google-api-client 0.45.1 → 0.48.0

data/generated/google/apis/storage_v1/representations.rb

@@ -318,7 +318,6 @@ module Google
           property :website, as: 'website', class: Google::Apis::StorageV1::Bucket::Website, decorator: Google::Apis::StorageV1::Bucket::Website::Representation
       
           collection :zone_affinity, as: 'zoneAffinity'
-          property :zone_separation, as: 'zoneSeparation'
         end
         
         class Billing

data/generated/google/apis/storage_v1/service.rb

@@ -1617,8 +1617,9 @@ module Google
         #   Makes the operation conditional on whether the object's current metageneration
         #   matches the given value.
         # @param [String] kms_key_name
-        #   Not currently supported. Specifying the parameter causes the request to fail
-        #   with status code 400 - Bad Request.
+        #   Resource name of the Cloud KMS key, of the form projects/my-project/locations/
+        #   global/keyRings/my-kr/cryptoKeys/my-key, that will be used to encrypt the
+        #   object. Overrides the object metadata's kms_key_name value, if any.
         # @param [String] provisional_user_project
         #   The project to be billed for this request if the target bucket is requester-
         #   pays bucket.

data/generated/google/apis/storagetransfer_v1.rb

@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/storage-transfer/docs
     module StoragetransferV1
       VERSION = 'V1'
-      REVISION = '20200827'
+      REVISION = '20201027'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/storagetransfer_v1/classes.rb

@@ -23,7 +23,9 @@ module Google
     module StoragetransferV1
       
       # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/
-      # general/latest/gr/aws-security-credentials.html)).
+      # general/latest/gr/aws-security-credentials.html)). For information on our data
+      # retention policy for user credentials, see [User credentials](data-retention#
+      # user-credentials).
       class AwsAccessKey
         include Google::Apis::Core::Hashable
       
@@ -54,7 +56,9 @@ module Google
         include Google::Apis::Core::Hashable
       
         # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/
-        # general/latest/gr/aws-security-credentials.html)).
+        # general/latest/gr/aws-security-credentials.html)). For information on our data
+        # retention policy for user credentials, see [User credentials](data-retention#
+        # user-credentials).
         # Corresponds to the JSON property `awsAccessKey`
         # @return [Google::Apis::StoragetransferV1::AwsAccessKey]
         attr_accessor :aws_access_key
@@ -86,7 +90,8 @@ module Google
       class AzureBlobStorageData
         include Google::Apis::Core::Hashable
       
-        # Azure credentials
+        # Azure credentials For information on our data retention policy for user
+        # credentials, see [User credentials](data-retention#user-credentials).
         # Corresponds to the JSON property `azureCredentials`
         # @return [Google::Apis::StoragetransferV1::AzureCredentials]
         attr_accessor :azure_credentials
@@ -113,7 +118,8 @@ module Google
         end
       end
       
-      # Azure credentials
+      # Azure credentials For information on our data retention policy for user
+      # credentials, see [User credentials](data-retention#user-credentials).
       class AzureCredentials
         include Google::Apis::Core::Hashable
       
@@ -134,31 +140,44 @@ module Google
         end
       end
       
-      # Represents a whole or partial calendar date, e.g. a birthday. The time of day
-      # and time zone are either specified elsewhere or are not significant. The date
-      # is relative to the Proleptic Gregorian Calendar. This can represent: * A full
-      # date, with non-zero year, month and day values * A month and day value, with a
-      # zero year, e.g. an anniversary * A year on its own, with zero month and day
-      # values * A year and month value, with a zero day, e.g. a credit card
-      # expiration date Related types are google.type.TimeOfDay and `google.protobuf.
-      # Timestamp`.
+      # The request message for Operations.CancelOperation.
+      class CancelOperationRequest
+        include Google::Apis::Core::Hashable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+        end
+      end
+      
+      # Represents a whole or partial calendar date, such as a birthday. The time of
+      # day and time zone are either specified elsewhere or are insignificant. The
+      # date is relative to the Gregorian Calendar. This can represent one of the
+      # following: * A full date, with non-zero year, month, and day values * A month
+      # and day value, with a zero year, such as an anniversary * A year on its own,
+      # with zero month and day values * A year and month value, with a zero day, such
+      # as a credit card expiration date Related types are google.type.TimeOfDay and `
+      # google.protobuf.Timestamp`.
       class Date
         include Google::Apis::Core::Hashable
       
-        # Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if
-        # specifying a year by itself or a year and month where the day is not
-        # significant.
+        # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to
+        # specify a year by itself or a year and month where the day isn't significant.
         # Corresponds to the JSON property `day`
         # @return [Fixnum]
         attr_accessor :day
       
-        # Month of year. Must be from 1 to 12, or 0 if specifying a year without a month
+        # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month
         # and day.
         # Corresponds to the JSON property `month`
         # @return [Fixnum]
         attr_accessor :month
       
-        # Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
+        # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a
+        # year.
         # Corresponds to the JSON property `year`
         # @return [Fixnum]
         attr_accessor :year
@@ -604,26 +623,26 @@ module Google
       class Schedule
         include Google::Apis::Core::Hashable
       
-        # Represents a whole or partial calendar date, e.g. a birthday. The time of day
-        # and time zone are either specified elsewhere or are not significant. The date
-        # is relative to the Proleptic Gregorian Calendar. This can represent: * A full
-        # date, with non-zero year, month and day values * A month and day value, with a
-        # zero year, e.g. an anniversary * A year on its own, with zero month and day
-        # values * A year and month value, with a zero day, e.g. a credit card
-        # expiration date Related types are google.type.TimeOfDay and `google.protobuf.
-        # Timestamp`.
+        # Represents a whole or partial calendar date, such as a birthday. The time of
+        # day and time zone are either specified elsewhere or are insignificant. The
+        # date is relative to the Gregorian Calendar. This can represent one of the
+        # following: * A full date, with non-zero year, month, and day values * A month
+        # and day value, with a zero year, such as an anniversary * A year on its own,
+        # with zero month and day values * A year and month value, with a zero day, such
+        # as a credit card expiration date Related types are google.type.TimeOfDay and `
+        # google.protobuf.Timestamp`.
         # Corresponds to the JSON property `scheduleEndDate`
         # @return [Google::Apis::StoragetransferV1::Date]
         attr_accessor :schedule_end_date
       
-        # Represents a whole or partial calendar date, e.g. a birthday. The time of day
-        # and time zone are either specified elsewhere or are not significant. The date
-        # is relative to the Proleptic Gregorian Calendar. This can represent: * A full
-        # date, with non-zero year, month and day values * A month and day value, with a
-        # zero year, e.g. an anniversary * A year on its own, with zero month and day
-        # values * A year and month value, with a zero day, e.g. a credit card
-        # expiration date Related types are google.type.TimeOfDay and `google.protobuf.
-        # Timestamp`.
+        # Represents a whole or partial calendar date, such as a birthday. The time of
+        # day and time zone are either specified elsewhere or are insignificant. The
+        # date is relative to the Gregorian Calendar. This can represent one of the
+        # following: * A full date, with non-zero year, month, and day values * A month
+        # and day value, with a zero year, such as an anniversary * A year on its own,
+        # with zero month and day values * A year and month value, with a zero day, such
+        # as a credit card expiration date Related types are google.type.TimeOfDay and `
+        # google.protobuf.Timestamp`.
         # Corresponds to the JSON property `scheduleStartDate`
         # @return [Google::Apis::StoragetransferV1::Date]
         attr_accessor :schedule_start_date
@@ -869,6 +888,13 @@ module Google
         # @return [String]
         attr_accessor :last_modification_time
       
+        # The name of the most recently started TransferOperation of this JobConfig.
+        # Present if and only if at least one TransferOperation has been created for
+        # this JobConfig.
+        # Corresponds to the JSON property `latestOperationName`
+        # @return [String]
+        attr_accessor :latest_operation_name
+      
         # A unique name (within the transfer project) assigned when the job is created.
         # If this field is empty in a CreateTransferJobRequest, Storage Transfer Service
         # will assign a unique name. Otherwise, the specified name is used as the unique
@@ -928,6 +954,7 @@ module Google
           @deletion_time = args[:deletion_time] if args.key?(:deletion_time)
           @description = args[:description] if args.key?(:description)
           @last_modification_time = args[:last_modification_time] if args.key?(:last_modification_time)
+          @latest_operation_name = args[:latest_operation_name] if args.key?(:latest_operation_name)
           @name = args[:name] if args.key?(:name)
           @notification_config = args[:notification_config] if args.key?(:notification_config)
           @project_id = args[:project_id] if args.key?(:project_id)
@@ -1037,7 +1064,10 @@ module Google
         attr_accessor :delete_objects_unique_in_sink
         alias_method :delete_objects_unique_in_sink?, :delete_objects_unique_in_sink
       
-        # Whether overwriting objects that already exist in the sink is allowed.
+        # When to overwrite objects that already exist in the sink. The default is that
+        # only objects that are different from the source are ovewritten. If true, all
+        # objects in the sink whose name matches an object in the source will be
+        # overwritten with the source object.
         # Corresponds to the JSON property `overwriteObjectsAlreadyExistingInSink`
         # @return [Boolean]
         attr_accessor :overwrite_objects_already_existing_in_sink

data/generated/google/apis/storagetransfer_v1/representations.rb

@@ -46,6 +46,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class CancelOperationRequest
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Date
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -218,6 +224,12 @@ module Google
         end
       end
       
+      class CancelOperationRequest
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+        end
+      end
+      
       class Date
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -395,6 +407,7 @@ module Google
           property :deletion_time, as: 'deletionTime'
           property :description, as: 'description'
           property :last_modification_time, as: 'lastModificationTime'
+          property :latest_operation_name, as: 'latestOperationName'
           property :name, as: 'name'
           property :notification_config, as: 'notificationConfig', class: Google::Apis::StoragetransferV1::NotificationConfig, decorator: Google::Apis::StoragetransferV1::NotificationConfig::Representation
       

data/generated/google/apis/storagetransfer_v1/service.rb

@@ -117,7 +117,7 @@ module Google
         
         # Gets a transfer job.
         # @param [String] job_name
-        #   Required. The job to get.
+        #   Required. " The job to get.
         # @param [String] project_id
         #   Required. The ID of the Google Cloud Platform Console project that owns the
         #   job.
@@ -138,7 +138,7 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_transfer_job(job_name, project_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def get_transfer_job(job_name, project_id, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+jobName}', options)
           command.response_representation = Google::Apis::StoragetransferV1::TransferJob::Representation
           command.response_class = Google::Apis::StoragetransferV1::TransferJob
@@ -151,13 +151,12 @@ module Google
         
         # Lists transfer jobs.
         # @param [String] filter
-        #   Required. A list of query parameters specified as JSON text in the form of: `"
-        #   project_id":"my_project_id", "job_names":["jobid1","jobid2",...], "
-        #   job_statuses":["status1","status2",...]`. Since `job_names` and `job_statuses`
-        #   support multiple values, their values must be specified with array notation. `
-        #   project``_``id` is required. `job_names` and `job_statuses` are optional. The
-        #   valid values for `job_statuses` are case-insensitive: ENABLED, DISABLED, and
-        #   DELETED.
+        #   Required. A list of query parameters specified as JSON text in the form of: ``"
+        #   projectId":"my_project_id", "jobNames":["jobid1","jobid2",...], "jobStatuses":[
+        #   "status1","status2",...]`` Since `jobNames` and `jobStatuses` support multiple
+        #   values, their values must be specified with array notation. `projectId` is
+        #   required. `jobNames` and `jobStatuses` are optional. The valid values for `
+        #   jobStatuses` are case-insensitive: ENABLED, DISABLED, and DELETED.
         # @param [Fixnum] page_size
         #   The list page size. The max allowed value is 256.
         # @param [String] page_token
@@ -179,7 +178,7 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_transfer_jobs(filter: nil, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def list_transfer_jobs(filter, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/transferJobs', options)
           command.response_representation = Google::Apis::StoragetransferV1::ListTransferJobsResponse::Representation
           command.response_class = Google::Apis::StoragetransferV1::ListTransferJobsResponse
@@ -246,6 +245,7 @@ module Google
         # discovered tomorrow.
         # @param [String] name
         #   The name of the operation resource to be cancelled.
+        # @param [Google::Apis::StoragetransferV1::CancelOperationRequest] cancel_operation_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -263,8 +263,10 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def cancel_transfer_operation(name, fields: nil, quota_user: nil, options: nil, &block)
+        def cancel_transfer_operation(name, cancel_operation_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:post, 'v1/{+name}:cancel', options)
+          command.request_representation = Google::Apis::StoragetransferV1::CancelOperationRequest::Representation
+          command.request_object = cancel_operation_request_object
           command.response_representation = Google::Apis::StoragetransferV1::Empty::Representation
           command.response_class = Google::Apis::StoragetransferV1::Empty
           command.params['name'] = name unless name.nil?
@@ -308,14 +310,14 @@ module Google
         # @param [String] name
         #   Required. The value `transferOperations`.
         # @param [String] filter
-        #   Required. A list of query parameters specified as JSON text in the form of: `"
-        #   project_id":"my_project_id", "job_names":["jobid1","jobid2",...], "
-        #   operation_names":["opid1","opid2",...], "transfer_statuses":["status1","
-        #   status2",...]`. Since `job_names`, `operation_names`, and `transfer_statuses`
-        #   support multiple values, they must be specified with array notation. `project``
-        #   _``id` is required. `job_names`, `operation_names`, and `transfer_statuses`
-        #   are optional. The valid values for `transfer_statuses` are case-insensitive:
-        #   IN_PROGRESS, PAUSED, SUCCESS, FAILED, and ABORTED.
+        #   Required. A list of query parameters specified as JSON text in the form of: ``"
+        #   projectId":"my_project_id", "jobNames":["jobid1","jobid2",...], "
+        #   operationNames":["opid1","opid2",...], "transferStatuses":["status1","status2",
+        #   ...]`` Since `jobNames`, `operationNames`, and `transferStatuses` support
+        #   multiple values, they must be specified with array notation. `projectId` is
+        #   required. `jobNames`, `operationNames`, and `transferStatuses` are optional.
+        #   The valid values for `transferStatuses` are case-insensitive: IN_PROGRESS,
+        #   PAUSED, SUCCESS, FAILED, and ABORTED.
         # @param [Fixnum] page_size
         #   The list page size. The max allowed value is 256.
         # @param [String] page_token
@@ -337,7 +339,7 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_transfer_operations(name, filter: nil, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def list_transfer_operations(name, filter, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::StoragetransferV1::ListOperationsResponse::Representation
           command.response_class = Google::Apis::StoragetransferV1::ListOperationsResponse

data/generated/google/apis/streetviewpublish_v1.rb

@@ -27,7 +27,7 @@ module Google
     # @see https://developers.google.com/streetview/publish/
     module StreetviewpublishV1
       VERSION = 'V1'
-      REVISION = '20200809'
+      REVISION = '20201012'
 
       # Publish and manage your 360 photos on Google Street View
       AUTH_STREETVIEWPUBLISH = 'https://www.googleapis.com/auth/streetviewpublish'

data/generated/google/apis/streetviewpublish_v1/classes.rb

@@ -157,8 +157,8 @@ module Google
         end
       end
       
-      # An object representing a latitude/longitude pair. This is expressed as a pair
-      # of doubles representing degrees latitude and degrees longitude. Unless
+      # An object that represents a latitude/longitude pair. This is expressed as a
+      # pair of doubles to represent degrees latitude and degrees longitude. Unless
       # specified otherwise, this must conform to the WGS84 standard. Values must be
       # within normalized ranges.
       class LatLng
@@ -500,8 +500,8 @@ module Google
         # @return [Float]
         attr_accessor :heading
       
-        # An object representing a latitude/longitude pair. This is expressed as a pair
-        # of doubles representing degrees latitude and degrees longitude. Unless
+        # An object that represents a latitude/longitude pair. This is expressed as a
+        # pair of doubles to represent degrees latitude and degrees longitude. Unless
         # specified otherwise, this must conform to the WGS84 standard. Values must be
         # within normalized ranges.
         # Corresponds to the JSON property `latLngPair`

data/generated/google/apis/sts_v1.rb

@@ -26,7 +26,7 @@ module Google
     # @see http://cloud.google.com/iam/docs/workload-identity-federation
     module StsV1
       VERSION = 'V1'
-      REVISION = '20200908'
+      REVISION = '20201004'
     end
   end
 end

data/generated/google/apis/sts_v1/classes.rb

@@ -27,7 +27,7 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Required. The grant type. Must be `urn:ietf:params:oauth:grant-type:token-
-        # exchange`, which indicates a token exchange is requested.
+        # exchange`, which indicates a token exchange.
         # Corresponds to the JSON property `grantType`
         # @return [String]
         attr_accessor :grant_type
@@ -45,10 +45,10 @@ module Google
         # @return [String]
         attr_accessor :requested_token_type
       
-        # Required. Input subject token. You can use a Google-issued OAuth 2.0 access
-        # token with this field to obtain an access token with new security attributes
-        # applied, such as an AccessBoundary. Applying additional security attributes on
-        # access tokens that already contain security attributes is not allowed.
+        # Required. The input token. You can use a Google-issued OAuth 2.0 access token
+        # with this field to obtain an access token with new security attributes applied,
+        # such as a Credential Access Boundary. If an access token already contains
+        # security attributes, you cannot apply additional security attributes.
         # Corresponds to the JSON property `subjectToken`
         # @return [String]
         attr_accessor :subject_token
@@ -84,10 +84,11 @@ module Google
         # @return [String]
         attr_accessor :access_token
       
-        # The expiration time of `access_token` in seconds, measured from the time of
-        # issuance. This field is absent when the `subject_token` in the request is a
-        # Google-issued, short-lived access token. In this case, the expiration time of
-        # the `access_token` is the same as the `subject_token`.
+        # The amount of time, in seconds, between the time when the `access_token` was
+        # issued and the time when the `access_token` will expire. This field is absent
+        # when the `subject_token` in the request is a Google-issued, short-lived access
+        # token. In this case, the `access_token` has the same expiration time as the `
+        # subject_token`.
         # Corresponds to the JSON property `expires_in`
         # @return [Fixnum]
         attr_accessor :expires_in

data/generated/google/apis/sts_v1beta.rb

@@ -26,7 +26,7 @@ module Google
     # @see http://cloud.google.com/iam/docs/workload-identity-federation
     module StsV1beta
       VERSION = 'V1beta'
-      REVISION = '20200919'
+      REVISION = '20201009'
     end
   end
 end

data/generated/google/apis/sts_v1beta/classes.rb

@@ -26,16 +26,15 @@ module Google
       class GoogleIdentityStsV1betaExchangeTokenRequest
         include Google::Apis::Core::Hashable
       
-        # The full resource name of the identity provider; for example: `https://iam.
-        # googleapis.com/projects/`PROJECT_ID`/workloadIdentityPools/`POOL_ID`/providers/
-        # `PROVIDER_ID``. Required when exchanging an external credential for a Google
-        # access token.
+        # The full resource name of the identity provider. For example, `//iam.
+        # googleapis.com/projects//workloadIdentityPools//providers/`. Required when
+        # exchanging an external credential for a Google access token.
         # Corresponds to the JSON property `audience`
         # @return [String]
         attr_accessor :audience
       
         # Required. The grant type. Must be `urn:ietf:params:oauth:grant-type:token-
-        # exchange`, which indicates a token exchange is requested.
+        # exchange`, which indicates a token exchange.
         # Corresponds to the JSON property `grantType`
         # @return [String]
         attr_accessor :grant_type
@@ -47,8 +46,8 @@ module Google
         # @return [String]
         attr_accessor :options
       
-        # Required. An identifier for the type of requested security token. Must be `urn:
-        # ietf:params:oauth:token-type:access_token`.
+        # Required. The type of security token. Must be `urn:ietf:params:oauth:token-
+        # type:access_token`, which indicates an OAuth 2.0 access token.
         # Corresponds to the JSON property `requestedTokenType`
         # @return [String]
         attr_accessor :requested_token_type
@@ -60,71 +59,69 @@ module Google
         # @return [String]
         attr_accessor :scope
       
-        # Required. The input token. This is a either an external credential issued by a
-        # WorkloadIdentityPoolProvider, or a short-lived access token issued by Google.
-        # If the token is an OIDC JWT, it must use the JWT format defined in [RFC 7523](
-        # https://tools.ietf.org/html/rfc7523), and `subject_token_type` must be `urn:
-        # ietf:params:oauth:token-type:jwt`. The following headers are required: - **`
-        # kid`**: The identifier of the signing key securing the JWT. - **`alg`**: The
-        # cryptographic algorithm securing the JWT. Must be `RS256`. The following
-        # payload fields are required. For more information, see [RFC 7523, Section 3](
-        # https://tools.ietf.org/html/rfc7523#section-3). - **`iss`**: The issuer of the
-        # token. The issuer must provide a discovery document at `/.well-known/openid-
-        # configuration`, formatted according to section 4.2 of the [OIDC 1.0 Discovery
-        # specification](https://openid.net/specs/openid-connect-discovery-1_0.html#
-        # ProviderConfigurationResponse). - **`iat`**: The issue time, in seconds, since
-        # epoch. Must be in the past. - **`exp`**: The expiration time, in seconds,
-        # since epoch. Must be fewer than 48 hours after `iat`. Shorter expiration times
-        # are more. secure. If possible, we recommend setting an expiration time fewer
-        # than 6 hours. - **`sub`**: The identity asserted in the JWT. - **`aud`**:
-        # Configured by the mapper policy. The default value is the service account's
-        # unique ID. Example header: ``` ` "alg": "RS256", "kid": "us-east-11" ` ```
-        # Example payload: ``` ` "iss": "https://accounts.google.com", "iat": 1517963104,
-        # "exp": 1517966704, "aud": "113475438248934895348", "sub": "
+        # Required. The input token. This token is a either an external credential
+        # issued by a workload identity pool provider, or a short-lived access token
+        # issued by Google. If the token is an OIDC JWT, it must use the JWT format
+        # defined in [RFC 7523](https://tools.ietf.org/html/rfc7523), and the `
+        # subject_token_type` must be `urn:ietf:params:oauth:token-type:jwt`. The
+        # following headers are required: - `kid`: The identifier of the signing key
+        # securing the JWT. - `alg`: The cryptographic algorithm securing the JWT. Must
+        # be `RS256`. The following payload fields are required. For more information,
+        # see [RFC 7523, Section 3](https://tools.ietf.org/html/rfc7523#section-3): - `
+        # iss`: The issuer of the token. The issuer must provide a discovery document at
+        # the URL `/.well-known/openid-configuration`, where `` is the value of this
+        # field. The document must be formatted according to section 4.2 of the [OIDC 1.
+        # 0 Discovery specification](https://openid.net/specs/openid-connect-discovery-
+        # 1_0.html#ProviderConfigurationResponse). - `iat`: The issue time, in seconds,
+        # since the Unix epoch. Must be in the past. - `exp`: The expiration time, in
+        # seconds, since the Unix epoch. Must be less than 48 hours after `iat`. Shorter
+        # expiration times are more secure. If possible, we recommend setting an
+        # expiration time less than 6 hours. - `sub`: The identity asserted in the JWT. -
+        # `aud`: Configured by the mapper policy. The default value is the service
+        # account's unique ID. Example header: ``` ` "alg": "RS256", "kid": "us-east-11"
+        # ` ``` Example payload: ``` ` "iss": "https://accounts.google.com", "iat":
+        # 1517963104, "exp": 1517966704, "aud": "113475438248934895348", "sub": "
         # 113475438248934895348", "my_claims": ` "additional_claim": "value" ` ` ``` If `
         # subject_token` is an AWS token, it must be a serialized, [signed](https://docs.
         # aws.amazon.com/general/latest/gr/signing_aws_api_requests.html) request to the
         # AWS [`GetCallerIdentity()`](https://docs.aws.amazon.com/STS/latest/
         # APIReference/API_GetCallerIdentity) method. Format the request as URL-encoded
         # JSON, and set the `subject_token_type` parameter to `urn:ietf:params:aws:token-
-        # type:aws4_request`. The following parameters are required: - **`url`**: The
-        # URL of the AWS STS endpoint for `GetCallerIdentity()`, such as `https://sts.
-        # amazonaws.com?Action=GetCallerIdentity&Version=2011-06-15`. Regional endpoints
-        # are also supported. - **`method`:** The HTTP request method: `POST`. - **`
-        # headers`**: The HTTP request headers, which must include: - **`Authorization`**
-        # : The request signature. - **`x-amz-date`**`: The time you will send the
-        # request, formatted as an [ISO8601 Basic](https://docs.aws.amazon.com/general/
-        # latest/gr/sigv4_elements.html#sigv4_elements_date) string. This is typically
-        # set to the current time, and used to prevent replay attacks. - **`host`**: The
-        # hostname of the `url` field; for example, `sts.amazonaws.com`. - **`x-goog-
-        # cloud-target-resource`**: The full, canonical resource name of the
-        # WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example: ``
-        # ` //iam.googleapis.com/projects//locations//workloadIdentityPools//providers/
-        # https://iam.googleapis.com/projects//locations//workloadIdentityPools//
-        # providers/ ``` Signing this header as part of the signature is recommended to
-        # ensure data integrity. If you are using temporary security credentials
-        # provided by AWS, you must also include the header `x-amz-security-token`, with
-        # the value `[SESSION_TOKEN]`. The following is an example of a signed,
-        # serialized request: ``` ` "headers":[ `"key": "x-amz-date", "value": "
-        # 20200815T015049Z"`, `"key": "Authorization", "value": "AWS4-HMAC-SHA256+
-        # Credential=$credential,+SignedHeaders=host;x-amz-date;x-goog-cloud-target-
-        # resource,+Signature=$signature"`, `"key": "x-goog-cloud-target-resource", "
-        # value": "//iam.googleapis.com/projects//locations//workloadIdentityPools//
-        # providers/"`, `"key": "host", "value": "sts.amazonaws.com"` . ], "method":"
-        # POST", "url":"https://sts.amazonaws.com?Action=GetCallerIdentity&Version=2011-
-        # 06-15" ` ``` You can also use a Google-issued OAuth 2.0 access token with this
-        # field to obtain an access token with new security attributes applied, such as
-        # an AccessBoundary. In this case, set `subject_token_type` to `urn:ietf:params:
-        # oauth:token-type:access_token`. Applying additional security attributes on
-        # access tokens that already contain security attributes is not allowed.
+        # type:aws4_request`. The following parameters are required: - `url`: The URL of
+        # the AWS STS endpoint for `GetCallerIdentity()`, such as `https://sts.amazonaws.
+        # com?Action=GetCallerIdentity&Version=2011-06-15`. Regional endpoints are also
+        # supported. - `method`: The HTTP request method: `POST`. - `headers`: The HTTP
+        # request headers, which must include: - `Authorization`: The request signature.
+        # - `x-amz-date`: The time you will send the request, formatted as an [ISO8601
+        # Basic](https://docs.aws.amazon.com/general/latest/gr/sigv4_elements.html#
+        # sigv4_elements_date) string. This is typically set to the current time and
+        # used to prevent replay attacks. - `host`: The hostname of the `url` field; for
+        # example, `sts.amazonaws.com`. - `x-goog-cloud-target-resource`: The full,
+        # canonical resource name of the workload identity pool provider, with or
+        # without an `https:` prefix. To help ensure data integrity, we recommend
+        # including this header in the `SignedHeaders` field of the signed request. For
+        # example: //iam.googleapis.com/projects//locations//workloadIdentityPools//
+        # providers/ https://iam.googleapis.com/projects//locations//
+        # workloadIdentityPools//providers/ If you are using temporary security
+        # credentials provided by AWS, you must also include the header `x-amz-security-
+        # token`, with the value ``. The following example shows a signed, serialized
+        # request: ``` ` "headers":[ `"key": "x-amz-date", "value": "20200815T015049Z"`,
+        # `"key": "Authorization", "value": "AWS4-HMAC-SHA256+Credential=$credential,+
+        # SignedHeaders=host;x-amz-date;x-goog-cloud-target-resource,+Signature=$
+        # signature"`, `"key": "x-goog-cloud-target-resource", "value": "//iam.
+        # googleapis.com/projects//locations//workloadIdentityPools//providers/"`, `"key"
+        # : "host", "value": "sts.amazonaws.com"` . ], "method":"POST", "url":"https://
+        # sts.amazonaws.com?Action=GetCallerIdentity&Version=2011-06-15" ` ``` You can
+        # also use a Google-issued OAuth 2.0 access token with this field to obtain an
+        # access token with new security attributes applied, such as a Credential Access
+        # Boundary. In this case, set `subject_token_type` to `urn:ietf:params:oauth:
+        # token-type:access_token`. If an access token already contains security
+        # attributes, you cannot apply additional security attributes.
         # Corresponds to the JSON property `subjectToken`
         # @return [String]
         attr_accessor :subject_token
       
-        # Required. An identifier that indicates the type of the security token in the `
-        # subject_token` parameter. Supported values are `urn:ietf:params:oauth:token-
-        # type:jwt`, `urn:ietf:params:aws:token-type:aws4_request` and `urn:ietf:params:
-        # oauth:token-type:access_token`.
+        # Required. `urn:ietf:params:oauth:token-type:access_token`.
         # Corresponds to the JSON property `subjectTokenType`
         # @return [String]
         attr_accessor :subject_token_type
@@ -150,18 +147,18 @@ module Google
         include Google::Apis::Core::Hashable
       
         # An OAuth 2.0 security token, issued by Google, in response to the token
-        # exchange request. Tokens can vary in size (mainly depending on the size of
-        # mapped claims), currently up to the 12288 bytes (12 KB) size limit. Google
-        # reserves the right to change token size, including increasing these limits.
-        # Your application must support variable token sizes accordingly.
+        # exchange request. Tokens can vary in size, depending in part on the size of
+        # mapped claims, up to a maximum of 12288 bytes (12 KB). Google reserves the
+        # right to change the token size and the maximum length at any time.
         # Corresponds to the JSON property `access_token`
         # @return [String]
         attr_accessor :access_token
       
-        # The expiration time of `access_token`, in seconds, from the time of issuance.
-        # This field is absent when the `subject_token` in the request is a Google-
-        # issued, short-lived access token. In this case, the expiration time of the `
-        # access_token` is the same as the `subject_token`.
+        # The amount of time, in seconds, between the time when the `access_token` was
+        # issued and the time when the `access_token` will expire. This field is absent
+        # when the `subject_token` in the request is a Google-issued, short-lived access
+        # token. In this case, the `access_token` has the same expiration time as the `
+        # subject_token`.
         # Corresponds to the JSON property `expires_in`
         # @return [Fixnum]
         attr_accessor :expires_in