google-apis-cloudkms_v1 0.58.0 → 0.59.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ac78661e30da92e2ec843fee9cae7346e3ced775e81c9d02b12a586332ffd00
-  data.tar.gz: d3e0c2dc81ecb83669638b53b37bfdaa9135414dd7f708b409f9b70186e912c0
+  metadata.gz: 810c7c0d5eb5a065494d8b5a2f9ca50365197187f9d098141db1f80b67cb776f
+  data.tar.gz: 48d6aa4f97e9b62ce43d51617a761b3a8d70e6bb3cc1022503c80da71f1b141d
 SHA512:
-  metadata.gz: df16dafdca1a8192eb28d08346f2d01bd8347548b4eb49154b1e08c020e3988d73bfbb2b6f672d518600d59482e4b915405313f457c83c61a0b635a184fc817d
-  data.tar.gz: 7145226bb0ab11934f3cb862a33d2fadbe51c964f7247e431550a56295815b44f087df725a0adc7ae0e5893adf8b3d1a4de92f3e294a685e6e6d1019fa781b8b
+  metadata.gz: 78bdfda01c6cd2eeb43b4caa85c25fb645d5b7e2a8b4396d884b3fb47bcd181dcb50ee7b8a80481bd30a0b055838c93e7bd73aef32a612305e250754763d8b9c
+  data.tar.gz: 8af3b21a39dd664be72cb149588d193480f250d1697728b2b1726497b9b109c98c6e731241471c86838e13e45d38547e7ca40f034f70877a68a0213d5455dcfd

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Release history for google-apis-cloudkms_v1
 
+### v0.59.0 (2025-05-25)
+
+* Regenerated from discovery document revision 20250516
+* Regenerated using generator version 0.18.0
+
 ### v0.58.0 (2025-05-18)
 
 * Regenerated from discovery document revision 20250501

data/lib/google/apis/cloudkms_v1/classes.rb

@@ -323,6 +323,14 @@ module Google
       class AutokeyConfig
         include Google::Apis::Core::Hashable
       
+        # Optional. A checksum computed by the server based on the value of other fields.
+        # This may be sent on update requests to ensure that the client has an up-to-
+        # date value before proceeding. The request will be rejected with an ABORTED
+        # error on a mismatched etag.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
         # Optional. Name of the key project, e.g. `projects/`PROJECT_ID`` or `projects/`
         # PROJECT_NUMBER``, where Cloud KMS Autokey will provision a new CryptoKey when
         # a KeyHandle is created. On UpdateAutokeyConfig, the caller will require `
@@ -352,6 +360,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @etag = args[:etag] if args.key?(:etag)
           @key_project = args[:key_project] if args.key?(:key_project)
           @name = args[:name] if args.key?(:name)
           @state = args[:state] if args.key?(:state)
@@ -1575,6 +1584,34 @@ module Google
         end
       end
       
+      # The configuration of a protection level for a project's Key Access
+      # Justifications enrollment.
+      class KeyAccessJustificationsEnrollmentConfig
+        include Google::Apis::Core::Hashable
+      
+        # Whether the project has KAJ logging enabled.
+        # Corresponds to the JSON property `auditLogging`
+        # @return [Boolean]
+        attr_accessor :audit_logging
+        alias_method :audit_logging?, :audit_logging
+      
+        # Whether the project is enrolled in KAJ policy enforcement.
+        # Corresponds to the JSON property `policyEnforcement`
+        # @return [Boolean]
+        attr_accessor :policy_enforcement
+        alias_method :policy_enforcement?, :policy_enforcement
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @audit_logging = args[:audit_logging] if args.key?(:audit_logging)
+          @policy_enforcement = args[:policy_enforcement] if args.key?(:policy_enforcement)
+        end
+      end
+      
       # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
       # values for encrypt, decrypt, and sign operations on a CryptoKey.
       class KeyAccessJustificationsPolicy
@@ -1597,6 +1634,33 @@ module Google
         end
       end
       
+      # A singleton configuration for Key Access Justifications policies.
+      class KeyAccessJustificationsPolicyConfig
+        include Google::Apis::Core::Hashable
+      
+        # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
+        # values for encrypt, decrypt, and sign operations on a CryptoKey.
+        # Corresponds to the JSON property `defaultKeyAccessJustificationPolicy`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy]
+        attr_accessor :default_key_access_justification_policy
+      
+        # Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        # the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @default_key_access_justification_policy = args[:default_key_access_justification_policy] if args.key?(:default_key_access_justification_policy)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # Resource-oriented representation of a request to Cloud KMS Autokey and the
       # resulting provisioning of a CryptoKey.
       class KeyHandle
@@ -2962,6 +3026,61 @@ module Google
         end
       end
       
+      # Response message for KeyAccessJustificationsConfig.
+      # ShowEffectiveKeyAccessJustificationsEnrollmentConfig
+      class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+        include Google::Apis::Core::Hashable
+      
+        # The configuration of a protection level for a project's Key Access
+        # Justifications enrollment.
+        # Corresponds to the JSON property `externalConfig`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
+        attr_accessor :external_config
+      
+        # The configuration of a protection level for a project's Key Access
+        # Justifications enrollment.
+        # Corresponds to the JSON property `hardwareConfig`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
+        attr_accessor :hardware_config
+      
+        # The configuration of a protection level for a project's Key Access
+        # Justifications enrollment.
+        # Corresponds to the JSON property `softwareConfig`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
+        attr_accessor :software_config
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @external_config = args[:external_config] if args.key?(:external_config)
+          @hardware_config = args[:hardware_config] if args.key?(:hardware_config)
+          @software_config = args[:software_config] if args.key?(:software_config)
+        end
+      end
+      
+      # Response message for KeyAccessJustificationsConfig.
+      # ShowEffectiveKeyAccessJustificationsPolicyConfig.
+      class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+        include Google::Apis::Core::Hashable
+      
+        # A singleton configuration for Key Access Justifications policies.
+        # Corresponds to the JSON property `effectiveKajPolicy`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        attr_accessor :effective_kaj_policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @effective_kaj_policy = args[:effective_kaj_policy] if args.key?(:effective_kaj_policy)
+        end
+      end
+      
       # The `Status` type defines a logical error model that is suitable for different
       # programming environments, including REST APIs and RPC APIs. It is used by [
       # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of

data/lib/google/apis/cloudkms_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudkmsV1
       # Version of the google-apis-cloudkms_v1 gem
-      GEM_VERSION = "0.58.0"
+      GEM_VERSION = "0.59.0"
 
       # Version of the code generator used to generate this client
-      GENERATOR_VERSION = "0.17.0"
+      GENERATOR_VERSION = "0.18.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20250501"
+      REVISION = "20250516"
     end
   end
 end

data/lib/google/apis/cloudkms_v1/representations.rb

@@ -190,12 +190,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class KeyAccessJustificationsEnrollmentConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class KeyAccessJustificationsPolicy
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class KeyAccessJustificationsPolicyConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class KeyHandle
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -358,6 +370,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Status
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -455,6 +479,7 @@ module Google
       class AutokeyConfig
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :etag, as: 'etag'
           property :key_project, as: 'keyProject'
           property :name, as: 'name'
           property :state, as: 'state'
@@ -697,6 +722,14 @@ module Google
         end
       end
       
+      class KeyAccessJustificationsEnrollmentConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :audit_logging, as: 'auditLogging'
+          property :policy_enforcement, as: 'policyEnforcement'
+        end
+      end
+      
       class KeyAccessJustificationsPolicy
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -704,6 +737,15 @@ module Google
         end
       end
       
+      class KeyAccessJustificationsPolicyConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :default_key_access_justification_policy, as: 'defaultKeyAccessJustificationPolicy', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy::Representation
+      
+          property :name, as: 'name'
+        end
+      end
+      
       class KeyHandle
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -983,6 +1025,26 @@ module Google
         end
       end
       
+      class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :external_config, as: 'externalConfig', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig::Representation
+      
+          property :hardware_config, as: 'hardwareConfig', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig::Representation
+      
+          property :software_config, as: 'softwareConfig', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig::Representation
+      
+        end
+      end
+      
+      class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :effective_kaj_policy, as: 'effectiveKajPolicy', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+      
+        end
+      end
+      
       class Status
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/cloudkms_v1/service.rb

@@ -83,6 +83,37 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/
+        # projects.
+        # @param [String] name
+        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_folder_kaj_policy_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Updates the AutokeyConfig for a folder. The caller must have both `cloudkms.
         # autokeyConfigs.update` permission on the parent folder and `cloudkms.
         # cryptoKeys.setIamPolicy` permission on the provided key project. A KeyHandle
@@ -124,6 +155,144 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Updates the KeyAccessJustificationsPolicyConfig for a given organization/
+        # folder/projects.
+        # @param [String] name
+        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
+        # @param [String] update_mask
+        #   Optional. The list of fields to update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_folder_kaj_policy_config(name, key_access_justifications_policy_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.request_object = key_access_justifications_policy_config_object
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/
+        # projects.
+        # @param [String] name
+        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_organization_kaj_policy_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates the KeyAccessJustificationsPolicyConfig for a given organization/
+        # folder/projects.
+        # @param [String] name
+        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
+        # @param [String] update_mask
+        #   Optional. The list of fields to update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_organization_kaj_policy_config(name, key_access_justifications_policy_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.request_object = key_access_justifications_policy_config_object
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/
+        # projects.
+        # @param [String] name
+        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_kaj_policy_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Returns the effective Cloud KMS Autokey configuration for a given project.
         # @param [String] parent
         #   Required. Name of the resource project to the show effective Cloud KMS Autokey
@@ -156,6 +325,108 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Returns the KeyAccessJustificationsEnrollmentConfig of the resource closest to
+        # the given project in hierarchy.
+        # @param [String] project
+        #   Required. The number or id of the project to get the effective
+        #   KeyAccessJustificationsEnrollmentConfig for.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def show_project_effective_key_access_justifications_enrollment_config(project, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+project}:showEffectiveKeyAccessJustificationsEnrollmentConfig', options)
+          command.response_representation = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse::Representation
+          command.response_class = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+          command.params['project'] = project unless project.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Returns the KeyAccessJustificationsPolicyConfig of the resource closest to the
+        # given project in hierarchy.
+        # @param [String] project
+        #   Required. The number or id of the project to get the effective
+        #   KeyAccessJustificationsPolicyConfig. In the format of "projects/`|`"
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def show_project_effective_key_access_justifications_policy_config(project, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+project}:showEffectiveKeyAccessJustificationsPolicyConfig', options)
+          command.response_representation = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse::Representation
+          command.response_class = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+          command.params['project'] = project unless project.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates the KeyAccessJustificationsPolicyConfig for a given organization/
+        # folder/projects.
+        # @param [String] name
+        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
+        # @param [String] update_mask
+        #   Optional. The list of fields to update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_project_kaj_policy_config(name, key_access_justifications_policy_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.request_object = key_access_justifications_policy_config_object
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Generate random bytes using the Cloud KMS randomness source in the provided
         # location.
         # @param [String] location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudkms_v1
 version: !ruby/object:Gem::Version
-  version: 0.58.0
+  version: 0.59.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.58.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.59.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1
 rdoc_options: []
 require_paths:
@@ -73,7 +73,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.8
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Simple REST client for Cloud Key Management Service (KMS) API V1
 test_files: []