google-apis-accesscontextmanager_v1 0.71.0 → 0.73.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d9c894aa3dc893e03bd14b82eeeff79fa992b46347d0ec52f515cb3082e6589
-  data.tar.gz: 61d6a3620f8f5f4da1d8964e01b5339ce9cbba97b58d6bacb7208a4b7d0e9132
+  metadata.gz: 8db388027e0202d59a487c820507b0f7f173ee57896b30407c4fb335e5cb79c6
+  data.tar.gz: bcdc79e07801c7b2f765e0458582b9782d9834ee42cf0e919cdebce5a5309e0f
 SHA512:
-  metadata.gz: f4da9a8f904f0748db409506438ed6043fc1c57243d7196cc16b094b67362d02d98fd51eacaabe67df285c32c326a0bdb3a6e75fd7575c3029bfcf0f0088a635
-  data.tar.gz: e4129af6209eab7c20721c77734d0ffea2f47ec5a9eb3ee624b2790b66a9e1dddc10be31834712369ec7a40bf92ca8ecfe44ae516d54458756ed5ee9a7b22c33
+  metadata.gz: c4bd9199259a17aaff32a6433a01cc1ab71cca185f7c62d20819764184cfa58fdb30b001dd83ce52024ca5823311eaef0baa9b1d2e3a2c766a7a21f9e6501a09
+  data.tar.gz: 37ddbff268fbd714590e7b39ef9d5bf103109ee7b7857bf76fbb047f3c5a8f9695ee4a51d58fb374f69719402de5e1ff5b25fa545446c170bfb7d9d5d8f62708

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-accesscontextmanager_v1
 
+### v0.73.0 (2026-09-06)
+
+* Regenerated from discovery document revision 20260827
+
+### v0.72.0 (2026-08-23)
+
+* Regenerated from discovery document revision 20260819
+
 ### v0.71.0 (2026-08-16)
 
 * Regenerated from discovery document revision 20260809

data/lib/google/apis/accesscontextmanager_v1/classes.rb

@@ -563,7 +563,8 @@ module Google
         # @return [Google::Apis::AccesscontextmanagerV1::Application]
         attr_accessor :restricted_client_application
       
-        # A GCP project which contains applications and resources that users can access.
+        # A Google Cloud project which contains applications and resources that users
+        # can access.
         # Corresponds to the JSON property `restrictedProject`
         # @return [Google::Apis::AccesscontextmanagerV1::Project]
         attr_accessor :restricted_project
@@ -1119,16 +1120,8 @@ module Google
         # @return [Google::Apis::AccesscontextmanagerV1::Principal]
         attr_accessor :principal
       
-        # Optional. Deprecated: Use `scoped_access_settings` instead. A list of
-        # applications that are subject to this binding's restrictions. If the list is
-        # empty, the binding restrictions will universally apply to all applications.
-        # Corresponds to the JSON property `restrictedClientApplications`
-        # @return [Array<Google::Apis::AccesscontextmanagerV1::Application>]
-        attr_accessor :restricted_client_applications
-      
         # Optional. A list of scoped access settings that set this binding's
-        # restrictions on a subset of applications. This field cannot be set if
-        # restricted_client_applications is set.
+        # restrictions on a subset of applications.
         # Corresponds to the JSON property `scopedAccessSettings`
         # @return [Array<Google::Apis::AccesscontextmanagerV1::ScopedAccessSettings>]
         attr_accessor :scoped_access_settings
@@ -1151,7 +1144,6 @@ module Google
           @group_key = args[:group_key] if args.key?(:group_key)
           @name = args[:name] if args.key?(:name)
           @principal = args[:principal] if args.key?(:principal)
-          @restricted_client_applications = args[:restricted_client_applications] if args.key?(:restricted_client_applications)
           @scoped_access_settings = args[:scoped_access_settings] if args.key?(:scoped_access_settings)
           @session_settings = args[:session_settings] if args.key?(:session_settings)
         end
@@ -1604,6 +1596,49 @@ module Google
         end
       end
       
+      # A configured service perimeter returned by Access Context Manager.
+      class LookupConfiguredServicePerimeterResponse
+        include Google::Apis::Core::Hashable
+      
+        # The resource (e.g. "projects/123", "folders/456") that directly owns/is
+        # restricted by the enforced perimeter.
+        # Corresponds to the JSON property `restrictedResource`
+        # @return [String]
+        attr_accessor :restricted_resource
+      
+        # The resource (e.g. "projects/123", "folders/456") that directly owns/is
+        # restricted by the dry-run perimeter.
+        # Corresponds to the JSON property `restrictedResourceDryRun`
+        # @return [String]
+        attr_accessor :restricted_resource_dry_run
+      
+        # Fully qualified name of the configured enforced perimeter. Format: `
+        # accessPolicies/`policy_id`/servicePerimeters/`perimeter_name`` This field is
+        # empty if no enforced perimeter applies.
+        # Corresponds to the JSON property `servicePerimeter`
+        # @return [String]
+        attr_accessor :service_perimeter
+      
+        # Fully qualified name of the configured dry-run perimeter. Format: `
+        # accessPolicies/`policy_id`/servicePerimeters/`perimeter_name`` This field is
+        # empty if no dry-run perimeter configuration applies.
+        # Corresponds to the JSON property `servicePerimeterDryRun`
+        # @return [String]
+        attr_accessor :service_perimeter_dry_run
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @restricted_resource = args[:restricted_resource] if args.key?(:restricted_resource)
+          @restricted_resource_dry_run = args[:restricted_resource_dry_run] if args.key?(:restricted_resource_dry_run)
+          @service_perimeter = args[:service_perimeter] if args.key?(:service_perimeter)
+          @service_perimeter_dry_run = args[:service_perimeter_dry_run] if args.key?(:service_perimeter_dry_run)
+        end
+      end
+      
       # An allowed method or permission of a service specified in ApiOperation.
       class MethodSelector
         include Google::Apis::Core::Hashable
@@ -1851,12 +1886,18 @@ module Google
       class Principal
         include Google::Apis::Core::Hashable
       
-        # Immutable. IAM federated principal name to assign policies to workforce/
-        # workload federated identities. Can be principal set or single principal, here
-        # are some examples: Single principal: principal://iam.googleapis.com/projects/`
-        # project_number`/locations/global/workloadIdentityPools/`pool_id`/subject/`
-        # subject_attribute_value` PrincipalSet: principalSet://iam.googleapis.com/
-        # projects/`project_number`/locations/global/workloadIdentityPools/`pool_id`/*
+        # Immutable. The IAM principal identifier of the federated workforce or workload
+        # to assign the policy to. Examples include the following: * Single principal: `
+        # principal://iam.googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/subject/`subject_attribute_value`` * All
+        # workloads in a workload identity pool: `principalSet://iam.googleapis.com/
+        # projects/`project_number`/locations/global/workloadIdentityPools/`pool_id`/*` *
+        # All Workforce Pools in a Google Cloud organization: `principalSet://
+        # cloudresourcemanager.googleapis.com/organizations/`organization_id`/type/
+        # WorkforcePool` Bindings created for all Workforce Pools in a Google Cloud
+        # organization support only `scoped_access_settings` with the `
+        # restricted_project` client scope and active `session_settings`. No other
+        # configurations are allowed.
         # Corresponds to the JSON property `federatedPrincipal`
         # @return [String]
         attr_accessor :federated_principal
@@ -1910,12 +1951,13 @@ module Google
         end
       end
       
-      # A GCP project which contains applications and resources that users can access.
+      # A Google Cloud project which contains applications and resources that users
+      # can access.
       class Project
         include Google::Apis::Core::Hashable
       
-        # The GCP project resource name. Format: "projects/`project_number`" (Only the
-        # numeric project name variation is supported). Example: "projects/1234567890"
+        # The Google Cloud project resource name. Format: `projects/`project_number``.
+        # Only the project number is supported. Example: `projects/1234567890`
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -2270,11 +2312,11 @@ module Google
         attr_accessor :max_inactivity
       
         # Optional. The session length. Setting this field to zero allows for sessions
-        # that are active indefinitely. Also, setting `session_length_enabled` to false
-        # disregards session limits, which means that sessions never expire. If
-        # use_oidc_max_age is true, for OIDC apps, the session length will be the
-        # minimum of this field and the OIDC max_age param. If this field is set to zero,
-        # `session_length_enabled` must be set to false or left unset.
+        # that are active indefinitely. Also, setting `session_length_enabled` to `false`
+        # disregards session limits, which means that sessions never expire. If `
+        # use_oidc_max_age` is `true`, for OIDC apps, the session length will be the
+        # minimum of this field and the OIDC `max_age` param. If this field is set to
+        # zero, `session_length_enabled` must be set to `false` or left unset.
         # Corresponds to the JSON property `sessionLength`
         # @return [String]
         attr_accessor :session_length

data/lib/google/apis/accesscontextmanager_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module AccesscontextmanagerV1
       # Version of the google-apis-accesscontextmanager_v1 gem
-      GEM_VERSION = "0.71.0"
+      GEM_VERSION = "0.73.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.19.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20260809"
+      REVISION = "20260827"
     end
   end
 end

data/lib/google/apis/accesscontextmanager_v1/representations.rb

@@ -274,6 +274,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class LookupConfiguredServicePerimeterResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class MethodSelector
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -678,8 +684,6 @@ module Google
           property :name, as: 'name'
           property :principal, as: 'principal', class: Google::Apis::AccesscontextmanagerV1::Principal, decorator: Google::Apis::AccesscontextmanagerV1::Principal::Representation
       
-          collection :restricted_client_applications, as: 'restrictedClientApplications', class: Google::Apis::AccesscontextmanagerV1::Application, decorator: Google::Apis::AccesscontextmanagerV1::Application::Representation
-      
           collection :scoped_access_settings, as: 'scopedAccessSettings', class: Google::Apis::AccesscontextmanagerV1::ScopedAccessSettings, decorator: Google::Apis::AccesscontextmanagerV1::ScopedAccessSettings::Representation
       
           property :session_settings, as: 'sessionSettings', class: Google::Apis::AccesscontextmanagerV1::SessionSettings, decorator: Google::Apis::AccesscontextmanagerV1::SessionSettings::Representation
@@ -821,6 +825,16 @@ module Google
         end
       end
       
+      class LookupConfiguredServicePerimeterResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :restricted_resource, as: 'restrictedResource'
+          property :restricted_resource_dry_run, as: 'restrictedResourceDryRun'
+          property :service_perimeter, as: 'servicePerimeter'
+          property :service_perimeter_dry_run, as: 'servicePerimeterDryRun'
+        end
+      end
+      
       class MethodSelector
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/accesscontextmanager_v1/service.rb

@@ -924,6 +924,9 @@ module Google
         # @param [String] name
         #   Required. Resource name for the Service Perimeter. Format: `accessPolicies/`
         #   policy_id`/servicePerimeters/`service_perimeters_id``
+        # @param [String] deleted_principal_syntax
+        #   Optional. If true, the response will contain the deleted principal syntax for
+        #   identities that support it.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -941,11 +944,12 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_access_policy_service_perimeter(name, fields: nil, quota_user: nil, options: nil, &block)
+        def get_access_policy_service_perimeter(name, deleted_principal_syntax: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
           command.response_representation = Google::Apis::AccesscontextmanagerV1::ServicePerimeter::Representation
           command.response_class = Google::Apis::AccesscontextmanagerV1::ServicePerimeter
           command.params['name'] = name unless name.nil?
+          command.query['deletedPrincipalSyntax'] = deleted_principal_syntax unless deleted_principal_syntax.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
@@ -955,6 +959,9 @@ module Google
         # @param [String] parent
         #   Required. Resource name for the access policy to list Service Perimeters from.
         #   Format: `accessPolicies/`policy_id``
+        # @param [String] deleted_principal_syntax
+        #   Optional. If true, the response will contain the deleted principal syntax for
+        #   identities that support it.
         # @param [Fixnum] page_size
         #   Number of Service Perimeters to include in the list. Default 100.
         # @param [String] page_token
@@ -977,11 +984,12 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_access_policy_service_perimeters(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def list_access_policy_service_perimeters(parent, deleted_principal_syntax: nil, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+parent}/servicePerimeters', options)
           command.response_representation = Google::Apis::AccesscontextmanagerV1::ListServicePerimetersResponse::Representation
           command.response_class = Google::Apis::AccesscontextmanagerV1::ListServicePerimetersResponse
           command.params['parent'] = parent unless parent.nil?
+          command.query['deletedPrincipalSyntax'] = deleted_principal_syntax unless deleted_principal_syntax.nil?
           command.query['pageSize'] = page_size unless page_size.nil?
           command.query['pageToken'] = page_token unless page_token.nil?
           command.query['fields'] = fields unless fields.nil?
@@ -999,6 +1007,10 @@ module Google
         #   component must begin with a letter, followed by alphanumeric characters or `_`.
         #   After you create a `ServicePerimeter`, you cannot change its `name`.
         # @param [Google::Apis::AccesscontextmanagerV1::ServicePerimeter] service_perimeter_object
+        # @param [String] deleted_principal_syntax
+        #   Optional. If true, the response will contain the deleted principal syntax for
+        #   identities that support it and the request can contain identities with deleted
+        #   principal syntax.
         # @param [String] update_mask
         #   Required. Mask to control which fields get updated. Must be non-empty.
         # @param [String] fields
@@ -1018,13 +1030,14 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_access_policy_service_perimeter(name, service_perimeter_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def patch_access_policy_service_perimeter(name, service_perimeter_object = nil, deleted_principal_syntax: nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:patch, 'v1/{+name}', options)
           command.request_representation = Google::Apis::AccesscontextmanagerV1::ServicePerimeter::Representation
           command.request_object = service_perimeter_object
           command.response_representation = Google::Apis::AccesscontextmanagerV1::Operation::Representation
           command.response_class = Google::Apis::AccesscontextmanagerV1::Operation
           command.params['name'] = name unless name.nil?
+          command.query['deletedPrincipalSyntax'] = deleted_principal_syntax unless deleted_principal_syntax.nil?
           command.query['updateMask'] = update_mask unless update_mask.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
@@ -1110,6 +1123,37 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Looks up the configured service perimeter for a given resource Format: ['
+        # projects/`projectNumber`', 'folders/`folderNumber`'].
+        # @param [String] resource
+        #   Required. The Resource to resolve (e.g. "projects/123", "folders/456").
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def lookup_folder_configured_service_perimeter(resource, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+resource}:lookupConfiguredServicePerimeter', options)
+          command.response_representation = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse::Representation
+          command.response_class = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Starts asynchronous cancellation on a long-running operation. The server makes
         # a best effort to cancel the operation, but success is not guaranteed. If the
         # server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`.
@@ -1498,6 +1542,37 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Looks up the configured service perimeter for a given resource Format: ['
+        # projects/`projectNumber`', 'folders/`folderNumber`'].
+        # @param [String] resource
+        #   Required. The Resource to resolve (e.g. "projects/123", "folders/456").
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def lookup_project_configured_service_perimeter(resource, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+resource}:lookupConfiguredServicePerimeter', options)
+          command.response_representation = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse::Representation
+          command.response_class = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Returns a VPC-SC supported service based on the service name. **IAM
         # Permissions**: Requires the following IAM permissions to use this method: - `
         # serviceusage.services.use` on the project.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-accesscontextmanager_v1
 version: !ruby/object:Gem::Version
-  version: 0.71.0
+  version: 0.73.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-accesscontextmanager_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-accesscontextmanager_v1/v0.71.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-accesscontextmanager_v1/v0.73.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-accesscontextmanager_v1
 rdoc_options: []
 require_paths: