
         #   If this field is set with a value less than the RPC deadline, and the
-        #   execution of your query hasn't finished in the specified
-        #   execution timeout,  you will get a response with partial result.
-        #   Otherwise, your query's execution will continue until the RPC deadline.
-        #   If it's not finished until then, you will get a  DEADLINE_EXCEEDED error.
-        #   Default is empty.
+        #   execution of your query hasn't finished in the specified execution timeout,
+        #   you will get a response with partial result. Otherwise, your query's execution
+        #   will continue until the RPC deadline. If it's not finished until then, you
+        #   will get a DEADLINE_EXCEEDED error. Default is empty.
         # @param [Boolean] options_expand_groups
-        #   Optional. If true, the identities section of the result will expand any
-        #   Google groups appearing in an IAM policy binding.
-        #   If identity_selector is specified, the identity in the result will
-        #   be determined by the selector, and this flag will have no effect.
-        #   Default is false.
+        #   Optional. If true, the identities section of the result will expand any Google
+        #   groups appearing in an IAM policy binding. If identity_selector is specified,
+        #   the identity in the result will be determined by the selector, and this flag
+        #   will have no effect. Default is false.
         # @param [Boolean] options_expand_resources
-        #   Optional. If true, the resource section of the result will expand any
-        #   resource attached to an IAM policy to include resources lower in the
-        #   resource hierarchy.
+        #   Optional. If true, the resource section of the result will expand any resource
+        #   attached to an IAM policy to include resources lower in the resource hierarchy.
         #   For example, if the request analyzes for which resources user A has
-        #   permission P, and the results include an IAM policy with P on a GCP
-        #   folder, the results will also include resources in that folder with
-        #   permission P.
-        #   If resource_selector is specified, the resource section of the result
-        #   will be determined by the selector, and this flag will have no effect.
-        #   Default is false.
+        #   permission P, and the results include an IAM policy with P on a GCP folder,
+        #   the results will also include resources in that folder with permission P. If
+        #   resource_selector is specified, the resource section of the result will be
+        #   determined by the selector, and this flag will have no effect. Default is
+        #   false.
         # @param [Boolean] options_expand_roles
         #   Optional. If true, the access section of result will expand any roles
-        #   appearing in IAM policy bindings to include their permissions.
-        #   If access_selector is specified, the access section of the result
-        #   will be determined by the selector, and this flag will have no effect.
-        #   Default is false.
+        #   appearing in IAM policy bindings to include their permissions. If
+        #   access_selector is specified, the access section of the result will be
+        #   determined by the selector, and this flag will have no effect. Default is
+        #   false.
         # @param [Boolean] options_output_group_edges
-        #   Optional. If true, the result will output group identity edges, starting
-        #   from the binding's group members, to any expanded identities.
-        #   Default is false.
+        #   Optional. If true, the result will output group identity edges, starting from
+        #   the binding's group members, to any expanded identities. Default is false.
         # @param [Boolean] options_output_resource_edges
-        #   Optional. If true, the result will output resource edges, starting
-        #   from the policy attached resource, to any expanded resources.
-        #   Default is false.
+        #   Optional. If true, the result will output resource edges, starting from the
+        #   policy attached resource, to any expanded resources. Default is false.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -181,25 +165,23 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Exports the answers of which identities have what accesses on which
-        # resources to a Google Cloud Storage destination. The output format is
-        # the JSON format that represents a AnalyzeIamPolicyResponse
-        # in the JSON format.
-        # This method implements the google.longrunning.Operation, which allows
-        # you to keep track of the export. We recommend intervals of at least 2
-        # seconds with exponential retry to poll the export operation result. The
-        # metadata contains the request to help callers to map responses to requests.
+        # Exports the answers of which identities have what accesses on which resources
+        # to a Google Cloud Storage destination. The output format is the JSON format
+        # that represents a AnalyzeIamPolicyResponse in the JSON format. This method
+        # implements the google.longrunning.Operation, which allows you to keep track of
+        # the export. We recommend intervals of at least 2 seconds with exponential
+        # retry to poll the export operation result. The metadata contains the request
+        # to help callers to map responses to requests.
         # @param [String] parent
         #   Required. The relative name of the root asset. Only resources and IAM policies
-        #   within
-        #   the parent will be analyzed. This can only be an organization number (such
-        #   as "organizations/123") or a folder number (such as "folders/123").
-        #   To know how to get organization id, visit [here
-        #   ](https://cloud.google.com/resource-manager/docs/creating-managing-
-        #   organization#retrieving_your_organization_id).
-        #   To know how to get folder id, visit [here
-        #   ](https://cloud.google.com/resource-manager/docs/creating-managing-folders#
-        #   viewing_or_listing_folders_and_projects).
+        #   within the parent will be analyzed. This can only be an organization number (
+        #   such as "organizations/123"), a folder number (such as "folders/123"), a
+        #   project ID (such as "projects/my-project-id"), or a project number (such as "
+        #   projects/12345"). To know how to get organization id, visit [here ](https://
+        #   cloud.google.com/resource-manager/docs/creating-managing-organization#
+        #   retrieving_your_organization_id). To know how to get folder or project id,
+        #   visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        #   folders#viewing_or_listing_folders_and_projects).
         # @param [Google::Apis::CloudassetV1p4beta1::ExportIamPolicyAnalysisRequest] export_iam_policy_analysis_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.

data/generated/google/apis/cloudasset_v1p4beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p4beta1
       VERSION = 'V1p4beta1'
-      REVISION = '20200731'
+      REVISION = '20201003'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'