google-apis-cloudasset_v1p7beta1 0.1.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d9137af7237d6ebd7efa85dc88754c0a458df63cfa6e2c20615f448fd0f7a742
-  data.tar.gz: 34cffd3dd83bff6741cbc856cf9c6855fd3c4050e4247ba3c03c4171e6772b23
+  metadata.gz: 9739921956adc8753a85d605b3d0efd3851ce017ab994cd0fe5d4d4363a9ece4
+  data.tar.gz: 108da848f2489c3aec7404748724085a196debc27c55890cf7a6d1a19d23559f
 SHA512:
-  metadata.gz: 542d47275687f8ed7910b3530686cb579cbd4cf545e9c85c7c3fe5208dbf133572644ae4a638b7f1ed2030adc994c0866bc08f6734923998d39b17ae2ae38b5d
-  data.tar.gz: 2b024dcd41417c33a8b21b6affeececea4d7e85092cecacd2b10e0e00ae26cd647f7a2f670286195b3b2f5a0f8ebdb453234852c8338dd3740ed7eaab699778d
+  metadata.gz: c8851d9b3255980c0ffbd1a2572b373d155f6fd67b861fbde3e1a442c20c6d49833cf5924ef1d76e07406cfdab3e52abf390e3109c32b19883e22ad2b71ae64f
+  data.tar.gz: 18004ef80e9780413ca02e5fa7045c94f41cae9e788845fb3435cc4499bc1544434d37aab5c619839fe9f5520f735ece6dcf67f5862a8485b80fb379c0b5ba0f

data/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Release history for google-apis-cloudasset_v1p7beta1
 
+### v0.6.0 (2021-04-22)
+
+* Regenerated from discovery document revision 20210416
+
+### v0.5.0 (2021-03-31)
+
+* Regenerated from discovery document revision 20210326
+
+### v0.4.0 (2021-03-09)
+
+* Regenerated from discovery document revision 20210305
+* Regenerated using generator version 0.2.0
+
+### v0.3.0 (2021-03-04)
+
+* Regenerated from discovery document revision 20210226
+
+### v0.2.0 (2021-02-11)
+
+* Regenerated from discovery document revision 20210209
+
 ### v0.1.0 (2021-02-03)
 
 * Regenerated from discovery document revision 20210129

data/lib/google/apis/cloudasset_v1p7beta1.rb

@@ -29,7 +29,7 @@ module Google
       # This is NOT the gem version.
       VERSION = 'V1p7beta1'
 
-      # View and manage your data across Google Cloud Platform services
+      # See, edit, configure, and delete your Google Cloud Platform data
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
     end
   end

data/lib/google/apis/cloudasset_v1p7beta1/classes.rb

@@ -22,142 +22,16 @@ module Google
   module Apis
     module CloudassetV1p7beta1
       
-      # An asset in Google Cloud. An asset can be any resource in the Google Cloud [
-      # resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-
-      # platform-resource-hierarchy), a resource outside the Google Cloud resource
-      # hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy
-      # (e.g. Cloud IAM policy). See [Supported asset types](https://cloud.google.com/
-      # asset-inventory/docs/supported-asset-types) for more information.
-      class Asset
+      # A response message for AssetService.AnalyzeIamPolicyLongrunning.
+      class AnalyzeIamPolicyLongrunningResponse
         include Google::Apis::Core::Hashable
       
-        # An `AccessLevel` is a label that can be applied to requests to Google Cloud
-        # services, along with a list of requirements necessary for the label to be
-        # applied.
-        # Corresponds to the JSON property `accessLevel`
-        # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1AccessLevel]
-        attr_accessor :access_level
-      
-        # `AccessPolicy` is a container for `AccessLevels` (which define the necessary
-        # attributes to use Google Cloud services) and `ServicePerimeters` (which define
-        # regions of services able to freely pass data within a perimeter). An access
-        # policy is globally visible within an organization, and the restrictions it
-        # specifies apply to all projects within an organization.
-        # Corresponds to the JSON property `accessPolicy`
-        # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1AccessPolicy]
-        attr_accessor :access_policy
-      
-        # The ancestry path of an asset in Google Cloud [resource hierarchy](https://
-        # cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy),
-        # represented as a list of relative resource names. An ancestry path starts with
-        # the closest ancestor in the hierarchy and ends at root. If the asset is a
-        # project, folder, or organization, the ancestry path starts from the asset
-        # itself. Example: `["projects/123456789", "folders/5432", "organizations/1234"]`
-        # Corresponds to the JSON property `ancestors`
-        # @return [Array<String>]
-        attr_accessor :ancestors
-      
-        # The type of the asset. Example: `compute.googleapis.com/Disk` See [Supported
-        # asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-
-        # types) for more information.
-        # Corresponds to the JSON property `assetType`
-        # @return [String]
-        attr_accessor :asset_type
-      
-        # Whether the asset has been deleted or not.
-        # Corresponds to the JSON property `deleted`
-        # @return [Boolean]
-        attr_accessor :deleted
-        alias_method :deleted?, :deleted
-      
-        # An Identity and Access Management (IAM) policy, which specifies access
-        # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
-        # A `binding` binds one or more `members` to a single `role`. Members can be
-        # user accounts, service accounts, Google groups, and domains (such as G Suite).
-        # A `role` is a named list of permissions; each `role` can be an IAM predefined
-        # role or a user-created custom role. For some types of Google Cloud resources,
-        # a `binding` can also specify a `condition`, which is a logical expression that
-        # allows access to a resource only if the expression evaluates to `true`. A
-        # condition can add constraints based on attributes of the request, the resource,
-        # or both. To learn which resources support conditions in their IAM policies,
-        # see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
-        # resource-policies). **JSON example:** ` "bindings": [ ` "role": "roles/
-        # resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "
-        # group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@
-        # appspot.gserviceaccount.com" ] `, ` "role": "roles/resourcemanager.
-        # organizationViewer", "members": [ "user:eve@example.com" ], "condition": ` "
-        # title": "expirable access", "description": "Does not grant access after Sep
-        # 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", `
-        # ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:** bindings: -
-        # members: - user:mike@example.com - group:admins@example.com - domain:google.
-        # com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/
-        # resourcemanager.organizationAdmin - members: - user:eve@example.com role:
-        # roles/resourcemanager.organizationViewer condition: title: expirable access
-        # description: Does not grant access after Sep 2020 expression: request.time <
-        # timestamp('2020-10-01T00:00:00.000Z') - etag: BwWWja0YfJA= - version: 3 For a
-        # description of IAM and its features, see the [IAM documentation](https://cloud.
-        # google.com/iam/docs/).
-        # Corresponds to the JSON property `iamPolicy`
-        # @return [Google::Apis::CloudassetV1p7beta1::Policy]
-        attr_accessor :iam_policy
-      
-        # The full name of the asset. Example: `//compute.googleapis.com/projects/
-        # my_project_123/zones/zone1/instances/instance1` See [Resource names](https://
-        # cloud.google.com/apis/design/resource_names#full_resource_name) for more
-        # information.
-        # Corresponds to the JSON property `name`
-        # @return [String]
-        attr_accessor :name
-      
-        # A representation of an [organization policy](https://cloud.google.com/resource-
-        # manager/docs/organization-policy/overview#organization_policy). There can be
-        # more than one organization policy with different constraints set on a given
-        # resource.
-        # Corresponds to the JSON property `orgPolicy`
-        # @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleCloudOrgpolicyV1Policy>]
-        attr_accessor :org_policy
-      
-        # A representation of a Google Cloud resource.
-        # Corresponds to the JSON property `resource`
-        # @return [Google::Apis::CloudassetV1p7beta1::Resource]
-        attr_accessor :resource
-      
-        # `ServicePerimeter` describes a set of Google Cloud resources which can freely
-        # import and export data amongst themselves, but not export outside of the `
-        # ServicePerimeter`. If a request with a source within this `ServicePerimeter`
-        # has a target outside of the `ServicePerimeter`, the request will be blocked.
-        # Otherwise the request is allowed. There are two types of Service Perimeter -
-        # Regular and Bridge. Regular Service Perimeters cannot overlap, a single Google
-        # Cloud project can only belong to a single regular Service Perimeter. Service
-        # Perimeter Bridges can contain only Google Cloud projects as members, a single
-        # Google Cloud project may belong to multiple Service Perimeter Bridges.
-        # Corresponds to the JSON property `servicePerimeter`
-        # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter]
-        attr_accessor :service_perimeter
-      
-        # The last update timestamp of an asset. update_time is updated when create/
-        # update/delete operation is performed.
-        # Corresponds to the JSON property `updateTime`
-        # @return [String]
-        attr_accessor :update_time
-      
         def initialize(**args)
            update!(**args)
         end
       
         # Update properties of this object
         def update!(**args)
-          @access_level = args[:access_level] if args.key?(:access_level)
-          @access_policy = args[:access_policy] if args.key?(:access_policy)
-          @ancestors = args[:ancestors] if args.key?(:ancestors)
-          @asset_type = args[:asset_type] if args.key?(:asset_type)
-          @deleted = args[:deleted] if args.key?(:deleted)
-          @iam_policy = args[:iam_policy] if args.key?(:iam_policy)
-          @name = args[:name] if args.key?(:name)
-          @org_policy = args[:org_policy] if args.key?(:org_policy)
-          @resource = args[:resource] if args.key?(:resource)
-          @service_perimeter = args[:service_perimeter] if args.key?(:service_perimeter)
-          @update_time = args[:update_time] if args.key?(:update_time)
         end
       end
       
@@ -232,110 +106,6 @@ module Google
         end
       end
       
-      # A BigQuery destination for exporting assets to.
-      class BigQueryDestination
-        include Google::Apis::Core::Hashable
-      
-        # Required. The BigQuery dataset in format "projects/projectId/datasets/
-        # datasetId", to which the snapshot result should be exported. If this dataset
-        # does not exist, the export call returns an INVALID_ARGUMENT error.
-        # Corresponds to the JSON property `dataset`
-        # @return [String]
-        attr_accessor :dataset
-      
-        # If the destination table already exists and this flag is `TRUE`, the table
-        # will be overwritten by the contents of assets snapshot. If the flag is `FALSE`
-        # or unset and the destination table already exists, the export call returns an
-        # INVALID_ARGUMEMT error.
-        # Corresponds to the JSON property `force`
-        # @return [Boolean]
-        attr_accessor :force
-        alias_method :force?, :force
-      
-        # Specifications of BigQuery partitioned table as export destination.
-        # Corresponds to the JSON property `partitionSpec`
-        # @return [Google::Apis::CloudassetV1p7beta1::PartitionSpec]
-        attr_accessor :partition_spec
-      
-        # If this flag is `TRUE`, the snapshot results will be written to one or
-        # multiple tables, each of which contains results of one asset type. The [force]
-        # and [partition_spec] fields will apply to each of them. Field [table] will be
-        # concatenated with "_" and the asset type names (see https://cloud.google.com/
-        # asset-inventory/docs/supported-asset-types for supported asset types) to
-        # construct per-asset-type table names, in which all non-alphanumeric characters
-        # like "." and "/" will be substituted by "_". Example: if field [table] is "
-        # mytable" and snapshot results contain "storage.googleapis.com/Bucket" assets,
-        # the corresponding table name will be "mytable_storage_googleapis_com_Bucket".
-        # If any of these tables does not exist, a new table with the concatenated name
-        # will be created. When [content_type] in the ExportAssetsRequest is `RESOURCE`,
-        # the schema of each table will include RECORD-type columns mapped to the nested
-        # fields in the Asset.resource.data field of that asset type (up to the 15
-        # nested level BigQuery supports (https://cloud.google.com/bigquery/docs/nested-
-        # repeated#limitations)). The fields in >15 nested levels will be stored in JSON
-        # format string as a child column of its parent RECORD column. If error occurs
-        # when exporting to any table, the whole export call will return an error but
-        # the export results that already succeed will persist. Example: if exporting to
-        # table_type_A succeeds when exporting to table_type_B fails during one export
-        # call, the results in table_type_A will persist and there will not be partial
-        # results persisting in a table.
-        # Corresponds to the JSON property `separateTablesPerAssetType`
-        # @return [Boolean]
-        attr_accessor :separate_tables_per_asset_type
-        alias_method :separate_tables_per_asset_type?, :separate_tables_per_asset_type
-      
-        # Required. The BigQuery table to which the snapshot result should be written.
-        # If this table does not exist, a new table with the given name will be created.
-        # In the case of scheduled export, the real destination is [table] appended with
-        # a suffix indicating the point-in-time of the snapshot. For example, suppose
-        # field [table] is "mytable". When [separate_tables_per_asset_type] and is `
-        # FALSE`, the destination will be "mytable_snapshot_20201122060000", and when [
-        # separate_tables_per_asset_type] and is `TRUE` and the [asset_types] contains "
-        # storage.googleapis.com/Bucket", the destination will be "
-        # mytable_snapshot_20201122060000_storage_googleapis_com_Bucket"
-        # Corresponds to the JSON property `table`
-        # @return [String]
-        attr_accessor :table
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @dataset = args[:dataset] if args.key?(:dataset)
-          @force = args[:force] if args.key?(:force)
-          @partition_spec = args[:partition_spec] if args.key?(:partition_spec)
-          @separate_tables_per_asset_type = args[:separate_tables_per_asset_type] if args.key?(:separate_tables_per_asset_type)
-          @table = args[:table] if args.key?(:table)
-        end
-      end
-      
-      # Setting for scheduled export to BigQuery.
-      class BigQuerySetting
-        include Google::Apis::Core::Hashable
-      
-        # A BigQuery destination for exporting assets to.
-        # Corresponds to the JSON property `destination`
-        # @return [Google::Apis::CloudassetV1p7beta1::BigQueryDestination]
-        attr_accessor :destination
-      
-        # Schedule for scheduled export. This is used to configure scheduled export for
-        # both GCS and BigQuery.
-        # Corresponds to the JSON property `snapshotSchedule`
-        # @return [Google::Apis::CloudassetV1p7beta1::ScheduleConfig]
-        attr_accessor :snapshot_schedule
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @destination = args[:destination] if args.key?(:destination)
-          @snapshot_schedule = args[:snapshot_schedule] if args.key?(:snapshot_schedule)
-        end
-      end
-      
       # Associates `members` with a `role`.
       class Binding
         include Google::Apis::Core::Hashable
@@ -407,41 +177,46 @@ module Google
         end
       end
       
-      # 
-      class CreateExportSettingRequest
+      # Represents a textual expression in the Common Expression Language (CEL) syntax.
+      # CEL is a C-like expression language. The syntax and semantics of CEL are
+      # documented at https://github.com/google/cel-spec. Example (Comparison): title:
+      # "Summary size limit" description: "Determines if a summary is less than 100
+      # chars" expression: "document.summary.size() < 100" Example (Equality): title: "
+      # Requestor is owner" description: "Determines if requestor is the document
+      # owner" expression: "document.owner == request.auth.claims.email" Example (
+      # Logic): title: "Public documents" description: "Determine whether the document
+      # should be publicly visible" expression: "document.type != 'private' &&
+      # document.type != 'internal'" Example (Data Manipulation): title: "Notification
+      # string" description: "Create a notification string with a timestamp."
+      # expression: "'New message received at ' + string(document.create_time)" The
+      # exact variables and functions that may be referenced within an expression are
+      # determined by the service that evaluates it. See the service documentation for
+      # additional information.
+      class Expr
         include Google::Apis::Core::Hashable
       
-        # Settings that configure CAI to export assets on given schedules. An [
-        # InventorySettings] might have multiple [ExportSetting], each with a unique
-        # identifier.
-        # Corresponds to the JSON property `exportSetting`
-        # @return [Google::Apis::CloudassetV1p7beta1::ExportSetting]
-        attr_accessor :export_setting
-      
-        # Required. This is the client-assigned export setting identifier encoded in UTF-
-        # 8 and it needs to be unique under a specific [InventorySettings].
-        # Corresponds to the JSON property `exportSettingId`
+        # Optional. Description of the expression. This is a longer text which describes
+        # the expression, e.g. when hovered over it in a UI.
+        # Corresponds to the JSON property `description`
         # @return [String]
-        attr_accessor :export_setting_id
+        attr_accessor :description
       
-        def initialize(**args)
-           update!(**args)
-        end
+        # Textual representation of an expression in Common Expression Language syntax.
+        # Corresponds to the JSON property `expression`
+        # @return [String]
+        attr_accessor :expression
       
-        # Update properties of this object
-        def update!(**args)
-          @export_setting = args[:export_setting] if args.key?(:export_setting)
-          @export_setting_id = args[:export_setting_id] if args.key?(:export_setting_id)
-        end
-      end
+        # Optional. String indicating the location of the expression for error reporting,
+        # e.g. a file name and a position in the file.
+        # Corresponds to the JSON property `location`
+        # @return [String]
+        attr_accessor :location
       
-      # A generic empty message that you can re-use to avoid defining duplicated empty
-      # messages in your APIs. A typical example is to use it as the request or the
-      # response type of an API method. For instance: service Foo ` rpc Bar(google.
-      # protobuf.Empty) returns (google.protobuf.Empty); ` The JSON representation for
-      # `Empty` is empty JSON object ````.
-      class Empty
-        include Google::Apis::Core::Hashable
+        # Optional. Title for the expression, i.e. a short string describing its purpose.
+        # This can be used e.g. in UIs which allow to enter the expression.
+        # Corresponds to the JSON property `title`
+        # @return [String]
+        attr_accessor :title
       
         def initialize(**args)
            update!(**args)
@@ -449,55 +224,130 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @description = args[:description] if args.key?(:description)
+          @expression = args[:expression] if args.key?(:expression)
+          @location = args[:location] if args.key?(:location)
+          @title = args[:title] if args.key?(:title)
         end
       end
       
-      # Export asset updates request.
-      class ExportAssetUpdatesRequest
-        include Google::Apis::Core::Hashable
-      
-        # A list of the full names of the assets to export the updates for. See: https://
-        # cloud.google.com/asset-inventory/docs/resource-name-format Example: `//compute.
-        # googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`. If
-        # specified, only assets in the list will be returned. At most one of
-        # asset_types and asset_names should be specified. If neither is specified, all
-        # assets under the parent will be returned.
-        # Corresponds to the JSON property `assetNames`
-        # @return [Array<String>]
-        attr_accessor :asset_names
-      
-        # A list of asset types to export the updates for. For example: "compute.
-        # googleapis.com/Disk". Regular expressions are also supported. For example: * "
-        # compute.googleapis.com.*" snapshots resources whose asset type starts with "
-        # compute.googleapis.com". * ".*Instance" snapshots resources whose asset type
-        # ends with "Instance". * ".*Instance.*" snapshots resources whose asset type
-        # contains "Instance". See [RE2](https://github.com/google/re2/wiki/Syntax) for
-        # all supported regular expression syntax. If the regular expression does not
-        # match any supported asset type, an INVALID_ARGUMENT error will be returned. If
-        # specified, only matching assets will be returned. See [Introduction to Cloud
-        # Asset Inventory](https://cloud.google.com/asset-inventory/docs/overview) for
-        # all supported asset types. At most one of asset_types and asset_names should
-        # be specified. If neither is specified, all assets under the parent will be
-        # returned.
-        # Corresponds to the JSON property `assetTypes`
+      # An asset in Google Cloud. An asset can be any resource in the Google Cloud [
+      # resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-
+      # platform-resource-hierarchy), a resource outside the Google Cloud resource
+      # hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy
+      # (e.g. Cloud IAM policy). See [Supported asset types](https://cloud.google.com/
+      # asset-inventory/docs/supported-asset-types) for more information.
+      class GoogleCloudAssetV1p7beta1Asset
+        include Google::Apis::Core::Hashable
+      
+        # An `AccessLevel` is a label that can be applied to requests to Google Cloud
+        # services, along with a list of requirements necessary for the label to be
+        # applied.
+        # Corresponds to the JSON property `accessLevel`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1AccessLevel]
+        attr_accessor :access_level
+      
+        # `AccessPolicy` is a container for `AccessLevels` (which define the necessary
+        # attributes to use Google Cloud services) and `ServicePerimeters` (which define
+        # regions of services able to freely pass data within a perimeter). An access
+        # policy is globally visible within an organization, and the restrictions it
+        # specifies apply to all projects within an organization.
+        # Corresponds to the JSON property `accessPolicy`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1AccessPolicy]
+        attr_accessor :access_policy
+      
+        # The ancestry path of an asset in Google Cloud [resource hierarchy](https://
+        # cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy),
+        # represented as a list of relative resource names. An ancestry path starts with
+        # the closest ancestor in the hierarchy and ends at root. If the asset is a
+        # project, folder, or organization, the ancestry path starts from the asset
+        # itself. Example: `["projects/123456789", "folders/5432", "organizations/1234"]`
+        # Corresponds to the JSON property `ancestors`
         # @return [Array<String>]
-        attr_accessor :asset_types
+        attr_accessor :ancestors
       
-        # Asset content type. If not specified, no content but the asset name will be
-        # returned.
-        # Corresponds to the JSON property `contentType`
+        # The type of the asset. Example: `compute.googleapis.com/Disk` See [Supported
+        # asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-
+        # types) for more information.
+        # Corresponds to the JSON property `assetType`
         # @return [String]
-        attr_accessor :content_type
+        attr_accessor :asset_type
       
-        # Output configuration for export assets destination.
-        # Corresponds to the JSON property `outputConfig`
-        # @return [Google::Apis::CloudassetV1p7beta1::OutputConfig]
-        attr_accessor :output_config
+        # An Identity and Access Management (IAM) policy, which specifies access
+        # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
+        # A `binding` binds one or more `members` to a single `role`. Members can be
+        # user accounts, service accounts, Google groups, and domains (such as G Suite).
+        # A `role` is a named list of permissions; each `role` can be an IAM predefined
+        # role or a user-created custom role. For some types of Google Cloud resources,
+        # a `binding` can also specify a `condition`, which is a logical expression that
+        # allows access to a resource only if the expression evaluates to `true`. A
+        # condition can add constraints based on attributes of the request, the resource,
+        # or both. To learn which resources support conditions in their IAM policies,
+        # see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
+        # resource-policies). **JSON example:** ` "bindings": [ ` "role": "roles/
+        # resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "
+        # group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@
+        # appspot.gserviceaccount.com" ] `, ` "role": "roles/resourcemanager.
+        # organizationViewer", "members": [ "user:eve@example.com" ], "condition": ` "
+        # title": "expirable access", "description": "Does not grant access after Sep
+        # 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", `
+        # ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:** bindings: -
+        # members: - user:mike@example.com - group:admins@example.com - domain:google.
+        # com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/
+        # resourcemanager.organizationAdmin - members: - user:eve@example.com role:
+        # roles/resourcemanager.organizationViewer condition: title: expirable access
+        # description: Does not grant access after Sep 2020 expression: request.time <
+        # timestamp('2020-10-01T00:00:00.000Z') - etag: BwWWja0YfJA= - version: 3 For a
+        # description of IAM and its features, see the [IAM documentation](https://cloud.
+        # google.com/iam/docs/).
+        # Corresponds to the JSON property `iamPolicy`
+        # @return [Google::Apis::CloudassetV1p7beta1::Policy]
+        attr_accessor :iam_policy
       
-        # Time window configuration for asset updates requests.
-        # Corresponds to the JSON property `updateTimeWindow`
-        # @return [Google::Apis::CloudassetV1p7beta1::UpdateTimeWindow]
-        attr_accessor :update_time_window
+        # The full name of the asset. Example: `//compute.googleapis.com/projects/
+        # my_project_123/zones/zone1/instances/instance1` See [Resource names](https://
+        # cloud.google.com/apis/design/resource_names#full_resource_name) for more
+        # information.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # A representation of an [organization policy](https://cloud.google.com/resource-
+        # manager/docs/organization-policy/overview#organization_policy). There can be
+        # more than one organization policy with different constraints set on a given
+        # resource.
+        # Corresponds to the JSON property `orgPolicy`
+        # @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleCloudOrgpolicyV1Policy>]
+        attr_accessor :org_policy
+      
+        # The detailed related assets with the `relationship_type`.
+        # Corresponds to the JSON property `relatedAssets`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1RelatedAssets]
+        attr_accessor :related_assets
+      
+        # A representation of a Google Cloud resource.
+        # Corresponds to the JSON property `resource`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1Resource]
+        attr_accessor :resource
+      
+        # `ServicePerimeter` describes a set of Google Cloud resources which can freely
+        # import and export data amongst themselves, but not export outside of the `
+        # ServicePerimeter`. If a request with a source within this `ServicePerimeter`
+        # has a target outside of the `ServicePerimeter`, the request will be blocked.
+        # Otherwise the request is allowed. There are two types of Service Perimeter -
+        # Regular and Bridge. Regular Service Perimeters cannot overlap, a single Google
+        # Cloud project can only belong to a single regular Service Perimeter. Service
+        # Perimeter Bridges can contain only Google Cloud projects as members, a single
+        # Google Cloud project may belong to multiple Service Perimeter Bridges.
+        # Corresponds to the JSON property `servicePerimeter`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1ServicePerimeter]
+        attr_accessor :service_perimeter
+      
+        # The last update timestamp of an asset. update_time is updated when create/
+        # update/delete operation is performed.
+        # Corresponds to the JSON property `updateTime`
+        # @return [String]
+        attr_accessor :update_time
       
         def initialize(**args)
            update!(**args)
@@ -505,16 +355,93 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @asset_names = args[:asset_names] if args.key?(:asset_names)
-          @asset_types = args[:asset_types] if args.key?(:asset_types)
-          @content_type = args[:content_type] if args.key?(:content_type)
-          @output_config = args[:output_config] if args.key?(:output_config)
-          @update_time_window = args[:update_time_window] if args.key?(:update_time_window)
+          @access_level = args[:access_level] if args.key?(:access_level)
+          @access_policy = args[:access_policy] if args.key?(:access_policy)
+          @ancestors = args[:ancestors] if args.key?(:ancestors)
+          @asset_type = args[:asset_type] if args.key?(:asset_type)
+          @iam_policy = args[:iam_policy] if args.key?(:iam_policy)
+          @name = args[:name] if args.key?(:name)
+          @org_policy = args[:org_policy] if args.key?(:org_policy)
+          @related_assets = args[:related_assets] if args.key?(:related_assets)
+          @resource = args[:resource] if args.key?(:resource)
+          @service_perimeter = args[:service_perimeter] if args.key?(:service_perimeter)
+          @update_time = args[:update_time] if args.key?(:update_time)
+        end
+      end
+      
+      # A BigQuery destination for exporting assets to.
+      class GoogleCloudAssetV1p7beta1BigQueryDestination
+        include Google::Apis::Core::Hashable
+      
+        # Required. The BigQuery dataset in format "projects/projectId/datasets/
+        # datasetId", to which the snapshot result should be exported. If this dataset
+        # does not exist, the export call returns an INVALID_ARGUMENT error.
+        # Corresponds to the JSON property `dataset`
+        # @return [String]
+        attr_accessor :dataset
+      
+        # If the destination table already exists and this flag is `TRUE`, the table
+        # will be overwritten by the contents of assets snapshot. If the flag is `FALSE`
+        # or unset and the destination table already exists, the export call returns an
+        # INVALID_ARGUMEMT error.
+        # Corresponds to the JSON property `force`
+        # @return [Boolean]
+        attr_accessor :force
+        alias_method :force?, :force
+      
+        # Specifications of BigQuery partitioned table as export destination.
+        # Corresponds to the JSON property `partitionSpec`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1PartitionSpec]
+        attr_accessor :partition_spec
+      
+        # If this flag is `TRUE`, the snapshot results will be written to one or
+        # multiple tables, each of which contains results of one asset type. The [force]
+        # and [partition_spec] fields will apply to each of them. Field [table] will be
+        # concatenated with "_" and the asset type names (see https://cloud.google.com/
+        # asset-inventory/docs/supported-asset-types for supported asset types) to
+        # construct per-asset-type table names, in which all non-alphanumeric characters
+        # like "." and "/" will be substituted by "_". Example: if field [table] is "
+        # mytable" and snapshot results contain "storage.googleapis.com/Bucket" assets,
+        # the corresponding table name will be "mytable_storage_googleapis_com_Bucket".
+        # If any of these tables does not exist, a new table with the concatenated name
+        # will be created. When [content_type] in the ExportAssetsRequest is `RESOURCE`,
+        # the schema of each table will include RECORD-type columns mapped to the nested
+        # fields in the Asset.resource.data field of that asset type (up to the 15
+        # nested level BigQuery supports (https://cloud.google.com/bigquery/docs/nested-
+        # repeated#limitations)). The fields in >15 nested levels will be stored in JSON
+        # format string as a child column of its parent RECORD column. If error occurs
+        # when exporting to any table, the whole export call will return an error but
+        # the export results that already succeed will persist. Example: if exporting to
+        # table_type_A succeeds when exporting to table_type_B fails during one export
+        # call, the results in table_type_A will persist and there will not be partial
+        # results persisting in a table.
+        # Corresponds to the JSON property `separateTablesPerAssetType`
+        # @return [Boolean]
+        attr_accessor :separate_tables_per_asset_type
+        alias_method :separate_tables_per_asset_type?, :separate_tables_per_asset_type
+      
+        # Required. The BigQuery table to which the snapshot result should be written.
+        # If this table does not exist, a new table with the given name will be created.
+        # Corresponds to the JSON property `table`
+        # @return [String]
+        attr_accessor :table
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @dataset = args[:dataset] if args.key?(:dataset)
+          @force = args[:force] if args.key?(:force)
+          @partition_spec = args[:partition_spec] if args.key?(:partition_spec)
+          @separate_tables_per_asset_type = args[:separate_tables_per_asset_type] if args.key?(:separate_tables_per_asset_type)
+          @table = args[:table] if args.key?(:table)
         end
       end
       
       # Export asset request.
-      class ExportAssetsRequest
+      class GoogleCloudAssetV1p7beta1ExportAssetsRequest
         include Google::Apis::Core::Hashable
       
         # A list of asset types to take a snapshot for. For example: "compute.googleapis.
@@ -540,7 +467,7 @@ module Google
       
         # Output configuration for export assets destination.
         # Corresponds to the JSON property `outputConfig`
-        # @return [Google::Apis::CloudassetV1p7beta1::OutputConfig]
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1OutputConfig]
         attr_accessor :output_config
       
         # Timestamp to take an asset snapshot. This can only be set to a timestamp
@@ -552,6 +479,19 @@ module Google
         # @return [String]
         attr_accessor :read_time
       
+        # A list of relationship types to export, for example: `
+        # INSTANCE_TO_INSTANCEGROUP`. This field should only be specified if
+        # content_type=RELATIONSHIP. If specified, it will snapshot [asset_types]'
+        # specified relationships, or give errors if any relationship_types' supported
+        # types are not in [asset_types]. If not specified, it will snapshot all [
+        # asset_types]' supported relationships. An unspecified [asset_types] field
+        # means all supported asset_types. See [Introduction to Cloud Asset Inventory](
+        # https://cloud.google.com/asset-inventory/docs/overview) for all supported
+        # asset types and relationship types.
+        # Corresponds to the JSON property `relationshipTypes`
+        # @return [Array<String>]
+        attr_accessor :relationship_types
+      
         def initialize(**args)
            update!(**args)
         end
@@ -562,53 +502,122 @@ module Google
           @content_type = args[:content_type] if args.key?(:content_type)
           @output_config = args[:output_config] if args.key?(:output_config)
           @read_time = args[:read_time] if args.key?(:read_time)
+          @relationship_types = args[:relationship_types] if args.key?(:relationship_types)
         end
       end
       
-      # Settings that configure CAI to export assets on given schedules. An [
-      # InventorySettings] might have multiple [ExportSetting], each with a unique
-      # identifier.
-      class ExportSetting
+      # A Cloud Storage location.
+      class GoogleCloudAssetV1p7beta1GcsDestination
         include Google::Apis::Core::Hashable
       
-        # Asset types of resources that will be exported on schedule. For example: "
-        # compute.googleapis.com/Disk". Regular expressions are also supported. For
-        # example: * "compute.googleapis.com.*" snapshots resources whose asset type
-        # starts with "compute.googleapis.com". * ".*Instance" snapshots resources whose
-        # asset type ends with "Instance". * ".*Instance.*" snapshots resources whose
-        # asset type contains "Instance". See [RE2](https://github.com/google/re2/wiki/
-        # Syntax) for all supported regular expression syntax. If the regular expression
-        # does not match any supported asset type, an INVALID_ARGUMENT error will be
-        # returned. If specified, only matching assets will be returned. See [
-        # Introduction to Cloud Asset Inventory](https://cloud.google.com/asset-
-        # inventory/docs/overview) for all supported asset types.
-        # Corresponds to the JSON property `assetTypes`
-        # @return [Array<String>]
-        attr_accessor :asset_types
+        # The uri of the Cloud Storage object. It's the same uri that is used by gsutil.
+        # Example: "gs://bucket_name/object_name". See [Viewing and Editing Object
+        # Metadata](https://cloud.google.com/storage/docs/viewing-editing-metadata) for
+        # more information.
+        # Corresponds to the JSON property `uri`
+        # @return [String]
+        attr_accessor :uri
       
-        # Setting for scheduled export to BigQuery.
-        # Corresponds to the JSON property `bigquerySetting`
-        # @return [Google::Apis::CloudassetV1p7beta1::BigQuerySetting]
-        attr_accessor :bigquery_setting
+        # The uri prefix of all generated Cloud Storage objects. Example: "gs://
+        # bucket_name/object_name_prefix". Each object uri is in format: "gs://
+        # bucket_name/object_name_prefix/`ASSET_TYPE`/`SHARD_NUMBER` and only contains
+        # assets for that type. starts from 0. Example: "gs://bucket_name/
+        # object_name_prefix/compute.googleapis.com/Disk/0" is the first shard of output
+        # objects containing all compute.googleapis.com/Disk assets. An INVALID_ARGUMENT
+        # error will be returned if file with the same name "gs://bucket_name/
+        # object_name_prefix" already exists.
+        # Corresponds to the JSON property `uriPrefix`
+        # @return [String]
+        attr_accessor :uri_prefix
       
-        # Required. Asset content type. Currently only `RESOURCE`, `IAM_POLICY`, `
-        # ORG_POLICY`, `ACCESS_POLICY` are supported.
-        # Corresponds to the JSON property `contentType`
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @uri = args[:uri] if args.key?(:uri)
+          @uri_prefix = args[:uri_prefix] if args.key?(:uri_prefix)
+        end
+      end
+      
+      # Output configuration for export assets destination.
+      class GoogleCloudAssetV1p7beta1OutputConfig
+        include Google::Apis::Core::Hashable
+      
+        # A BigQuery destination for exporting assets to.
+        # Corresponds to the JSON property `bigqueryDestination`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1BigQueryDestination]
+        attr_accessor :bigquery_destination
+      
+        # A Cloud Storage location.
+        # Corresponds to the JSON property `gcsDestination`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1GcsDestination]
+        attr_accessor :gcs_destination
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @bigquery_destination = args[:bigquery_destination] if args.key?(:bigquery_destination)
+          @gcs_destination = args[:gcs_destination] if args.key?(:gcs_destination)
+        end
+      end
+      
+      # Specifications of BigQuery partitioned table as export destination.
+      class GoogleCloudAssetV1p7beta1PartitionSpec
+        include Google::Apis::Core::Hashable
+      
+        # The partition key for BigQuery partitioned table.
+        # Corresponds to the JSON property `partitionKey`
         # @return [String]
-        attr_accessor :content_type
+        attr_accessor :partition_key
       
-        # Setting for scheduled export to GCS.
-        # Corresponds to the JSON property `gcsSetting`
-        # @return [Google::Apis::CloudassetV1p7beta1::GcsSetting]
-        attr_accessor :gcs_setting
+        def initialize(**args)
+           update!(**args)
+        end
       
-        # The format will be: organizations/`ORGANIZATION_NUMBER`/inventorySettings/
-        # exportSettings/`exportSetting` or folders/`FOLDER_NUMBER`/inventorySettings/
-        # exportSettings/`exportSetting` or projects/`PROJECT_NUMBER`/inventorySettings/
-        # exportSettings/`exportSetting`
-        # Corresponds to the JSON property `name`
+        # Update properties of this object
+        def update!(**args)
+          @partition_key = args[:partition_key] if args.key?(:partition_key)
+        end
+      end
+      
+      # An asset identify in Google Cloud which contains its name, type and ancestors.
+      # An asset can be any resource in the Google Cloud [resource hierarchy](https://
+      # cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy), a
+      # resource outside the Google Cloud resource hierarchy (such as Google
+      # Kubernetes Engine clusters and objects), or a policy (e.g. Cloud IAM policy).
+      # See [Supported asset types](https://cloud.google.com/asset-inventory/docs/
+      # supported-asset-types) for more information.
+      class GoogleCloudAssetV1p7beta1RelatedAsset
+        include Google::Apis::Core::Hashable
+      
+        # The ancestors of an asset in Google Cloud [resource hierarchy](https://cloud.
+        # google.com/resource-manager/docs/cloud-platform-resource-hierarchy),
+        # represented as a list of relative resource names. An ancestry path starts with
+        # the closest ancestor in the hierarchy and ends at root. Example: `["projects/
+        # 123456789", "folders/5432", "organizations/1234"]`
+        # Corresponds to the JSON property `ancestors`
+        # @return [Array<String>]
+        attr_accessor :ancestors
+      
+        # The full name of the asset. Example: `//compute.googleapis.com/projects/
+        # my_project_123/zones/zone1/instances/instance1` See [Resource names](https://
+        # cloud.google.com/apis/design/resource_names#full_resource_name) for more
+        # information.
+        # Corresponds to the JSON property `asset`
         # @return [String]
-        attr_accessor :name
+        attr_accessor :asset
+      
+        # The type of the asset. Example: `compute.googleapis.com/Disk` See [Supported
+        # asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-
+        # types) for more information.
+        # Corresponds to the JSON property `assetType`
+        # @return [String]
+        attr_accessor :asset_type
       
         def initialize(**args)
            update!(**args)
@@ -616,54 +625,63 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @asset_types = args[:asset_types] if args.key?(:asset_types)
-          @bigquery_setting = args[:bigquery_setting] if args.key?(:bigquery_setting)
-          @content_type = args[:content_type] if args.key?(:content_type)
-          @gcs_setting = args[:gcs_setting] if args.key?(:gcs_setting)
-          @name = args[:name] if args.key?(:name)
+          @ancestors = args[:ancestors] if args.key?(:ancestors)
+          @asset = args[:asset] if args.key?(:asset)
+          @asset_type = args[:asset_type] if args.key?(:asset_type)
         end
       end
       
-      # Represents a textual expression in the Common Expression Language (CEL) syntax.
-      # CEL is a C-like expression language. The syntax and semantics of CEL are
-      # documented at https://github.com/google/cel-spec. Example (Comparison): title:
-      # "Summary size limit" description: "Determines if a summary is less than 100
-      # chars" expression: "document.summary.size() < 100" Example (Equality): title: "
-      # Requestor is owner" description: "Determines if requestor is the document
-      # owner" expression: "document.owner == request.auth.claims.email" Example (
-      # Logic): title: "Public documents" description: "Determine whether the document
-      # should be publicly visible" expression: "document.type != 'private' &&
-      # document.type != 'internal'" Example (Data Manipulation): title: "Notification
-      # string" description: "Create a notification string with a timestamp."
-      # expression: "'New message received at ' + string(document.create_time)" The
-      # exact variables and functions that may be referenced within an expression are
-      # determined by the service that evaluates it. See the service documentation for
-      # additional information.
-      class Expr
+      # The detailed related assets with the `relationship_type`.
+      class GoogleCloudAssetV1p7beta1RelatedAssets
         include Google::Apis::Core::Hashable
       
-        # Optional. Description of the expression. This is a longer text which describes
-        # the expression, e.g. when hovered over it in a UI.
-        # Corresponds to the JSON property `description`
+        # The peer resources of the relationship.
+        # Corresponds to the JSON property `assets`
+        # @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1RelatedAsset>]
+        attr_accessor :assets
+      
+        # The relationship attributes which include `type`, `source_resource_type`, `
+        # target_resource_type` and `action`.
+        # Corresponds to the JSON property `relationshipAttributes`
+        # @return [Google::Apis::CloudassetV1p7beta1::GoogleCloudAssetV1p7beta1RelationshipAttributes]
+        attr_accessor :relationship_attributes
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @assets = args[:assets] if args.key?(:assets)
+          @relationship_attributes = args[:relationship_attributes] if args.key?(:relationship_attributes)
+        end
+      end
+      
+      # The relationship attributes which include `type`, `source_resource_type`, `
+      # target_resource_type` and `action`.
+      class GoogleCloudAssetV1p7beta1RelationshipAttributes
+        include Google::Apis::Core::Hashable
+      
+        # The detail of the relationship, e.g. `contains`, `attaches`
+        # Corresponds to the JSON property `action`
         # @return [String]
-        attr_accessor :description
+        attr_accessor :action
       
-        # Textual representation of an expression in Common Expression Language syntax.
-        # Corresponds to the JSON property `expression`
+        # The source asset type. Example: `compute.googleapis.com/Instance`
+        # Corresponds to the JSON property `sourceResourceType`
         # @return [String]
-        attr_accessor :expression
+        attr_accessor :source_resource_type
       
-        # Optional. String indicating the location of the expression for error reporting,
-        # e.g. a file name and a position in the file.
-        # Corresponds to the JSON property `location`
+        # The target asset type. Example: `compute.googleapis.com/Disk`
+        # Corresponds to the JSON property `targetResourceType`
         # @return [String]
-        attr_accessor :location
+        attr_accessor :target_resource_type
       
-        # Optional. Title for the expression, i.e. a short string describing its purpose.
-        # This can be used e.g. in UIs which allow to enter the expression.
-        # Corresponds to the JSON property `title`
+        # The unique identifier of the relationship type. Example: `
+        # INSTANCE_TO_INSTANCEGROUP`
+        # Corresponds to the JSON property `type`
         # @return [String]
-        attr_accessor :title
+        attr_accessor :type
       
         def initialize(**args)
            update!(**args)
@@ -671,68 +689,67 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @description = args[:description] if args.key?(:description)
-          @expression = args[:expression] if args.key?(:expression)
-          @location = args[:location] if args.key?(:location)
-          @title = args[:title] if args.key?(:title)
+          @action = args[:action] if args.key?(:action)
+          @source_resource_type = args[:source_resource_type] if args.key?(:source_resource_type)
+          @target_resource_type = args[:target_resource_type] if args.key?(:target_resource_type)
+          @type = args[:type] if args.key?(:type)
         end
       end
       
-      # A Cloud Storage location.
-      class GcsDestination
+      # A representation of a Google Cloud resource.
+      class GoogleCloudAssetV1p7beta1Resource
         include Google::Apis::Core::Hashable
       
-        # The uri of the Cloud Storage object. It's the same uri that is used by gsutil.
-        # Example: "gs://bucket_name/object_name". See [Viewing and Editing Object
-        # Metadata](https://cloud.google.com/storage/docs/viewing-editing-metadata) for
-        # more information. In the case of scheduled export, a path indiciating when the
-        # export happens will be added in between the bucket_name and object_name. For
-        # example: the real destination for an scheduled snapshot is: gs://bucket_name/`
-        # YYYY`/`MM`/`DD`/snapshot/`HHMMSS`/file
-        # Corresponds to the JSON property `uri`
-        # @return [String]
-        attr_accessor :uri
+        # The content of the resource, in which some sensitive fields are removed and
+        # may not be present.
+        # Corresponds to the JSON property `data`
+        # @return [Hash<String,Object>]
+        attr_accessor :data
       
-        # The uri prefix of all generated Cloud Storage objects. Example: "gs://
-        # bucket_name/object_name_prefix". Each object uri is in format: "gs://
-        # bucket_name/object_name_prefix/`ASSET_TYPE`/`SHARD_NUMBER` and only contains
-        # assets for that type. starts from 0. Example: "gs://bucket_name/
-        # object_name_prefix/compute.googleapis.com/Disk/0" is the first shard of output
-        # objects containing all compute.googleapis.com/Disk assets. An INVALID_ARGUMENT
-        # error will be returned if file with the same name "gs://bucket_name/
-        # object_name_prefix" already exists. In the case of scheduled export, a path
-        # indiciating when the export happens will be appended. For example: the real
-        # destination for an scheduled snapshot is: gs://bucket_name/object_name_prefix/`
-        # YYYY`/`MM`/`DD`/snapshot/`HHMMSS`/`ASSET_TYPE`/`SHARD_NUMBER`
-        # Corresponds to the JSON property `uriPrefix`
+        # The URL of the discovery document containing the resource's JSON schema.
+        # Example: `https://www.googleapis.com/discovery/v1/apis/compute/v1/rest` This
+        # value is unspecified for resources that do not have an API based on a
+        # discovery document, such as Cloud Bigtable.
+        # Corresponds to the JSON property `discoveryDocumentUri`
         # @return [String]
-        attr_accessor :uri_prefix
+        attr_accessor :discovery_document_uri
       
-        def initialize(**args)
-           update!(**args)
-        end
+        # The JSON schema name listed in the discovery document. Example: `Project` This
+        # value is unspecified for resources that do not have an API based on a
+        # discovery document, such as Cloud Bigtable.
+        # Corresponds to the JSON property `discoveryName`
+        # @return [String]
+        attr_accessor :discovery_name
       
-        # Update properties of this object
-        def update!(**args)
-          @uri = args[:uri] if args.key?(:uri)
-          @uri_prefix = args[:uri_prefix] if args.key?(:uri_prefix)
-        end
-      end
+        # The location of the resource in Google Cloud, such as its zone and region. For
+        # more information, see https://cloud.google.com/about/locations/.
+        # Corresponds to the JSON property `location`
+        # @return [String]
+        attr_accessor :location
       
-      # Setting for scheduled export to GCS.
-      class GcsSetting
-        include Google::Apis::Core::Hashable
+        # The full name of the immediate parent of this resource. See [Resource Names](
+        # https://cloud.google.com/apis/design/resource_names#full_resource_name) for
+        # more information. For Google Cloud assets, this value is the parent resource
+        # defined in the [Cloud IAM policy hierarchy](https://cloud.google.com/iam/docs/
+        # overview#policy_hierarchy). Example: `//cloudresourcemanager.googleapis.com/
+        # projects/my_project_123` For third-party assets, this field may be set
+        # differently.
+        # Corresponds to the JSON property `parent`
+        # @return [String]
+        attr_accessor :parent
       
-        # A Cloud Storage location.
-        # Corresponds to the JSON property `destination`
-        # @return [Google::Apis::CloudassetV1p7beta1::GcsDestination]
-        attr_accessor :destination
+        # The REST URL for accessing the resource. An HTTP `GET` request using this URL
+        # returns the resource itself. Example: `https://cloudresourcemanager.googleapis.
+        # com/v1/projects/my-project-123` This value is unspecified for resources
+        # without a REST API.
+        # Corresponds to the JSON property `resourceUrl`
+        # @return [String]
+        attr_accessor :resource_url
       
-        # Schedule for scheduled export. This is used to configure scheduled export for
-        # both GCS and BigQuery.
-        # Corresponds to the JSON property `snapshotSchedule`
-        # @return [Google::Apis::CloudassetV1p7beta1::ScheduleConfig]
-        attr_accessor :snapshot_schedule
+        # The API version. Example: `v1`
+        # Corresponds to the JSON property `version`
+        # @return [String]
+        attr_accessor :version
       
         def initialize(**args)
            update!(**args)
@@ -740,8 +757,13 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @destination = args[:destination] if args.key?(:destination)
-          @snapshot_schedule = args[:snapshot_schedule] if args.key?(:snapshot_schedule)
+          @data = args[:data] if args.key?(:data)
+          @discovery_document_uri = args[:discovery_document_uri] if args.key?(:discovery_document_uri)
+          @discovery_name = args[:discovery_name] if args.key?(:discovery_name)
+          @location = args[:location] if args.key?(:location)
+          @parent = args[:parent] if args.key?(:parent)
+          @resource_url = args[:resource_url] if args.key?(:resource_url)
+          @version = args[:version] if args.key?(:version)
         end
       end
       
@@ -1350,9 +1372,9 @@ module Google
       
       # Defines the conditions under which an EgressPolicy matches a request.
       # Conditions based on information about the source of the request. Note that if
-      # the destination of the request is protected by a ServicePerimeter, then that
-      # ServicePerimeter must have an IngressPolicy which allows access in order for
-      # this request to succeed.
+      # the destination of the request is also protected by a ServicePerimeter, then
+      # that ServicePerimeter must have an IngressPolicy which allows access in order
+      # for this request to succeed.
       class GoogleIdentityAccesscontextmanagerV1EgressFrom
         include Google::Apis::Core::Hashable
       
@@ -1398,9 +1420,9 @@ module Google
       
         # Defines the conditions under which an EgressPolicy matches a request.
         # Conditions based on information about the source of the request. Note that if
-        # the destination of the request is protected by a ServicePerimeter, then that
-        # ServicePerimeter must have an IngressPolicy which allows access in order for
-        # this request to succeed.
+        # the destination of the request is also protected by a ServicePerimeter, then
+        # that ServicePerimeter must have an IngressPolicy which allows access in order
+        # for this request to succeed.
         # Corresponds to the JSON property `egressFrom`
         # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1EgressFrom]
         attr_accessor :egress_from
@@ -1408,8 +1430,10 @@ module Google
         # Defines the conditions under which an EgressPolicy matches a request.
         # Conditions are based on information about the ApiOperation intended to be
         # performed on the `resources` specified. Note that if the destination of the
-        # request is protected by a ServicePerimeter, then that ServicePerimeter must
-        # have an IngressPolicy which allows access in order for this request to succeed.
+        # request is also protected by a ServicePerimeter, then that ServicePerimeter
+        # must have an IngressPolicy which allows access in order for this request to
+        # succeed. The request must match `operations` AND `resources` fields in order
+        # to be allowed egress out of the perimeter.
         # Corresponds to the JSON property `egressTo`
         # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1EgressTo]
         attr_accessor :egress_to
@@ -1428,21 +1452,25 @@ module Google
       # Defines the conditions under which an EgressPolicy matches a request.
       # Conditions are based on information about the ApiOperation intended to be
       # performed on the `resources` specified. Note that if the destination of the
-      # request is protected by a ServicePerimeter, then that ServicePerimeter must
-      # have an IngressPolicy which allows access in order for this request to succeed.
+      # request is also protected by a ServicePerimeter, then that ServicePerimeter
+      # must have an IngressPolicy which allows access in order for this request to
+      # succeed. The request must match `operations` AND `resources` fields in order
+      # to be allowed egress out of the perimeter.
       class GoogleIdentityAccesscontextmanagerV1EgressTo
         include Google::Apis::Core::Hashable
       
-        # A list of ApiOperations that this egress rule applies to. A request matches if
-        # it contains an operation/service in this list.
+        # A list of ApiOperations allowed to be performed by the sources specified in
+        # the corresponding EgressFrom. A request matches if it uses an operation/
+        # service in this list.
         # Corresponds to the JSON property `operations`
         # @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1ApiOperation>]
         attr_accessor :operations
       
-        # A list of resources, currently only projects in the form `projects/`, that
-        # match this to stanza. A request matches if it contains a resource in this list.
-        # If `*` is specified for resources, then this EgressTo rule will authorize
-        # access to all resources outside the perimeter.
+        # A list of resources, currently only projects in the form `projects/`, that are
+        # allowed to be accessed by sources defined in the corresponding EgressFrom. A
+        # request matches if it contains a resource in this list. If `*` is specified
+        # for `resources`, then this EgressTo rule will authorize access to all
+        # resources outside the perimeter.
         # Corresponds to the JSON property `resources`
         # @return [Array<String>]
         attr_accessor :resources
@@ -1459,7 +1487,9 @@ module Google
       end
       
       # Defines the conditions under which an IngressPolicy matches a request.
-      # Conditions are based on information about the source of the request.
+      # Conditions are based on information about the source of the request. The
+      # request must satisfy what is defined in `sources` AND identity related fields
+      # in order to match.
       class GoogleIdentityAccesscontextmanagerV1IngressFrom
         include Google::Apis::Core::Hashable
       
@@ -1508,14 +1538,17 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Defines the conditions under which an IngressPolicy matches a request.
-        # Conditions are based on information about the source of the request.
+        # Conditions are based on information about the source of the request. The
+        # request must satisfy what is defined in `sources` AND identity related fields
+        # in order to match.
         # Corresponds to the JSON property `ingressFrom`
         # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1IngressFrom]
         attr_accessor :ingress_from
       
         # Defines the conditions under which an IngressPolicy matches a request.
         # Conditions are based on information about the ApiOperation intended to be
-        # performed on the destination of the request.
+        # performed on the target resource of the request. The request must satisfy what
+        # is defined in `operations` AND `resources` in order to match.
         # Corresponds to the JSON property `ingressTo`
         # @return [Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1IngressTo]
         attr_accessor :ingress_to
@@ -1541,7 +1574,8 @@ module Google
         # cause an error. If no AccessLevel names are listed, resources within the
         # perimeter can only be accessed via Google Cloud calls with request origins
         # within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`
-        # . If `*` is specified, then all IngressSources will be allowed.
+        # . If a single `*` is specified for `access_level`, then all IngressSources
+        # will be allowed.
         # Corresponds to the JSON property `accessLevel`
         # @return [String]
         attr_accessor :access_level
@@ -1569,22 +1603,21 @@ module Google
       
       # Defines the conditions under which an IngressPolicy matches a request.
       # Conditions are based on information about the ApiOperation intended to be
-      # performed on the destination of the request.
+      # performed on the target resource of the request. The request must satisfy what
+      # is defined in `operations` AND `resources` in order to match.
       class GoogleIdentityAccesscontextmanagerV1IngressTo
         include Google::Apis::Core::Hashable
       
-        # A list of ApiOperations the sources specified in corresponding IngressFrom are
-        # allowed to perform in this ServicePerimeter.
+        # A list of ApiOperations allowed to be performed by the sources specified in
+        # corresponding IngressFrom in this ServicePerimeter.
         # Corresponds to the JSON property `operations`
         # @return [Array<Google::Apis::CloudassetV1p7beta1::GoogleIdentityAccesscontextmanagerV1ApiOperation>]
         attr_accessor :operations
       
         # A list of resources, currently only projects in the form `projects/`,
         # protected by this ServicePerimeter that are allowed to be accessed by sources
-        # defined in the corresponding IngressFrom. A request matches if it contains a
-        # resource in this list. If `*` is specified for resources, then this IngressTo
-        # rule will authorize access to all resources inside the perimeter, provided
-        # that the request also matches the `operations` field.
+        # defined in the corresponding IngressFrom. If a single `*` is specified, then
+        # access to all resources inside the perimeter are allowed.
         # Corresponds to the JSON property `resources`
         # @return [Array<String>]
         attr_accessor :resources
@@ -1838,93 +1871,6 @@ module Google
         end
       end
       
-      # Inventory Settings. There is only one inventory settings for a given
-      # organization, folder or project. Users can update inventory settings using
-      # specific API, but cannot create or delete.
-      class InventorySettings
-        include Google::Apis::Core::Hashable
-      
-        # Output only. A list of export settings.
-        # Corresponds to the JSON property `exportSettings`
-        # @return [Array<String>]
-        attr_accessor :export_settings
-      
-        # Required. The format will be projects/`PROJECT_NUMBER`/inventorySettings or
-        # folders/`FOLDER_NUMBER`/inventorySettings or organizations/`
-        # ORGANIZATION_NUMBER`/inventorySettings
-        # Corresponds to the JSON property `name`
-        # @return [String]
-        attr_accessor :name
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @export_settings = args[:export_settings] if args.key?(:export_settings)
-          @name = args[:name] if args.key?(:name)
-        end
-      end
-      
-      # ListAssets response.
-      class ListAssetUpdatesResponse
-        include Google::Apis::Core::Hashable
-      
-        # Asset updates in the time window.
-        # Corresponds to the JSON property `assetUpdates`
-        # @return [Array<Google::Apis::CloudassetV1p7beta1::Asset>]
-        attr_accessor :asset_updates
-      
-        # Token to retrieve the next page of results. Set to empty if there are no
-        # remaining results.
-        # Corresponds to the JSON property `nextPageToken`
-        # @return [String]
-        attr_accessor :next_page_token
-      
-        # Time window configuration for asset updates requests.
-        # Corresponds to the JSON property `updateTimeWindow`
-        # @return [Google::Apis::CloudassetV1p7beta1::UpdateTimeWindow]
-        attr_accessor :update_time_window
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @asset_updates = args[:asset_updates] if args.key?(:asset_updates)
-          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
-          @update_time_window = args[:update_time_window] if args.key?(:update_time_window)
-        end
-      end
-      
-      # 
-      class ListExportSettingsResponse
-        include Google::Apis::Core::Hashable
-      
-        # A list of export settings.
-        # Corresponds to the JSON property `exportSettings`
-        # @return [Array<Google::Apis::CloudassetV1p7beta1::ExportSetting>]
-        attr_accessor :export_settings
-      
-        # Token to retrieve the next page of results. Set to empty if there are no
-        # remaining results.
-        # Corresponds to the JSON property `nextPageToken`
-        # @return [String]
-        attr_accessor :next_page_token
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @export_settings = args[:export_settings] if args.key?(:export_settings)
-          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
-        end
-      end
-      
       # This resource represents a long-running operation that is the result of a
       # network API call.
       class Operation
@@ -1987,50 +1933,6 @@ module Google
         end
       end
       
-      # Output configuration for export assets destination.
-      class OutputConfig
-        include Google::Apis::Core::Hashable
-      
-        # A BigQuery destination for exporting assets to.
-        # Corresponds to the JSON property `bigqueryDestination`
-        # @return [Google::Apis::CloudassetV1p7beta1::BigQueryDestination]
-        attr_accessor :bigquery_destination
-      
-        # A Cloud Storage location.
-        # Corresponds to the JSON property `gcsDestination`
-        # @return [Google::Apis::CloudassetV1p7beta1::GcsDestination]
-        attr_accessor :gcs_destination
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @bigquery_destination = args[:bigquery_destination] if args.key?(:bigquery_destination)
-          @gcs_destination = args[:gcs_destination] if args.key?(:gcs_destination)
-        end
-      end
-      
-      # Specifications of BigQuery partitioned table as export destination.
-      class PartitionSpec
-        include Google::Apis::Core::Hashable
-      
-        # The partition key for BigQuery partitioned table.
-        # Corresponds to the JSON property `partitionKey`
-        # @return [String]
-        attr_accessor :partition_key
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @partition_key = args[:partition_key] if args.key?(:partition_key)
-        end
-      end
-      
       # An Identity and Access Management (IAM) policy, which specifies access
       # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
       # A `binding` binds one or more `members` to a single `role`. Members can be
@@ -2121,110 +2023,6 @@ module Google
         end
       end
       
-      # A representation of a Google Cloud resource.
-      class Resource
-        include Google::Apis::Core::Hashable
-      
-        # The content of the resource, in which some sensitive fields are removed and
-        # may not be present.
-        # Corresponds to the JSON property `data`
-        # @return [Hash<String,Object>]
-        attr_accessor :data
-      
-        # The URL of the discovery document containing the resource's JSON schema.
-        # Example: `https://www.googleapis.com/discovery/v1/apis/compute/v1/rest` This
-        # value is unspecified for resources that do not have an API based on a
-        # discovery document, such as Cloud Bigtable.
-        # Corresponds to the JSON property `discoveryDocumentUri`
-        # @return [String]
-        attr_accessor :discovery_document_uri
-      
-        # The JSON schema name listed in the discovery document. Example: `Project` This
-        # value is unspecified for resources that do not have an API based on a
-        # discovery document, such as Cloud Bigtable.
-        # Corresponds to the JSON property `discoveryName`
-        # @return [String]
-        attr_accessor :discovery_name
-      
-        # The location of the resource in Google Cloud, such as its zone and region. For
-        # more information, see https://cloud.google.com/about/locations/.
-        # Corresponds to the JSON property `location`
-        # @return [String]
-        attr_accessor :location
-      
-        # The full name of the immediate parent of this resource. See [Resource Names](
-        # https://cloud.google.com/apis/design/resource_names#full_resource_name) for
-        # more information. For Google Cloud assets, this value is the parent resource
-        # defined in the [Cloud IAM policy hierarchy](https://cloud.google.com/iam/docs/
-        # overview#policy_hierarchy). Example: `//cloudresourcemanager.googleapis.com/
-        # projects/my_project_123` For third-party assets, this field may be set
-        # differently.
-        # Corresponds to the JSON property `parent`
-        # @return [String]
-        attr_accessor :parent
-      
-        # The REST URL for accessing the resource. An HTTP `GET` request using this URL
-        # returns the resource itself. Example: `https://cloudresourcemanager.googleapis.
-        # com/v1/projects/my-project-123` This value is unspecified for resources
-        # without a REST API.
-        # Corresponds to the JSON property `resourceUrl`
-        # @return [String]
-        attr_accessor :resource_url
-      
-        # The API version. Example: `v1`
-        # Corresponds to the JSON property `version`
-        # @return [String]
-        attr_accessor :version
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @data = args[:data] if args.key?(:data)
-          @discovery_document_uri = args[:discovery_document_uri] if args.key?(:discovery_document_uri)
-          @discovery_name = args[:discovery_name] if args.key?(:discovery_name)
-          @location = args[:location] if args.key?(:location)
-          @parent = args[:parent] if args.key?(:parent)
-          @resource_url = args[:resource_url] if args.key?(:resource_url)
-          @version = args[:version] if args.key?(:version)
-        end
-      end
-      
-      # Schedule for scheduled export. This is used to configure scheduled export for
-      # both GCS and BigQuery.
-      class ScheduleConfig
-        include Google::Apis::Core::Hashable
-      
-        # Required. Cron-tab formatted schedule by which the job will execute Format:
-        # minute, hour, day of month, month, day of week e.g. 0 0 * * WED = every
-        # Wednesday More examples: https://crontab.guru/examples.html
-        # Corresponds to the JSON property `crontab`
-        # @return [String]
-        attr_accessor :crontab
-      
-        # Specifies the time zone to be used in interpreting [crontab]. The value of
-        # this field must be a time zone name from the [tz database](https://en.
-        # wikipedia.org/wiki/Tz_database). Note that some time zones include a provision
-        # for daylight savings time. The rules for daylight saving time are determined
-        # by the chosen tz. For UTC use the string "utc". If a time zone is not
-        # specified, the default will be in UTC (also known as GMT).
-        # Corresponds to the JSON property `timeZone`
-        # @return [String]
-        attr_accessor :time_zone
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @crontab = args[:crontab] if args.key?(:crontab)
-          @time_zone = args[:time_zone] if args.key?(:time_zone)
-        end
-      end
-      
       # The `Status` type defines a logical error model that is suitable for different
       # programming environments, including REST APIs and RPC APIs. It is used by [
       # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
@@ -2263,57 +2061,6 @@ module Google
           @message = args[:message] if args.key?(:message)
         end
       end
-      
-      # A time window specified by its `start_time` and `end_time`.
-      class TimeWindow
-        include Google::Apis::Core::Hashable
-      
-        # End time of the time window (inclusive). If not specified, the current
-        # timestamp is used instead.
-        # Corresponds to the JSON property `endTime`
-        # @return [String]
-        attr_accessor :end_time
-      
-        # Start time of the time window (exclusive).
-        # Corresponds to the JSON property `startTime`
-        # @return [String]
-        attr_accessor :start_time
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @end_time = args[:end_time] if args.key?(:end_time)
-          @start_time = args[:start_time] if args.key?(:start_time)
-        end
-      end
-      
-      # Time window configuration for asset updates requests.
-      class UpdateTimeWindow
-        include Google::Apis::Core::Hashable
-      
-        # A time window specified by its `start_time` and `end_time`.
-        # Corresponds to the JSON property `timeWindow`
-        # @return [Google::Apis::CloudassetV1p7beta1::TimeWindow]
-        attr_accessor :time_window
-      
-        # The type of the time in time_window.
-        # Corresponds to the JSON property `type`
-        # @return [String]
-        attr_accessor :type
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @time_window = args[:time_window] if args.key?(:time_window)
-          @type = args[:type] if args.key?(:type)
-        end
-      end
     end
   end
 end