google-apis-accesscontextmanager_v1 0.72.0 → 0.74.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3ab2483d063d4e8582012f0406379dd3a67cf9b5420950833033a48b43370810
-  data.tar.gz: a5a2b7b5d024d43464781c1100419860a458d048564ea23e295b7fcdd8011963
+  metadata.gz: 19e5ec52024c8eab18f470fb8b5120f30c29f0e024c731827570587d0f3ed095
+  data.tar.gz: 1f12ba49030d41c1178ca75ed37cb6120847412de432790310b7bfba664a6c85
 SHA512:
-  metadata.gz: 61c6c502496690ab748448880ba2a3444098d449413e4ccd334299348f2adf879f258aaae4be6708addf083144928663770fd7383cdaccf72923df8dd35540f8
-  data.tar.gz: 0541f904d4ef59a271614e304e9e5c84d70b5e5790f8076212e8c505330ac0daebe7e4e2dc5b6d14bc367a5af77f2db0a06586ce18ecd6c25624ecc7e176b7db
+  metadata.gz: 672d88ed6bc0de964866b4f3a2f2cb8183e87941921f076250472c6babf4421363c0da7d14684cc8bbca9a3c202c42a556608dcd46db5e1d6cbb83e86f59ee28
+  data.tar.gz: 2fdbb683e3f3f0774ce69ab836b7e6f6ce7dc9253d32b0b54f2ab95f38c78f2e0a0fa7fe6ad899ee44e984876f04bee6f15589bb3381eef68edbc1c204fc061b

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Release history for google-apis-accesscontextmanager_v1
 
+### v0.74.0 (2026-10-21)
+
+* Regenerated from discovery document revision 20261011
+* Regenerated using generator version 0.19.1
+
+### v0.73.0 (2026-09-06)
+
+* Regenerated from discovery document revision 20260827
+
 ### v0.72.0 (2026-08-23)
 
 * Regenerated from discovery document revision 20260819

data/lib/google/apis/accesscontextmanager_v1/classes.rb

@@ -930,9 +930,9 @@ module Google
         attr_accessor :psc_endpoint
       
         # A Google Cloud resource from the service perimeter that you want to allow to
-        # access data outside the perimeter. This field supports only projects. The
-        # project format is `projects/`project_number``. You can't use `*` in this field
-        # to allow all Google Cloud resources.
+        # access data outside the perimeter. This field supports projects, folders, and
+        # organizations in the form `projects/`, `folders/`, and `organizations/`. You
+        # can't use `*` in this field to allow all Google Cloud resources.
         # Corresponds to the JSON property `resource`
         # @return [String]
         attr_accessor :resource
@@ -976,11 +976,12 @@ module Google
         # @return [Array<Google::Apis::AccesscontextmanagerV1::ApiOperation>]
         attr_accessor :operations
       
-        # A list of resources, currently only projects in the form `projects/`, that are
-        # allowed to be accessed by sources defined in the corresponding EgressFrom. A
-        # request matches if it contains a resource in this list. If `*` is specified
-        # for `resources`, then this EgressTo rule will authorize access to all
-        # resources outside the perimeter.
+        # A list of resources, currently projects, folders, and organizations in the
+        # form `projects/`, `folders/`, and `organizations/`, that are allowed to be
+        # accessed by sources defined in the corresponding EgressFrom. A request matches
+        # if it contains a resource in this list. If `*` is specified for `resources`,
+        # then this EgressTo rule will authorize access to all resources outside the
+        # perimeter.
         # Corresponds to the JSON property `resources`
         # @return [Array<String>]
         attr_accessor :resources
@@ -1120,16 +1121,8 @@ module Google
         # @return [Google::Apis::AccesscontextmanagerV1::Principal]
         attr_accessor :principal
       
-        # Optional. Deprecated: Use `scoped_access_settings` instead. A list of
-        # applications that are subject to this binding's restrictions. If the list is
-        # empty, the binding restrictions will universally apply to all applications.
-        # Corresponds to the JSON property `restrictedClientApplications`
-        # @return [Array<Google::Apis::AccesscontextmanagerV1::Application>]
-        attr_accessor :restricted_client_applications
-      
         # Optional. A list of scoped access settings that set this binding's
-        # restrictions on a subset of applications. This field cannot be set if
-        # restricted_client_applications is set.
+        # restrictions on a subset of applications.
         # Corresponds to the JSON property `scopedAccessSettings`
         # @return [Array<Google::Apis::AccesscontextmanagerV1::ScopedAccessSettings>]
         attr_accessor :scoped_access_settings
@@ -1152,7 +1145,6 @@ module Google
           @group_key = args[:group_key] if args.key?(:group_key)
           @name = args[:name] if args.key?(:name)
           @principal = args[:principal] if args.key?(:principal)
-          @restricted_client_applications = args[:restricted_client_applications] if args.key?(:restricted_client_applications)
           @scoped_access_settings = args[:scoped_access_settings] if args.key?(:scoped_access_settings)
           @session_settings = args[:session_settings] if args.key?(:session_settings)
         end
@@ -1329,12 +1321,14 @@ module Google
         attr_accessor :psc_endpoint
       
         # A Google Cloud resource that is allowed to ingress the perimeter. Requests
-        # from these resources will be allowed to access perimeter data. Currently only
-        # projects and VPCs are allowed. Project format: `projects/`project_number`` VPC
-        # network format: `//compute.googleapis.com/projects/`PROJECT_ID`/global/
-        # networks/`NAME``. The project may be in any Google Cloud organization, not
-        # just the organization that the perimeter is defined in. `*` is not allowed,
-        # the case of allowing all Google Cloud resources only is not supported.
+        # from these resources will be allowed to access perimeter data. Currently
+        # projects, folders, organizations, and VPCs are allowed. Project format: `
+        # projects/`project_number`` Folder format: `folders/`folder_id`` Organization
+        # format: `organizations/`organization_id`` VPC network format: `//compute.
+        # googleapis.com/projects/`PROJECT_ID`/global/networks/`NAME``. The project may
+        # be in any Google Cloud organization, not just the organization that the
+        # perimeter is defined in. `*` is not allowed, the case of allowing all Google
+        # Cloud resources only is not supported.
         # Corresponds to the JSON property `resource`
         # @return [String]
         attr_accessor :resource
@@ -1364,10 +1358,11 @@ module Google
         # @return [Array<Google::Apis::AccesscontextmanagerV1::ApiOperation>]
         attr_accessor :operations
       
-        # A list of resources, currently only projects in the form `projects/`,
-        # protected by this ServicePerimeter that are allowed to be accessed by sources
-        # defined in the corresponding IngressFrom. If a single `*` is specified, then
-        # access to all resources inside the perimeter are allowed.
+        # A list of resources, currently projects, folders, and organizations in the
+        # form `projects/`project_number``, `folders/`folder_id``, and `organizations/`
+        # organization_id``, protected by this ServicePerimeter that are allowed to be
+        # accessed by sources defined in the corresponding IngressFrom. If a single `*`
+        # is specified, then access to all resources inside the perimeter are allowed.
         # Corresponds to the JSON property `resources`
         # @return [Array<String>]
         attr_accessor :resources
@@ -1605,6 +1600,49 @@ module Google
         end
       end
       
+      # A configured service perimeter returned by Access Context Manager.
+      class LookupConfiguredServicePerimeterResponse
+        include Google::Apis::Core::Hashable
+      
+        # The resource (e.g. "projects/123", "folders/456") that directly owns/is
+        # restricted by the enforced perimeter.
+        # Corresponds to the JSON property `restrictedResource`
+        # @return [String]
+        attr_accessor :restricted_resource
+      
+        # The resource (e.g. "projects/123", "folders/456") that directly owns/is
+        # restricted by the dry-run perimeter.
+        # Corresponds to the JSON property `restrictedResourceDryRun`
+        # @return [String]
+        attr_accessor :restricted_resource_dry_run
+      
+        # Fully qualified name of the configured enforced perimeter. Format: `
+        # accessPolicies/`policy_id`/servicePerimeters/`perimeter_name`` This field is
+        # empty if no enforced perimeter applies.
+        # Corresponds to the JSON property `servicePerimeter`
+        # @return [String]
+        attr_accessor :service_perimeter
+      
+        # Fully qualified name of the configured dry-run perimeter. Format: `
+        # accessPolicies/`policy_id`/servicePerimeters/`perimeter_name`` This field is
+        # empty if no dry-run perimeter configuration applies.
+        # Corresponds to the JSON property `servicePerimeterDryRun`
+        # @return [String]
+        attr_accessor :service_perimeter_dry_run
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @restricted_resource = args[:restricted_resource] if args.key?(:restricted_resource)
+          @restricted_resource_dry_run = args[:restricted_resource_dry_run] if args.key?(:restricted_resource_dry_run)
+          @service_perimeter = args[:service_perimeter] if args.key?(:service_perimeter)
+          @service_perimeter_dry_run = args[:service_perimeter_dry_run] if args.key?(:service_perimeter_dry_run)
+        end
+      end
+      
       # An allowed method or permission of a service specified in ApiOperation.
       class MethodSelector
         include Google::Apis::Core::Hashable
@@ -2231,9 +2269,9 @@ module Google
         attr_accessor :ingress_policies
       
         # A list of Google Cloud resources that are inside of the service perimeter.
-        # Currently only projects and VPCs are allowed. Project format: `projects/`
-        # project_number`` VPC network format: `//compute.googleapis.com/projects/`
-        # PROJECT_ID`/global/networks/`NAME``.
+        # Currently projects, folders, and VPCs are allowed. Project format: `projects/`
+        # project_number`` Folder format: `folders/`folder_id`` VPC network format: `//
+        # compute.googleapis.com/projects/`PROJECT_ID`/global/networks/`NAME``.
         # Corresponds to the JSON property `resources`
         # @return [Array<String>]
         attr_accessor :resources

data/lib/google/apis/accesscontextmanager_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module AccesscontextmanagerV1
       # Version of the google-apis-accesscontextmanager_v1 gem
-      GEM_VERSION = "0.72.0"
+      GEM_VERSION = "0.74.0"
 
       # Version of the code generator used to generate this client
-      GENERATOR_VERSION = "0.19.0"
+      GENERATOR_VERSION = "0.19.1"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20260819"
+      REVISION = "20261011"
     end
   end
 end

data/lib/google/apis/accesscontextmanager_v1/representations.rb

@@ -274,6 +274,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class LookupConfiguredServicePerimeterResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class MethodSelector
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -678,8 +684,6 @@ module Google
           property :name, as: 'name'
           property :principal, as: 'principal', class: Google::Apis::AccesscontextmanagerV1::Principal, decorator: Google::Apis::AccesscontextmanagerV1::Principal::Representation
       
-          collection :restricted_client_applications, as: 'restrictedClientApplications', class: Google::Apis::AccesscontextmanagerV1::Application, decorator: Google::Apis::AccesscontextmanagerV1::Application::Representation
-      
           collection :scoped_access_settings, as: 'scopedAccessSettings', class: Google::Apis::AccesscontextmanagerV1::ScopedAccessSettings, decorator: Google::Apis::AccesscontextmanagerV1::ScopedAccessSettings::Representation
       
           property :session_settings, as: 'sessionSettings', class: Google::Apis::AccesscontextmanagerV1::SessionSettings, decorator: Google::Apis::AccesscontextmanagerV1::SessionSettings::Representation
@@ -821,6 +825,16 @@ module Google
         end
       end
       
+      class LookupConfiguredServicePerimeterResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :restricted_resource, as: 'restrictedResource'
+          property :restricted_resource_dry_run, as: 'restrictedResourceDryRun'
+          property :service_perimeter, as: 'servicePerimeter'
+          property :service_perimeter_dry_run, as: 'servicePerimeterDryRun'
+        end
+      end
+      
       class MethodSelector
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/accesscontextmanager_v1/service.rb

@@ -1123,6 +1123,37 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Looks up the configured service perimeter for a given resource Format: ['
+        # projects/`projectNumber`', 'folders/`folderNumber`'].
+        # @param [String] resource
+        #   Required. The Resource to resolve (e.g. "projects/123", "folders/456").
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def lookup_folder_configured_service_perimeter(resource, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+resource}:lookupConfiguredServicePerimeter', options)
+          command.response_representation = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse::Representation
+          command.response_class = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Starts asynchronous cancellation on a long-running operation. The server makes
         # a best effort to cancel the operation, but success is not guaranteed. If the
         # server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`.
@@ -1511,6 +1542,37 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Looks up the configured service perimeter for a given resource Format: ['
+        # projects/`projectNumber`', 'folders/`folderNumber`'].
+        # @param [String] resource
+        #   Required. The Resource to resolve (e.g. "projects/123", "folders/456").
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def lookup_project_configured_service_perimeter(resource, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+resource}:lookupConfiguredServicePerimeter', options)
+          command.response_representation = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse::Representation
+          command.response_class = Google::Apis::AccesscontextmanagerV1::LookupConfiguredServicePerimeterResponse
+          command.params['resource'] = resource unless resource.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Returns a VPC-SC supported service based on the service name. **IAM
         # Permissions**: Requires the following IAM permissions to use this method: - `
         # serviceusage.services.use` on the project.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-accesscontextmanager_v1
 version: !ruby/object:Gem::Version
-  version: 0.72.0
+  version: 0.74.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-accesscontextmanager_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-accesscontextmanager_v1/v0.72.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-accesscontextmanager_v1/v0.74.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-accesscontextmanager_v1
 rdoc_options: []
 require_paths: