google-apis-compute_v1 0.28.0 → 0.31.0

data/lib/google/apis/compute_v1/classes.rb

@@ -3145,6 +3145,15 @@ module Google
         # @return [String]
         attr_accessor :load_balancing_scheme
       
+        # A list of locality load balancing policies to be used in order of preference.
+        # Either the policy or the customPolicy field should be set. Overrides any value
+        # set in the localityLbPolicy field. localityLbPolicies is only supported when
+        # the BackendService is referenced by a URL Map that is referenced by a target
+        # gRPC proxy that has the validateForProxyless field set to true.
+        # Corresponds to the JSON property `localityLbPolicies`
+        # @return [Array<Google::Apis::ComputeV1::BackendServiceLocalityLoadBalancingPolicyConfig>]
+        attr_accessor :locality_lb_policies
+      
         # The load balancing algorithm used within the scope of the locality. The
         # possible values are: - ROUND_ROBIN: This is a simple policy in which each
         # healthy backend is selected in round robin order. This is the default. -
@@ -3276,12 +3285,13 @@ module Google
         attr_accessor :subsetting
       
         # The backend service timeout has a different meaning depending on the type of
-        # load balancer. For more information see, Backend service settings The default
-        # is 30 seconds. The full range of timeout values allowed is 1 - 2,147,483,647
-        # seconds. This value can be overridden in the PathMatcher configuration of the
-        # UrlMap that references this backend service. Not supported when the backend
-        # service is referenced by a URL map that is bound to target gRPC proxy that has
-        # validateForProxyless field set to true. Instead, use maxStreamDuration.
+        # load balancer. For more information see, Backend service settings. The default
+        # is 30 seconds. The full range of timeout values allowed goes from 1 through 2,
+        # 147,483,647 seconds. This value can be overridden in the PathMatcher
+        # configuration of the UrlMap that references this backend service. Not
+        # supported when the backend service is referenced by a URL map that is bound to
+        # target gRPC proxy that has validateForProxyless field set to true. Instead,
+        # use maxStreamDuration.
         # Corresponds to the JSON property `timeoutSec`
         # @return [Fixnum]
         attr_accessor :timeout_sec
@@ -3312,6 +3322,7 @@ module Google
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @load_balancing_scheme = args[:load_balancing_scheme] if args.key?(:load_balancing_scheme)
+          @locality_lb_policies = args[:locality_lb_policies] if args.key?(:locality_lb_policies)
           @locality_lb_policy = args[:locality_lb_policy] if args.key?(:locality_lb_policy)
           @log_config = args[:log_config] if args.key?(:log_config)
           @max_stream_duration = args[:max_stream_duration] if args.key?(:max_stream_duration)
@@ -3977,6 +3988,88 @@ module Google
         end
       end
       
+      # Container for either a built-in LB policy supported by gRPC or Envoy or a
+      # custom one implemented by the end user.
+      class BackendServiceLocalityLoadBalancingPolicyConfig
+        include Google::Apis::Core::Hashable
+      
+        # The configuration for a custom policy implemented by the user and deployed
+        # with the client.
+        # Corresponds to the JSON property `customPolicy`
+        # @return [Google::Apis::ComputeV1::BackendServiceLocalityLoadBalancingPolicyConfigCustomPolicy]
+        attr_accessor :custom_policy
+      
+        # The configuration for a built-in load balancing policy.
+        # Corresponds to the JSON property `policy`
+        # @return [Google::Apis::ComputeV1::BackendServiceLocalityLoadBalancingPolicyConfigPolicy]
+        attr_accessor :policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @custom_policy = args[:custom_policy] if args.key?(:custom_policy)
+          @policy = args[:policy] if args.key?(:policy)
+        end
+      end
+      
+      # The configuration for a custom policy implemented by the user and deployed
+      # with the client.
+      class BackendServiceLocalityLoadBalancingPolicyConfigCustomPolicy
+        include Google::Apis::Core::Hashable
+      
+        # An optional, arbitrary JSON object with configuration data, understood by a
+        # locally installed custom policy implementation.
+        # Corresponds to the JSON property `data`
+        # @return [String]
+        attr_accessor :data
+      
+        # Identifies the custom policy. The value should match the type the custom
+        # implementation is registered with on the gRPC clients. It should follow
+        # protocol buffer message naming conventions and include the full path (e.g.
+        # myorg.CustomLbPolicy). The maximum length is 256 characters. Note that
+        # specifying the same custom policy more than once for a backend is not a valid
+        # configuration and will be rejected.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @data = args[:data] if args.key?(:data)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
+      # The configuration for a built-in load balancing policy.
+      class BackendServiceLocalityLoadBalancingPolicyConfigPolicy
+        include Google::Apis::Core::Hashable
+      
+        # The name of a locality load balancer policy to be used. The value should be
+        # one of the predefined ones as supported by localityLbPolicy, although at the
+        # moment only ROUND_ROBIN is supported. This field should only be populated when
+        # the customPolicy field is not used. Note that specifying the same policy more
+        # than once for a backend is not a valid configuration and will be rejected.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # The available logging options for the load balancer traffic served by this
       # backend service.
       class BackendServiceLogConfig
@@ -8148,6 +8241,12 @@ module Google
         # @return [Fixnum]
         attr_accessor :priority
       
+        # An optional name for the rule. This field is not a unique identifier and can
+        # be updated.
+        # Corresponds to the JSON property `ruleName`
+        # @return [String]
+        attr_accessor :rule_name
+      
         # [Output Only] Calculation of the complexity of a single firewall policy rule.
         # Corresponds to the JSON property `ruleTupleCount`
         # @return [Fixnum]
@@ -8192,6 +8291,7 @@ module Google
           @kind = args[:kind] if args.key?(:kind)
           @match = args[:match] if args.key?(:match)
           @priority = args[:priority] if args.key?(:priority)
+          @rule_name = args[:rule_name] if args.key?(:rule_name)
           @rule_tuple_count = args[:rule_tuple_count] if args.key?(:rule_tuple_count)
           @target_resources = args[:target_resources] if args.key?(:target_resources)
           @target_secure_tags = args[:target_secure_tags] if args.key?(:target_secure_tags)
@@ -9205,13 +9305,9 @@ module Google
         # @return [String]
         attr_accessor :label_fingerprint
       
-        # A list of labels to apply for this resource. Each label key & value must
-        # comply with RFC1035. Specifically, the name must be 1-63 characters long and
-        # match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
-        # first character must be a lowercase letter, and all following characters must
-        # be a dash, lowercase letter, or digit, except the last character, which cannot
-        # be a dash. For example, "webserver-frontend": "images". A label value can also
-        # be empty (e.g. "my-label": "").
+        # A list of labels to apply for this resource. Each label must comply with the
+        # requirements for labels. For example, "webserver-frontend": "images". A label
+        # value can also be empty (e.g. "my-label": "").
         # Corresponds to the JSON property `labels`
         # @return [Hash<String,String>]
         attr_accessor :labels
@@ -9394,9 +9490,9 @@ module Google
       
         # The ID of a supported feature. To add multiple values, use commas to separate
         # values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE -
-        # WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - SECURE_BOOT - GVNIC -
-        # SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE - SEV_SNP_CAPABLE For more information,
-        # see Enabling guest operating system features.
+        # WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE -
+        # SUSPEND_RESUME_COMPATIBLE - SEV_SNP_CAPABLE For more information, see Enabling
+        # guest operating system features.
         # Corresponds to the JSON property `type`
         # @return [String]
         attr_accessor :type
@@ -19224,125 +19320,45 @@ module Google
         end
       end
       
-      # The network endpoint.
-      class NetworkEndpoint
-        include Google::Apis::Core::Hashable
-      
-        # Metadata defined as annotations on the network endpoint.
-        # Corresponds to the JSON property `annotations`
-        # @return [Hash<String,String>]
-        attr_accessor :annotations
-      
-        # Optional fully qualified domain name of network endpoint. This can only be
-        # specified when NetworkEndpointGroup.network_endpoint_type is NON_GCP_FQDN_PORT.
-        # Corresponds to the JSON property `fqdn`
-        # @return [String]
-        attr_accessor :fqdn
-      
-        # The name for a specific VM instance that the IP address belongs to. This is
-        # required for network endpoints of type GCE_VM_IP_PORT. The instance must be in
-        # the same zone of network endpoint group. The name must be 1-63 characters long,
-        # and comply with RFC1035.
-        # Corresponds to the JSON property `instance`
-        # @return [String]
-        attr_accessor :instance
-      
-        # Optional IPv4 address of network endpoint. The IP address must belong to a VM
-        # in Compute Engine (either the primary IP or as part of an aliased IP range).
-        # If the IP address is not specified, then the primary IP address for the VM
-        # instance in the network that the network endpoint group belongs to will be
-        # used.
-        # Corresponds to the JSON property `ipAddress`
-        # @return [String]
-        attr_accessor :ip_address
-      
-        # Optional port number of network endpoint. If not specified, the defaultPort
-        # for the network endpoint group will be used.
-        # Corresponds to the JSON property `port`
-        # @return [Fixnum]
-        attr_accessor :port
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @annotations = args[:annotations] if args.key?(:annotations)
-          @fqdn = args[:fqdn] if args.key?(:fqdn)
-          @instance = args[:instance] if args.key?(:instance)
-          @ip_address = args[:ip_address] if args.key?(:ip_address)
-          @port = args[:port] if args.key?(:port)
-        end
-      end
-      
-      # Represents a collection of network endpoints. A network endpoint group (NEG)
-      # defines how a set of endpoints should be reached, whether they are reachable,
-      # and where they are located. For more information about using NEGs, see Setting
-      # up external HTTP(S) Load Balancing with internet NEGs, Setting up zonal NEGs,
-      # or Setting up external HTTP(S) Load Balancing with serverless NEGs.
-      class NetworkEndpointGroup
+      # Represents a Google Cloud Armor network edge security service resource.
+      class NetworkEdgeSecurityService
         include Google::Apis::Core::Hashable
       
-        # Metadata defined as annotations on the network endpoint group.
-        # Corresponds to the JSON property `annotations`
-        # @return [Hash<String,String>]
-        attr_accessor :annotations
-      
-        # Configuration for an App Engine network endpoint group (NEG). The service is
-        # optional, may be provided explicitly or in the URL mask. The version is
-        # optional and can only be provided explicitly or in the URL mask when service
-        # is present. Note: App Engine service must be in the same project and located
-        # in the same region as the Serverless NEG.
-        # Corresponds to the JSON property `appEngine`
-        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupAppEngine]
-        attr_accessor :app_engine
-      
-        # Configuration for a Cloud Function network endpoint group (NEG). The function
-        # must be provided explicitly or in the URL mask. Note: Cloud Function must be
-        # in the same project and located in the same region as the Serverless NEG.
-        # Corresponds to the JSON property `cloudFunction`
-        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupCloudFunction]
-        attr_accessor :cloud_function
-      
-        # Configuration for a Cloud Run network endpoint group (NEG). The service must
-        # be provided explicitly or in the URL mask. The tag is optional, may be
-        # provided explicitly or in the URL mask. Note: Cloud Run service must be in the
-        # same project and located in the same region as the Serverless NEG.
-        # Corresponds to the JSON property `cloudRun`
-        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupCloudRun]
-        attr_accessor :cloud_run
-      
         # [Output Only] Creation timestamp in RFC3339 text format.
         # Corresponds to the JSON property `creationTimestamp`
         # @return [String]
         attr_accessor :creation_timestamp
       
-        # The default port used if the port number is not specified in the network
-        # endpoint.
-        # Corresponds to the JSON property `defaultPort`
-        # @return [Fixnum]
-        attr_accessor :default_port
-      
         # An optional description of this resource. Provide this property when you
         # create the resource.
         # Corresponds to the JSON property `description`
         # @return [String]
         attr_accessor :description
       
+        # Fingerprint of this resource. A hash of the contents stored in this object.
+        # This field is used in optimistic locking. This field will be ignored when
+        # inserting a NetworkEdgeSecurityService. An up-to-date fingerprint must be
+        # provided in order to update the NetworkEdgeSecurityService, otherwise the
+        # request will fail with error 412 conditionNotMet. To see the latest
+        # fingerprint, make a get() request to retrieve a NetworkEdgeSecurityService.
+        # Corresponds to the JSON property `fingerprint`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :fingerprint
+      
         # [Output Only] The unique identifier for the resource. This identifier is
         # defined by the server.
         # Corresponds to the JSON property `id`
         # @return [Fixnum]
         attr_accessor :id
       
-        # [Output Only] Type of the resource. Always compute#networkEndpointGroup for
-        # network endpoint group.
+        # [Output only] Type of the resource. Always compute#networkEdgeSecurityService
+        # for NetworkEdgeSecurityServices
         # Corresponds to the JSON property `kind`
         # @return [String]
         attr_accessor :kind
       
-        # Name of the resource; provided by the client when the resource is created. The
+        # Name of the resource. Provided by the client when the resource is created. The
         # name must be 1-63 characters long, and comply with RFC1035. Specifically, the
         # name must be 1-63 characters long and match the regular expression `[a-z]([-a-
         # z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter,
@@ -19352,51 +19368,28 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # The URL of the network to which all network endpoints in the NEG belong. Uses "
-        # default" project network if unspecified.
-        # Corresponds to the JSON property `network`
-        # @return [String]
-        attr_accessor :network
-      
-        # Type of network endpoints in this network endpoint group. Can be one of
-        # GCE_VM_IP, GCE_VM_IP_PORT, NON_GCP_PRIVATE_IP_PORT, INTERNET_FQDN_PORT,
-        # INTERNET_IP_PORT, SERVERLESS, PRIVATE_SERVICE_CONNECT.
-        # Corresponds to the JSON property `networkEndpointType`
-        # @return [String]
-        attr_accessor :network_endpoint_type
-      
-        # The target service url used to set up private service connection to a Google
-        # API. An example value is: "asia-northeast3-cloudkms.googleapis.com"
-        # Corresponds to the JSON property `pscTargetService`
-        # @return [String]
-        attr_accessor :psc_target_service
-      
-        # [Output Only] The URL of the region where the network endpoint group is
-        # located.
+        # [Output Only] URL of the region where the resource resides. You must specify
+        # this field as part of the HTTP request URL. It is not settable as a field in
+        # the request body.
         # Corresponds to the JSON property `region`
         # @return [String]
         attr_accessor :region
       
+        # The resource URL for the network edge security service associated with this
+        # network edge security service.
+        # Corresponds to the JSON property `securityPolicy`
+        # @return [String]
+        attr_accessor :security_policy
+      
         # [Output Only] Server-defined URL for the resource.
         # Corresponds to the JSON property `selfLink`
         # @return [String]
         attr_accessor :self_link
       
-        # [Output only] Number of network endpoints in the network endpoint group.
-        # Corresponds to the JSON property `size`
-        # @return [Fixnum]
-        attr_accessor :size
-      
-        # Optional URL of the subnetwork to which all network endpoints in the NEG
-        # belong.
-        # Corresponds to the JSON property `subnetwork`
-        # @return [String]
-        attr_accessor :subnetwork
-      
-        # [Output Only] The URL of the zone where the network endpoint group is located.
-        # Corresponds to the JSON property `zone`
+        # [Output Only] Server-defined URL for this resource with the resource id.
+        # Corresponds to the JSON property `selfLinkWithId`
         # @return [String]
-        attr_accessor :zone
+        attr_accessor :self_link_with_id
       
         def initialize(**args)
            update!(**args)
@@ -19404,44 +19397,41 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @annotations = args[:annotations] if args.key?(:annotations)
-          @app_engine = args[:app_engine] if args.key?(:app_engine)
-          @cloud_function = args[:cloud_function] if args.key?(:cloud_function)
-          @cloud_run = args[:cloud_run] if args.key?(:cloud_run)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
-          @default_port = args[:default_port] if args.key?(:default_port)
           @description = args[:description] if args.key?(:description)
+          @fingerprint = args[:fingerprint] if args.key?(:fingerprint)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
-          @network = args[:network] if args.key?(:network)
-          @network_endpoint_type = args[:network_endpoint_type] if args.key?(:network_endpoint_type)
-          @psc_target_service = args[:psc_target_service] if args.key?(:psc_target_service)
           @region = args[:region] if args.key?(:region)
+          @security_policy = args[:security_policy] if args.key?(:security_policy)
           @self_link = args[:self_link] if args.key?(:self_link)
-          @size = args[:size] if args.key?(:size)
-          @subnetwork = args[:subnetwork] if args.key?(:subnetwork)
-          @zone = args[:zone] if args.key?(:zone)
+          @self_link_with_id = args[:self_link_with_id] if args.key?(:self_link_with_id)
         end
       end
       
       # 
-      class NetworkEndpointGroupAggregatedList
+      class NetworkEdgeSecurityServiceAggregatedList
         include Google::Apis::Core::Hashable
       
+        # 
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
         # [Output Only] Unique identifier for the resource; defined by the server.
         # Corresponds to the JSON property `id`
         # @return [String]
         attr_accessor :id
       
-        # A list of NetworkEndpointGroupsScopedList resources.
+        # A list of NetworkEdgeSecurityServicesScopedList resources.
         # Corresponds to the JSON property `items`
-        # @return [Hash<String,Google::Apis::ComputeV1::NetworkEndpointGroupsScopedList>]
+        # @return [Hash<String,Google::Apis::ComputeV1::NetworkEdgeSecurityServicesScopedList>]
         attr_accessor :items
       
-        # [Output Only] The resource type, which is always compute#
-        # networkEndpointGroupAggregatedList for aggregated lists of network endpoint
-        # groups.
+        # [Output Only] Type of resource. Always compute#
+        # networkEdgeSecurityServiceAggregatedList for lists of Network Edge Security
+        # Services.
         # Corresponds to the JSON property `kind`
         # @return [String]
         attr_accessor :kind
@@ -19467,7 +19457,7 @@ module Google
       
         # [Output Only] Informational warning message.
         # Corresponds to the JSON property `warning`
-        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupAggregatedList::Warning]
+        # @return [Google::Apis::ComputeV1::NetworkEdgeSecurityServiceAggregatedList::Warning]
         attr_accessor :warning
       
         def initialize(**args)
@@ -19476,6 +19466,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @etag = args[:etag] if args.key?(:etag)
           @id = args[:id] if args.key?(:id)
           @items = args[:items] if args.key?(:items)
           @kind = args[:kind] if args.key?(:kind)
@@ -19498,7 +19489,7 @@ module Google
           # [Output Only] Metadata about this warning in key: value format. For example: "
           # data": [ ` "key": "scope", "value": "zones/us-east1-d" `
           # Corresponds to the JSON property `data`
-          # @return [Array<Google::Apis::ComputeV1::NetworkEndpointGroupAggregatedList::Warning::Datum>]
+          # @return [Array<Google::Apis::ComputeV1::NetworkEdgeSecurityServiceAggregatedList::Warning::Datum>]
           attr_accessor :data
         
           # [Output Only] A human-readable description of the warning code.
@@ -19550,30 +19541,447 @@ module Google
         end
       end
       
-      # Configuration for an App Engine network endpoint group (NEG). The service is
-      # optional, may be provided explicitly or in the URL mask. The version is
-      # optional and can only be provided explicitly or in the URL mask when service
-      # is present. Note: App Engine service must be in the same project and located
-      # in the same region as the Serverless NEG.
-      class NetworkEndpointGroupAppEngine
+      # 
+      class NetworkEdgeSecurityServicesScopedList
         include Google::Apis::Core::Hashable
       
-        # Optional serving service. The service name is case-sensitive and must be 1-63
-        # characters long. Example value: "default", "my-service".
-        # Corresponds to the JSON property `service`
-        # @return [String]
-        attr_accessor :service
+        # A list of NetworkEdgeSecurityServices contained in this scope.
+        # Corresponds to the JSON property `networkEdgeSecurityServices`
+        # @return [Array<Google::Apis::ComputeV1::NetworkEdgeSecurityService>]
+        attr_accessor :network_edge_security_services
       
-        # A template to parse service and version fields from a request URL. URL mask
-        # allows for routing to multiple App Engine services without having to create
-        # multiple Network Endpoint Groups and backend services. For example, the
-        # request URLs "foo1-dot-appname.appspot.com/v1" and "foo1-dot-appname.appspot.
-        # com/v2" can be backed by the same Serverless NEG with URL mask "-dot-appname.
-        # appspot.com/". The URL mask will parse them to ` service = "foo1", version = "
-        # v1" ` and ` service = "foo1", version = "v2" ` respectively.
-        # Corresponds to the JSON property `urlMask`
-        # @return [String]
-        attr_accessor :url_mask
+        # Informational warning which replaces the list of security policies when the
+        # list is empty.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeV1::NetworkEdgeSecurityServicesScopedList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @network_edge_security_services = args[:network_edge_security_services] if args.key?(:network_edge_security_services)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # Informational warning which replaces the list of security policies when the
+        # list is empty.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example: "
+          # data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeV1::NetworkEdgeSecurityServicesScopedList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
+      # The network endpoint.
+      class NetworkEndpoint
+        include Google::Apis::Core::Hashable
+      
+        # Metadata defined as annotations on the network endpoint.
+        # Corresponds to the JSON property `annotations`
+        # @return [Hash<String,String>]
+        attr_accessor :annotations
+      
+        # Optional fully qualified domain name of network endpoint. This can only be
+        # specified when NetworkEndpointGroup.network_endpoint_type is NON_GCP_FQDN_PORT.
+        # Corresponds to the JSON property `fqdn`
+        # @return [String]
+        attr_accessor :fqdn
+      
+        # The name for a specific VM instance that the IP address belongs to. This is
+        # required for network endpoints of type GCE_VM_IP_PORT. The instance must be in
+        # the same zone of network endpoint group. The name must be 1-63 characters long,
+        # and comply with RFC1035.
+        # Corresponds to the JSON property `instance`
+        # @return [String]
+        attr_accessor :instance
+      
+        # Optional IPv4 address of network endpoint. The IP address must belong to a VM
+        # in Compute Engine (either the primary IP or as part of an aliased IP range).
+        # If the IP address is not specified, then the primary IP address for the VM
+        # instance in the network that the network endpoint group belongs to will be
+        # used.
+        # Corresponds to the JSON property `ipAddress`
+        # @return [String]
+        attr_accessor :ip_address
+      
+        # Optional port number of network endpoint. If not specified, the defaultPort
+        # for the network endpoint group will be used.
+        # Corresponds to the JSON property `port`
+        # @return [Fixnum]
+        attr_accessor :port
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @annotations = args[:annotations] if args.key?(:annotations)
+          @fqdn = args[:fqdn] if args.key?(:fqdn)
+          @instance = args[:instance] if args.key?(:instance)
+          @ip_address = args[:ip_address] if args.key?(:ip_address)
+          @port = args[:port] if args.key?(:port)
+        end
+      end
+      
+      # Represents a collection of network endpoints. A network endpoint group (NEG)
+      # defines how a set of endpoints should be reached, whether they are reachable,
+      # and where they are located. For more information about using NEGs, see Setting
+      # up external HTTP(S) Load Balancing with internet NEGs, Setting up zonal NEGs,
+      # or Setting up external HTTP(S) Load Balancing with serverless NEGs.
+      class NetworkEndpointGroup
+        include Google::Apis::Core::Hashable
+      
+        # Metadata defined as annotations on the network endpoint group.
+        # Corresponds to the JSON property `annotations`
+        # @return [Hash<String,String>]
+        attr_accessor :annotations
+      
+        # Configuration for an App Engine network endpoint group (NEG). The service is
+        # optional, may be provided explicitly or in the URL mask. The version is
+        # optional and can only be provided explicitly or in the URL mask when service
+        # is present. Note: App Engine service must be in the same project and located
+        # in the same region as the Serverless NEG.
+        # Corresponds to the JSON property `appEngine`
+        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupAppEngine]
+        attr_accessor :app_engine
+      
+        # Configuration for a Cloud Function network endpoint group (NEG). The function
+        # must be provided explicitly or in the URL mask. Note: Cloud Function must be
+        # in the same project and located in the same region as the Serverless NEG.
+        # Corresponds to the JSON property `cloudFunction`
+        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupCloudFunction]
+        attr_accessor :cloud_function
+      
+        # Configuration for a Cloud Run network endpoint group (NEG). The service must
+        # be provided explicitly or in the URL mask. The tag is optional, may be
+        # provided explicitly or in the URL mask. Note: Cloud Run service must be in the
+        # same project and located in the same region as the Serverless NEG.
+        # Corresponds to the JSON property `cloudRun`
+        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupCloudRun]
+        attr_accessor :cloud_run
+      
+        # [Output Only] Creation timestamp in RFC3339 text format.
+        # Corresponds to the JSON property `creationTimestamp`
+        # @return [String]
+        attr_accessor :creation_timestamp
+      
+        # The default port used if the port number is not specified in the network
+        # endpoint.
+        # Corresponds to the JSON property `defaultPort`
+        # @return [Fixnum]
+        attr_accessor :default_port
+      
+        # An optional description of this resource. Provide this property when you
+        # create the resource.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # [Output Only] The unique identifier for the resource. This identifier is
+        # defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [Fixnum]
+        attr_accessor :id
+      
+        # [Output Only] Type of the resource. Always compute#networkEndpointGroup for
+        # network endpoint group.
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # Name of the resource; provided by the client when the resource is created. The
+        # name must be 1-63 characters long, and comply with RFC1035. Specifically, the
+        # name must be 1-63 characters long and match the regular expression `[a-z]([-a-
+        # z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter,
+        # and all following characters must be a dash, lowercase letter, or digit,
+        # except the last character, which cannot be a dash.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The URL of the network to which all network endpoints in the NEG belong. Uses "
+        # default" project network if unspecified.
+        # Corresponds to the JSON property `network`
+        # @return [String]
+        attr_accessor :network
+      
+        # Type of network endpoints in this network endpoint group. Can be one of
+        # GCE_VM_IP, GCE_VM_IP_PORT, NON_GCP_PRIVATE_IP_PORT, INTERNET_FQDN_PORT,
+        # INTERNET_IP_PORT, SERVERLESS, PRIVATE_SERVICE_CONNECT.
+        # Corresponds to the JSON property `networkEndpointType`
+        # @return [String]
+        attr_accessor :network_endpoint_type
+      
+        # The target service url used to set up private service connection to a Google
+        # API. An example value is: "asia-northeast3-cloudkms.googleapis.com"
+        # Corresponds to the JSON property `pscTargetService`
+        # @return [String]
+        attr_accessor :psc_target_service
+      
+        # [Output Only] The URL of the region where the network endpoint group is
+        # located.
+        # Corresponds to the JSON property `region`
+        # @return [String]
+        attr_accessor :region
+      
+        # [Output Only] Server-defined URL for the resource.
+        # Corresponds to the JSON property `selfLink`
+        # @return [String]
+        attr_accessor :self_link
+      
+        # [Output only] Number of network endpoints in the network endpoint group.
+        # Corresponds to the JSON property `size`
+        # @return [Fixnum]
+        attr_accessor :size
+      
+        # Optional URL of the subnetwork to which all network endpoints in the NEG
+        # belong.
+        # Corresponds to the JSON property `subnetwork`
+        # @return [String]
+        attr_accessor :subnetwork
+      
+        # [Output Only] The URL of the zone where the network endpoint group is located.
+        # Corresponds to the JSON property `zone`
+        # @return [String]
+        attr_accessor :zone
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @annotations = args[:annotations] if args.key?(:annotations)
+          @app_engine = args[:app_engine] if args.key?(:app_engine)
+          @cloud_function = args[:cloud_function] if args.key?(:cloud_function)
+          @cloud_run = args[:cloud_run] if args.key?(:cloud_run)
+          @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
+          @default_port = args[:default_port] if args.key?(:default_port)
+          @description = args[:description] if args.key?(:description)
+          @id = args[:id] if args.key?(:id)
+          @kind = args[:kind] if args.key?(:kind)
+          @name = args[:name] if args.key?(:name)
+          @network = args[:network] if args.key?(:network)
+          @network_endpoint_type = args[:network_endpoint_type] if args.key?(:network_endpoint_type)
+          @psc_target_service = args[:psc_target_service] if args.key?(:psc_target_service)
+          @region = args[:region] if args.key?(:region)
+          @self_link = args[:self_link] if args.key?(:self_link)
+          @size = args[:size] if args.key?(:size)
+          @subnetwork = args[:subnetwork] if args.key?(:subnetwork)
+          @zone = args[:zone] if args.key?(:zone)
+        end
+      end
+      
+      # 
+      class NetworkEndpointGroupAggregatedList
+        include Google::Apis::Core::Hashable
+      
+        # [Output Only] Unique identifier for the resource; defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # A list of NetworkEndpointGroupsScopedList resources.
+        # Corresponds to the JSON property `items`
+        # @return [Hash<String,Google::Apis::ComputeV1::NetworkEndpointGroupsScopedList>]
+        attr_accessor :items
+      
+        # [Output Only] The resource type, which is always compute#
+        # networkEndpointGroupAggregatedList for aggregated lists of network endpoint
+        # groups.
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # [Output Only] This token allows you to get the next page of results for list
+        # requests. If the number of results is larger than maxResults, use the
+        # nextPageToken as a value for the query parameter pageToken in the next list
+        # request. Subsequent list requests will have their own nextPageToken to
+        # continue paging through the results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # [Output Only] Server-defined URL for this resource.
+        # Corresponds to the JSON property `selfLink`
+        # @return [String]
+        attr_accessor :self_link
+      
+        # [Output Only] Unreachable resources.
+        # Corresponds to the JSON property `unreachables`
+        # @return [Array<String>]
+        attr_accessor :unreachables
+      
+        # [Output Only] Informational warning message.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeV1::NetworkEndpointGroupAggregatedList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+          @items = args[:items] if args.key?(:items)
+          @kind = args[:kind] if args.key?(:kind)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @self_link = args[:self_link] if args.key?(:self_link)
+          @unreachables = args[:unreachables] if args.key?(:unreachables)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # [Output Only] Informational warning message.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example: "
+          # data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeV1::NetworkEndpointGroupAggregatedList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
+      # Configuration for an App Engine network endpoint group (NEG). The service is
+      # optional, may be provided explicitly or in the URL mask. The version is
+      # optional and can only be provided explicitly or in the URL mask when service
+      # is present. Note: App Engine service must be in the same project and located
+      # in the same region as the Serverless NEG.
+      class NetworkEndpointGroupAppEngine
+        include Google::Apis::Core::Hashable
+      
+        # Optional serving service. The service name is case-sensitive and must be 1-63
+        # characters long. Example value: "default", "my-service".
+        # Corresponds to the JSON property `service`
+        # @return [String]
+        attr_accessor :service
+      
+        # A template to parse service and version fields from a request URL. URL mask
+        # allows for routing to multiple App Engine services without having to create
+        # multiple Network Endpoint Groups and backend services. For example, the
+        # request URLs "foo1-dot-appname.appspot.com/v1" and "foo1-dot-appname.appspot.
+        # com/v2" can be backed by the same Serverless NEG with URL mask "-dot-appname.
+        # appspot.com/". The URL mask will parse them to ` service = "foo1", version = "
+        # v1" ` and ` service = "foo1", version = "v2" ` respectively.
+        # Corresponds to the JSON property `urlMask`
+        # @return [String]
+        attr_accessor :url_mask
       
         # Optional serving version. The version name is case-sensitive and must be 1-100
         # characters long. Example value: "v1", "v2".
@@ -20134,7 +20542,8 @@ module Google
         attr_accessor :kind
       
         # [Output Only] The name of the network interface, which is generated by the
-        # server. For network devices, these are eth0, eth1, etc.
+        # server. For a VM, the network interface uses the nicN naming format. Where N
+        # is a value between 0 and 7. The default interface value is nic0.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -28510,6 +28919,11 @@ module Google
         # @return [Fixnum]
         attr_accessor :priority
       
+        # [Output only] The status of the route.
+        # Corresponds to the JSON property `routeStatus`
+        # @return [String]
+        attr_accessor :route_status
+      
         # [Output Only] The type of this route, which can be one of the following values:
         # - 'TRANSIT' for a transit route that this router learned from another Cloud
         # Router and will readvertise to one of its BGP peers - 'SUBNET' for a route
@@ -28557,6 +28971,7 @@ module Google
           @next_hop_peering = args[:next_hop_peering] if args.key?(:next_hop_peering)
           @next_hop_vpn_tunnel = args[:next_hop_vpn_tunnel] if args.key?(:next_hop_vpn_tunnel)
           @priority = args[:priority] if args.key?(:priority)
+          @route_status = args[:route_status] if args.key?(:route_status)
           @route_type = args[:route_type] if args.key?(:route_type)
           @self_link = args[:self_link] if args.key?(:self_link)
           @tags = args[:tags] if args.key?(:tags)
@@ -30626,6 +31041,136 @@ module Google
         end
       end
       
+      # 
+      class SecurityPoliciesAggregatedList
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
+        # [Output Only] Unique identifier for the resource; defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # A list of SecurityPoliciesScopedList resources.
+        # Corresponds to the JSON property `items`
+        # @return [Hash<String,Google::Apis::ComputeV1::SecurityPoliciesScopedList>]
+        attr_accessor :items
+      
+        # [Output Only] Type of resource. Always compute#securityPolicyAggregatedList
+        # for lists of Security Policies.
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # [Output Only] This token allows you to get the next page of results for list
+        # requests. If the number of results is larger than maxResults, use the
+        # nextPageToken as a value for the query parameter pageToken in the next list
+        # request. Subsequent list requests will have their own nextPageToken to
+        # continue paging through the results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # [Output Only] Server-defined URL for this resource.
+        # Corresponds to the JSON property `selfLink`
+        # @return [String]
+        attr_accessor :self_link
+      
+        # [Output Only] Unreachable resources.
+        # Corresponds to the JSON property `unreachables`
+        # @return [Array<String>]
+        attr_accessor :unreachables
+      
+        # [Output Only] Informational warning message.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeV1::SecurityPoliciesAggregatedList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @etag = args[:etag] if args.key?(:etag)
+          @id = args[:id] if args.key?(:id)
+          @items = args[:items] if args.key?(:items)
+          @kind = args[:kind] if args.key?(:kind)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @self_link = args[:self_link] if args.key?(:self_link)
+          @unreachables = args[:unreachables] if args.key?(:unreachables)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # [Output Only] Informational warning message.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example: "
+          # data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeV1::SecurityPoliciesAggregatedList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
       # 
       class SecurityPoliciesListPreconfiguredExpressionSetsResponse
         include Google::Apis::Core::Hashable
@@ -30645,6 +31190,97 @@ module Google
         end
       end
       
+      # 
+      class SecurityPoliciesScopedList
+        include Google::Apis::Core::Hashable
+      
+        # A list of SecurityPolicies contained in this scope.
+        # Corresponds to the JSON property `securityPolicies`
+        # @return [Array<Google::Apis::ComputeV1::SecurityPolicy>]
+        attr_accessor :security_policies
+      
+        # Informational warning which replaces the list of security policies when the
+        # list is empty.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeV1::SecurityPoliciesScopedList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @security_policies = args[:security_policies] if args.key?(:security_policies)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # Informational warning which replaces the list of security policies when the
+        # list is empty.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example: "
+          # data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeV1::SecurityPoliciesScopedList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
       # 
       class SecurityPoliciesWafConfig
         include Google::Apis::Core::Hashable
@@ -30685,6 +31321,11 @@ module Google
         # @return [String]
         attr_accessor :creation_timestamp
       
+        # 
+        # Corresponds to the JSON property `ddosProtectionConfig`
+        # @return [Google::Apis::ComputeV1::SecurityPolicyDdosProtectionConfig]
+        attr_accessor :ddos_protection_config
+      
         # An optional description of this resource. Provide this property when you
         # create the resource.
         # Corresponds to the JSON property `description`
@@ -30730,6 +31371,12 @@ module Google
         # @return [Google::Apis::ComputeV1::SecurityPolicyRecaptchaOptionsConfig]
         attr_accessor :recaptcha_options_config
       
+        # [Output Only] URL of the region where the regional security policy resides.
+        # This field is not applicable to global security policies.
+        # Corresponds to the JSON property `region`
+        # @return [String]
+        attr_accessor :region
+      
         # A list of rules that belong to this policy. There must always be a default
         # rule (rule with priority 2147483647 and match "*"). If no rules are provided
         # when creating a security policy, a default rule with action "allow" will be
@@ -30767,12 +31414,14 @@ module Google
           @adaptive_protection_config = args[:adaptive_protection_config] if args.key?(:adaptive_protection_config)
           @advanced_options_config = args[:advanced_options_config] if args.key?(:advanced_options_config)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
+          @ddos_protection_config = args[:ddos_protection_config] if args.key?(:ddos_protection_config)
           @description = args[:description] if args.key?(:description)
           @fingerprint = args[:fingerprint] if args.key?(:fingerprint)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
           @recaptcha_options_config = args[:recaptcha_options_config] if args.key?(:recaptcha_options_config)
+          @region = args[:region] if args.key?(:region)
           @rules = args[:rules] if args.key?(:rules)
           @self_link = args[:self_link] if args.key?(:self_link)
           @type = args[:type] if args.key?(:type)
@@ -30850,6 +31499,25 @@ module Google
         end
       end
       
+      # 
+      class SecurityPolicyDdosProtectionConfig
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `ddosProtection`
+        # @return [String]
+        attr_accessor :ddos_protection
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @ddos_protection = args[:ddos_protection] if args.key?(:ddos_protection)
+        end
+      end
+      
       # 
       class SecurityPolicyList
         include Google::Apis::Core::Hashable
@@ -33628,7 +34296,7 @@ module Google
         attr_accessor :enable_flow_logs
         alias_method :enable_flow_logs?, :enable_flow_logs
       
-        # [Output Only] The range of external IPv6 addresses that are owned by this
+        # [Output Only] The external IPv6 address range that is assigned to this
         # subnetwork.
         # Corresponds to the JSON property `externalIpv6Prefix`
         # @return [String]
@@ -33657,9 +34325,8 @@ module Google
         # @return [Fixnum]
         attr_accessor :id
       
-        # [Output Only] The range of internal IPv6 addresses that are owned by this
-        # subnetwork. Note this is for general VM to VM communication, not to be
-        # confused with the ipv6_cidr_range field.
+        # [Output Only] The internal IPv6 address range that is assigned to this
+        # subnetwork.
         # Corresponds to the JSON property `internalIpv6Prefix`
         # @return [String]
         attr_accessor :internal_ipv6_prefix
@@ -33676,14 +34343,12 @@ module Google
       
         # The access type of IPv6 address this subnet holds. It's immutable and can only
         # be specified during creation or the first time the subnet is updated into
-        # IPV4_IPV6 dual stack. If the ipv6_type is EXTERNAL then this subnet cannot
-        # enable direct path.
+        # IPV4_IPV6 dual stack.
         # Corresponds to the JSON property `ipv6AccessType`
         # @return [String]
         attr_accessor :ipv6_access_type
       
-        # [Output Only] The range of internal IPv6 addresses that are owned by this
-        # subnetwork. Note this will be for private google access only eventually.
+        # [Output Only] This field is for internal use.
         # Corresponds to the JSON property `ipv6CidrRange`
         # @return [String]
         attr_accessor :ipv6_cidr_range
@@ -33724,10 +34389,8 @@ module Google
         attr_accessor :private_ip_google_access
         alias_method :private_ip_google_access?, :private_ip_google_access
       
-        # The private IPv6 google access type for the VMs in this subnet. This is an
-        # expanded field of enablePrivateV6Access. If both fields are set,
-        # privateIpv6GoogleAccess will take priority. This field can be both set at
-        # resource creation time and updated using patch.
+        # This field is for internal use. This field can be both set at resource
+        # creation time and updated using patch.
         # Corresponds to the JSON property `privateIpv6GoogleAccess`
         # @return [String]
         attr_accessor :private_ipv6_google_access