google-api-client 0.45.0 → 0.48.0

data/generated/google/apis/cloudasset_v1/representations.rb

@@ -22,6 +22,24 @@ module Google
   module Apis
     module CloudassetV1
       
+      class AccessSelector
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class AnalyzeIamPolicyLongrunningRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class AnalyzeIamPolicyResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Asset
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -106,6 +124,54 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GoogleCloudAssetV1Access
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudAssetV1AccessControlList
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudAssetV1BigQueryDestination
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudAssetV1Edge
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudAssetV1GcsDestination
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudAssetV1Identity
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudAssetV1IdentityList
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleCloudAssetV1Resource
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class GoogleCloudOrgpolicyV1BooleanPolicy
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -190,12 +256,48 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class IamPolicyAnalysis
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IamPolicyAnalysisOutputConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IamPolicyAnalysisQuery
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IamPolicyAnalysisResult
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class IamPolicyAnalysisState
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class IamPolicySearchResult
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class IdentitySelector
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListFeedsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -208,6 +310,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Options
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class OutputConfig
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -250,6 +358,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ResourceSelector
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class SearchAllIamPoliciesResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -286,6 +400,35 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class AccessSelector
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :permissions, as: 'permissions'
+          collection :roles, as: 'roles'
+        end
+      end
+      
+      class AnalyzeIamPolicyLongrunningRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :analysis_query, as: 'analysisQuery', class: Google::Apis::CloudassetV1::IamPolicyAnalysisQuery, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisQuery::Representation
+      
+          property :output_config, as: 'outputConfig', class: Google::Apis::CloudassetV1::IamPolicyAnalysisOutputConfig, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisOutputConfig::Representation
+      
+        end
+      end
+      
+      class AnalyzeIamPolicyResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :fully_explored, as: 'fullyExplored'
+          property :main_analysis, as: 'mainAnalysis', class: Google::Apis::CloudassetV1::IamPolicyAnalysis, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysis::Representation
+      
+          collection :service_account_impersonation_analysis, as: 'serviceAccountImpersonationAnalysis', class: Google::Apis::CloudassetV1::IamPolicyAnalysis, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysis::Representation
+      
+        end
+      end
+      
       class Asset
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -429,6 +572,81 @@ module Google
         end
       end
       
+      class GoogleCloudAssetV1Access
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :analysis_state, as: 'analysisState', class: Google::Apis::CloudassetV1::IamPolicyAnalysisState, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisState::Representation
+      
+          property :permission, as: 'permission'
+          property :role, as: 'role'
+        end
+      end
+      
+      class GoogleCloudAssetV1AccessControlList
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :accesses, as: 'accesses', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1Access, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1Access::Representation
+      
+          collection :resource_edges, as: 'resourceEdges', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1Edge, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1Edge::Representation
+      
+          collection :resources, as: 'resources', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1Resource, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1Resource::Representation
+      
+        end
+      end
+      
+      class GoogleCloudAssetV1BigQueryDestination
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :dataset, as: 'dataset'
+          property :partition_key, as: 'partitionKey'
+          property :table_prefix, as: 'tablePrefix'
+          property :write_disposition, as: 'writeDisposition'
+        end
+      end
+      
+      class GoogleCloudAssetV1Edge
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :source_node, as: 'sourceNode'
+          property :target_node, as: 'targetNode'
+        end
+      end
+      
+      class GoogleCloudAssetV1GcsDestination
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :uri, as: 'uri'
+        end
+      end
+      
+      class GoogleCloudAssetV1Identity
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :analysis_state, as: 'analysisState', class: Google::Apis::CloudassetV1::IamPolicyAnalysisState, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisState::Representation
+      
+          property :name, as: 'name'
+        end
+      end
+      
+      class GoogleCloudAssetV1IdentityList
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :group_edges, as: 'groupEdges', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1Edge, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1Edge::Representation
+      
+          collection :identities, as: 'identities', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1Identity, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1Identity::Representation
+      
+        end
+      end
+      
+      class GoogleCloudAssetV1Resource
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :analysis_state, as: 'analysisState', class: Google::Apis::CloudassetV1::IamPolicyAnalysisState, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisState::Representation
+      
+          property :full_resource_name, as: 'fullResourceName'
+        end
+      end
+      
       class GoogleCloudOrgpolicyV1BooleanPolicy
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -578,6 +796,66 @@ module Google
         end
       end
       
+      class IamPolicyAnalysis
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :analysis_query, as: 'analysisQuery', class: Google::Apis::CloudassetV1::IamPolicyAnalysisQuery, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisQuery::Representation
+      
+          collection :analysis_results, as: 'analysisResults', class: Google::Apis::CloudassetV1::IamPolicyAnalysisResult, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisResult::Representation
+      
+          property :fully_explored, as: 'fullyExplored'
+          collection :non_critical_errors, as: 'nonCriticalErrors', class: Google::Apis::CloudassetV1::IamPolicyAnalysisState, decorator: Google::Apis::CloudassetV1::IamPolicyAnalysisState::Representation
+      
+        end
+      end
+      
+      class IamPolicyAnalysisOutputConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :bigquery_destination, as: 'bigqueryDestination', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1BigQueryDestination, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1BigQueryDestination::Representation
+      
+          property :gcs_destination, as: 'gcsDestination', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1GcsDestination, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1GcsDestination::Representation
+      
+        end
+      end
+      
+      class IamPolicyAnalysisQuery
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :access_selector, as: 'accessSelector', class: Google::Apis::CloudassetV1::AccessSelector, decorator: Google::Apis::CloudassetV1::AccessSelector::Representation
+      
+          property :identity_selector, as: 'identitySelector', class: Google::Apis::CloudassetV1::IdentitySelector, decorator: Google::Apis::CloudassetV1::IdentitySelector::Representation
+      
+          property :options, as: 'options', class: Google::Apis::CloudassetV1::Options, decorator: Google::Apis::CloudassetV1::Options::Representation
+      
+          property :resource_selector, as: 'resourceSelector', class: Google::Apis::CloudassetV1::ResourceSelector, decorator: Google::Apis::CloudassetV1::ResourceSelector::Representation
+      
+          property :scope, as: 'scope'
+        end
+      end
+      
+      class IamPolicyAnalysisResult
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :access_control_lists, as: 'accessControlLists', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1AccessControlList, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1AccessControlList::Representation
+      
+          property :attached_resource_full_name, as: 'attachedResourceFullName'
+          property :fully_explored, as: 'fullyExplored'
+          property :iam_binding, as: 'iamBinding', class: Google::Apis::CloudassetV1::Binding, decorator: Google::Apis::CloudassetV1::Binding::Representation
+      
+          property :identity_list, as: 'identityList', class: Google::Apis::CloudassetV1::GoogleCloudAssetV1IdentityList, decorator: Google::Apis::CloudassetV1::GoogleCloudAssetV1IdentityList::Representation
+      
+        end
+      end
+      
+      class IamPolicyAnalysisState
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :cause, as: 'cause'
+          property :code, as: 'code'
+        end
+      end
+      
       class IamPolicySearchResult
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -590,6 +868,13 @@ module Google
         end
       end
       
+      class IdentitySelector
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :identity, as: 'identity'
+        end
+      end
+      
       class ListFeedsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -610,6 +895,18 @@ module Google
         end
       end
       
+      class Options
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :analyze_service_account_impersonation, as: 'analyzeServiceAccountImpersonation'
+          property :expand_groups, as: 'expandGroups'
+          property :expand_resources, as: 'expandResources'
+          property :expand_roles, as: 'expandRoles'
+          property :output_group_edges, as: 'outputGroupEdges'
+          property :output_resource_edges, as: 'outputResourceEdges'
+        end
+      end
+      
       class OutputConfig
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -681,6 +978,13 @@ module Google
         end
       end
       
+      class ResourceSelector
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :full_resource_name, as: 'fullResourceName'
+        end
+      end
+      
       class SearchAllIamPoliciesResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/cloudasset_v1/service.rb

@@ -248,6 +248,177 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Analyzes IAM policies to answer which identities have what accesses on which
+        # resources.
+        # @param [String] scope
+        #   Required. The relative name of the root asset. Only resources and IAM policies
+        #   within the scope will be analyzed. This can only be an organization number (
+        #   such as "organizations/123"), a folder number (such as "folders/123"), a
+        #   project ID (such as "projects/my-project-id"), or a project number (such as "
+        #   projects/12345"). To know how to get organization id, visit [here ](https://
+        #   cloud.google.com/resource-manager/docs/creating-managing-organization#
+        #   retrieving_your_organization_id). To know how to get folder or project id,
+        #   visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        #   folders#viewing_or_listing_folders_and_projects).
+        # @param [Array<String>, String] analysis_query_access_selector_permissions
+        #   Optional. The permissions to appear in result.
+        # @param [Array<String>, String] analysis_query_access_selector_roles
+        #   Optional. The roles to appear in result.
+        # @param [String] analysis_query_identity_selector_identity
+        #   Required. The identity appear in the form of members in [IAM policy binding](
+        #   https://cloud.google.com/iam/reference/rest/v1/Binding). The examples of
+        #   supported forms are: "user:mike@example.com", "group:admins@example.com", "
+        #   domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com".
+        #   Notice that wildcard characters (such as * and ?) are not supported. You must
+        #   give a specific identity.
+        # @param [Boolean] analysis_query_options_analyze_service_account_impersonation
+        #   Optional. If true, the response will include access analysis from identities
+        #   to resources via service account impersonation. This is a very expensive
+        #   operation, because many derived queries will be executed. We highly recommend
+        #   you use AssetService.AnalyzeIamPolicyLongrunning rpc instead. For example, if
+        #   the request analyzes for which resources user A has permission P, and there's
+        #   an IAM policy states user A has iam.serviceAccounts.getAccessToken permission
+        #   to a service account SA, and there's another IAM policy states service account
+        #   SA has permission P to a GCP folder F, then user A potentially has access to
+        #   the GCP folder F. And those advanced analysis results will be included in
+        #   AnalyzeIamPolicyResponse.service_account_impersonation_analysis. Another
+        #   example, if the request analyzes for who has permission P to a GCP folder F,
+        #   and there's an IAM policy states user A has iam.serviceAccounts.actAs
+        #   permission to a service account SA, and there's another IAM policy states
+        #   service account SA has permission P to the GCP folder F, then user A
+        #   potentially has access to the GCP folder F. And those advanced analysis
+        #   results will be included in AnalyzeIamPolicyResponse.
+        #   service_account_impersonation_analysis. Default is false.
+        # @param [Boolean] analysis_query_options_expand_groups
+        #   Optional. If true, the identities section of the result will expand any Google
+        #   groups appearing in an IAM policy binding. If IamPolicyAnalysisQuery.
+        #   identity_selector is specified, the identity in the result will be determined
+        #   by the selector, and this flag is not allowed to set. Default is false.
+        # @param [Boolean] analysis_query_options_expand_resources
+        #   Optional. If true and IamPolicyAnalysisQuery.resource_selector is not
+        #   specified, the resource section of the result will expand any resource
+        #   attached to an IAM policy to include resources lower in the resource hierarchy.
+        #   For example, if the request analyzes for which resources user A has
+        #   permission P, and the results include an IAM policy with P on a GCP folder,
+        #   the results will also include resources in that folder with permission P. If
+        #   true and IamPolicyAnalysisQuery.resource_selector is specified, the resource
+        #   section of the result will expand the specified resource to include resources
+        #   lower in the resource hierarchy. Only project or lower resources are supported.
+        #   Folder and organization resource cannot be used together with this option.
+        #   For example, if the request analyzes for which users have permission P on a
+        #   GCP project with this option enabled, the results will include all users who
+        #   have permission P on that project or any lower resource. Default is false.
+        # @param [Boolean] analysis_query_options_expand_roles
+        #   Optional. If true, the access section of result will expand any roles
+        #   appearing in IAM policy bindings to include their permissions. If
+        #   IamPolicyAnalysisQuery.access_selector is specified, the access section of the
+        #   result will be determined by the selector, and this flag is not allowed to set.
+        #   Default is false.
+        # @param [Boolean] analysis_query_options_output_group_edges
+        #   Optional. If true, the result will output group identity edges, starting from
+        #   the binding's group members, to any expanded identities. Default is false.
+        # @param [Boolean] analysis_query_options_output_resource_edges
+        #   Optional. If true, the result will output resource edges, starting from the
+        #   policy attached resource, to any expanded resources. Default is false.
+        # @param [String] analysis_query_resource_selector_full_resource_name
+        #   Required. The [full resource name] (https://cloud.google.com/asset-inventory/
+        #   docs/resource-name-format) of a resource of [supported resource types](https://
+        #   cloud.google.com/asset-inventory/docs/supported-asset-types#
+        #   analyzable_asset_types).
+        # @param [String] execution_timeout
+        #   Optional. Amount of time executable has to complete. See JSON representation
+        #   of [Duration](https://developers.google.com/protocol-buffers/docs/proto3#json).
+        #   If this field is set with a value less than the RPC deadline, and the
+        #   execution of your query hasn't finished in the specified execution timeout,
+        #   you will get a response with partial result. Otherwise, your query's execution
+        #   will continue until the RPC deadline. If it's not finished until then, you
+        #   will get a DEADLINE_EXCEEDED error. Default is empty.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def analyze_iam_policy(scope, analysis_query_access_selector_permissions: nil, analysis_query_access_selector_roles: nil, analysis_query_identity_selector_identity: nil, analysis_query_options_analyze_service_account_impersonation: nil, analysis_query_options_expand_groups: nil, analysis_query_options_expand_resources: nil, analysis_query_options_expand_roles: nil, analysis_query_options_output_group_edges: nil, analysis_query_options_output_resource_edges: nil, analysis_query_resource_selector_full_resource_name: nil, execution_timeout: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+scope}:analyzeIamPolicy', options)
+          command.response_representation = Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse::Representation
+          command.response_class = Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse
+          command.params['scope'] = scope unless scope.nil?
+          command.query['analysisQuery.accessSelector.permissions'] = analysis_query_access_selector_permissions unless analysis_query_access_selector_permissions.nil?
+          command.query['analysisQuery.accessSelector.roles'] = analysis_query_access_selector_roles unless analysis_query_access_selector_roles.nil?
+          command.query['analysisQuery.identitySelector.identity'] = analysis_query_identity_selector_identity unless analysis_query_identity_selector_identity.nil?
+          command.query['analysisQuery.options.analyzeServiceAccountImpersonation'] = analysis_query_options_analyze_service_account_impersonation unless analysis_query_options_analyze_service_account_impersonation.nil?
+          command.query['analysisQuery.options.expandGroups'] = analysis_query_options_expand_groups unless analysis_query_options_expand_groups.nil?
+          command.query['analysisQuery.options.expandResources'] = analysis_query_options_expand_resources unless analysis_query_options_expand_resources.nil?
+          command.query['analysisQuery.options.expandRoles'] = analysis_query_options_expand_roles unless analysis_query_options_expand_roles.nil?
+          command.query['analysisQuery.options.outputGroupEdges'] = analysis_query_options_output_group_edges unless analysis_query_options_output_group_edges.nil?
+          command.query['analysisQuery.options.outputResourceEdges'] = analysis_query_options_output_resource_edges unless analysis_query_options_output_resource_edges.nil?
+          command.query['analysisQuery.resourceSelector.fullResourceName'] = analysis_query_resource_selector_full_resource_name unless analysis_query_resource_selector_full_resource_name.nil?
+          command.query['executionTimeout'] = execution_timeout unless execution_timeout.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Analyzes IAM policies asynchronously to answer which identities have what
+        # accesses on which resources, and writes the analysis results to a Google Cloud
+        # Storage or a BigQuery destination. For Cloud Storage destination, the output
+        # format is the JSON format that represents a AnalyzeIamPolicyResponse. This
+        # method implements the google.longrunning.Operation, which allows you to track
+        # the operation status. We recommend intervals of at least 2 seconds with
+        # exponential backoff retry to poll the operation result. The metadata contains
+        # the request to help callers to map responses to requests.
+        # @param [String] scope
+        #   Required. The relative name of the root asset. Only resources and IAM policies
+        #   within the scope will be analyzed. This can only be an organization number (
+        #   such as "organizations/123"), a folder number (such as "folders/123"), a
+        #   project ID (such as "projects/my-project-id"), or a project number (such as "
+        #   projects/12345"). To know how to get organization id, visit [here ](https://
+        #   cloud.google.com/resource-manager/docs/creating-managing-organization#
+        #   retrieving_your_organization_id). To know how to get folder or project id,
+        #   visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        #   folders#viewing_or_listing_folders_and_projects).
+        # @param [Google::Apis::CloudassetV1::AnalyzeIamPolicyLongrunningRequest] analyze_iam_policy_longrunning_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudassetV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudassetV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def analyze_iam_policy_longrunning(scope, analyze_iam_policy_longrunning_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+scope}:analyzeIamPolicyLongrunning', options)
+          command.request_representation = Google::Apis::CloudassetV1::AnalyzeIamPolicyLongrunningRequest::Representation
+          command.request_object = analyze_iam_policy_longrunning_request_object
+          command.response_representation = Google::Apis::CloudassetV1::Operation::Representation
+          command.response_class = Google::Apis::CloudassetV1::Operation
+          command.params['scope'] = scope unless scope.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Batch gets the update history of assets that overlap a time window. For
         # IAM_POLICY content, this API outputs history when the asset and its attached
         # IAM POLICY both exist. This can create gaps in the output history. Otherwise,

data/generated/google/apis/cloudasset_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1
       VERSION = 'V1'
-      REVISION = '20200911'
+      REVISION = '20201023'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p4beta1/classes.rb

@@ -254,9 +254,9 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Required. The uri of the Cloud Storage object. It's the same uri that is used
-        # by gsutil. For example: "gs://bucket_name/object_name". See [Viewing and
-        # Editing Object Metadata](https://cloud.google.com/storage/docs/viewing-editing-
-        # metadata) for more information.
+        # by gsutil. For example: "gs://bucket_name/object_name". See [Quickstart: Using
+        # the gsutil tool] (https://cloud.google.com/storage/docs/quickstart-gsutil) for
+        # examples.
         # Corresponds to the JSON property `uri`
         # @return [String]
         attr_accessor :uri

data/generated/google/apis/cloudasset_v1p4beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p4beta1
       VERSION = 'V1p4beta1'
-      REVISION = '20200911'
+      REVISION = '20201003'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudbilling_v1/classes.rb

@@ -477,7 +477,7 @@ module Google
       class Money
         include Google::Apis::Core::Hashable
       
-        # The 3-letter currency code defined in ISO 4217.
+        # The three-letter currency code defined in ISO 4217.
         # Corresponds to the JSON property `currencyCode`
         # @return [String]
         attr_accessor :currency_code

data/generated/google/apis/cloudbilling_v1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/billing/
     module CloudbillingV1
       VERSION = 'V1'
-      REVISION = '20200912'
+      REVISION = '20201017'
 
       # View and manage your Google Cloud Platform billing accounts
       AUTH_CLOUD_BILLING = 'https://www.googleapis.com/auth/cloud-billing'

data/generated/google/apis/cloudbuild_v1/classes.rb

@@ -767,40 +767,6 @@ module Google
         end
       end
       
-      # Request to create a new build.
-      class CreateBuildRequest
-        include Google::Apis::Core::Hashable
-      
-        # A build resource in the Cloud Build API. At a high level, a `Build` describes
-        # where to find source code, how to build it (for example, the builder image to
-        # run on the source), and where to store the built artifacts. Fields can include
-        # the following variables, which will be expanded when the build is created: - $
-        # PROJECT_ID: the project ID of the build. - $BUILD_ID: the autogenerated ID of
-        # the build. - $REPO_NAME: the source repository name specified by RepoSource. -
-        # $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag
-        # name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA
-        # specified by RepoSource or resolved from the specified branch or tag. - $
-        # SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA.
-        # Corresponds to the JSON property `build`
-        # @return [Google::Apis::CloudbuildV1::Build]
-        attr_accessor :build
-      
-        # Required. ID of the project.
-        # Corresponds to the JSON property `projectId`
-        # @return [String]
-        attr_accessor :project_id
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @build = args[:build] if args.key?(:build)
-          @project_id = args[:project_id] if args.key?(:project_id)
-        end
-      end
-      
       # A generic empty message that you can re-use to avoid defining duplicated empty
       # messages in your APIs. A typical example is to use it as the request or the
       # response type of an API method. For instance: service Foo ` rpc Bar(google.
@@ -963,7 +929,8 @@ module Google
         # @return [Array<Google::Apis::CloudbuildV1::Build>]
         attr_accessor :builds
       
-        # Token to receive the next page of results.
+        # Token to receive the next page of results. This will be absent if the end of
+        # the response list has been reached.
         # Corresponds to the JSON property `nextPageToken`
         # @return [String]
         attr_accessor :next_page_token