google-apis-cloudasset_v1 0.24.0 → 0.28.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 415a8e4ae7683d4e8b98f17ee656c787f06e022557612cc2e36afb185414b515
-  data.tar.gz: 2ecd65c8ecf64fadd28de90e03c991a6db37090c206b827b6c7054efb921a4a8
+  metadata.gz: d6d1413abc624c212f5d07a5d16d606cc56694af0e785a2f07c62d82ba651aea
+  data.tar.gz: 61ec011e8f7da6a95aaaa73419ae333cb21eca868ea2706d5e6629e53090201e
 SHA512:
-  metadata.gz: 2dca13d4a6d954fd0f8244262dc4dbf340d783cfa9d34f0a5f9b7581ac667ff00c3f24e97c8f90d232bffa6274b4aed8f868ddb4ee0b15e3adc485b19f60c8ee
-  data.tar.gz: 470b9f34f6d8604e00ea85b8d08132e670fc6a84d50ba3c8feed277ea2230784e57946eee13439e5d35a09e638ca193a28ac95bbb46f5efd26fd37a4c8e97acd
+  metadata.gz: 2e2255b8e8e5eec1ed8cb2bbbee564acdd8438a9be82e00a517b819d349d34730e8616c3ad0c507d67913c574e01a95aa0bd5a92cf0cf72bc53617fb09e0e634
+  data.tar.gz: c4b9abfe59dec198240a83b47127297c41495057c55acb2bb4c278a43564c9d32b81c7f487deaf36c449a480f1ffb54109fe7a4f1c1f0c72df3e039c314a0b54

data/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Release history for google-apis-cloudasset_v1
 
+### v0.28.0 (2022-02-16)
+
+* Regenerated from discovery document revision 20220211
+
+### v0.27.0 (2022-02-03)
+
+* Regenerated from discovery document revision 20220131
+
+### v0.26.0 (2022-01-26)
+
+* Regenerated from discovery document revision 20220121
+
+### v0.25.0 (2022-01-19)
+
+* Regenerated from discovery document revision 20220114
+
 ### v0.24.0 (2022-01-12)
 
 * Regenerated from discovery document revision 20220110

data/lib/google/apis/cloudasset_v1/classes.rb

@@ -449,6 +449,28 @@ module Google
         end
       end
       
+      # A response message for AssetService.BatchGetEffectiveIamPolicies.
+      class BatchGetEffectiveIamPoliciesResponse
+        include Google::Apis::Core::Hashable
+      
+        # The effective policies for a batch of resources. Note that the results order
+        # is the same as the order of BatchGetEffectiveIamPoliciesRequest.names. When a
+        # resource does not have any effective IAM policies, its corresponding
+        # policy_result will contain empty EffectiveIamPolicy.policies.
+        # Corresponds to the JSON property `policyResults`
+        # @return [Array<Google::Apis::CloudassetV1::EffectiveIamPolicy>]
+        attr_accessor :policy_results
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @policy_results = args[:policy_results] if args.key?(:policy_results)
+        end
+      end
+      
       # A BigQuery destination for exporting assets to.
       class BigQueryDestination
         include Google::Apis::Core::Hashable
@@ -664,10 +686,10 @@ module Google
       # day and time zone are either specified elsewhere or are insignificant. The
       # date is relative to the Gregorian Calendar. This can represent one of the
       # following: * A full date, with non-zero year, month, and day values * A month
-      # and day value, with a zero year, such as an anniversary * A year on its own,
-      # with zero month and day values * A year and month value, with a zero day, such
-      # as a credit card expiration date Related types are google.type.TimeOfDay and `
-      # google.protobuf.Timestamp`.
+      # and day, with a zero year (e.g., an anniversary) * A year on its own, with a
+      # zero month and a zero day * A year and month, with a zero day (e.g., a credit
+      # card expiration date) Related types: * google.type.TimeOfDay * google.type.
+      # DateTime * google.protobuf.Timestamp
       class Date
         include Google::Apis::Core::Hashable
       
@@ -701,6 +723,40 @@ module Google
         end
       end
       
+      # The effective IAM policies on one resource.
+      class EffectiveIamPolicy
+        include Google::Apis::Core::Hashable
+      
+        # The [full_resource_name] (https://cloud.google.com/asset-inventory/docs/
+        # resource-name-format) for which the policies are computed. This is one of the
+        # BatchGetEffectiveIamPoliciesRequest.names the caller provides in the request.
+        # Corresponds to the JSON property `fullResourceName`
+        # @return [String]
+        attr_accessor :full_resource_name
+      
+        # The effective policies for the full_resource_name. These policies include the
+        # policy set on the full_resource_name and those set on its parents and
+        # ancestors up to the BatchGetEffectiveIamPoliciesRequest.scope. Note that these
+        # policies are not filtered according to the resource type of the
+        # full_resource_name. These policies are hierarchically ordered by PolicyInfo.
+        # attached_resource starting from full_resource_name itself to its parents and
+        # ancestors, such that policies[i]'s PolicyInfo.attached_resource is the child
+        # of policies[i+1]'s PolicyInfo.attached_resource, if policies[i+1] exists.
+        # Corresponds to the JSON property `policies`
+        # @return [Array<Google::Apis::CloudassetV1::PolicyInfo>]
+        attr_accessor :policies
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @full_resource_name = args[:full_resource_name] if args.key?(:full_resource_name)
+          @policies = args[:policies] if args.key?(:policies)
+        end
+      end
+      
       # A generic empty message that you can re-use to avoid defining duplicated empty
       # messages in your APIs. A typical example is to use it as the request or the
       # response type of an API method. For instance: service Foo ` rpc Bar(google.
@@ -877,8 +933,8 @@ module Google
         # either or both of asset_names and asset_types. Only asset updates matching
         # specified asset_names or asset_types are exported to the feed. Example: `//
         # compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`
-        # . See [Resource Names](https://cloud.google.com/apis/design/resource_names#
-        # full_resource_name) for more info.
+        # . For a list of the full names for supported asset types, see [Resource name
+        # format](/asset-inventory/docs/resource-name-format).
         # Corresponds to the JSON property `assetNames`
         # @return [Array<String>]
         attr_accessor :asset_names
@@ -886,8 +942,8 @@ module Google
         # A list of types of the assets to receive updates. You must specify either or
         # both of asset_names and asset_types. Only asset updates matching specified
         # asset_names or asset_types are exported to the feed. Example: `"compute.
-        # googleapis.com/Disk"` See [this topic](https://cloud.google.com/asset-
-        # inventory/docs/supported-asset-types) for a list of all supported asset types.
+        # googleapis.com/Disk"` For a list of all supported asset types, see [Supported
+        # asset types](/asset-inventory/docs/supported-asset-types).
         # Corresponds to the JSON property `assetTypes`
         # @return [Array<String>]
         attr_accessor :asset_types
@@ -3423,7 +3479,9 @@ module Google
         # Optional. If true, the identities section of the result will expand any Google
         # groups appearing in an IAM policy binding. If IamPolicyAnalysisQuery.
         # identity_selector is specified, the identity in the result will be determined
-        # by the selector, and this flag is not allowed to set. Default is false.
+        # by the selector, and this flag is not allowed to set. If true, the default max
+        # expansion per group is 1000 for AssetService.AnalyzeIamPolicy][]. Default is
+        # false.
         # Corresponds to the JSON property `expandGroups`
         # @return [Boolean]
         attr_accessor :expand_groups
@@ -3441,7 +3499,9 @@ module Google
         # Folder and organization resource cannot be used together with this option.
         # For example, if the request analyzes for which users have permission P on a
         # GCP project with this option enabled, the results will include all users who
-        # have permission P on that project or any lower resource. Default is false.
+        # have permission P on that project or any lower resource. If true, the default
+        # max expansion per resource is 1000 for AssetService.AnalyzeIamPolicy][] and
+        # 100000 for AssetService.AnalyzeIamPolicyLongrunning][]. Default is false.
         # Corresponds to the JSON property `expandResources`
         # @return [Boolean]
         attr_accessor :expand_resources
@@ -3707,6 +3767,57 @@ module Google
         end
       end
       
+      # The IAM policy and its attached resource.
+      class PolicyInfo
+        include Google::Apis::Core::Hashable
+      
+        # The full resource name the policy is directly attached to.
+        # Corresponds to the JSON property `attachedResource`
+        # @return [String]
+        attr_accessor :attached_resource
+      
+        # An Identity and Access Management (IAM) policy, which specifies access
+        # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
+        # A `binding` binds one or more `members`, or principals, to a single `role`.
+        # Principals can be user accounts, service accounts, Google groups, and domains (
+        # such as G Suite). A `role` is a named list of permissions; each `role` can be
+        # an IAM predefined role or a user-created custom role. For some types of Google
+        # Cloud resources, a `binding` can also specify a `condition`, which is a
+        # logical expression that allows access to a resource only if the expression
+        # evaluates to `true`. A condition can add constraints based on attributes of
+        # the request, the resource, or both. To learn which resources support
+        # conditions in their IAM policies, see the [IAM documentation](https://cloud.
+        # google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
+        # bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
+        # "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
+        # serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
+        # roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
+        # ], "condition": ` "title": "expirable access", "description": "Does not grant
+        # access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
+        # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
+        # bindings: - members: - user:mike@example.com - group:admins@example.com -
+        # domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
+        # role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
+        # com role: roles/resourcemanager.organizationViewer condition: title: expirable
+        # access description: Does not grant access after Sep 2020 expression: request.
+        # time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
+        # a description of IAM and its features, see the [IAM documentation](https://
+        # cloud.google.com/iam/docs/).
+        # Corresponds to the JSON property `policy`
+        # @return [Google::Apis::CloudassetV1::Policy]
+        attr_accessor :policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @attached_resource = args[:attached_resource] if args.key?(:attached_resource)
+          @policy = args[:policy] if args.key?(:policy)
+        end
+      end
+      
       # A Pub/Sub destination.
       class PubsubDestination
         include Google::Apis::Core::Hashable
@@ -4677,10 +4788,10 @@ module Google
         # day and time zone are either specified elsewhere or are insignificant. The
         # date is relative to the Gregorian Calendar. This can represent one of the
         # following: * A full date, with non-zero year, month, and day values * A month
-        # and day value, with a zero year, such as an anniversary * A year on its own,
-        # with zero month and day values * A year and month value, with a zero day, such
-        # as a credit card expiration date Related types are google.type.TimeOfDay and `
-        # google.protobuf.Timestamp`.
+        # and day, with a zero year (e.g., an anniversary) * A year on its own, with a
+        # zero month and a zero day * A year and month, with a zero day (e.g., a credit
+        # card expiration date) Related types: * google.type.TimeOfDay * google.type.
+        # DateTime * google.protobuf.Timestamp
         # Corresponds to the JSON property `installDate`
         # @return [Google::Apis::CloudassetV1::Date]
         attr_accessor :install_date

data/lib/google/apis/cloudasset_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudassetV1
       # Version of the google-apis-cloudasset_v1 gem
-      GEM_VERSION = "0.24.0"
+      GEM_VERSION = "0.28.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.4.1"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20220110"
+      REVISION = "20220211"
     end
   end
 end

data/lib/google/apis/cloudasset_v1/representations.rb

@@ -88,6 +88,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class BatchGetEffectiveIamPoliciesResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class BigQueryDestination
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -124,6 +130,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class EffectiveIamPolicy
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Empty
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -514,6 +526,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class PolicyInfo
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class PubsubDestination
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -775,6 +793,14 @@ module Google
         end
       end
       
+      class BatchGetEffectiveIamPoliciesResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :policy_results, as: 'policyResults', class: Google::Apis::CloudassetV1::EffectiveIamPolicy, decorator: Google::Apis::CloudassetV1::EffectiveIamPolicy::Representation
+      
+        end
+      end
+      
       class BigQueryDestination
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -829,6 +855,15 @@ module Google
         end
       end
       
+      class EffectiveIamPolicy
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :full_resource_name, as: 'fullResourceName'
+          collection :policies, as: 'policies', class: Google::Apis::CloudassetV1::PolicyInfo, decorator: Google::Apis::CloudassetV1::PolicyInfo::Representation
+      
+        end
+      end
+      
       class Empty
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1514,6 +1549,15 @@ module Google
         end
       end
       
+      class PolicyInfo
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :attached_resource, as: 'attachedResource'
+          property :policy, as: 'policy', class: Google::Apis::CloudassetV1::Policy, decorator: Google::Apis::CloudassetV1::Policy::Representation
+      
+        end
+      end
+      
       class PubsubDestination
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/cloudasset_v1/service.rb

@@ -52,10 +52,11 @@ module Google
         # Lists assets with time and resource types and returns paged results in
         # response.
         # @param [String] parent
-        #   Required. Name of the organization or project the assets belong to. Format: "
-        #   organizations/[organization-number]" (such as "organizations/123"), "projects/[
-        #   project-id]" (such as "projects/my-project-id"), or "projects/[project-number]"
-        #   (such as "projects/12345").
+        #   Required. Name of the organization, folder, or project the assets belong to.
+        #   Format: "organizations/[organization-number]" (such as "organizations/123"), "
+        #   projects/[project-id]" (such as "projects/my-project-id"), "projects/[project-
+        #   number]" (such as "projects/12345"), or "folders/[folder-number]" (such as "
+        #   folders/12345").
         # @param [Array<String>, String] asset_types
         #   A list of asset types to take a snapshot for. For example: "compute.googleapis.
         #   com/Disk". Regular expression is also supported. For example: * "compute.
@@ -130,6 +131,50 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Gets effective IAM policies for a batch of resources.
+        # @param [String] scope
+        #   Required. Only IAM policies on or below the scope will be returned. This can
+        #   only be an organization number (such as "organizations/123"), a folder number (
+        #   such as "folders/123"), a project ID (such as "projects/my-project-id"), or a
+        #   project number (such as "projects/12345"). To know how to get organization id,
+        #   visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        #   organization#retrieving_your_organization_id). To know how to get folder or
+        #   project id, visit [here ](https://cloud.google.com/resource-manager/docs/
+        #   creating-managing-folders#viewing_or_listing_folders_and_projects).
+        # @param [Array<String>, String] names
+        #   Required. The names refer to the [full_resource_names] (https://cloud.google.
+        #   com/asset-inventory/docs/resource-name-format) of [searchable asset types](
+        #   https://cloud.google.com/asset-inventory/docs/supported-asset-types#
+        #   searchable_asset_types). A maximum of 20 resources' effective policies can be
+        #   retrieved in a batch.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudassetV1::BatchGetEffectiveIamPoliciesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudassetV1::BatchGetEffectiveIamPoliciesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def batch_effective_iam_policy_get(scope, names: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+scope}/effectiveIamPolicies:batchGet', options)
+          command.response_representation = Google::Apis::CloudassetV1::BatchGetEffectiveIamPoliciesResponse::Representation
+          command.response_class = Google::Apis::CloudassetV1::BatchGetEffectiveIamPoliciesResponse
+          command.params['scope'] = scope unless scope.nil?
+          command.query['names'] = names unless names.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Creates a feed in a parent project/folder/organization to listen to its asset
         # updates.
         # @param [String] parent
@@ -584,7 +629,9 @@ module Google
         #   Optional. If true, the identities section of the result will expand any Google
         #   groups appearing in an IAM policy binding. If IamPolicyAnalysisQuery.
         #   identity_selector is specified, the identity in the result will be determined
-        #   by the selector, and this flag is not allowed to set. Default is false.
+        #   by the selector, and this flag is not allowed to set. If true, the default max
+        #   expansion per group is 1000 for AssetService.AnalyzeIamPolicy][]. Default is
+        #   false.
         # @param [Boolean] analysis_query_options_expand_resources
         #   Optional. If true and IamPolicyAnalysisQuery.resource_selector is not
         #   specified, the resource section of the result will expand any resource
@@ -598,7 +645,9 @@ module Google
         #   Folder and organization resource cannot be used together with this option.
         #   For example, if the request analyzes for which users have permission P on a
         #   GCP project with this option enabled, the results will include all users who
-        #   have permission P on that project or any lower resource. Default is false.
+        #   have permission P on that project or any lower resource. If true, the default
+        #   max expansion per resource is 1000 for AssetService.AnalyzeIamPolicy][] and
+        #   100000 for AssetService.AnalyzeIamPolicyLongrunning][]. Default is false.
         # @param [Boolean] analysis_query_options_expand_roles
         #   Optional. If true, the access section of result will expand any roles
         #   appearing in IAM policy bindings to include their permissions. If

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudasset_v1
 version: !ruby/object:Gem::Version
-  version: 0.24.0
+  version: 0.28.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-01-17 00:00:00.000000000 Z
+date: 2022-02-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudasset_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudasset_v1/v0.24.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudasset_v1/v0.28.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudasset_v1
 post_install_message: 
 rdoc_options: []