@maxim_mazurok/gapi.client.accesscontextmanager-v1 0.4.20260929 → 0.4.20261027

package/index.d.ts

@@ -9,7 +9,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://accesscontextmanager.googleapis.com/$discovery/rest?version=v1
-// Revision: 20260929
+// Revision: 20261027
 
 /// <reference types="gapi.client" />
 
@@ -38,19 +38,19 @@ declare namespace gapi.client {
       description?: string;
       /** Identifier. Resource name for the `AccessLevel`. Format: `accessPolicies/{access_policy}/accessLevels/{access_level}`. The `access_level` component must begin with a letter, followed by alphanumeric characters or `_`. Its maximum length is 50 characters. After you create an `AccessLevel`, you cannot change its `name`. */
       name?: string;
-      /** Human readable title. Must be unique within the Policy. */
+      /** Human-readable title. Must be unique within the policy. */
       title?: string;
     }
     interface AccessPolicy {
-      /** Output only. An opaque identifier for the current version of the `AccessPolicy`. This will always be a strongly validated etag, meaning that two Access Policies will be identical if and only if their etags are identical. Clients should not expect this to be in any specific format. */
+      /** Output only. An opaque identifier for the current version of the `AccessPolicy`. This will always be a strongly validated etag, meaning that two access policies will be identical if and only if their etags are identical. Clients should not expect this to be in any specific format. */
       etag?: string;
       /** Output only. Identifier. Resource name of the `AccessPolicy`. Format: `accessPolicies/{access_policy}` */
       name?: string;
       /** Required. The parent of this `AccessPolicy` in the Cloud Resource Hierarchy. Currently immutable once created. Format: `organizations/{organization_id}` */
       parent?: string;
-      /** The scopes of the AccessPolicy. Scopes define which resources a policy can restrict and where its resources can be referenced. For example, policy A with `scopes=["folders/123"]` has the following behavior: - ServicePerimeter can only restrict projects within `folders/123`. - ServicePerimeter within policy A can only reference access levels defined within policy A. - Only one policy can include a given scope; thus, attempting to create a second policy which includes `folders/123` will result in an error. If no scopes are provided, then any resource within the organization can be restricted. Scopes cannot be modified after a policy is created. Policies can only have a single scope. Format: list of `folders/{folder_number}` or `projects/{project_number}` */
+      /** The scopes of the AccessPolicy. Scopes define which resources a policy can restrict and where its resources can be referenced. For example, policy A with `scopes=["folders/123"]` has the following behavior: - ServicePerimeter can only restrict projects within `folders/123`. - ServicePerimeter within policy A can only reference access levels defined within policy A. - Only one policy can include a given scope; thus, attempting to create a second policy that includes `folders/123` will result in an error. If no scopes are provided, then any resource within the organization can be restricted. Scopes cannot be modified after a policy is created. Policies can only have a single scope. Format: list of `folders/{folder_number}` or `projects/{project_number}` */
       scopes?: string[];
-      /** Required. Human readable title. Does not affect behavior. */
+      /** Required. Human-readable title. Does not affect behavior. */
       title?: string;
     }
     interface AccessScope {
@@ -58,9 +58,9 @@ declare namespace gapi.client {
       clientScope?: ClientScope;
     }
     interface AccessSettings {
-      /** Optional. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted" */
+      /** Optional. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: `"accessPolicies/9522/accessLevels/device_trusted"` */
       accessLevels?: string[];
-      /** Optional. Session settings applied to user access on a given AccessScope. */
+      /** Optional. Session settings applied to user access on a given `AccessScope`. */
       sessionSettings?: SessionSettings;
     }
     interface AddRequestHeader {
@@ -95,12 +95,12 @@ declare namespace gapi.client {
         'LOG_TYPE_UNSPECIFIED' | 'ADMIN_READ' | 'DATA_WRITE' | 'DATA_READ';
     }
     interface AuthorizedOrgsDesc {
-      /** The asset type of this authorized orgs desc. Valid values are `ASSET_TYPE_DEVICE`, and `ASSET_TYPE_CREDENTIAL_STRENGTH`. */
+      /** The asset type of this authorized orgs desc. Valid values are `ASSET_TYPE_DEVICE` and `ASSET_TYPE_CREDENTIAL_STRENGTH`. */
       assetType?:
         | 'ASSET_TYPE_UNSPECIFIED'
         | 'ASSET_TYPE_DEVICE'
         | 'ASSET_TYPE_CREDENTIAL_STRENGTH';
-      /** The direction of the authorization relationship between this organization and the organizations listed in the `orgs` field. The valid values for this field include the following: `AUTHORIZATION_DIRECTION_FROM`: Allows this organization to evaluate traffic in the organizations listed in the `orgs` field. `AUTHORIZATION_DIRECTION_TO`: Allows the organizations listed in the `orgs` field to evaluate the traffic in this organization. For the authorization relationship to take effect, all of the organizations must authorize and specify the appropriate relationship direction. For example, if organization A authorized organization B and C to evaluate its traffic, by specifying `AUTHORIZATION_DIRECTION_TO` as the authorization direction, organizations B and C must specify `AUTHORIZATION_DIRECTION_FROM` as the authorization direction in their `AuthorizedOrgsDesc` resource. */
+      /** The direction of the authorization relationship between this organization and the organizations listed in the `orgs` field. The valid values for this field include the following: `AUTHORIZATION_DIRECTION_FROM`: Allows this organization to evaluate traffic in the organizations listed in the `orgs` field. `AUTHORIZATION_DIRECTION_TO`: Allows the organizations listed in the `orgs` field to evaluate the traffic in this organization. For the authorization relationship to take effect, all of the organizations must authorize and specify the appropriate relationship direction. For example, if organization A authorizes organizations B and C to evaluate its traffic by specifying `AUTHORIZATION_DIRECTION_TO` as the authorization direction, organizations B and C must specify `AUTHORIZATION_DIRECTION_FROM` as the authorization direction in their `AuthorizedOrgsDesc` resource. */
       authorizationDirection?:
         | 'AUTHORIZATION_DIRECTION_UNSPECIFIED'
         | 'AUTHORIZATION_DIRECTION_TO'
@@ -110,11 +110,11 @@ declare namespace gapi.client {
         'AUTHORIZATION_TYPE_UNSPECIFIED' | 'AUTHORIZATION_TYPE_TRUST';
       /** Identifier. Resource name for the `AuthorizedOrgsDesc`. Format: `accessPolicies/{access_policy}/authorizedOrgsDescs/{authorized_orgs_desc}`. The `authorized_orgs_desc` component must begin with a letter, followed by alphanumeric characters or `_`. After you create an `AuthorizedOrgsDesc`, you cannot change its `name`. */
       name?: string;
-      /** The list of organization ids in this AuthorizedOrgsDesc. Format: `organizations/` Example: `organizations/123456` */
+      /** The list of organization IDs in this `AuthorizedOrgsDesc`. Format: `organizations/{org_number}` Example: `organizations/123456` */
       orgs?: string[];
     }
     interface BasicLevel {
-      /** How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND. */
+      /** How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If `AND` is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If `OR` is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is `AND`. */
       combiningFunction?: 'AND' | 'OR';
       /** Required. A list of requirements for the `AccessLevel` to be granted. */
       conditions?: Condition[];
@@ -143,17 +143,17 @@ declare namespace gapi.client {
       servicePerimeters?: ServicePerimeter[];
     }
     interface Condition {
-      /** Device specific restrictions, all restrictions must hold for the Condition to be true. If not specified, all devices are allowed. */
+      /** Device-specific restrictions. All restrictions must hold for the `Condition` to be true. If not specified, all devices are allowed. */
       devicePolicy?: DevicePolicy;
-      /** CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas "2001:db8::1/32" is not. The originating IP of a request must be in one of the listed subnets in order for this Condition to be true. If empty, all IP addresses are allowed. */
+      /** CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (that is, all the host bits must be zero) or the input is considered malformed. For example, `"192.0.2.0/24"` is accepted, but `"192.0.2.1/24"` is not. Similarly, for IPv6, `"2001:db8::/32"` is accepted, whereas `"2001:db8::1/32"` is not. The originating IP of a request must be in one of the listed subnets in order for this `Condition` to be true. If empty, all IP addresses are allowed. */
       ipSubnetworks?: string[];
       /** The request must be made by one of the provided user or service accounts. Groups are not supported. Syntax: `user:{emailid}` `serviceAccount:{emailid}` If not specified, a request may come from any user. */
       members?: string[];
-      /** Whether to negate the Condition. If true, the Condition becomes a NAND over its non-empty fields. Any non-empty field criteria evaluating to false will result in the Condition to be satisfied. Defaults to false. */
+      /** Whether to negate the `Condition`. If `true`, the `Condition` becomes a NAND over its non-empty fields. Any non-empty field criteria evaluating to `false` will result in the `Condition` being satisfied. Defaults to `false`. */
       negate?: boolean;
       /** The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes. */
       regions?: string[];
-      /** A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` which does not exist is an error. All access levels listed must be granted for the Condition to be true. Example: "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"` */
+      /** A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` that does not exist is an error. All access levels listed must be granted for the `Condition` to be true. Example: `"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"` */
       requiredAccessLevels?: string[];
       /** The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ip_subnetworks`. */
       vpcNetworkSources?: VpcNetworkSource[];
@@ -163,22 +163,22 @@ declare namespace gapi.client {
       expr?: Expr;
     }
     interface DevicePolicy {
-      /** Allowed device management levels, an empty list allows all management levels. */
+      /** Allowed device management levels. An empty list allows all management levels. */
       allowedDeviceManagementLevels?:
         'MANAGEMENT_UNSPECIFIED' | 'NONE' | 'BASIC' | 'COMPLETE'[];
-      /** Allowed encryptions statuses, an empty list allows all statuses. */
+      /** Allowed encryption statuses. An empty list allows all statuses. */
       allowedEncryptionStatuses?:
         | 'ENCRYPTION_UNSPECIFIED'
         | 'ENCRYPTION_UNSUPPORTED'
         | 'UNENCRYPTED'
         | 'ENCRYPTED'[];
-      /** Allowed OS versions, an empty list allows all types and all versions. */
+      /** Allowed OS versions. An empty list allows all types and all versions. */
       osConstraints?: OsConstraint[];
       /** Whether the device needs to be approved by the customer admin. */
       requireAdminApproval?: boolean;
-      /** Whether the device needs to be corp owned. */
+      /** Whether the device needs to be corp-owned. */
       requireCorpOwned?: boolean;
-      /** Whether or not screenlock is required for the DevicePolicy to be true. Defaults to `false`. */
+      /** Whether or not screenlock is required for the `DevicePolicy` to be true. Defaults to `false`. */
       requireScreenlock?: boolean;
     }
     interface EgressFrom {
@@ -190,7 +190,7 @@ declare namespace gapi.client {
         | 'ANY_IDENTITY'
         | 'ANY_USER_ACCOUNT'
         | 'ANY_SERVICE_ACCOUNT';
-      /** Whether to enforce traffic restrictions based on `sources` field. If the `sources` fields is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. */
+      /** Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is not empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. */
       sourceRestriction?:
         | 'SOURCE_RESTRICTION_UNSPECIFIED'
         | 'SOURCE_RESTRICTION_ENABLED'
@@ -203,7 +203,7 @@ declare namespace gapi.client {
       egressFrom?: EgressFrom;
       /** Defines the conditions on the ApiOperation and destination resources that cause this EgressPolicy to apply. */
       egressTo?: EgressTo;
-      /** Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters. */
+      /** Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and cannot exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters. */
       title?: string;
     }
     interface EgressSource {
@@ -211,17 +211,17 @@ declare namespace gapi.client {
       accessLevel?: string;
       /** A PrivateServiceConnectEndpoint that is allowed to access data outside the perimeter. The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in. */
       pscEndpoint?: PrivateServiceConnectEndpoint;
-      /** A Google Cloud resource from the service perimeter that you want to allow to access data outside the perimeter. This field supports only projects. The project format is `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud resources. */
+      /** A Google Cloud resource from the service perimeter that you want to allow to access data outside the perimeter. This field supports projects, folders, and organizations in the form `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`. You can't use `*` in this field to allow all Google Cloud resources. */
       resource?: string;
     }
     interface EgressTo {
-      /** A list of external resources that are allowed to be accessed. Only AWS and Azure resources are supported. For Amazon S3, the supported formats are s3://BUCKET_NAME, s3a://BUCKET_NAME, and s3n://BUCKET_NAME. For Azure Storage, the supported format is azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches if it contains an external resource in this list (Example: s3://bucket/path). Currently '*' is not allowed. */
+      /** A list of external resources that are allowed to be accessed. Only AWS and Azure resources are supported. For Amazon S3, the supported formats are `s3://BUCKET_NAME`, `s3a://BUCKET_NAME`, and `s3n://BUCKET_NAME`. For Azure Storage, the supported format is `azure://myaccount.blob.core.windows.net/CONTAINER_NAME`. A request matches if it contains an external resource in this list (Example: `s3://bucket/path`). Currently `'*'` is not allowed. */
       externalResources?: string[];
       /** A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom. A request matches if it uses an operation/service in this list. */
       operations?: ApiOperation[];
-      /** A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter. */
+      /** A list of resources, currently projects, folders, and organizations in the form `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter. */
       resources?: string[];
-      /** IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter. */
+      /** IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom are allowed to perform in this ServicePerimeter. */
       roles?: string[];
     }
     interface Empty {}
@@ -236,13 +236,13 @@ declare namespace gapi.client {
       title?: string;
     }
     interface GcpUserAccessBinding {
-      /** Optional. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted" */
+      /** Optional. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: `"accessPolicies/9522/accessLevels/device_trusted"` */
       accessLevels?: string[];
-      /** Optional. Dry run access level that will be evaluated but will not be enforced. The access denial based on dry run policy will be logged. Only one access level is supported, not multiple. This list must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted" */
+      /** Optional. Dry-run access level that is evaluated, but not enforced. Any access denial based on the dry-run policy is logged. Only one access level is supported, not multiple. This list must have exactly one element. Example: `"accessPolicies/9522/accessLevels/device_trusted"` */
       dryRunAccessLevels?: string[];
-      /** Optional. Immutable. Google Group id whose users are subject to this binding's restrictions. See "id" in the [Google Workspace Directory API's Group Resource] (https://developers.google.com/admin-sdk/directory/v1/reference/groups#resource). If a group's email address/alias is changed, this resource will continue to point at the changed group. This field does not accept group email addresses or aliases. Example: "01d520gv4vjcrht" */
+      /** Optional. Immutable. Google Group ID whose users are subject to this binding's restrictions. See "id" in the [Google Workspace Directory API's Group Resource] (https://developers.google.com/admin-sdk/directory/v1/reference/groups#resource). If a group's email address or alias is changed, this resource will continue to point at the changed group. This field does not accept group email addresses or aliases. Example: `"01d520gv4vjcrht"` */
       groupKey?: string;
-      /** Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N" */
+      /** Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: `"organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"` */
       name?: string;
       /** Optional. Immutable. The principal that is subject to the access policies in this policy binding. */
       principal?: Principal;
@@ -277,21 +277,21 @@ declare namespace gapi.client {
       ingressFrom?: IngressFrom;
       /** Defines the conditions on the ApiOperation and request destination that cause this IngressPolicy to apply. */
       ingressTo?: IngressTo;
-      /** Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters. */
+      /** Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and cannot exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters. */
       title?: string;
     }
     interface IngressSource {
-      /** An AccessLevel resource name that allow resources within the ServicePerimeters to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel will cause an error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`. If a single `*` is specified for `access_level`, then all IngressSources will be allowed. */
+      /** An AccessLevel resource name that allows resources within the ServicePerimeters to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel will cause an error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`. If a single `*` is specified for `access_level`, then all IngressSources will be allowed. */
       accessLevel?: string;
       /** A PrivateServiceConnectEndpoint that is allowed to access the perimeter. The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in. */
       pscEndpoint?: PrivateServiceConnectEndpoint;
-      /** A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported. */
+      /** A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}` Organization format: `organizations/{organization_id}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported. */
       resource?: string;
     }
     interface IngressTo {
       /** A list of ApiOperations allowed to be performed by the sources specified in corresponding IngressFrom in this ServicePerimeter. */
       operations?: ApiOperation[];
-      /** A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed. */
+      /** A list of resources, currently projects, folders, and organizations in the form `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter is allowed. */
       resources?: string[];
       /** IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter. */
       roles?: string[];
@@ -347,9 +347,9 @@ declare namespace gapi.client {
       supportedServices?: SupportedService[];
     }
     interface LookupConfiguredServicePerimeterResponse {
-      /** The resource (e.g. "projects/123", "folders/456") that directly owns/is restricted by the enforced perimeter. */
+      /** The resource (for example, `projects/123` or `folders/456`) that directly owns or is restricted by the enforced perimeter. */
       restrictedResource?: string;
-      /** The resource (e.g. "projects/123", "folders/456") that directly owns/is restricted by the dry-run perimeter. */
+      /** The resource (for example, `projects/123` or `folders/456`) that directly owns or is restricted by the dry-run perimeter. */
       restrictedResourceDryRun?: string;
       /** Fully qualified name of the configured enforced perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{perimeter_name}` This field is empty if no enforced perimeter applies. */
       servicePerimeter?: string;
@@ -388,9 +388,10 @@ declare namespace gapi.client {
         | 'DESKTOP_WINDOWS'
         | 'DESKTOP_LINUX'
         | 'DESKTOP_CHROME_OS'
+        | 'GOOGLEBOOK_OS'
         | 'ANDROID'
         | 'IOS';
-      /** Only allows requests from devices with a verified Chrome OS. Verifications includes requirements that the device is enterprise-managed, conformant to domain policies, and the caller has permission to call the API targeted by the request. */
+      /** Only allows requests from devices with a verified Chrome OS. Verification includes requirements that the device is enterprise-managed, conforms to domain policies, and the caller has permission to call the API targeted by the request. */
       requireVerifiedChromeOs?: boolean;
     }
     interface Policy {
@@ -406,7 +407,7 @@ declare namespace gapi.client {
     interface Principal {
       /** Immutable. The IAM principal identifier of the federated workforce or workload to assign the policy to. Examples include the following: * Single principal: `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}` * All workloads in a workload identity pool: `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*` * All Workforce Pools in a Google Cloud organization: `principalSet://cloudresourcemanager.googleapis.com/organizations/{organization_id}/type/WorkforcePool` Bindings created for all Workforce Pools in a Google Cloud organization support only `scoped_access_settings` with the `restricted_project` client scope and active `session_settings`. No other configurations are allowed. */
       federatedPrincipal?: string;
-      /** Immutable. Service account email used to assign policies to a specific service account. If a service account is subject to multiple policies (e.g., if there is a policy for all service accounts in a project and a policy for the service account), the closest (i.e. the most specific) dry-run policy will be used for the dry-run functionality and the closest enforcement policy will be used for the enforcement. */
+      /** Immutable. Service account email used to assign policies to a specific service account. If a service account is subject to multiple policies (for example, if there is a policy for all service accounts in a project and a policy for the service account), the closest (that is, the most specific) dry-run policy is used for the dry-run functionality and the closest enforcement policy is used for enforcement. */
       serviceAccount?: string;
       /** Immutable. Cloud project number used to assign policies to all service accounts owned by the project. */
       serviceAccountProjectNumber?: string;
@@ -440,17 +441,17 @@ declare namespace gapi.client {
       servicePerimeters?: ServicePerimeter[];
     }
     interface ScopedAccessSettings {
-      /** Optional. Access settings for this scoped access settings. This field may be empty if dry_run_settings is set. */
+      /** Optional. Access settings for this `ScopedAccessSettings`. This field may be empty if `dry_run_settings` is set. */
       activeSettings?: AccessSettings;
-      /** Optional. Dry-run access settings for this scoped access settings. This field may be empty if active_settings is set. */
+      /** Optional. Dry-run access settings for this `ScopedAccessSettings`. This field may be empty if `active_settings` is set. */
       dryRunSettings?: AccessSettings;
-      /** Optional. Application, etc. to which the access settings will be applied to. Implicitly, this is the scoped access settings key; as such, it must be unique and non-empty. */
+      /** Optional. Application or other resource to which the access settings are applied. Implicitly, this is the scoped access settings key; as such, it must be unique and non-empty. */
       scope?: AccessScope;
     }
     interface ServicePattern {
       /** Modifiers to apply to the requests that match the URL pattern. */
       modifiers?: Modifier[];
-      /** URL pattern to allow. Only patterns of ".googleapis.com/*", "www.googleapis.com//*" and "*.appspot.com/* forms are supported, where should be an alphanumeric name. */
+      /** URL pattern to allow. Only patterns of `".googleapis.com/*"`, `"www.googleapis.com//*"`, and `"*.appspot.com/*"` forms are supported, where `` should be an alphanumeric name. */
       pattern?: string;
       /** Supported service to allow. */
       service?: string;
@@ -462,15 +463,15 @@ declare namespace gapi.client {
       etag?: string;
       /** Identifier. Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`. */
       name?: string;
-      /** Perimeter type indicator. A single project or VPC network is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be a included in a perimeter bridge without being included in regular perimeter. For perimeter bridges, the restricted service list as well as access level lists must be empty. */
+      /** Perimeter type indicator. A single project or VPC network is allowed to be a member of a single regular perimeter, but multiple service perimeter bridges. A project cannot be included in a perimeter bridge without being included in a regular perimeter. For perimeter bridges, the restricted service list as well as access level lists must be empty. */
       perimeterType?: 'PERIMETER_TYPE_REGULAR' | 'PERIMETER_TYPE_BRIDGE';
-      /** Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the "use_explicit_dry_run_spec" flag is set. */
+      /** Proposed (or dry run) ServicePerimeter configuration. This configuration allows you to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the `use_explicit_dry_run_spec` flag is set. */
       spec?: ServicePerimeterConfig;
-      /** Current ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. */
+      /** Current ServicePerimeter configuration. Specifies sets of resources, restricted services, and access levels that determine perimeter content and boundaries. */
       status?: ServicePerimeterConfig;
       /** Human readable title. Must be unique within the Policy. */
       title?: string;
-      /** Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences between currently enforced and suggested restrictions. use_explicit_dry_run_spec must bet set to True if any of the fields in the spec are set to non-default values. */
+      /** Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences between currently enforced and suggested restrictions. `use_explicit_dry_run_spec` must be set to `true` if any of the fields in the spec are set to non-default values. */
       useExplicitDryRunSpec?: boolean;
     }
     interface ServicePerimeterConfig {
@@ -480,7 +481,7 @@ declare namespace gapi.client {
       egressPolicies?: EgressPolicy[];
       /** List of IngressPolicies to apply to the perimeter. A perimeter may have multiple IngressPolicies, each of which is evaluated separately. Access is granted if any Ingress Policy grants it. Must be empty for a perimeter bridge. */
       ingressPolicies?: IngressPolicy[];
-      /** A list of Google Cloud resources that are inside of the service perimeter. Currently only projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. */
+      /** A list of Google Cloud resources that are inside of the service perimeter. Currently projects, folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. */
       resources?: string[];
       /** Google Cloud services that are subject to the Service Perimeter restrictions. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions. */
       restrictedServices?: string[];
@@ -490,17 +491,17 @@ declare namespace gapi.client {
     interface SessionSettings {
       /** Optional. How long a user is allowed to take between actions before a new access token must be issued. Only set for Google Cloud apps. */
       maxInactivity?: string;
-      /** Optional. The session length. Setting this field to zero allows for sessions that are active indefinitely. Also, setting `session_length_enabled` to `false` disregards session limits, which means that sessions never expire. If `use_oidc_max_age` is `true`, for OIDC apps, the session length will be the minimum of this field and the OIDC `max_age` param. If this field is set to zero, `session_length_enabled` must be set to `false` or left unset. */
+      /** Optional. The session length. Setting this field to zero allows for sessions that are active indefinitely. Also, setting `session_length_enabled` to `false` disregards session limits, which means that sessions never expire. If `use_oidc_max_age` is `true`, for OIDC apps, the session length will be the minimum of this field and the OIDC `max_age` parameter. If this field is set to zero, `session_length_enabled` must be set to `false` or left unset. */
       sessionLength?: string;
-      /** Optional. This field enables or disables Google Cloud session length. When false, all fields set above will be disregarded and the session length is basically infinite. If `session_length` is set to zero, this field must be set to false. */
+      /** Optional. This field enables or disables Google Cloud session length. When `false`, all fields set above are disregarded and the session length is effectively infinite. If `session_length` is set to zero, this field must be set to `false`. */
       sessionLengthEnabled?: boolean;
-      /** Optional. Session method when user's Google Cloud session is up. */
+      /** Optional. Session challenge method when a user's Google Cloud session expires. */
       sessionReauthMethod?:
         | 'SESSION_REAUTH_METHOD_UNSPECIFIED'
         | 'LOGIN'
         | 'SECURITY_KEY'
         | 'PASSWORD';
-      /** Optional. Only useful for OIDC apps. When false, the OIDC max_age param, if passed in the authentication request will be ignored. When true, the re-auth period will be the minimum of the session_length field and the max_age OIDC param. */
+      /** Optional. Only useful for OIDC apps. When `false`, the OIDC `max_age` parameter, if passed in the authentication request, is ignored. When `true`, the re-authentication period is the minimum of the `session_length` field and the `max_age` OIDC parameter. */
       useOidcMaxAge?: boolean;
     }
     interface SetIamPolicyRequest {
@@ -527,7 +528,7 @@ declare namespace gapi.client {
       /** The support stage of the service. */
       serviceSupportStage?:
         'SERVICE_SUPPORT_STAGE_UNSPECIFIED' | 'GA' | 'PREVIEW' | 'DEPRECATED';
-      /** The list of the supported methods. This field exists only in response to GetSupportedService */
+      /** The list of supported methods. This field exists only in response to GetSupportedService. */
       supportedMethods?: MethodSelector[];
       /** The support stage of the service. */
       supportStage?:
@@ -539,7 +540,7 @@ declare namespace gapi.client {
         | 'BETA'
         | 'GA'
         | 'DEPRECATED';
-      /** The name of the supported product, such as 'Cloud Product API'. */
+      /** The name of the supported product, such as `'Cloud Product API'`. */
       title?: string;
     }
     interface TestIamPermissionsRequest {
@@ -553,9 +554,9 @@ declare namespace gapi.client {
     interface VpcAccessibleServices {
       /** Specifies which Google services are allowed to be accessed from VPC networks in the service perimeter. */
       allowedServicePatterns?: ServicePattern[];
-      /** The list of APIs usable within the Service Perimeter. Must be empty unless 'enable_restriction' is True. You can specify a list of individual services, as well as include the 'RESTRICTED-SERVICES' value, which automatically includes all of the services protected by the perimeter. */
+      /** The list of APIs usable within the Service Perimeter. Must be empty unless `enable_restriction` is `true`. You can specify a list of individual services, as well as include the `'RESTRICTED-SERVICES'` value, which automatically includes all of the services protected by the perimeter. */
       allowedServices?: string[];
-      /** Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowed_services'. */
+      /** Whether to restrict API calls within the Service Perimeter to the list of APIs specified in `allowed_services`. */
       enableRestriction?: boolean;
       /** Defines the enforcement scopes of service patterns. */
       servicePatternsEnforcementScopes?:
@@ -569,7 +570,7 @@ declare namespace gapi.client {
     interface VpcSubNetwork {
       /** Required. Network name. If the network is not part of the organization, the `compute.network.get` permission must be granted to the caller. Format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NETWORK_NAME}` Example: `//compute.googleapis.com/projects/my-project/global/networks/network-1` */
       network?: string;
-      /** CIDR block IP subnetwork specification. The IP address must be an IPv4 address and can be a public or private IP address. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (i.e. all the host bits must be zero) or the input is considered malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is not. If empty, all IP addresses are allowed. */
+      /** CIDR block IP subnetwork specification. The IP address must be an IPv4 address and can be a public or private IP address. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (that is, all the host bits must be zero) or the input is considered malformed. For example, `"192.0.2.0/24"` is accepted, but `"192.0.2.1/24"` is not. If empty, all IP addresses are allowed. */
       vpcIpSubnetworks?: string[];
     }
     interface AccessLevelsResource {
@@ -664,7 +665,7 @@ declare namespace gapi.client {
         '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
-        /** Whether to return `BasicLevels` in the Cloud Common Expression Language rather than as `BasicLevels`. Defaults to AS_DEFINED, where Access Levels are returned as `BasicLevels` or `CustomLevels` based on how they were created. If set to CEL, all Access Levels are returned as `CustomLevels`. In the CEL case, `BasicLevels` are translated to equivalent `CustomLevels`. */
+        /** Whether to return `BasicLevels` in the Cloud Common Expression Language rather than as `BasicLevels`. Defaults to `AS_DEFINED`, where Access Levels are returned as `BasicLevels` or `CustomLevels` based on how they were created. If set to `CEL`, all Access Levels are returned as `CustomLevels`. In the `CEL` case, `BasicLevels` are translated to equivalent `CustomLevels`. */
         accessLevelFormat?: 'LEVEL_FORMAT_UNSPECIFIED' | 'AS_DEFINED' | 'CEL';
         /** Data format for response. */
         alt?: 'json' | 'media' | 'proto';
@@ -693,7 +694,7 @@ declare namespace gapi.client {
         '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
-        /** Whether to return `BasicLevels` in the Cloud Common Expression language, as `CustomLevels`, rather than as `BasicLevels`. Defaults to returning `AccessLevels` in the format they were defined. */
+        /** Whether to return `BasicLevels` in the Cloud Common Expression Language, as `CustomLevels`, rather than as `BasicLevels`. Defaults to returning `AccessLevels` in the format they were defined. */
         accessLevelFormat?: 'LEVEL_FORMAT_UNSPECIFIED' | 'AS_DEFINED' | 'CEL';
         /** Data format for response. */
         alt?: 'json' | 'media' | 'proto';
@@ -782,7 +783,7 @@ declare namespace gapi.client {
         },
         body: AccessLevel,
       ): Request<Operation>;
-      /** Replaces all existing access levels in an access policy with the access levels provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. If the replacement contains errors, an error response is returned for the first error encountered. Upon error, the replacement is cancelled, and existing access levels are not affected. The Operation.response field contains ReplaceAccessLevelsResponse. Removing access levels contained in existing service perimeters result in an error. */
+      /** Replaces all existing access levels in an access policy with the access levels provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. If the replacement contains errors, an error response is returned for the first error encountered. Upon error, the replacement is cancelled, and existing access levels are not affected. The `Operation.response` field contains `ReplaceAccessLevelsResponse`. Removing access levels contained in existing service perimeters results in an error. */
       replaceAll(request: {
         /** V1 error format. */
         '$.xgafv'?: '1' | '2';
@@ -872,7 +873,7 @@ declare namespace gapi.client {
       ): Request<TestIamPermissionsResponse>;
     }
     interface AuthorizedOrgsDescsResource {
-      /** Creates an authorized orgs desc. The long-running operation from this RPC has a successful status after the authorized orgs desc propagates to long-lasting storage. If a authorized orgs desc contains errors, an error response is returned for the first error encountered. The name of this `AuthorizedOrgsDesc` will be assigned during creation. */
+      /** Creates an authorized orgs desc. The long-running operation from this RPC has a successful status after the authorized orgs desc propagates to long-lasting storage. If an authorized orgs desc contains errors, an error response is returned for the first error encountered. The name of this `AuthorizedOrgsDesc` will be assigned during creation. */
       create(request: {
         /** V1 error format. */
         '$.xgafv'?: '1' | '2';
@@ -944,7 +945,7 @@ declare namespace gapi.client {
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
-        /** Required. Resource name for the Authorized Orgs Desc. Format: `accessPolicies/{policy_id}/authorizedOrgsDesc/{authorized_orgs_desc_id}` */
+        /** Required. Resource name for the Authorized Orgs Desc. Format: `accessPolicies/{policy_id}/authorizedOrgsDescs/{authorized_orgs_desc_id}` */
         name: string;
         /** OAuth 2.0 token for the current user. */
         oauth_token?: string;
@@ -971,7 +972,7 @@ declare namespace gapi.client {
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
-        /** Required. Resource name for the Authorized Orgs Desc. Format: `accessPolicies/{policy_id}/authorizedOrgsDescs/{authorized_orgs_descs_id}` */
+        /** Required. Resource name for the Authorized Orgs Desc. Format: `accessPolicies/{policy_id}/authorizedOrgsDescs/{authorized_orgs_desc_id}` */
         name: string;
         /** OAuth 2.0 token for the current user. */
         oauth_token?: string;
@@ -1015,7 +1016,7 @@ declare namespace gapi.client {
         /** Legacy upload protocol for media (e.g. "media", "multipart"). */
         uploadType?: string;
       }): Request<ListAuthorizedOrgsDescsResponse>;
-      /** Updates an authorized orgs desc. The long-running operation from this RPC has a successful status after the authorized orgs desc propagates to long-lasting storage. If a authorized orgs desc contains errors, an error response is returned for the first error encountered. Only the organization list in `AuthorizedOrgsDesc` can be updated. The name, authorization_type, asset_type and authorization_direction cannot be updated. */
+      /** Updates an authorized orgs desc. The long-running operation from this RPC has a successful status after the authorized orgs desc propagates to long-lasting storage. If an authorized orgs desc contains errors, an error response is returned for the first error encountered. Only the organization list in `AuthorizedOrgsDesc` can be updated. The `name`, `authorization_type`, `asset_type`, and `authorization_direction` cannot be updated. */
       patch(request: {
         /** V1 error format. */
         '$.xgafv'?: '1' | '2';
@@ -1079,7 +1080,7 @@ declare namespace gapi.client {
       ): Request<Operation>;
     }
     interface ServicePerimetersResource {
-      /** Commits the dry-run specification for all the service perimeters in an access policy. A commit operation on a service perimeter involves copying its `spec` field to the `status` field of the service perimeter. Only service perimeters with `use_explicit_dry_run_spec` field set to true are affected by a commit operation. The long-running operation from this RPC has a successful status after the dry-run specifications for all the service perimeters have been committed. If a commit fails, it causes the long-running operation to return an error response and the entire commit operation is cancelled. When successful, the Operation.response field contains CommitServicePerimetersResponse. The `dry_run` and the `spec` fields are cleared after a successful commit operation. */
+      /** Commits the dry-run specification for all the service perimeters in an access policy. A commit operation on a service perimeter involves copying its `spec` field to the `status` field of the service perimeter. Only service perimeters with `use_explicit_dry_run_spec` field set to true are affected by a commit operation. The long-running operation from this RPC has a successful status after the dry-run specifications for all the service perimeters have been committed. If a commit fails, it causes the long-running operation to return an error response and the entire commit operation is cancelled. When successful, the `Operation.response` field contains `CommitServicePerimetersResponse`. The `dry_run` and the `spec` fields are cleared after a successful commit operation. */
       commit(request: {
         /** V1 error format. */
         '$.xgafv'?: '1' | '2';
@@ -1241,7 +1242,7 @@ declare namespace gapi.client {
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
-        /** Required. Resource name for the Service Perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{service_perimeters_id}` */
+        /** Required. Resource name for the Service Perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{service_perimeter_id}` */
         name: string;
         /** OAuth 2.0 token for the current user. */
         oauth_token?: string;
@@ -1362,7 +1363,7 @@ declare namespace gapi.client {
         },
         body: ServicePerimeter,
       ): Request<Operation>;
-      /** Replace all existing service perimeters in an access policy with the service perimeters provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. Replacements containing errors result in an error response for the first error encountered. Upon an error, replacements are cancelled and existing service perimeters are not affected. The Operation.response field contains ReplaceServicePerimetersResponse. */
+      /** Replaces all existing service perimeters in an access policy with the service perimeters provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. Replacements containing errors result in an error response for the first error encountered. Upon an error, replacements are cancelled and existing service perimeters are not affected. The `Operation.response` field contains `ReplaceServicePerimetersResponse`. */
       replaceAll(request: {
         /** V1 error format. */
         '$.xgafv'?: '1' | '2';
@@ -1520,7 +1521,7 @@ declare namespace gapi.client {
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
-        /** Required. Resource name for the access policy to delete. Format `accessPolicies/{policy_id}` */
+        /** Required. Resource name for the access policy to delete. Format: `accessPolicies/{policy_id}` */
         name: string;
         /** OAuth 2.0 token for the current user. */
         oauth_token?: string;
@@ -1547,7 +1548,7 @@ declare namespace gapi.client {
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
-        /** Required. Resource name for the access policy to get. Format `accessPolicies/{policy_id}` */
+        /** Required. Resource name for the access policy to get. Format: `accessPolicies/{policy_id}` */
         name: string;
         /** OAuth 2.0 token for the current user. */
         oauth_token?: string;
@@ -1748,7 +1749,7 @@ declare namespace gapi.client {
       servicePerimeters: ServicePerimetersResource;
     }
     interface FoldersResource {
-      /** Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}']. */
+      /** Looks up the configured service perimeter for a given resource. Format: `['projects/{projectNumber}', 'folders/{folderNumber}']`. */
       lookupConfiguredServicePerimeter(request?: {
         /** V1 error format. */
         '$.xgafv'?: '1' | '2';
@@ -1768,7 +1769,7 @@ declare namespace gapi.client {
         prettyPrint?: boolean;
         /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
         quotaUser?: string;
-        /** Required. The Resource to resolve (e.g. "projects/123", "folders/456"). */
+        /** Required. The resource to resolve (for example, `projects/123` or `folders/456`). */
         resource: string;
         /** Upload protocol for media (e.g. "raw", "multipart"). */
         upload_protocol?: string;
@@ -2050,7 +2051,7 @@ declare namespace gapi.client {
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
         fields?: string;
-        /** Optional. The literal filter to apply to the results returned. See https://google.aip.dev/160 for more details. Accepts values: * `principal:group_key` * `principal:service_account` OR `principal:service_account_project_number`. If this field is empty or not one of the above, the default value is `"principal:group_key"`. */
+        /** Optional. Filters the results by principal type. Uses the [AIP-160](https://google.aip.dev/160) filter syntax. Only the following filters are supported: * `principal:group_key`: bindings for groups. This is the default when the filter is empty. * `principal:service_account OR principal:service_account_project_number`: bindings for service accounts. * `principal:federated_principal`: bindings for federated principals. Values can be in snake_case or camelCase. Whitespace and the order of `OR` terms don't matter. Any other filter returns an `INVALID_ARGUMENT` error. */
         filter?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
@@ -2079,7 +2080,7 @@ declare namespace gapi.client {
         access_token?: string;
         /** Data format for response. */
         alt?: 'json' | 'media' | 'proto';
-        /** Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite. So far, only scoped_access_settings with session_settings supports appending. Global access_levels, access_levels in scoped_access_settings, dry_run_access_levels, and session_settings are not compatible with append functionality, and the request will return an error if append=true when these settings are in the update_mask. The request will also return an error if append=true when "scoped_access_settings" is not set in the update_mask. */
+        /** Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite. So far, only `scoped_access_settings` with `session_settings` supports appending. Global `access_levels`, `access_levels` in `scoped_access_settings`, `dry_run_access_levels`, and `session_settings` are not compatible with append functionality, and the request will return an error if `append=true` when these settings are in the `update_mask`. The request will also return an error if `append=true` when `"scoped_access_settings"` is not set in the `update_mask`. */
         append?: boolean;
         /** JSONP */
         callback?: string;
@@ -2087,7 +2088,7 @@ declare namespace gapi.client {
         fields?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
-        /** Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N" */
+        /** Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: `"organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"` */
         name: string;
         /** OAuth 2.0 token for the current user. */
         oauth_token?: string;
@@ -2095,7 +2096,7 @@ declare namespace gapi.client {
         prettyPrint?: boolean;
         /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
         quotaUser?: string;
-        /** Required. Only the fields specified in this mask are updated. Because name and group_key cannot be changed, update_mask is required and may only contain the following fields: `access_levels`, `dry_run_access_levels`, `session_settings`, `scoped_access_settings`. update_mask { paths: "access_levels" } */
+        /** Required. Only the fields specified in this mask are updated. Because `name` and `group_key` cannot be changed, `update_mask` is required and may only contain the following fields: `access_levels`, `dry_run_access_levels`, `session_settings`, `scoped_access_settings`. update_mask { paths: "access_levels" } */
         updateMask?: string;
         /** Upload protocol for media (e.g. "raw", "multipart"). */
         upload_protocol?: string;
@@ -2112,7 +2113,7 @@ declare namespace gapi.client {
           access_token?: string;
           /** Data format for response. */
           alt?: 'json' | 'media' | 'proto';
-          /** Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite. So far, only scoped_access_settings with session_settings supports appending. Global access_levels, access_levels in scoped_access_settings, dry_run_access_levels, and session_settings are not compatible with append functionality, and the request will return an error if append=true when these settings are in the update_mask. The request will also return an error if append=true when "scoped_access_settings" is not set in the update_mask. */
+          /** Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite. So far, only `scoped_access_settings` with `session_settings` supports appending. Global `access_levels`, `access_levels` in `scoped_access_settings`, `dry_run_access_levels`, and `session_settings` are not compatible with append functionality, and the request will return an error if `append=true` when these settings are in the `update_mask`. The request will also return an error if `append=true` when `"scoped_access_settings"` is not set in the `update_mask`. */
           append?: boolean;
           /** JSONP */
           callback?: string;
@@ -2120,7 +2121,7 @@ declare namespace gapi.client {
           fields?: string;
           /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
           key?: string;
-          /** Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N" */
+          /** Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: `"organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"` */
           name: string;
           /** OAuth 2.0 token for the current user. */
           oauth_token?: string;
@@ -2128,7 +2129,7 @@ declare namespace gapi.client {
           prettyPrint?: boolean;
           /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
           quotaUser?: string;
-          /** Required. Only the fields specified in this mask are updated. Because name and group_key cannot be changed, update_mask is required and may only contain the following fields: `access_levels`, `dry_run_access_levels`, `session_settings`, `scoped_access_settings`. update_mask { paths: "access_levels" } */
+          /** Required. Only the fields specified in this mask are updated. Because `name` and `group_key` cannot be changed, `update_mask` is required and may only contain the following fields: `access_levels`, `dry_run_access_levels`, `session_settings`, `scoped_access_settings`. update_mask { paths: "access_levels" } */
           updateMask?: string;
           /** Upload protocol for media (e.g. "raw", "multipart"). */
           upload_protocol?: string;
@@ -2158,7 +2159,7 @@ declare namespace gapi.client {
         key?: string;
         /** OAuth 2.0 token for the current user. */
         oauth_token?: string;
-        /** Optional. This flag specifies the maximum number of services to return per page. Default value is 100. */
+        /** Optional. This flag specifies the maximum number of permissions to return per page. Default value is 100. */
         pageSize?: number;
         /** Optional. Use this token to retrieve a specific page of results. Default is the first page. */
         pageToken?: string;
@@ -2173,7 +2174,7 @@ declare namespace gapi.client {
       }): Request<ListSupportedPermissionsResponse>;
     }
     interface ProjectsResource {
-      /** Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}']. */
+      /** Looks up the configured service perimeter for a given resource. Format: `['projects/{projectNumber}', 'folders/{folderNumber}']`. */
       lookupConfiguredServicePerimeter(request?: {
         /** V1 error format. */
         '$.xgafv'?: '1' | '2';
@@ -2193,7 +2194,7 @@ declare namespace gapi.client {
         prettyPrint?: boolean;
         /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
         quotaUser?: string;
-        /** Required. The Resource to resolve (e.g. "projects/123", "folders/456"). */
+        /** Required. The resource to resolve (for example, `projects/123` or `folders/456`). */
         resource: string;
         /** Upload protocol for media (e.g. "raw", "multipart"). */
         upload_protocol?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maxim_mazurok/gapi.client.accesscontextmanager-v1",
-  "version": "0.4.20260929",
+  "version": "0.4.20261027",
   "description": "TypeScript typings for Access Context Manager API v1",
   "repository": {
     "type": "git",

package/readme.md

@@ -133,7 +133,7 @@ await gapi.client.accesscontextmanager.accessPolicies.testIamPermissions({
 });
 
 /*
-Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}'].
+Looks up the configured service perimeter for a given resource. Format: `['projects/{projectNumber}', 'folders/{folderNumber}']`.
 */
 await gapi.client.accesscontextmanager.folders.lookupConfiguredServicePerimeter(
   {resource: 'resource'},
@@ -165,7 +165,7 @@ Lists all supported permissions in VPC Service Controls ingress and egress rules
 await gapi.client.accesscontextmanager.permissions.list({});
 
 /*
-Looks up the configured service perimeter for a given resource Format: ['projects/{projectNumber}', 'folders/{folderNumber}'].
+Looks up the configured service perimeter for a given resource. Format: `['projects/{projectNumber}', 'folders/{folderNumber}']`.
 */
 await gapi.client.accesscontextmanager.projects.lookupConfiguredServicePerimeter(
   {resource: 'resource'},