google-api-client 0.49.0 → 0.53.0

data/generated/google/apis/cloudasset_v1/representations.rb

@@ -208,6 +208,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GoogleIdentityAccesscontextmanagerV1ApiOperation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class GoogleIdentityAccesscontextmanagerV1BasicLevel
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -232,6 +238,54 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GoogleIdentityAccesscontextmanagerV1EgressFrom
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1EgressPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1EgressTo
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressFrom
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressSource
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressTo
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1MethodSelector
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class GoogleIdentityAccesscontextmanagerV1OsConstraint
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -298,6 +352,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Inventory
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class Item
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListFeedsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -316,6 +382,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class OsInfo
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class OutputConfig
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -376,6 +448,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class SoftwarePackage
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Status
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -400,6 +478,36 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class VersionedPackage
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class WindowsQuickFixEngineeringPackage
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class WindowsUpdateCategory
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class WindowsUpdatePackage
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class ZypperPatch
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class AccessSelector
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -443,6 +551,8 @@ module Google
           property :name, as: 'name'
           collection :org_policy, as: 'orgPolicy', class: Google::Apis::CloudassetV1::GoogleCloudOrgpolicyV1Policy, decorator: Google::Apis::CloudassetV1::GoogleCloudOrgpolicyV1Policy::Representation
       
+          property :os_inventory, as: 'osInventory', class: Google::Apis::CloudassetV1::Inventory, decorator: Google::Apis::CloudassetV1::Inventory::Representation
+      
           property :resource, as: 'resource', class: Google::Apis::CloudassetV1::Resource, decorator: Google::Apis::CloudassetV1::Resource::Representation
       
           property :service_perimeter, as: 'servicePerimeter', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter::Representation
@@ -491,7 +601,6 @@ module Google
       class Binding
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :binding_id, as: 'bindingId'
           property :condition, as: 'condition', class: Google::Apis::CloudassetV1::Expr, decorator: Google::Apis::CloudassetV1::Expr::Representation
       
           collection :members, as: 'members'
@@ -711,6 +820,15 @@ module Google
         end
       end
       
+      class GoogleIdentityAccesscontextmanagerV1ApiOperation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :method_selectors, as: 'methodSelectors', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1MethodSelector, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1MethodSelector::Representation
+      
+          property :service_name, as: 'serviceName'
+        end
+      end
+      
       class GoogleIdentityAccesscontextmanagerV1BasicLevel
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -754,6 +872,78 @@ module Google
         end
       end
       
+      class GoogleIdentityAccesscontextmanagerV1EgressFrom
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :identities, as: 'identities'
+          property :identity_type, as: 'identityType'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1EgressPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :egress_from, as: 'egressFrom', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressFrom, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressFrom::Representation
+      
+          property :egress_to, as: 'egressTo', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressTo, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressTo::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1EgressTo
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :operations, as: 'operations', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1ApiOperation, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1ApiOperation::Representation
+      
+          collection :resources, as: 'resources'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressFrom
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :identities, as: 'identities'
+          property :identity_type, as: 'identityType'
+          collection :sources, as: 'sources', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressSource, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressSource::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :ingress_from, as: 'ingressFrom', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressFrom, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressFrom::Representation
+      
+          property :ingress_to, as: 'ingressTo', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressTo, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressTo::Representation
+      
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressSource
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :access_level, as: 'accessLevel'
+          property :resource, as: 'resource'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1IngressTo
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :operations, as: 'operations', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1ApiOperation, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1ApiOperation::Representation
+      
+          collection :resources, as: 'resources'
+        end
+      end
+      
+      class GoogleIdentityAccesscontextmanagerV1MethodSelector
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :method_prop, as: 'method'
+          property :permission, as: 'permission'
+        end
+      end
+      
       class GoogleIdentityAccesscontextmanagerV1OsConstraint
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -782,6 +972,10 @@ module Google
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           collection :access_levels, as: 'accessLevels'
+          collection :egress_policies, as: 'egressPolicies', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressPolicy, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1EgressPolicy::Representation
+      
+          collection :ingress_policies, as: 'ingressPolicies', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressPolicy, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1IngressPolicy::Representation
+      
           collection :resources, as: 'resources'
           collection :restricted_services, as: 'restrictedServices'
           property :vpc_accessible_services, as: 'vpcAccessibleServices', class: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices, decorator: Google::Apis::CloudassetV1::GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices::Representation
@@ -876,6 +1070,31 @@ module Google
         end
       end
       
+      class Inventory
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :items, as: 'items', class: Google::Apis::CloudassetV1::Item, decorator: Google::Apis::CloudassetV1::Item::Representation
+      
+          property :os_info, as: 'osInfo', class: Google::Apis::CloudassetV1::OsInfo, decorator: Google::Apis::CloudassetV1::OsInfo::Representation
+      
+        end
+      end
+      
+      class Item
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :available_package, as: 'availablePackage', class: Google::Apis::CloudassetV1::SoftwarePackage, decorator: Google::Apis::CloudassetV1::SoftwarePackage::Representation
+      
+          property :create_time, as: 'createTime'
+          property :id, as: 'id'
+          property :installed_package, as: 'installedPackage', class: Google::Apis::CloudassetV1::SoftwarePackage, decorator: Google::Apis::CloudassetV1::SoftwarePackage::Representation
+      
+          property :origin_type, as: 'originType'
+          property :type, as: 'type'
+          property :update_time, as: 'updateTime'
+        end
+      end
+      
       class ListFeedsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -908,6 +1127,20 @@ module Google
         end
       end
       
+      class OsInfo
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :architecture, as: 'architecture'
+          property :hostname, as: 'hostname'
+          property :kernel_release, as: 'kernelRelease'
+          property :kernel_version, as: 'kernelVersion'
+          property :long_name, as: 'longName'
+          property :osconfig_agent_version, as: 'osconfigAgentVersion'
+          property :short_name, as: 'shortName'
+          property :version, as: 'version'
+        end
+      end
+      
       class OutputConfig
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1004,6 +1237,28 @@ module Google
         end
       end
       
+      class SoftwarePackage
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :apt_package, as: 'aptPackage', class: Google::Apis::CloudassetV1::VersionedPackage, decorator: Google::Apis::CloudassetV1::VersionedPackage::Representation
+      
+          property :cos_package, as: 'cosPackage', class: Google::Apis::CloudassetV1::VersionedPackage, decorator: Google::Apis::CloudassetV1::VersionedPackage::Representation
+      
+          property :googet_package, as: 'googetPackage', class: Google::Apis::CloudassetV1::VersionedPackage, decorator: Google::Apis::CloudassetV1::VersionedPackage::Representation
+      
+          property :qfe_package, as: 'qfePackage', class: Google::Apis::CloudassetV1::WindowsQuickFixEngineeringPackage, decorator: Google::Apis::CloudassetV1::WindowsQuickFixEngineeringPackage::Representation
+      
+          property :wua_package, as: 'wuaPackage', class: Google::Apis::CloudassetV1::WindowsUpdatePackage, decorator: Google::Apis::CloudassetV1::WindowsUpdatePackage::Representation
+      
+          property :yum_package, as: 'yumPackage', class: Google::Apis::CloudassetV1::VersionedPackage, decorator: Google::Apis::CloudassetV1::VersionedPackage::Representation
+      
+          property :zypper_package, as: 'zypperPackage', class: Google::Apis::CloudassetV1::VersionedPackage, decorator: Google::Apis::CloudassetV1::VersionedPackage::Representation
+      
+          property :zypper_patch, as: 'zypperPatch', class: Google::Apis::CloudassetV1::ZypperPatch, decorator: Google::Apis::CloudassetV1::ZypperPatch::Representation
+      
+        end
+      end
+      
       class Status
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1043,6 +1298,59 @@ module Google
           property :update_mask, as: 'updateMask'
         end
       end
+      
+      class VersionedPackage
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :architecture, as: 'architecture'
+          property :package_name, as: 'packageName'
+          property :version, as: 'version'
+        end
+      end
+      
+      class WindowsQuickFixEngineeringPackage
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :caption, as: 'caption'
+          property :description, as: 'description'
+          property :hot_fix_id, as: 'hotFixId'
+          property :install_time, as: 'installTime'
+        end
+      end
+      
+      class WindowsUpdateCategory
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :id, as: 'id'
+          property :name, as: 'name'
+        end
+      end
+      
+      class WindowsUpdatePackage
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :categories, as: 'categories', class: Google::Apis::CloudassetV1::WindowsUpdateCategory, decorator: Google::Apis::CloudassetV1::WindowsUpdateCategory::Representation
+      
+          property :description, as: 'description'
+          collection :kb_article_ids, as: 'kbArticleIds'
+          property :last_deployment_change_time, as: 'lastDeploymentChangeTime'
+          collection :more_info_urls, as: 'moreInfoUrls'
+          property :revision_number, as: 'revisionNumber'
+          property :support_url, as: 'supportUrl'
+          property :title, as: 'title'
+          property :update_id, as: 'updateId'
+        end
+      end
+      
+      class ZypperPatch
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :category, as: 'category'
+          property :patch_name, as: 'patchName'
+          property :severity, as: 'severity'
+          property :summary, as: 'summary'
+        end
+      end
     end
   end
 end

data/generated/google/apis/cloudasset_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20201030'
+      REVISION = '20201211'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1beta1/classes.rb

@@ -230,11 +230,6 @@ module Google
       class Binding
         include Google::Apis::Core::Hashable
       
-        # 
-        # Corresponds to the JSON property `bindingId`
-        # @return [String]
-        attr_accessor :binding_id
-      
         # Represents a textual expression in the Common Expression Language (CEL) syntax.
         # CEL is a C-like expression language. The syntax and semantics of CEL are
         # documented at https://github.com/google/cel-spec. Example (Comparison): title:
@@ -296,7 +291,6 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @binding_id = args[:binding_id] if args.key?(:binding_id)
           @condition = args[:condition] if args.key?(:condition)
           @members = args[:members] if args.key?(:members)
           @role = args[:role] if args.key?(:role)
@@ -810,6 +804,36 @@ module Google
         end
       end
       
+      # Identification for an API Operation.
+      class GoogleIdentityAccesscontextmanagerV1ApiOperation
+        include Google::Apis::Core::Hashable
+      
+        # API methods or permissions to allow. Method or permission must belong to the
+        # service specified by `service_name` field. A single MethodSelector entry with `
+        # *` specified for the `method` field will allow all methods AND permissions for
+        # the service specified in `service_name`.
+        # Corresponds to the JSON property `methodSelectors`
+        # @return [Array<Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1MethodSelector>]
+        attr_accessor :method_selectors
+      
+        # The name of the API whose methods or permissions the IngressPolicy or
+        # EgressPolicy want to allow. A single ApiOperation with `service_name` field
+        # set to `*` will allow all methods AND permissions for all services.
+        # Corresponds to the JSON property `serviceName`
+        # @return [String]
+        attr_accessor :service_name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @method_selectors = args[:method_selectors] if args.key?(:method_selectors)
+          @service_name = args[:service_name] if args.key?(:service_name)
+        end
+      end
+      
       # `BasicLevel` is an `AccessLevel` using a set of recommended features.
       class GoogleIdentityAccesscontextmanagerV1BasicLevel
         include Google::Apis::Core::Hashable
@@ -1009,6 +1033,286 @@ module Google
         end
       end
       
+      # Defines the conditions under which an EgressPolicy matches a request.
+      # Conditions based on information about the source of the request. Note that if
+      # the destination of the request is protected by a ServicePerimeter, then that
+      # ServicePerimeter must have an IngressPolicy which allows access in order for
+      # this request to succeed.
+      class GoogleIdentityAccesscontextmanagerV1EgressFrom
+        include Google::Apis::Core::Hashable
+      
+        # A list of identities that are allowed access through this [EgressPolicy].
+        # Should be in the format of email address. The email address should represent
+        # individual user or service account only.
+        # Corresponds to the JSON property `identities`
+        # @return [Array<String>]
+        attr_accessor :identities
+      
+        # Specifies the type of identities that are allowed access to outside the
+        # perimeter. If left unspecified, then members of `identities` field will be
+        # allowed access.
+        # Corresponds to the JSON property `identityType`
+        # @return [String]
+        attr_accessor :identity_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @identities = args[:identities] if args.key?(:identities)
+          @identity_type = args[:identity_type] if args.key?(:identity_type)
+        end
+      end
+      
+      # Policy for egress from perimeter. EgressPolicies match requests based on `
+      # egress_from` and `egress_to` stanzas. For an EgressPolicy to match, both `
+      # egress_from` and `egress_to` stanzas must be matched. If an EgressPolicy
+      # matches a request, the request is allowed to span the ServicePerimeter
+      # boundary. For example, an EgressPolicy can be used to allow VMs on networks
+      # within the ServicePerimeter to access a defined set of projects outside the
+      # perimeter in certain contexts (e.g. to read data from a Cloud Storage bucket
+      # or query against a BigQuery dataset). EgressPolicies are concerned with the *
+      # resources* that a request relates as well as the API services and API actions
+      # being used. They do not related to the direction of data movement. More
+      # detailed documentation for this concept can be found in the descriptions of
+      # EgressFrom and EgressTo.
+      class GoogleIdentityAccesscontextmanagerV1EgressPolicy
+        include Google::Apis::Core::Hashable
+      
+        # Defines the conditions under which an EgressPolicy matches a request.
+        # Conditions based on information about the source of the request. Note that if
+        # the destination of the request is protected by a ServicePerimeter, then that
+        # ServicePerimeter must have an IngressPolicy which allows access in order for
+        # this request to succeed.
+        # Corresponds to the JSON property `egressFrom`
+        # @return [Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1EgressFrom]
+        attr_accessor :egress_from
+      
+        # Defines the conditions under which an EgressPolicy matches a request.
+        # Conditions are based on information about the ApiOperation intended to be
+        # performed on the `resources` specified. Note that if the destination of the
+        # request is protected by a ServicePerimeter, then that ServicePerimeter must
+        # have an IngressPolicy which allows access in order for this request to succeed.
+        # Corresponds to the JSON property `egressTo`
+        # @return [Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1EgressTo]
+        attr_accessor :egress_to
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @egress_from = args[:egress_from] if args.key?(:egress_from)
+          @egress_to = args[:egress_to] if args.key?(:egress_to)
+        end
+      end
+      
+      # Defines the conditions under which an EgressPolicy matches a request.
+      # Conditions are based on information about the ApiOperation intended to be
+      # performed on the `resources` specified. Note that if the destination of the
+      # request is protected by a ServicePerimeter, then that ServicePerimeter must
+      # have an IngressPolicy which allows access in order for this request to succeed.
+      class GoogleIdentityAccesscontextmanagerV1EgressTo
+        include Google::Apis::Core::Hashable
+      
+        # A list of ApiOperations that this egress rule applies to. A request matches if
+        # it contains an operation/service in this list.
+        # Corresponds to the JSON property `operations`
+        # @return [Array<Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ApiOperation>]
+        attr_accessor :operations
+      
+        # A list of resources, currently only projects in the form `projects/`, that
+        # match this to stanza. A request matches if it contains a resource in this list.
+        # If `*` is specified for resources, then this EgressTo rule will authorize
+        # access to all resources outside the perimeter.
+        # Corresponds to the JSON property `resources`
+        # @return [Array<String>]
+        attr_accessor :resources
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @operations = args[:operations] if args.key?(:operations)
+          @resources = args[:resources] if args.key?(:resources)
+        end
+      end
+      
+      # Defines the conditions under which an IngressPolicy matches a request.
+      # Conditions are based on information about the source of the request.
+      class GoogleIdentityAccesscontextmanagerV1IngressFrom
+        include Google::Apis::Core::Hashable
+      
+        # A list of identities that are allowed access through this ingress policy.
+        # Should be in the format of email address. The email address should represent
+        # individual user or service account only.
+        # Corresponds to the JSON property `identities`
+        # @return [Array<String>]
+        attr_accessor :identities
+      
+        # Specifies the type of identities that are allowed access from outside the
+        # perimeter. If left unspecified, then members of `identities` field will be
+        # allowed access.
+        # Corresponds to the JSON property `identityType`
+        # @return [String]
+        attr_accessor :identity_type
+      
+        # Sources that this IngressPolicy authorizes access from.
+        # Corresponds to the JSON property `sources`
+        # @return [Array<Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1IngressSource>]
+        attr_accessor :sources
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @identities = args[:identities] if args.key?(:identities)
+          @identity_type = args[:identity_type] if args.key?(:identity_type)
+          @sources = args[:sources] if args.key?(:sources)
+        end
+      end
+      
+      # Policy for ingress into ServicePerimeter. IngressPolicies match requests based
+      # on `ingress_from` and `ingress_to` stanzas. For an ingress policy to match,
+      # both the `ingress_from` and `ingress_to` stanzas must be matched. If an
+      # IngressPolicy matches a request, the request is allowed through the perimeter
+      # boundary from outside the perimeter. For example, access from the internet can
+      # be allowed either based on an AccessLevel or, for traffic hosted on Google
+      # Cloud, the project of the source network. For access from private networks,
+      # using the project of the hosting network is required. Individual ingress
+      # policies can be limited by restricting which services and/or actions they
+      # match using the `ingress_to` field.
+      class GoogleIdentityAccesscontextmanagerV1IngressPolicy
+        include Google::Apis::Core::Hashable
+      
+        # Defines the conditions under which an IngressPolicy matches a request.
+        # Conditions are based on information about the source of the request.
+        # Corresponds to the JSON property `ingressFrom`
+        # @return [Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1IngressFrom]
+        attr_accessor :ingress_from
+      
+        # Defines the conditions under which an IngressPolicy matches a request.
+        # Conditions are based on information about the ApiOperation intended to be
+        # performed on the destination of the request.
+        # Corresponds to the JSON property `ingressTo`
+        # @return [Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1IngressTo]
+        attr_accessor :ingress_to
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @ingress_from = args[:ingress_from] if args.key?(:ingress_from)
+          @ingress_to = args[:ingress_to] if args.key?(:ingress_to)
+        end
+      end
+      
+      # The source that IngressPolicy authorizes access from.
+      class GoogleIdentityAccesscontextmanagerV1IngressSource
+        include Google::Apis::Core::Hashable
+      
+        # An AccessLevel resource name that allow resources within the ServicePerimeters
+        # to be accessed from the internet. AccessLevels listed must be in the same
+        # policy as this ServicePerimeter. Referencing a nonexistent AccessLevel will
+        # cause an error. If no AccessLevel names are listed, resources within the
+        # perimeter can only be accessed via Google Cloud calls with request origins
+        # within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`
+        # . If `*` is specified, then all IngressSources will be allowed.
+        # Corresponds to the JSON property `accessLevel`
+        # @return [String]
+        attr_accessor :access_level
+      
+        # A Google Cloud resource that is allowed to ingress the perimeter. Requests
+        # from these resources will be allowed to access perimeter data. Currently only
+        # projects are allowed. Format: `projects/`project_number`` The project may be
+        # in any Google Cloud organization, not just the organization that the perimeter
+        # is defined in. `*` is not allowed, the case of allowing all Google Cloud
+        # resources only is not supported.
+        # Corresponds to the JSON property `resource`
+        # @return [String]
+        attr_accessor :resource
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @access_level = args[:access_level] if args.key?(:access_level)
+          @resource = args[:resource] if args.key?(:resource)
+        end
+      end
+      
+      # Defines the conditions under which an IngressPolicy matches a request.
+      # Conditions are based on information about the ApiOperation intended to be
+      # performed on the destination of the request.
+      class GoogleIdentityAccesscontextmanagerV1IngressTo
+        include Google::Apis::Core::Hashable
+      
+        # A list of ApiOperations the sources specified in corresponding IngressFrom are
+        # allowed to perform in this ServicePerimeter.
+        # Corresponds to the JSON property `operations`
+        # @return [Array<Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1ApiOperation>]
+        attr_accessor :operations
+      
+        # A list of resources, currently only projects in the form `projects/`,
+        # protected by this ServicePerimeter that are allowed to be accessed by sources
+        # defined in the corresponding IngressFrom. A request matches if it contains a
+        # resource in this list. If `*` is specified for resources, then this IngressTo
+        # rule will authorize access to all resources inside the perimeter, provided
+        # that the request also matches the `operations` field.
+        # Corresponds to the JSON property `resources`
+        # @return [Array<String>]
+        attr_accessor :resources
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @operations = args[:operations] if args.key?(:operations)
+          @resources = args[:resources] if args.key?(:resources)
+        end
+      end
+      
+      # An allowed method or permission of a service specified in ApiOperation.
+      class GoogleIdentityAccesscontextmanagerV1MethodSelector
+        include Google::Apis::Core::Hashable
+      
+        # Value for `method` should be a valid method name for the corresponding `
+        # service_name` in ApiOperation. If `*` used as value for `method`, then ALL
+        # methods and permissions are allowed.
+        # Corresponds to the JSON property `method`
+        # @return [String]
+        attr_accessor :method_prop
+      
+        # Value for `permission` should be a valid Cloud IAM permission for the
+        # corresponding `service_name` in ApiOperation.
+        # Corresponds to the JSON property `permission`
+        # @return [String]
+        attr_accessor :permission
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @method_prop = args[:method_prop] if args.key?(:method_prop)
+          @permission = args[:permission] if args.key?(:permission)
+        end
+      end
+      
       # A restriction on the OS type and version of devices making requests.
       class GoogleIdentityAccesscontextmanagerV1OsConstraint
         include Google::Apis::Core::Hashable
@@ -1142,6 +1446,20 @@ module Google
         # @return [Array<String>]
         attr_accessor :access_levels
       
+        # List of EgressPolicies to apply to the perimeter. A perimeter may have
+        # multiple EgressPolicies, each of which is evaluated separately. Access is
+        # granted if any EgressPolicy grants it. Must be empty for a perimeter bridge.
+        # Corresponds to the JSON property `egressPolicies`
+        # @return [Array<Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1EgressPolicy>]
+        attr_accessor :egress_policies
+      
+        # List of IngressPolicies to apply to the perimeter. A perimeter may have
+        # multiple IngressPolicies, each of which is evaluated separately. Access is
+        # granted if any Ingress Policy grants it. Must be empty for a perimeter bridge.
+        # Corresponds to the JSON property `ingressPolicies`
+        # @return [Array<Google::Apis::CloudassetV1beta1::GoogleIdentityAccesscontextmanagerV1IngressPolicy>]
+        attr_accessor :ingress_policies
+      
         # A list of Google Cloud resources that are inside of the service perimeter.
         # Currently only projects are allowed. Format: `projects/`project_number``
         # Corresponds to the JSON property `resources`
@@ -1167,6 +1485,8 @@ module Google
         # Update properties of this object
         def update!(**args)
           @access_levels = args[:access_levels] if args.key?(:access_levels)
+          @egress_policies = args[:egress_policies] if args.key?(:egress_policies)
+          @ingress_policies = args[:ingress_policies] if args.key?(:ingress_policies)
           @resources = args[:resources] if args.key?(:resources)
           @restricted_services = args[:restricted_services] if args.key?(:restricted_services)
           @vpc_accessible_services = args[:vpc_accessible_services] if args.key?(:vpc_accessible_services)