google-cloud-privileged_access_manager-v1 1.6.1 → 1.7.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +1 -49
- data/lib/google/cloud/privileged_access_manager/v1/bindings_override.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/client.rb +3 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/credentials.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/operations.rb +3 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/paths.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/rest/client.rb +3 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/rest/operations.rb +4 -2
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/rest/service_stub.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/rest.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1/rest.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1/version.rb +1 -1
- data/lib/google/cloud/privileged_access_manager/v1.rb +1 -1
- data/lib/google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager_services_pb.rb +1 -1
- data/lib/google-cloud-privileged_access_manager-v1.rb +1 -1
- data/proto_docs/google/api/client.rb +1 -1
- data/proto_docs/google/api/field_behavior.rb +1 -1
- data/proto_docs/google/api/launch_stage.rb +1 -1
- data/proto_docs/google/api/resource.rb +1 -1
- data/proto_docs/google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager.rb +1 -1
- data/proto_docs/google/longrunning/operations.rb +1 -1
- data/proto_docs/google/protobuf/any.rb +1 -1
- data/proto_docs/google/protobuf/duration.rb +1 -1
- data/proto_docs/google/protobuf/empty.rb +1 -1
- data/proto_docs/google/protobuf/field_mask.rb +1 -1
- data/proto_docs/google/protobuf/timestamp.rb +8 -7
- data/proto_docs/google/rpc/status.rb +1 -1
- metadata +16 -28
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 96166d4bee664ec6af366a757020b2e6e247a07798d5f5ab4d9c696367c70eb0
|
|
4
|
+
data.tar.gz: 6ad4099288e4368d4f4bd726568ec6d9ed500ff292aea70ca8139225668b63a8
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: ae64ec5d0473a53df1a12d75e956dc0c8b00bf289ff20066cac4de21f44bdd88bbeaa3957f183116bc5923836568525dea6aad2509d510d5d88547e5bcba33c8
|
|
7
|
+
data.tar.gz: 4ec701f1a5c110b759ff594f7da832c9558dde32db3f87fca3b5f69844ea19d965ce7e70c0acf9dad642d3258a78ef12b7ec7077d401ec543cd21c8052b240ec
|
data/README.md
CHANGED
|
@@ -2,54 +2,6 @@
|
|
|
2
2
|
|
|
3
3
|
Privileged Access Manager (PAM) helps you on your journey towards least privilege and helps mitigate risks tied to privileged access misuse or abuse. PAM allows you to shift from always-on standing privileges towards on-demand access with just-in-time, time-bound, and approval-based access elevations. PAM allows IAM administrators to create entitlements that can grant just-in-time, temporary access to any resource scope. Requesters can explore eligible entitlements and request the access needed for their task. Approvers are notified when approvals await their decision. Streamlined workflows facilitated by using PAM can support various use cases, including emergency access for incident responders, time-boxed access for developers for critical deployment or maintenance, temporary access for operators for data ingestion and audits, JIT access to service accounts for automated tasks, and more.
|
|
4
4
|
|
|
5
|
-
## Overview
|
|
6
|
-
|
|
7
|
-
Privileged Access Manager (PAM) is a Google Cloud native, managed solution
|
|
8
|
-
to secure, manage and audit privileged access while ensuring operational
|
|
9
|
-
velocity and developer productivity.
|
|
10
|
-
|
|
11
|
-
PAM enables just-in-time, time-bound, approval-based access elevations,
|
|
12
|
-
and auditing of privileged access elevations and activity. PAM lets you
|
|
13
|
-
define the rules of who can request access, what they can request access
|
|
14
|
-
to, and if they should be granted access with or without approvals based
|
|
15
|
-
on the sensitivity of the access and emergency of the situation.
|
|
16
|
-
|
|
17
|
-
## Concepts
|
|
18
|
-
|
|
19
|
-
### Entitlement
|
|
20
|
-
|
|
21
|
-
An entitlement is an eligibility or license that allows specified users
|
|
22
|
-
(requesters) to request and obtain access to specified resources subject
|
|
23
|
-
to a set of conditions such as duration, etc. entitlements can be granted
|
|
24
|
-
to both human and non-human principals.
|
|
25
|
-
|
|
26
|
-
### Grant
|
|
27
|
-
|
|
28
|
-
A grant is an instance of active usage against the entitlement. A user can
|
|
29
|
-
place a request for a grant against an entitlement. The request may be
|
|
30
|
-
forwarded to an approver for their decision. Once approved, the grant is
|
|
31
|
-
activated, ultimately giving the user access (roles/permissions) on a
|
|
32
|
-
resource per the criteria specified in entitlement.
|
|
33
|
-
|
|
34
|
-
### How does PAM work
|
|
35
|
-
|
|
36
|
-
PAM creates and uses a service agent (Google-managed service account) to
|
|
37
|
-
perform the required IAM policy changes for granting access at a
|
|
38
|
-
specific
|
|
39
|
-
resource/access scope. The service agent requires getIAMPolicy and
|
|
40
|
-
setIAMPolicy permissions at the appropriate (or higher) access scope
|
|
41
|
-
-
|
|
42
|
-
Organization/Folder/Project to make policy changes on the resources listed
|
|
43
|
-
in PAM entitlements.
|
|
44
|
-
|
|
45
|
-
When enabling PAM for a resource scope, the user/ principal performing
|
|
46
|
-
that action should have the appropriate permissions at that resource
|
|
47
|
-
scope
|
|
48
|
-
(resourcemanager.\\{projects|folders|organizations}.setIamPolicy,
|
|
49
|
-
resourcemanager.\\{projects|folders|organizations}.getIamPolicy, and
|
|
50
|
-
resourcemanager.\\{projects|folders|organizations}.get) to list and grant
|
|
51
|
-
the service agent/account the required access to perform IAM policy
|
|
52
|
-
changes.
|
|
53
5
|
|
|
54
6
|
https://github.com/googleapis/google-cloud-ruby
|
|
55
7
|
|
|
@@ -133,7 +85,7 @@ To browse ready to use code samples check [Google Cloud Samples](https://cloud.g
|
|
|
133
85
|
|
|
134
86
|
## Supported Ruby Versions
|
|
135
87
|
|
|
136
|
-
This library is supported on Ruby 3.
|
|
88
|
+
This library is supported on Ruby 3.2+.
|
|
137
89
|
|
|
138
90
|
Google provides official support for Ruby versions that are actively supported
|
|
139
91
|
by Ruby Core—that is, Ruby versions that are either in normal maintenance or
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -1739,6 +1739,7 @@ module Google
|
|
|
1739
1739
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
1740
1740
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
1741
1741
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
1742
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
1742
1743
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
1743
1744
|
# trigger a retry.
|
|
1744
1745
|
# @return [::Hash]
|
|
@@ -1822,6 +1823,7 @@ module Google
|
|
|
1822
1823
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
1823
1824
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
1824
1825
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
1826
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
1825
1827
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
1826
1828
|
# trigger a retry.
|
|
1827
1829
|
#
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -703,6 +703,7 @@ module Google
|
|
|
703
703
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
704
704
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
705
705
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
706
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
706
707
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
707
708
|
# trigger a retry.
|
|
708
709
|
# @return [::Hash]
|
|
@@ -786,6 +787,7 @@ module Google
|
|
|
786
787
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
787
788
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
788
789
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
790
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
789
791
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
790
792
|
# trigger a retry.
|
|
791
793
|
#
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -1609,6 +1609,7 @@ module Google
|
|
|
1609
1609
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
1610
1610
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
1611
1611
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
1612
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
1612
1613
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
1613
1614
|
# trigger a retry.
|
|
1614
1615
|
# @return [::Hash]
|
|
@@ -1688,6 +1689,7 @@ module Google
|
|
|
1688
1689
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
1689
1690
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
1690
1691
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
1692
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
1691
1693
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
1692
1694
|
# trigger a retry.
|
|
1693
1695
|
#
|
data/lib/google/cloud/privileged_access_manager/v1/privileged_access_manager/rest/operations.rb
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -541,6 +541,7 @@ module Google
|
|
|
541
541
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
542
542
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
543
543
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
544
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
544
545
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
545
546
|
# trigger a retry.
|
|
546
547
|
# @return [::Hash]
|
|
@@ -613,6 +614,7 @@ module Google
|
|
|
613
614
|
# * `:initial_delay` (*type:* `Numeric`) - The initial delay in seconds.
|
|
614
615
|
# * `:max_delay` (*type:* `Numeric`) - The max delay in seconds.
|
|
615
616
|
# * `:multiplier` (*type:* `Numeric`) - The incremental backoff multiplier.
|
|
617
|
+
# * `:jitter` (*type:* `Numeric`) - The jitter in seconds. Default: 1.0.
|
|
616
618
|
# * `:retry_codes` (*type:* `Array<String>`) - The error codes that should
|
|
617
619
|
# trigger a retry.
|
|
618
620
|
#
|
|
@@ -953,7 +955,7 @@ module Google
|
|
|
953
955
|
uri_template: "/v1/{name}:cancel",
|
|
954
956
|
body: "*",
|
|
955
957
|
matches: [
|
|
956
|
-
["name", %r{^operations(
|
|
958
|
+
["name", %r{^operations(?:/(?<__wildcard__>.*))?$}, true]
|
|
957
959
|
]
|
|
958
960
|
)
|
|
959
961
|
transcoder.transcode request_pb
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
2
|
# Source: google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager.proto for package 'Google.Cloud.PrivilegedAccessManager.V1'
|
|
3
3
|
# Original file comments:
|
|
4
|
-
# Copyright
|
|
4
|
+
# Copyright 2025 Google LLC
|
|
5
5
|
#
|
|
6
6
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
7
7
|
# you may not use this file except in compliance with the License.
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -110,14 +110,15 @@ module Google
|
|
|
110
110
|
# ) to obtain a formatter capable of generating timestamps in this format.
|
|
111
111
|
# @!attribute [rw] seconds
|
|
112
112
|
# @return [::Integer]
|
|
113
|
-
# Represents seconds of UTC time since Unix epoch
|
|
114
|
-
#
|
|
115
|
-
# 9999-12-31T23:59:59Z
|
|
113
|
+
# Represents seconds of UTC time since Unix epoch 1970-01-01T00:00:00Z. Must
|
|
114
|
+
# be between -315576000000 and 315576000000 inclusive (which corresponds to
|
|
115
|
+
# 0001-01-01T00:00:00Z to 9999-12-31T23:59:59Z).
|
|
116
116
|
# @!attribute [rw] nanos
|
|
117
117
|
# @return [::Integer]
|
|
118
|
-
# Non-negative fractions of a second at nanosecond resolution.
|
|
119
|
-
#
|
|
120
|
-
#
|
|
118
|
+
# Non-negative fractions of a second at nanosecond resolution. This field is
|
|
119
|
+
# the nanosecond portion of the duration, not an alternative to seconds.
|
|
120
|
+
# Negative second values with fractions must still have non-negative nanos
|
|
121
|
+
# values that count forward in time. Must be between 0 and 999,999,999
|
|
121
122
|
# inclusive.
|
|
122
123
|
class Timestamp
|
|
123
124
|
include ::Google::Protobuf::MessageExts
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-privileged_access_manager-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.7.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - "~>"
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: '1.
|
|
18
|
+
version: '1.3'
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - "~>"
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: '1.
|
|
25
|
+
version: '1.3'
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: google-cloud-errors
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -51,32 +51,20 @@ dependencies:
|
|
|
51
51
|
- - "~>"
|
|
52
52
|
- !ruby/object:Gem::Version
|
|
53
53
|
version: '1.0'
|
|
54
|
-
description:
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
to
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
to an approver for their decision. Once approved, the grant is activated, ultimately
|
|
67
|
-
giving the user access (roles/permissions) on a resource per the criteria specified
|
|
68
|
-
in entitlement. ### How does PAM work PAM creates and uses a service agent (Google-managed
|
|
69
|
-
service account) to perform the required IAM policy changes for granting access
|
|
70
|
-
at a specific resource/access scope. The service agent requires getIAMPolicy and
|
|
71
|
-
setIAMPolicy permissions at the appropriate (or higher) access scope - Organization/Folder/Project
|
|
72
|
-
to make policy changes on the resources listed in PAM entitlements. When enabling
|
|
73
|
-
PAM for a resource scope, the user/ principal performing that action should have
|
|
74
|
-
the appropriate permissions at that resource scope (resourcemanager.{projects|folders|organizations}.setIamPolicy,
|
|
75
|
-
resourcemanager.{projects|folders|organizations}.getIamPolicy, and resourcemanager.{projects|folders|organizations}.get)
|
|
76
|
-
to list and grant the service agent/account the required access to perform IAM policy
|
|
77
|
-
changes. Note that google-cloud-privileged_access_manager-v1 is a version-specific
|
|
54
|
+
description: Privileged Access Manager (PAM) helps you on your journey towards least
|
|
55
|
+
privilege and helps mitigate risks tied to privileged access misuse or abuse. PAM
|
|
56
|
+
allows you to shift from always-on standing privileges towards on-demand access
|
|
57
|
+
with just-in-time, time-bound, and approval-based access elevations. PAM allows
|
|
58
|
+
IAM administrators to create entitlements that can grant just-in-time, temporary
|
|
59
|
+
access to any resource scope. Requesters can explore eligible entitlements and request
|
|
60
|
+
the access needed for their task. Approvers are notified when approvals await their
|
|
61
|
+
decision. Streamlined workflows facilitated by using PAM can support various use
|
|
62
|
+
cases, including emergency access for incident responders, time-boxed access for
|
|
63
|
+
developers for critical deployment or maintenance, temporary access for operators
|
|
64
|
+
for data ingestion and audits, JIT access to service accounts for automated tasks,
|
|
65
|
+
and more. Note that google-cloud-privileged_access_manager-v1 is a version-specific
|
|
78
66
|
client library. For most uses, we recommend installing the main client library google-cloud-privileged_access_manager
|
|
79
|
-
instead. See the readme for more details.
|
|
67
|
+
instead. See the readme for more details.
|
|
80
68
|
email: googleapis-packages@google.com
|
|
81
69
|
executables: []
|
|
82
70
|
extensions: []
|