google-cloud-network_security-v1 0.a → 0.1.0

data/proto_docs/google/cloud/networksecurity/v1/address_group.rb

@@ -0,0 +1,374 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # AddressGroup is a resource that specifies how a collection of IP/DNS used
+        # in Firewall Policy.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the AddressGroup resource. It matches pattern
+        #     `projects/*/locations/{location}/addressGroups/<address_group>`.
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     Optional. Free-text description of the resource.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was updated.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Set of label tags associated with the AddressGroup resource.
+        # @!attribute [rw] type
+        #   @return [::Google::Cloud::NetworkSecurity::V1::AddressGroup::Type]
+        #     Required. The type of the Address Group. Possible values are "IPv4" or
+        #     "IPV6".
+        # @!attribute [rw] items
+        #   @return [::Array<::String>]
+        #     Optional. List of items.
+        # @!attribute [rw] capacity
+        #   @return [::Integer]
+        #     Required. Capacity of the Address Group
+        # @!attribute [r] self_link
+        #   @return [::String]
+        #     Output only. Server-defined fully-qualified URL for this resource.
+        # @!attribute [rw] purpose
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::AddressGroup::Purpose>]
+        #     Optional. List of supported purposes of the Address Group.
+        class AddressGroup
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Possible type of the Address Group.
+          module Type
+            # Default value.
+            TYPE_UNSPECIFIED = 0
+
+            # IP v4 ranges.
+            IPV4 = 1
+
+            # IP v6 ranges.
+            IPV6 = 2
+          end
+
+          # Purpose of the Address Group.
+          module Purpose
+            # Default value. Should never happen.
+            PURPOSE_UNSPECIFIED = 0
+
+            # Address Group is distributed to VMC, and is usable in Firewall Policies
+            # and other systems that rely on VMC.
+            DEFAULT = 1
+
+            # Address Group is usable in Cloud Armor.
+            CLOUD_ARMOR = 2
+          end
+        end
+
+        # Request used with the ListAddressGroups method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the AddressGroups
+        #     should be listed, specified in the format
+        #     `projects/*/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of AddressGroups to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last
+        #     `ListAddressGroupsResponse` Indicates that this is a
+        #     continuation of a prior `ListAddressGroups` call, and
+        #     that the system should return the next page of data.
+        # @!attribute [rw] return_partial_success
+        #   @return [::Boolean]
+        #     Optional. If true, allow partial responses for multi-regional Aggregated
+        #     List requests.
+        class ListAddressGroupsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response returned by the ListAddressGroups method.
+        # @!attribute [rw] address_groups
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::AddressGroup>]
+        #     List of AddressGroups resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListAddressGroupsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the GetAddressGroup method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the AddressGroup to get. Must be in the format
+        #     `projects/*/locations/{location}/addressGroups/*`.
+        class GetAddressGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the CreateAddressGroup method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the AddressGroup. Must be in the
+        #     format `projects/*/locations/{location}`.
+        # @!attribute [rw] address_group_id
+        #   @return [::String]
+        #     Required. Short name of the AddressGroup resource to be created.
+        #     This value should be 1-63 characters long, containing only
+        #     letters, numbers, hyphens, and underscores, and should not start
+        #     with a number. E.g. "authz_policy".
+        # @!attribute [rw] address_group
+        #   @return [::Google::Cloud::NetworkSecurity::V1::AddressGroup]
+        #     Required. AddressGroup resource to be created.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and
+        #     the request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class CreateAddressGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the UpdateAddressGroup method.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Field mask is used to specify the fields to be overwritten in the
+        #     AddressGroup resource by the update.
+        #     The fields specified in the update_mask are relative to the resource, not
+        #     the full request. A field will be overwritten if it is in the mask. If the
+        #     user does not provide a mask then all fields will be overwritten.
+        # @!attribute [rw] address_group
+        #   @return [::Google::Cloud::NetworkSecurity::V1::AddressGroup]
+        #     Required. Updated AddressGroup resource.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and
+        #     the request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class UpdateAddressGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the DeleteAddressGroup method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the AddressGroup to delete. Must be in the format
+        #     `projects/*/locations/{location}/addressGroups/*`.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and
+        #     the request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class DeleteAddressGroupRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the AddAddressGroupItems method.
+        # @!attribute [rw] address_group
+        #   @return [::String]
+        #     Required. A name of the AddressGroup to add items to. Must be in the format
+        #     `projects|organization/*/locations/{location}/addressGroups/*`.
+        # @!attribute [rw] items
+        #   @return [::Array<::String>]
+        #     Required. List of items to add.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and
+        #     the request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class AddAddressGroupItemsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the RemoveAddressGroupItems method.
+        # @!attribute [rw] address_group
+        #   @return [::String]
+        #     Required. A name of the AddressGroup to remove items from. Must be in the
+        #     format `projects|organization/*/locations/{location}/addressGroups/*`.
+        # @!attribute [rw] items
+        #   @return [::Array<::String>]
+        #     Required. List of items to remove.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and
+        #     the request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class RemoveAddressGroupItemsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the CloneAddressGroupItems method.
+        # @!attribute [rw] address_group
+        #   @return [::String]
+        #     Required. A name of the AddressGroup to clone items to. Must be in the
+        #     format `projects|organization/*/locations/{location}/addressGroups/*`.
+        # @!attribute [rw] source_address_group
+        #   @return [::String]
+        #     Required. Source address group to clone items from.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and
+        #     the request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class CloneAddressGroupItemsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the ListAddressGroupReferences method.
+        # @!attribute [rw] address_group
+        #   @return [::String]
+        #     Required. A name of the AddressGroup to clone items to. Must be in the
+        #     format `projects|organization/*/locations/{location}/addressGroups/*`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     The maximum number of references to return.  If unspecified, server
+        #     will pick an appropriate default. Server may return fewer items than
+        #     requested. A caller should only rely on response's
+        #     {::Google::Cloud::NetworkSecurity::V1::ListAddressGroupReferencesResponse#next_page_token next_page_token}
+        #     to determine if there are more AddressGroupUsers left to be queried.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The next_page_token value returned from a previous List request,
+        #     if any.
+        class ListAddressGroupReferencesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response of the ListAddressGroupReferences method.
+        # @!attribute [rw] address_group_references
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::ListAddressGroupReferencesResponse::AddressGroupReference>]
+        #     A list of references that matches the specified filter in the request.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        class ListAddressGroupReferencesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # The Reference of AddressGroup.
+          # @!attribute [rw] firewall_policy
+          #   @return [::String]
+          #     FirewallPolicy that is using the Address Group.
+          # @!attribute [rw] security_policy
+          #   @return [::String]
+          #     Cloud Armor SecurityPolicy that is using the Address Group.
+          # @!attribute [rw] rule_priority
+          #   @return [::Integer]
+          #     Rule priority of the FirewallPolicy that is using the Address Group.
+          class AddressGroupReference
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/networksecurity/v1/authorization_policy.rb

@@ -0,0 +1,263 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # AuthorizationPolicy is a resource that specifies how a server
+        # should authorize incoming connections. This resource in itself does
+        # not change the configuration unless it's attached to a target https
+        # proxy or endpoint config selector resource.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the AuthorizationPolicy resource. It matches pattern
+        #     `projects/{project}/locations/{location}/authorizationPolicies/<authorization_policy>`.
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     Optional. Free-text description of the resource.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was updated.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Set of label tags associated with the AuthorizationPolicy
+        #     resource.
+        # @!attribute [rw] action
+        #   @return [::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy::Action]
+        #     Required. The action to take when a rule match is found. Possible values
+        #     are "ALLOW" or "DENY".
+        # @!attribute [rw] rules
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy::Rule>]
+        #     Optional. List of rules to match. Note that at least one of the rules must
+        #     match in order for the action specified in the 'action' field to be taken.
+        #     A rule is a match if there is a matching source and destination. If left
+        #     blank, the action specified in the `action` field will be applied on every
+        #     request.
+        class AuthorizationPolicy
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Specification of rules.
+          # @!attribute [rw] sources
+          #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy::Rule::Source>]
+          #     Optional. List of attributes for the traffic source. All of the sources
+          #     must match. A source is a match if both principals and ip_blocks match.
+          #     If not set, the action specified in the 'action' field will be applied
+          #     without any rule checks for the source.
+          # @!attribute [rw] destinations
+          #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy::Rule::Destination>]
+          #     Optional. List of attributes for the traffic destination. All of the
+          #     destinations must match. A destination is a match if a request matches
+          #     all the specified hosts, ports, methods and headers. If not set, the
+          #     action specified in the 'action' field will be applied without any rule
+          #     checks for the destination.
+          class Rule
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+
+            # Specification of traffic source attributes.
+            # @!attribute [rw] principals
+            #   @return [::Array<::String>]
+            #     Optional. List of peer identities to match for authorization. At least
+            #     one principal should match. Each peer can be an exact match, or a
+            #     prefix match (example, "namespace/*") or a suffix match (example,
+            #     "*/service-account") or a presence match "*". Authorization based on
+            #     the principal name without certificate validation (configured by
+            #     ServerTlsPolicy resource) is considered insecure.
+            # @!attribute [rw] ip_blocks
+            #   @return [::Array<::String>]
+            #     Optional. List of CIDR ranges to match based on source IP address. At
+            #     least one IP block should match. Single IP (e.g., "1.2.3.4") and CIDR
+            #     (e.g., "1.2.3.0/24") are supported. Authorization based on source IP
+            #     alone should be avoided. The IP addresses of any load balancers or
+            #     proxies should be considered untrusted.
+            class Source
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+            end
+
+            # Specification of traffic destination attributes.
+            # @!attribute [rw] hosts
+            #   @return [::Array<::String>]
+            #     Required. List of host names to match. Matched against the ":authority"
+            #     header in http requests. At least one host should match. Each host can
+            #     be an exact match, or a prefix match (example "mydomain.*") or a suffix
+            #     match (example "*.myorg.com") or a presence (any) match "*".
+            # @!attribute [rw] ports
+            #   @return [::Array<::Integer>]
+            #     Required. List of destination ports to match. At least one port should
+            #     match.
+            # @!attribute [rw] methods
+            #   @return [::Array<::String>]
+            #     Optional. A list of HTTP methods to match. At least one method should
+            #     match. Should not be set for gRPC services.
+            # @!attribute [rw] http_header_match
+            #   @return [::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy::Rule::Destination::HttpHeaderMatch]
+            #     Optional. Match against key:value pair in http header. Provides a
+            #     flexible match based on HTTP headers, for potentially advanced use
+            #     cases. At least one header should match. Avoid using header matches to
+            #     make authorization decisions unless there is a strong guarantee that
+            #     requests arrive through a trusted client or proxy.
+            class Destination
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+
+              # Specification of HTTP header match attributes.
+              # @!attribute [rw] regex_match
+              #   @return [::String]
+              #     Required. The value of the header must match the regular expression
+              #     specified in regexMatch. For regular expression grammar,
+              #     please see: en.cppreference.com/w/cpp/regex/ecmascript
+              #     For matching against a port specified in the HTTP
+              #     request, use a headerMatch with headerName set to Host
+              #     and a regular expression that satisfies the RFC2616 Host
+              #     header's port specifier.
+              # @!attribute [rw] header_name
+              #   @return [::String]
+              #     Required. The name of the HTTP header to match. For matching
+              #     against the HTTP request's authority, use a headerMatch
+              #     with the header name ":authority". For matching a
+              #     request's method, use the headerName ":method".
+              class HttpHeaderMatch
+                include ::Google::Protobuf::MessageExts
+                extend ::Google::Protobuf::MessageExts::ClassMethods
+              end
+            end
+          end
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Possible values that define what action to take.
+          module Action
+            # Default value.
+            ACTION_UNSPECIFIED = 0
+
+            # Grant access.
+            ALLOW = 1
+
+            # Deny access.
+            # Deny rules should be avoided unless they are used to provide a default
+            # "deny all" fallback.
+            DENY = 2
+          end
+        end
+
+        # Request used with the ListAuthorizationPolicies method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the AuthorizationPolicies
+        #     should be listed, specified in the format
+        #     `projects/{project}/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of AuthorizationPolicies to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last
+        #     `ListAuthorizationPoliciesResponse` Indicates that this is a
+        #     continuation of a prior `ListAuthorizationPolicies` call, and
+        #     that the system should return the next page of data.
+        class ListAuthorizationPoliciesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response returned by the ListAuthorizationPolicies method.
+        # @!attribute [rw] authorization_policies
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy>]
+        #     List of AuthorizationPolicies resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        class ListAuthorizationPoliciesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the GetAuthorizationPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the AuthorizationPolicy to get. Must be in the format
+        #     `projects/{project}/locations/{location}/authorizationPolicies/*`.
+        class GetAuthorizationPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the CreateAuthorizationPolicy method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the AuthorizationPolicy. Must be in the
+        #     format `projects/{project}/locations/{location}`.
+        # @!attribute [rw] authorization_policy_id
+        #   @return [::String]
+        #     Required. Short name of the AuthorizationPolicy resource to be created.
+        #     This value should be 1-63 characters long, containing only
+        #     letters, numbers, hyphens, and underscores, and should not start
+        #     with a number. E.g. "authz_policy".
+        # @!attribute [rw] authorization_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy]
+        #     Required. AuthorizationPolicy resource to be created.
+        class CreateAuthorizationPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the UpdateAuthorizationPolicy method.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Field mask is used to specify the fields to be overwritten in the
+        #     AuthorizationPolicy resource by the update.
+        #     The fields specified in the update_mask are relative to the resource, not
+        #     the full request. A field will be overwritten if it is in the mask. If the
+        #     user does not provide a mask then all fields will be overwritten.
+        # @!attribute [rw] authorization_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::AuthorizationPolicy]
+        #     Required. Updated AuthorizationPolicy resource.
+        class UpdateAuthorizationPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the DeleteAuthorizationPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the AuthorizationPolicy to delete. Must be in the
+        #     format `projects/{project}/locations/{location}/authorizationPolicies/*`.
+        class DeleteAuthorizationPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end