@maxim_mazurok/gapi.client.cloudasset-v1 0.1.20260306 → 0.2.20260306
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.d.ts +178 -88
- package/package.json +1 -1
package/index.d.ts
CHANGED
|
@@ -135,7 +135,7 @@ declare namespace gapi.client {
|
|
|
135
135
|
/** The details of the exception. */
|
|
136
136
|
details?: string;
|
|
137
137
|
/** The type of exception. */
|
|
138
|
-
exceptionType?:
|
|
138
|
+
exceptionType?: 'EXCEPTION_TYPE_UNSPECIFIED' | 'TRUNCATION';
|
|
139
139
|
}
|
|
140
140
|
interface AttachedResource {
|
|
141
141
|
/** The type of this attached resource. Example: `osconfig.googleapis.com/Inventory` You can find the supported attached asset types of each resource in this table: `https://cloud.google.com/asset-inventory/docs/supported-asset-types` */
|
|
@@ -153,7 +153,11 @@ declare namespace gapi.client {
|
|
|
153
153
|
/** Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members. */
|
|
154
154
|
exemptedMembers?: string[];
|
|
155
155
|
/** The log type that this config enables. */
|
|
156
|
-
logType?:
|
|
156
|
+
logType?:
|
|
157
|
+
| 'LOG_TYPE_UNSPECIFIED'
|
|
158
|
+
| 'ADMIN_READ'
|
|
159
|
+
| 'DATA_WRITE'
|
|
160
|
+
| 'DATA_READ';
|
|
157
161
|
}
|
|
158
162
|
interface BatchGetAssetsHistoryResponse {
|
|
159
163
|
/** A list of assets with valid time windows. */
|
|
@@ -189,7 +193,11 @@ declare namespace gapi.client {
|
|
|
189
193
|
}
|
|
190
194
|
interface ConditionEvaluation {
|
|
191
195
|
/** The evaluation result. */
|
|
192
|
-
evaluationValue?:
|
|
196
|
+
evaluationValue?:
|
|
197
|
+
| 'EVALUATION_VALUE_UNSPECIFIED'
|
|
198
|
+
| 'TRUE'
|
|
199
|
+
| 'FALSE'
|
|
200
|
+
| 'CONDITIONAL';
|
|
193
201
|
}
|
|
194
202
|
interface CreateFeedRequest {
|
|
195
203
|
/** Required. The feed details. The field `name` must be empty and it will be generated in the format of: projects/project_number/feeds/feed_id folders/folder_number/feeds/feed_id organizations/organization_number/feeds/feed_id */
|
|
@@ -226,7 +234,14 @@ declare namespace gapi.client {
|
|
|
226
234
|
/** A list of asset types to take a snapshot for. For example: "compute.googleapis.com/Disk". Regular expressions are also supported. For example: * "compute.googleapis.com.*" snapshots resources whose asset type starts with "compute.googleapis.com". * ".*Instance" snapshots resources whose asset type ends with "Instance". * ".*Instance.*" snapshots resources whose asset type contains "Instance". See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported regular expression syntax. If the regular expression does not match any supported asset type, an INVALID_ARGUMENT error will be returned. If specified, only matching assets will be returned, otherwise, it will snapshot all asset types. See [Introduction to Cloud Asset Inventory](https://cloud.google.com/asset-inventory/docs/overview) for all supported asset types. */
|
|
227
235
|
assetTypes?: string[];
|
|
228
236
|
/** Asset content type. If not specified, no content but the asset name will be returned. */
|
|
229
|
-
contentType?:
|
|
237
|
+
contentType?:
|
|
238
|
+
| 'CONTENT_TYPE_UNSPECIFIED'
|
|
239
|
+
| 'RESOURCE'
|
|
240
|
+
| 'IAM_POLICY'
|
|
241
|
+
| 'ORG_POLICY'
|
|
242
|
+
| 'ACCESS_POLICY'
|
|
243
|
+
| 'OS_INVENTORY'
|
|
244
|
+
| 'RELATIONSHIP';
|
|
230
245
|
/** Required. Output configuration indicating where the results will be output to. */
|
|
231
246
|
outputConfig?: OutputConfig;
|
|
232
247
|
/** Timestamp to take an asset snapshot. This can only be set to a timestamp between the current time and the current time minus 35 days (inclusive). If not specified, the current time will be used. Due to delays in resource data collection and indexing, there is a volatile window during which running the same query may get different results. */
|
|
@@ -252,7 +267,14 @@ declare namespace gapi.client {
|
|
|
252
267
|
/** A condition which determines whether an asset update should be published. If specified, an asset will be returned only when the expression evaluates to true. When set, `expression` field in the `Expr` must be a valid [CEL expression] (https://github.com/google/cel-spec) on a TemporalAsset with name `temporal_asset`. Example: a Feed with expression ("temporal_asset.deleted == true") will only publish Asset deletions. Other fields of `Expr` are optional. See our [user guide](https://cloud.google.com/asset-inventory/docs/monitoring-asset-changes-with-condition) for detailed instructions. */
|
|
253
268
|
condition?: Expr;
|
|
254
269
|
/** Asset content type. If not specified, no content but the asset name and type will be returned. */
|
|
255
|
-
contentType?:
|
|
270
|
+
contentType?:
|
|
271
|
+
| 'CONTENT_TYPE_UNSPECIFIED'
|
|
272
|
+
| 'RESOURCE'
|
|
273
|
+
| 'IAM_POLICY'
|
|
274
|
+
| 'ORG_POLICY'
|
|
275
|
+
| 'ACCESS_POLICY'
|
|
276
|
+
| 'OS_INVENTORY'
|
|
277
|
+
| 'RELATIONSHIP';
|
|
256
278
|
/** Required. Feed output configuration defining where the asset updates are published to. */
|
|
257
279
|
feedOutputConfig?: FeedOutputConfig;
|
|
258
280
|
/** Required. The format will be projects/{project_number}/feeds/{client-assigned_feed_identifier} or folders/{folder_number}/feeds/{client-assigned_feed_identifier} or organizations/{organization_number}/feeds/{client-assigned_feed_identifier} The client-assigned feed identifier must be unique within the parent project/folder/organization. */
|
|
@@ -332,7 +354,7 @@ declare namespace gapi.client {
|
|
|
332
354
|
/** Required. The BigQuery dataset in format "projects/projectId/datasets/datasetId", to which the analysis results should be exported. If this dataset does not exist, the export call will return an INVALID_ARGUMENT error. */
|
|
333
355
|
dataset?: string;
|
|
334
356
|
/** The partition key for BigQuery partitioned table. */
|
|
335
|
-
partitionKey?:
|
|
357
|
+
partitionKey?: 'PARTITION_KEY_UNSPECIFIED' | 'REQUEST_TIME';
|
|
336
358
|
/** Required. The prefix of the BigQuery tables to which the analysis results will be written. Tables will be created based on this table_prefix if not exist: * _analysis table will contain export operation's metadata. * _analysis_result will contain all the IamPolicyAnalysisResult. When [partition_key] is specified, both tables will be partitioned based on the [partition_key]. */
|
|
337
359
|
tablePrefix?: string;
|
|
338
360
|
/** Optional. Specifies the action that occurs if the destination table or partition already exists. The following values are supported: * WRITE_TRUNCATE: If the table or partition already exists, BigQuery overwrites the entire table or all the partitions data. * WRITE_APPEND: If the table or partition already exists, BigQuery appends the data to the table or the latest partition. * WRITE_EMPTY: If the table already exists and contains data, an error is returned. The default value is WRITE_APPEND. Each action is atomic and only occurs if BigQuery is able to complete the job successfully. Details are at https://cloud.google.com/bigquery/docs/loading-data-local#appending_to_or_overwriting_a_table_using_a_local_file. */
|
|
@@ -343,7 +365,7 @@ declare namespace gapi.client {
|
|
|
343
365
|
/** Defines this constraint as being a BooleanConstraint. */
|
|
344
366
|
booleanConstraint?: any;
|
|
345
367
|
/** The evaluation behavior of this constraint in the absence of 'Policy'. */
|
|
346
|
-
constraintDefault?:
|
|
368
|
+
constraintDefault?: 'CONSTRAINT_DEFAULT_UNSPECIFIED' | 'ALLOW' | 'DENY';
|
|
347
369
|
/** Detailed description of what this `Constraint` controls as well as how and where it is enforced. */
|
|
348
370
|
description?: string;
|
|
349
371
|
/** The human readable name of the constraint. */
|
|
@@ -355,7 +377,7 @@ declare namespace gapi.client {
|
|
|
355
377
|
}
|
|
356
378
|
interface GoogleCloudAssetV1CustomConstraint {
|
|
357
379
|
/** Allow or deny type. */
|
|
358
|
-
actionType?:
|
|
380
|
+
actionType?: 'ACTION_TYPE_UNSPECIFIED' | 'ALLOW' | 'DENY';
|
|
359
381
|
/** Organization Policy condition/expression. For example: `resource.instanceName.matches("(production|test)_(.+_)?[\d]+")'` or, `resource.management.auto_upgrade == true` */
|
|
360
382
|
condition?: string;
|
|
361
383
|
/** Detailed information about this custom policy constraint. */
|
|
@@ -363,7 +385,13 @@ declare namespace gapi.client {
|
|
|
363
385
|
/** One line display name for the UI. */
|
|
364
386
|
displayName?: string;
|
|
365
387
|
/** All the operations being applied for this constraint. */
|
|
366
|
-
methodTypes?:
|
|
388
|
+
methodTypes?:
|
|
389
|
+
| 'METHOD_TYPE_UNSPECIFIED'
|
|
390
|
+
| 'CREATE'
|
|
391
|
+
| 'UPDATE'
|
|
392
|
+
| 'DELETE'
|
|
393
|
+
| 'REMOVE_GRANT'
|
|
394
|
+
| 'GOVERN_TAGS'[];
|
|
367
395
|
/** Name of the constraint. This is unique within the organization. Format of the name should be * `organizations/{organization_id}/customConstraints/{custom_constraint_id}` Example : "organizations/123/customConstraints/custom.createOnlyE2TypeVms" */
|
|
368
396
|
name?: string;
|
|
369
397
|
/** The Resource Instance type on which this policy applies to. Format will be of the form : "/" Example: * `compute.googleapis.com/Instance`. */
|
|
@@ -521,7 +549,7 @@ declare namespace gapi.client {
|
|
|
521
549
|
/** List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`. */
|
|
522
550
|
allowedValues?: string[];
|
|
523
551
|
/** The policy all_values state. */
|
|
524
|
-
allValues?:
|
|
552
|
+
allValues?: 'ALL_VALUES_UNSPECIFIED' | 'ALLOW' | 'DENY';
|
|
525
553
|
/** List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`. */
|
|
526
554
|
deniedValues?: string[];
|
|
527
555
|
/** Determines the inheritance behavior for this `Policy`. By default, a `ListPolicy` set at a resource supersedes any `Policy` set anywhere up the resource hierarchy. However, if `inherit_from_parent` is set to `true`, then the values from the effective `Policy` of the parent resource are inherited, meaning the values set in this `Policy` are added to the values inherited up the hierarchy. Setting `Policy` hierarchies that inherit both allowed values and denied values isn't recommended in most circumstances to keep the configuration simple and understandable. However, it is possible to set a `Policy` with `allowed_values` set that inherits a `Policy` with `denied_values` set. In this case, the values that are allowed must be in `allowed_values` and not present in `denied_values`. For example, suppose you have a `Constraint` `constraints/serviceuser.services`, which has a `constraint_type` of `list_constraint`, and with `constraint_default` set to `ALLOW`. Suppose that at the Organization level, a `Policy` is applied that restricts the allowed API activations to {`E1`, `E2`}. Then, if a `Policy` is applied to a project below the Organization that has `inherit_from_parent` set to `false` and field all_values set to DENY, then an attempt to activate any API will be denied. The following examples demonstrate different possible layerings for `projects/bar` parented by `organizations/foo`: Example 1 (no inherited values): `organizations/foo` has a `Policy` with values: {allowed_values: "E1" allowed_values:"E2"} `projects/bar` has `inherit_from_parent` `false` and values: {allowed_values: "E3" allowed_values: "E4"} The accepted values at `organizations/foo` are `E1`, `E2`. The accepted values at `projects/bar` are `E3`, and `E4`. Example 2 (inherited values): `organizations/foo` has a `Policy` with values: {allowed_values: "E1" allowed_values:"E2"} `projects/bar` has a `Policy` with values: {value: "E3" value: "E4" inherit_from_parent: true} The accepted values at `organizations/foo` are `E1`, `E2`. The accepted values at `projects/bar` are `E1`, `E2`, `E3`, and `E4`. Example 3 (inheriting both allowed and denied values): `organizations/foo` has a `Policy` with values: {allowed_values: "E1" allowed_values: "E2"} `projects/bar` has a `Policy` with: {denied_values: "E1"} The accepted values at `organizations/foo` are `E1`, `E2`. The value accepted at `projects/bar` is `E2`. Example 4 (RestoreDefault): `organizations/foo` has a `Policy` with values: {allowed_values: "E1" allowed_values:"E2"} `projects/bar` has a `Policy` with values: {RestoreDefault: {}} The accepted values at `organizations/foo` are `E1`, `E2`. The accepted values at `projects/bar` are either all or none depending on the value of `constraint_default` (if `ALLOW`, all; if `DENY`, none). Example 5 (no policy inherits parent policy): `organizations/foo` has no `Policy` set. `projects/bar` has no `Policy` set. The accepted values at both levels are either all or none depending on the value of `constraint_default` (if `ALLOW`, all; if `DENY`, none). Example 6 (ListConstraint allowing all): `organizations/foo` has a `Policy` with values: {allowed_values: "E1" allowed_values: "E2"} `projects/bar` has a `Policy` with: {all: ALLOW} The accepted values at `organizations/foo` are `E1`, E2`. Any value is accepted at `projects/bar`. Example 7 (ListConstraint allowing none): `organizations/foo` has a `Policy` with values: {allowed_values: "E1" allowed_values: "E2"} `projects/bar` has a `Policy` with: {all: DENY} The accepted values at `organizations/foo` are `E1`, E2`. No value is accepted at `projects/bar`. Example 10 (allowed and denied subtrees of Resource Manager hierarchy): Given the following resource hierarchy O1->{F1, F2}; F1->{P1}; F2->{P2, P3}, `organizations/foo` has a `Policy` with values: {allowed_values: "under:organizations/O1"} `projects/bar` has a `Policy` with: {allowed_values: "under:projects/P3"} {denied_values: "under:folders/F2"} The accepted values at `organizations/foo` are `organizations/O1`, `folders/F1`, `folders/F2`, `projects/P1`, `projects/P2`, `projects/P3`. The accepted values at `projects/bar` are `organizations/O1`, `folders/F1`, `projects/P1`. */
|
|
@@ -578,7 +606,7 @@ declare namespace gapi.client {
|
|
|
578
606
|
}
|
|
579
607
|
interface GoogleIdentityAccesscontextmanagerV1BasicLevel {
|
|
580
608
|
/** How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND. */
|
|
581
|
-
combiningFunction?:
|
|
609
|
+
combiningFunction?: 'AND' | 'OR';
|
|
582
610
|
/** Required. A list of requirements for the `AccessLevel` to be granted. */
|
|
583
611
|
conditions?: GoogleIdentityAccesscontextmanagerV1Condition[];
|
|
584
612
|
}
|
|
@@ -604,9 +632,17 @@ declare namespace gapi.client {
|
|
|
604
632
|
}
|
|
605
633
|
interface GoogleIdentityAccesscontextmanagerV1DevicePolicy {
|
|
606
634
|
/** Allowed device management levels, an empty list allows all management levels. */
|
|
607
|
-
allowedDeviceManagementLevels?:
|
|
635
|
+
allowedDeviceManagementLevels?:
|
|
636
|
+
| 'MANAGEMENT_UNSPECIFIED'
|
|
637
|
+
| 'NONE'
|
|
638
|
+
| 'BASIC'
|
|
639
|
+
| 'COMPLETE'[];
|
|
608
640
|
/** Allowed encryptions statuses, an empty list allows all statuses. */
|
|
609
|
-
allowedEncryptionStatuses?:
|
|
641
|
+
allowedEncryptionStatuses?:
|
|
642
|
+
| 'ENCRYPTION_UNSPECIFIED'
|
|
643
|
+
| 'ENCRYPTION_UNSUPPORTED'
|
|
644
|
+
| 'UNENCRYPTED'
|
|
645
|
+
| 'ENCRYPTED'[];
|
|
610
646
|
/** Allowed OS versions, an empty list allows all types and all versions. */
|
|
611
647
|
osConstraints?: GoogleIdentityAccesscontextmanagerV1OsConstraint[];
|
|
612
648
|
/** Whether the device needs to be approved by the customer admin. */
|
|
@@ -620,9 +656,16 @@ declare namespace gapi.client {
|
|
|
620
656
|
/** A list of identities that are allowed access through [EgressPolicy]. Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported. The `v1` identities that have the prefix `user`, `group`, `serviceAccount`, and `principal` in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported. */
|
|
621
657
|
identities?: string[];
|
|
622
658
|
/** Specifies the type of identities that are allowed access to outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. */
|
|
623
|
-
identityType?:
|
|
659
|
+
identityType?:
|
|
660
|
+
| 'IDENTITY_TYPE_UNSPECIFIED'
|
|
661
|
+
| 'ANY_IDENTITY'
|
|
662
|
+
| 'ANY_USER_ACCOUNT'
|
|
663
|
+
| 'ANY_SERVICE_ACCOUNT';
|
|
624
664
|
/** Whether to enforce traffic restrictions based on `sources` field. If the `sources` fields is non-empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. */
|
|
625
|
-
sourceRestriction?:
|
|
665
|
+
sourceRestriction?:
|
|
666
|
+
| 'SOURCE_RESTRICTION_UNSPECIFIED'
|
|
667
|
+
| 'SOURCE_RESTRICTION_ENABLED'
|
|
668
|
+
| 'SOURCE_RESTRICTION_DISABLED';
|
|
626
669
|
/** Sources that this EgressPolicy authorizes access from. If this field is not empty, then `source_restriction` must be set to `SOURCE_RESTRICTION_ENABLED`. */
|
|
627
670
|
sources?: GoogleIdentityAccesscontextmanagerV1EgressSource[];
|
|
628
671
|
}
|
|
@@ -654,7 +697,11 @@ declare namespace gapi.client {
|
|
|
654
697
|
/** A list of identities that are allowed access through [IngressPolicy]. Identities can be an individual user, service account, Google group, or third-party identity. For third-party identity, only single identities are supported and other identity types are not supported. The `v1` identities that have the prefix `user`, `group`, `serviceAccount`, and `principal` in https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported. */
|
|
655
698
|
identities?: string[];
|
|
656
699
|
/** Specifies the type of identities that are allowed access from outside the perimeter. If left unspecified, then members of `identities` field will be allowed access. */
|
|
657
|
-
identityType?:
|
|
700
|
+
identityType?:
|
|
701
|
+
| 'IDENTITY_TYPE_UNSPECIFIED'
|
|
702
|
+
| 'ANY_IDENTITY'
|
|
703
|
+
| 'ANY_USER_ACCOUNT'
|
|
704
|
+
| 'ANY_SERVICE_ACCOUNT';
|
|
658
705
|
/** Sources that this IngressPolicy authorizes access from. */
|
|
659
706
|
sources?: GoogleIdentityAccesscontextmanagerV1IngressSource[];
|
|
660
707
|
}
|
|
@@ -690,7 +737,14 @@ declare namespace gapi.client {
|
|
|
690
737
|
/** The minimum allowed OS version. If not set, any version of this OS satisfies the constraint. Format: `"major.minor.patch"`. Examples: `"10.5.301"`, `"9.2.1"`. */
|
|
691
738
|
minimumVersion?: string;
|
|
692
739
|
/** Required. The allowed OS type. */
|
|
693
|
-
osType?:
|
|
740
|
+
osType?:
|
|
741
|
+
| 'OS_UNSPECIFIED'
|
|
742
|
+
| 'DESKTOP_MAC'
|
|
743
|
+
| 'DESKTOP_WINDOWS'
|
|
744
|
+
| 'DESKTOP_LINUX'
|
|
745
|
+
| 'DESKTOP_CHROME_OS'
|
|
746
|
+
| 'ANDROID'
|
|
747
|
+
| 'IOS';
|
|
694
748
|
/** Only allows requests from devices with a verified Chrome OS. Verifications includes requirements that the device is enterprise-managed, conformant to domain policies, and the caller has permission to call the API targeted by the request. */
|
|
695
749
|
requireVerifiedChromeOs?: boolean;
|
|
696
750
|
}
|
|
@@ -702,7 +756,7 @@ declare namespace gapi.client {
|
|
|
702
756
|
/** Identifier. Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`. */
|
|
703
757
|
name?: string;
|
|
704
758
|
/** Perimeter type indicator. A single project or VPC network is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be a included in a perimeter bridge without being included in regular perimeter. For perimeter bridges, the restricted service list as well as access level lists must be empty. */
|
|
705
|
-
perimeterType?:
|
|
759
|
+
perimeterType?: 'PERIMETER_TYPE_REGULAR' | 'PERIMETER_TYPE_BRIDGE';
|
|
706
760
|
/** Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the "use_explicit_dry_run_spec" flag is set. */
|
|
707
761
|
spec?: GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig;
|
|
708
762
|
/** Current ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. */
|
|
@@ -788,7 +842,24 @@ declare namespace gapi.client {
|
|
|
788
842
|
/** The human-readable description of the cause of failure. */
|
|
789
843
|
cause?: string;
|
|
790
844
|
/** The Google standard error code that best describes the state. For example: - OK means the analysis on this entity has been successfully finished; - PERMISSION_DENIED means an access denied error is encountered; - DEADLINE_EXCEEDED means the analysis on this entity hasn't been started in time; */
|
|
791
|
-
code?:
|
|
845
|
+
code?:
|
|
846
|
+
| 'OK'
|
|
847
|
+
| 'CANCELLED'
|
|
848
|
+
| 'UNKNOWN'
|
|
849
|
+
| 'INVALID_ARGUMENT'
|
|
850
|
+
| 'DEADLINE_EXCEEDED'
|
|
851
|
+
| 'NOT_FOUND'
|
|
852
|
+
| 'ALREADY_EXISTS'
|
|
853
|
+
| 'PERMISSION_DENIED'
|
|
854
|
+
| 'UNAUTHENTICATED'
|
|
855
|
+
| 'RESOURCE_EXHAUSTED'
|
|
856
|
+
| 'FAILED_PRECONDITION'
|
|
857
|
+
| 'ABORTED'
|
|
858
|
+
| 'OUT_OF_RANGE'
|
|
859
|
+
| 'UNIMPLEMENTED'
|
|
860
|
+
| 'INTERNAL'
|
|
861
|
+
| 'UNAVAILABLE'
|
|
862
|
+
| 'DATA_LOSS';
|
|
792
863
|
}
|
|
793
864
|
interface IamPolicySearchResult {
|
|
794
865
|
/** The type of the resource associated with this IAM policy. Example: `compute.googleapis.com/Disk`. To search against the `asset_type`: * specify the `asset_types` field in your search request. */
|
|
@@ -830,9 +901,9 @@ declare namespace gapi.client {
|
|
|
830
901
|
/** Software package present on the VM instance. */
|
|
831
902
|
installedPackage?: SoftwarePackage;
|
|
832
903
|
/** The origin of this inventory item. */
|
|
833
|
-
originType?:
|
|
904
|
+
originType?: 'ORIGIN_TYPE_UNSPECIFIED' | 'INVENTORY_REPORT';
|
|
834
905
|
/** The specific type of inventory, correlating to its specific details. */
|
|
835
|
-
type?:
|
|
906
|
+
type?: 'TYPE_UNSPECIFIED' | 'INSTALLED_PACKAGE' | 'AVAILABLE_PACKAGE';
|
|
836
907
|
/** When this inventory item was last modified. */
|
|
837
908
|
updateTime?: string;
|
|
838
909
|
}
|
|
@@ -936,7 +1007,7 @@ declare namespace gapi.client {
|
|
|
936
1007
|
}
|
|
937
1008
|
interface PartitionSpec {
|
|
938
1009
|
/** The partition key for BigQuery partitioned table. */
|
|
939
|
-
partitionKey?:
|
|
1010
|
+
partitionKey?: 'PARTITION_KEY_UNSPECIFIED' | 'READ_TIME' | 'REQUEST_TIME';
|
|
940
1011
|
}
|
|
941
1012
|
interface Permissions {
|
|
942
1013
|
/** A list of permissions. A sample permission string: `compute.disk.get`. */
|
|
@@ -1218,7 +1289,12 @@ declare namespace gapi.client {
|
|
|
1218
1289
|
/** Prior copy of the asset. Populated if prior_asset_state is PRESENT. Currently this is only set for responses in Real-Time Feed. */
|
|
1219
1290
|
priorAsset?: Asset;
|
|
1220
1291
|
/** State of prior_asset. */
|
|
1221
|
-
priorAssetState?:
|
|
1292
|
+
priorAssetState?:
|
|
1293
|
+
| 'PRIOR_ASSET_STATE_UNSPECIFIED'
|
|
1294
|
+
| 'PRESENT'
|
|
1295
|
+
| 'INVALID'
|
|
1296
|
+
| 'DOES_NOT_EXIST'
|
|
1297
|
+
| 'DELETED';
|
|
1222
1298
|
/** The time window when the asset data and state was observed. */
|
|
1223
1299
|
window?: TimeWindow;
|
|
1224
1300
|
}
|
|
@@ -1312,17 +1388,24 @@ declare namespace gapi.client {
|
|
|
1312
1388
|
/** Lists assets with time and resource types and returns paged results in response. */
|
|
1313
1389
|
list(request?: {
|
|
1314
1390
|
/** V1 error format. */
|
|
1315
|
-
'$.xgafv'?:
|
|
1391
|
+
'$.xgafv'?: '1' | '2';
|
|
1316
1392
|
/** OAuth access token. */
|
|
1317
1393
|
access_token?: string;
|
|
1318
1394
|
/** Data format for response. */
|
|
1319
|
-
alt?:
|
|
1395
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1320
1396
|
/** A list of asset types to take a snapshot for. For example: "compute.googleapis.com/Disk". Regular expression is also supported. For example: * "compute.googleapis.com.*" snapshots resources whose asset type starts with "compute.googleapis.com". * ".*Instance" snapshots resources whose asset type ends with "Instance". * ".*Instance.*" snapshots resources whose asset type contains "Instance". See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported regular expression syntax. If the regular expression does not match any supported asset type, an INVALID_ARGUMENT error will be returned. If specified, only matching assets will be returned, otherwise, it will snapshot all asset types. See [Introduction to Cloud Asset Inventory](https://cloud.google.com/asset-inventory/docs/overview) for all supported asset types. */
|
|
1321
1397
|
assetTypes?: string | string[];
|
|
1322
1398
|
/** JSONP */
|
|
1323
1399
|
callback?: string;
|
|
1324
1400
|
/** Asset content type. If not specified, no content but the asset name will be returned. */
|
|
1325
|
-
contentType?:
|
|
1401
|
+
contentType?:
|
|
1402
|
+
| 'CONTENT_TYPE_UNSPECIFIED'
|
|
1403
|
+
| 'RESOURCE'
|
|
1404
|
+
| 'IAM_POLICY'
|
|
1405
|
+
| 'ORG_POLICY'
|
|
1406
|
+
| 'ACCESS_POLICY'
|
|
1407
|
+
| 'OS_INVENTORY'
|
|
1408
|
+
| 'RELATIONSHIP';
|
|
1326
1409
|
/** Selector specifying which fields to include in a partial response. */
|
|
1327
1410
|
fields?: string;
|
|
1328
1411
|
/** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
|
|
@@ -1353,11 +1436,11 @@ declare namespace gapi.client {
|
|
|
1353
1436
|
/** Gets effective IAM policies for a batch of resources. */
|
|
1354
1437
|
batchGet(request?: {
|
|
1355
1438
|
/** V1 error format. */
|
|
1356
|
-
'$.xgafv'?:
|
|
1439
|
+
'$.xgafv'?: '1' | '2';
|
|
1357
1440
|
/** OAuth access token. */
|
|
1358
1441
|
access_token?: string;
|
|
1359
1442
|
/** Data format for response. */
|
|
1360
|
-
alt?:
|
|
1443
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1361
1444
|
/** JSONP */
|
|
1362
1445
|
callback?: string;
|
|
1363
1446
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1384,11 +1467,11 @@ declare namespace gapi.client {
|
|
|
1384
1467
|
/** Creates a feed in a parent project/folder/organization to listen to its asset updates. */
|
|
1385
1468
|
create(request: {
|
|
1386
1469
|
/** V1 error format. */
|
|
1387
|
-
'$.xgafv'?:
|
|
1470
|
+
'$.xgafv'?: '1' | '2';
|
|
1388
1471
|
/** OAuth access token. */
|
|
1389
1472
|
access_token?: string;
|
|
1390
1473
|
/** Data format for response. */
|
|
1391
|
-
alt?:
|
|
1474
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1392
1475
|
/** JSONP */
|
|
1393
1476
|
callback?: string;
|
|
1394
1477
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1413,11 +1496,11 @@ declare namespace gapi.client {
|
|
|
1413
1496
|
create(
|
|
1414
1497
|
request: {
|
|
1415
1498
|
/** V1 error format. */
|
|
1416
|
-
'$.xgafv'?:
|
|
1499
|
+
'$.xgafv'?: '1' | '2';
|
|
1417
1500
|
/** OAuth access token. */
|
|
1418
1501
|
access_token?: string;
|
|
1419
1502
|
/** Data format for response. */
|
|
1420
|
-
alt?:
|
|
1503
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1421
1504
|
/** JSONP */
|
|
1422
1505
|
callback?: string;
|
|
1423
1506
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1442,11 +1525,11 @@ declare namespace gapi.client {
|
|
|
1442
1525
|
/** Deletes an asset feed. */
|
|
1443
1526
|
delete(request?: {
|
|
1444
1527
|
/** V1 error format. */
|
|
1445
|
-
'$.xgafv'?:
|
|
1528
|
+
'$.xgafv'?: '1' | '2';
|
|
1446
1529
|
/** OAuth access token. */
|
|
1447
1530
|
access_token?: string;
|
|
1448
1531
|
/** Data format for response. */
|
|
1449
|
-
alt?:
|
|
1532
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1450
1533
|
/** JSONP */
|
|
1451
1534
|
callback?: string;
|
|
1452
1535
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1469,11 +1552,11 @@ declare namespace gapi.client {
|
|
|
1469
1552
|
/** Gets details about an asset feed. */
|
|
1470
1553
|
get(request?: {
|
|
1471
1554
|
/** V1 error format. */
|
|
1472
|
-
'$.xgafv'?:
|
|
1555
|
+
'$.xgafv'?: '1' | '2';
|
|
1473
1556
|
/** OAuth access token. */
|
|
1474
1557
|
access_token?: string;
|
|
1475
1558
|
/** Data format for response. */
|
|
1476
|
-
alt?:
|
|
1559
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1477
1560
|
/** JSONP */
|
|
1478
1561
|
callback?: string;
|
|
1479
1562
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1496,11 +1579,11 @@ declare namespace gapi.client {
|
|
|
1496
1579
|
/** Lists all asset feeds in a parent project/folder/organization. */
|
|
1497
1580
|
list(request?: {
|
|
1498
1581
|
/** V1 error format. */
|
|
1499
|
-
'$.xgafv'?:
|
|
1582
|
+
'$.xgafv'?: '1' | '2';
|
|
1500
1583
|
/** OAuth access token. */
|
|
1501
1584
|
access_token?: string;
|
|
1502
1585
|
/** Data format for response. */
|
|
1503
|
-
alt?:
|
|
1586
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1504
1587
|
/** JSONP */
|
|
1505
1588
|
callback?: string;
|
|
1506
1589
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1523,11 +1606,11 @@ declare namespace gapi.client {
|
|
|
1523
1606
|
/** Updates an asset feed configuration. */
|
|
1524
1607
|
patch(request: {
|
|
1525
1608
|
/** V1 error format. */
|
|
1526
|
-
'$.xgafv'?:
|
|
1609
|
+
'$.xgafv'?: '1' | '2';
|
|
1527
1610
|
/** OAuth access token. */
|
|
1528
1611
|
access_token?: string;
|
|
1529
1612
|
/** Data format for response. */
|
|
1530
|
-
alt?:
|
|
1613
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1531
1614
|
/** JSONP */
|
|
1532
1615
|
callback?: string;
|
|
1533
1616
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1552,11 +1635,11 @@ declare namespace gapi.client {
|
|
|
1552
1635
|
patch(
|
|
1553
1636
|
request: {
|
|
1554
1637
|
/** V1 error format. */
|
|
1555
|
-
'$.xgafv'?:
|
|
1638
|
+
'$.xgafv'?: '1' | '2';
|
|
1556
1639
|
/** OAuth access token. */
|
|
1557
1640
|
access_token?: string;
|
|
1558
1641
|
/** Data format for response. */
|
|
1559
|
-
alt?:
|
|
1642
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1560
1643
|
/** JSONP */
|
|
1561
1644
|
callback?: string;
|
|
1562
1645
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1583,11 +1666,11 @@ declare namespace gapi.client {
|
|
|
1583
1666
|
/** Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service. */
|
|
1584
1667
|
get(request?: {
|
|
1585
1668
|
/** V1 error format. */
|
|
1586
|
-
'$.xgafv'?:
|
|
1669
|
+
'$.xgafv'?: '1' | '2';
|
|
1587
1670
|
/** OAuth access token. */
|
|
1588
1671
|
access_token?: string;
|
|
1589
1672
|
/** Data format for response. */
|
|
1590
|
-
alt?:
|
|
1673
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1591
1674
|
/** JSONP */
|
|
1592
1675
|
callback?: string;
|
|
1593
1676
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1612,11 +1695,11 @@ declare namespace gapi.client {
|
|
|
1612
1695
|
/** Creates a saved query in a parent project/folder/organization. */
|
|
1613
1696
|
create(request: {
|
|
1614
1697
|
/** V1 error format. */
|
|
1615
|
-
'$.xgafv'?:
|
|
1698
|
+
'$.xgafv'?: '1' | '2';
|
|
1616
1699
|
/** OAuth access token. */
|
|
1617
1700
|
access_token?: string;
|
|
1618
1701
|
/** Data format for response. */
|
|
1619
|
-
alt?:
|
|
1702
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1620
1703
|
/** JSONP */
|
|
1621
1704
|
callback?: string;
|
|
1622
1705
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1643,11 +1726,11 @@ declare namespace gapi.client {
|
|
|
1643
1726
|
create(
|
|
1644
1727
|
request: {
|
|
1645
1728
|
/** V1 error format. */
|
|
1646
|
-
'$.xgafv'?:
|
|
1729
|
+
'$.xgafv'?: '1' | '2';
|
|
1647
1730
|
/** OAuth access token. */
|
|
1648
1731
|
access_token?: string;
|
|
1649
1732
|
/** Data format for response. */
|
|
1650
|
-
alt?:
|
|
1733
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1651
1734
|
/** JSONP */
|
|
1652
1735
|
callback?: string;
|
|
1653
1736
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1674,11 +1757,11 @@ declare namespace gapi.client {
|
|
|
1674
1757
|
/** Deletes a saved query. */
|
|
1675
1758
|
delete(request?: {
|
|
1676
1759
|
/** V1 error format. */
|
|
1677
|
-
'$.xgafv'?:
|
|
1760
|
+
'$.xgafv'?: '1' | '2';
|
|
1678
1761
|
/** OAuth access token. */
|
|
1679
1762
|
access_token?: string;
|
|
1680
1763
|
/** Data format for response. */
|
|
1681
|
-
alt?:
|
|
1764
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1682
1765
|
/** JSONP */
|
|
1683
1766
|
callback?: string;
|
|
1684
1767
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1701,11 +1784,11 @@ declare namespace gapi.client {
|
|
|
1701
1784
|
/** Gets details about a saved query. */
|
|
1702
1785
|
get(request?: {
|
|
1703
1786
|
/** V1 error format. */
|
|
1704
|
-
'$.xgafv'?:
|
|
1787
|
+
'$.xgafv'?: '1' | '2';
|
|
1705
1788
|
/** OAuth access token. */
|
|
1706
1789
|
access_token?: string;
|
|
1707
1790
|
/** Data format for response. */
|
|
1708
|
-
alt?:
|
|
1791
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1709
1792
|
/** JSONP */
|
|
1710
1793
|
callback?: string;
|
|
1711
1794
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1728,11 +1811,11 @@ declare namespace gapi.client {
|
|
|
1728
1811
|
/** Lists all saved queries in a parent project/folder/organization. */
|
|
1729
1812
|
list(request?: {
|
|
1730
1813
|
/** V1 error format. */
|
|
1731
|
-
'$.xgafv'?:
|
|
1814
|
+
'$.xgafv'?: '1' | '2';
|
|
1732
1815
|
/** OAuth access token. */
|
|
1733
1816
|
access_token?: string;
|
|
1734
1817
|
/** Data format for response. */
|
|
1735
|
-
alt?:
|
|
1818
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1736
1819
|
/** JSONP */
|
|
1737
1820
|
callback?: string;
|
|
1738
1821
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1761,11 +1844,11 @@ declare namespace gapi.client {
|
|
|
1761
1844
|
/** Updates a saved query. */
|
|
1762
1845
|
patch(request: {
|
|
1763
1846
|
/** V1 error format. */
|
|
1764
|
-
'$.xgafv'?:
|
|
1847
|
+
'$.xgafv'?: '1' | '2';
|
|
1765
1848
|
/** OAuth access token. */
|
|
1766
1849
|
access_token?: string;
|
|
1767
1850
|
/** Data format for response. */
|
|
1768
|
-
alt?:
|
|
1851
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1769
1852
|
/** JSONP */
|
|
1770
1853
|
callback?: string;
|
|
1771
1854
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1792,11 +1875,11 @@ declare namespace gapi.client {
|
|
|
1792
1875
|
patch(
|
|
1793
1876
|
request: {
|
|
1794
1877
|
/** V1 error format. */
|
|
1795
|
-
'$.xgafv'?:
|
|
1878
|
+
'$.xgafv'?: '1' | '2';
|
|
1796
1879
|
/** OAuth access token. */
|
|
1797
1880
|
access_token?: string;
|
|
1798
1881
|
/** Data format for response. */
|
|
1799
|
-
alt?:
|
|
1882
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1800
1883
|
/** JSONP */
|
|
1801
1884
|
callback?: string;
|
|
1802
1885
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1825,11 +1908,11 @@ declare namespace gapi.client {
|
|
|
1825
1908
|
/** Analyzes IAM policies to answer which identities have what accesses on which resources. */
|
|
1826
1909
|
analyzeIamPolicy(request?: {
|
|
1827
1910
|
/** V1 error format. */
|
|
1828
|
-
'$.xgafv'?:
|
|
1911
|
+
'$.xgafv'?: '1' | '2';
|
|
1829
1912
|
/** OAuth access token. */
|
|
1830
1913
|
access_token?: string;
|
|
1831
1914
|
/** Data format for response. */
|
|
1832
|
-
alt?:
|
|
1915
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1833
1916
|
/** Optional. The permissions to appear in result. */
|
|
1834
1917
|
'analysisQuery.accessSelector.permissions'?: string | string[];
|
|
1835
1918
|
/** Optional. The roles to appear in result. */
|
|
@@ -1878,11 +1961,11 @@ declare namespace gapi.client {
|
|
|
1878
1961
|
/** Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Google Cloud Storage or a BigQuery destination. For Cloud Storage destination, the output format is the JSON format that represents a AnalyzeIamPolicyResponse. This method implements the google.longrunning.Operation, which allows you to track the operation status. We recommend intervals of at least 2 seconds with exponential backoff retry to poll the operation result. The metadata contains the metadata for the long-running operation. */
|
|
1879
1962
|
analyzeIamPolicyLongrunning(request: {
|
|
1880
1963
|
/** V1 error format. */
|
|
1881
|
-
'$.xgafv'?:
|
|
1964
|
+
'$.xgafv'?: '1' | '2';
|
|
1882
1965
|
/** OAuth access token. */
|
|
1883
1966
|
access_token?: string;
|
|
1884
1967
|
/** Data format for response. */
|
|
1885
|
-
alt?:
|
|
1968
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1886
1969
|
/** JSONP */
|
|
1887
1970
|
callback?: string;
|
|
1888
1971
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1907,11 +1990,11 @@ declare namespace gapi.client {
|
|
|
1907
1990
|
analyzeIamPolicyLongrunning(
|
|
1908
1991
|
request: {
|
|
1909
1992
|
/** V1 error format. */
|
|
1910
|
-
'$.xgafv'?:
|
|
1993
|
+
'$.xgafv'?: '1' | '2';
|
|
1911
1994
|
/** OAuth access token. */
|
|
1912
1995
|
access_token?: string;
|
|
1913
1996
|
/** Data format for response. */
|
|
1914
|
-
alt?:
|
|
1997
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1915
1998
|
/** JSONP */
|
|
1916
1999
|
callback?: string;
|
|
1917
2000
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -1936,11 +2019,11 @@ declare namespace gapi.client {
|
|
|
1936
2019
|
/** Analyze moving a resource to a specified destination without kicking off the actual move. The analysis is best effort depending on the user's permissions of viewing different hierarchical policies and configurations. The policies and configuration are subject to change before the actual resource migration takes place. */
|
|
1937
2020
|
analyzeMove(request?: {
|
|
1938
2021
|
/** V1 error format. */
|
|
1939
|
-
'$.xgafv'?:
|
|
2022
|
+
'$.xgafv'?: '1' | '2';
|
|
1940
2023
|
/** OAuth access token. */
|
|
1941
2024
|
access_token?: string;
|
|
1942
2025
|
/** Data format for response. */
|
|
1943
|
-
alt?:
|
|
2026
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1944
2027
|
/** JSONP */
|
|
1945
2028
|
callback?: string;
|
|
1946
2029
|
/** Required. Name of the Google Cloud folder or organization to reparent the target resource. The analysis will be performed against hypothetically moving the resource to this specified destination parent. This can only be a folder number (such as "folders/123") or an organization number (such as "organizations/123"). */
|
|
@@ -1962,16 +2045,16 @@ declare namespace gapi.client {
|
|
|
1962
2045
|
/** Legacy upload protocol for media (e.g. "media", "multipart"). */
|
|
1963
2046
|
uploadType?: string;
|
|
1964
2047
|
/** Analysis view indicating what information should be included in the analysis response. If unspecified, the default view is FULL. */
|
|
1965
|
-
view?:
|
|
2048
|
+
view?: 'ANALYSIS_VIEW_UNSPECIFIED' | 'FULL' | 'BASIC';
|
|
1966
2049
|
}): Request<AnalyzeMoveResponse>;
|
|
1967
2050
|
/** Analyzes organization policies under a scope. */
|
|
1968
2051
|
analyzeOrgPolicies(request?: {
|
|
1969
2052
|
/** V1 error format. */
|
|
1970
|
-
'$.xgafv'?:
|
|
2053
|
+
'$.xgafv'?: '1' | '2';
|
|
1971
2054
|
/** OAuth access token. */
|
|
1972
2055
|
access_token?: string;
|
|
1973
2056
|
/** Data format for response. */
|
|
1974
|
-
alt?:
|
|
2057
|
+
alt?: 'json' | 'media' | 'proto';
|
|
1975
2058
|
/** JSONP */
|
|
1976
2059
|
callback?: string;
|
|
1977
2060
|
/** Required. The name of the constraint to analyze organization policies for. The response only contains analyzed organization policies for the provided constraint. */
|
|
@@ -2002,11 +2085,11 @@ declare namespace gapi.client {
|
|
|
2002
2085
|
/** Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. This RPC supports custom constraints and the following canned constraints: * constraints/ainotebooks.accessMode * constraints/ainotebooks.disableFileDownloads * constraints/ainotebooks.disableRootAccess * constraints/ainotebooks.disableTerminal * constraints/ainotebooks.environmentOptions * constraints/ainotebooks.requireAutoUpgradeSchedule * constraints/ainotebooks.restrictVpcNetworks * constraints/compute.disableGuestAttributesAccess * constraints/compute.disableInstanceDataAccessApis * constraints/compute.disableNestedVirtualization * constraints/compute.disableSerialPortAccess * constraints/compute.disableSerialPortLogging * constraints/compute.disableVpcExternalIpv6 * constraints/compute.requireOsLogin * constraints/compute.requireShieldedVm * constraints/compute.restrictLoadBalancerCreationForTypes * constraints/compute.restrictProtocolForwardingCreationForTypes * constraints/compute.restrictXpnProjectLienRemoval * constraints/compute.setNewProjectDefaultToZonalDNSOnly * constraints/compute.skipDefaultNetworkCreation * constraints/compute.trustedImageProjects * constraints/compute.vmCanIpForward * constraints/compute.vmExternalIpAccess * constraints/gcp.detailedAuditLoggingMode * constraints/gcp.resourceLocations * constraints/iam.allowedPolicyMemberDomains * constraints/iam.automaticIamGrantsForDefaultServiceAccounts * constraints/iam.disableServiceAccountCreation * constraints/iam.disableServiceAccountKeyCreation * constraints/iam.disableServiceAccountKeyUpload * constraints/iam.restrictCrossProjectServiceAccountLienRemoval * constraints/iam.serviceAccountKeyExpiryHours * constraints/resourcemanager.accessBoundaries * constraints/resourcemanager.allowedExportDestinations * constraints/sql.restrictAuthorizedNetworks * constraints/sql.restrictNoncompliantDiagnosticDataAccess * constraints/sql.restrictNoncompliantResourceCreation * constraints/sql.restrictPublicIp * constraints/storage.publicAccessPrevention * constraints/storage.restrictAuthTypes * constraints/storage.uniformBucketLevelAccess This RPC only returns either resources of types [supported by search APIs](https://cloud.google.com/asset-inventory/docs/supported-asset-types) or IAM policies. */
|
|
2003
2086
|
analyzeOrgPolicyGovernedAssets(request?: {
|
|
2004
2087
|
/** V1 error format. */
|
|
2005
|
-
'$.xgafv'?:
|
|
2088
|
+
'$.xgafv'?: '1' | '2';
|
|
2006
2089
|
/** OAuth access token. */
|
|
2007
2090
|
access_token?: string;
|
|
2008
2091
|
/** Data format for response. */
|
|
2009
|
-
alt?:
|
|
2092
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2010
2093
|
/** JSONP */
|
|
2011
2094
|
callback?: string;
|
|
2012
2095
|
/** Required. The name of the constraint to analyze governed assets for. The analysis only contains analyzed organization policies for the provided constraint. */
|
|
@@ -2037,11 +2120,11 @@ declare namespace gapi.client {
|
|
|
2037
2120
|
/** Analyzes organization policies governed containers (projects, folders or organization) under a scope. */
|
|
2038
2121
|
analyzeOrgPolicyGovernedContainers(request?: {
|
|
2039
2122
|
/** V1 error format. */
|
|
2040
|
-
'$.xgafv'?:
|
|
2123
|
+
'$.xgafv'?: '1' | '2';
|
|
2041
2124
|
/** OAuth access token. */
|
|
2042
2125
|
access_token?: string;
|
|
2043
2126
|
/** Data format for response. */
|
|
2044
|
-
alt?:
|
|
2127
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2045
2128
|
/** JSONP */
|
|
2046
2129
|
callback?: string;
|
|
2047
2130
|
/** Required. The name of the constraint to analyze governed containers for. The analysis only contains organization policies for the provided constraint. */
|
|
@@ -2072,17 +2155,24 @@ declare namespace gapi.client {
|
|
|
2072
2155
|
/** Batch gets the update history of assets that overlap a time window. For IAM_POLICY content, this API outputs history when the asset and its attached IAM POLICY both exist. This can create gaps in the output history. Otherwise, this API outputs history with asset in both non-delete or deleted status. If a specified asset does not exist, this API returns an INVALID_ARGUMENT error. */
|
|
2073
2156
|
batchGetAssetsHistory(request?: {
|
|
2074
2157
|
/** V1 error format. */
|
|
2075
|
-
'$.xgafv'?:
|
|
2158
|
+
'$.xgafv'?: '1' | '2';
|
|
2076
2159
|
/** OAuth access token. */
|
|
2077
2160
|
access_token?: string;
|
|
2078
2161
|
/** Data format for response. */
|
|
2079
|
-
alt?:
|
|
2162
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2080
2163
|
/** A list of the full names of the assets. See: https://cloud.google.com/asset-inventory/docs/resource-name-format Example: `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`. The request becomes a no-op if the asset name list is empty, and the max size of the asset name list is 100 in one request. */
|
|
2081
2164
|
assetNames?: string | string[];
|
|
2082
2165
|
/** JSONP */
|
|
2083
2166
|
callback?: string;
|
|
2084
2167
|
/** Optional. The content type. */
|
|
2085
|
-
contentType?:
|
|
2168
|
+
contentType?:
|
|
2169
|
+
| 'CONTENT_TYPE_UNSPECIFIED'
|
|
2170
|
+
| 'RESOURCE'
|
|
2171
|
+
| 'IAM_POLICY'
|
|
2172
|
+
| 'ORG_POLICY'
|
|
2173
|
+
| 'ACCESS_POLICY'
|
|
2174
|
+
| 'OS_INVENTORY'
|
|
2175
|
+
| 'RELATIONSHIP';
|
|
2086
2176
|
/** Selector specifying which fields to include in a partial response. */
|
|
2087
2177
|
fields?: string;
|
|
2088
2178
|
/** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
|
|
@@ -2109,11 +2199,11 @@ declare namespace gapi.client {
|
|
|
2109
2199
|
/** Exports assets with time and resource types to a given Cloud Storage location/BigQuery table. For Cloud Storage location destinations, the output format is newline-delimited JSON. Each line represents a google.cloud.asset.v1.Asset in the JSON format; for BigQuery table destinations, the output table stores the fields in asset Protobuf as columns. This API implements the google.longrunning.Operation API, which allows you to keep track of the export. We recommend intervals of at least 2 seconds with exponential retry to poll the export operation result. For regular-size resource parent, the export operation usually finishes within 5 minutes. */
|
|
2110
2200
|
exportAssets(request: {
|
|
2111
2201
|
/** V1 error format. */
|
|
2112
|
-
'$.xgafv'?:
|
|
2202
|
+
'$.xgafv'?: '1' | '2';
|
|
2113
2203
|
/** OAuth access token. */
|
|
2114
2204
|
access_token?: string;
|
|
2115
2205
|
/** Data format for response. */
|
|
2116
|
-
alt?:
|
|
2206
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2117
2207
|
/** JSONP */
|
|
2118
2208
|
callback?: string;
|
|
2119
2209
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -2138,11 +2228,11 @@ declare namespace gapi.client {
|
|
|
2138
2228
|
exportAssets(
|
|
2139
2229
|
request: {
|
|
2140
2230
|
/** V1 error format. */
|
|
2141
|
-
'$.xgafv'?:
|
|
2231
|
+
'$.xgafv'?: '1' | '2';
|
|
2142
2232
|
/** OAuth access token. */
|
|
2143
2233
|
access_token?: string;
|
|
2144
2234
|
/** Data format for response. */
|
|
2145
|
-
alt?:
|
|
2235
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2146
2236
|
/** JSONP */
|
|
2147
2237
|
callback?: string;
|
|
2148
2238
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -2167,11 +2257,11 @@ declare namespace gapi.client {
|
|
|
2167
2257
|
/** Issue a job that queries assets using a SQL statement compatible with [BigQuery SQL](https://cloud.google.com/bigquery/docs/introduction-sql). If the query execution finishes within timeout and there's no pagination, the full query results will be returned in the `QueryAssetsResponse`. Otherwise, full query results can be obtained by issuing extra requests with the `job_reference` from the a previous `QueryAssets` call. Note, the query result has approximately 10 GB limitation enforced by [BigQuery](https://cloud.google.com/bigquery/docs/best-practices-performance-output). Queries return larger results will result in errors. */
|
|
2168
2258
|
queryAssets(request: {
|
|
2169
2259
|
/** V1 error format. */
|
|
2170
|
-
'$.xgafv'?:
|
|
2260
|
+
'$.xgafv'?: '1' | '2';
|
|
2171
2261
|
/** OAuth access token. */
|
|
2172
2262
|
access_token?: string;
|
|
2173
2263
|
/** Data format for response. */
|
|
2174
|
-
alt?:
|
|
2264
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2175
2265
|
/** JSONP */
|
|
2176
2266
|
callback?: string;
|
|
2177
2267
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -2196,11 +2286,11 @@ declare namespace gapi.client {
|
|
|
2196
2286
|
queryAssets(
|
|
2197
2287
|
request: {
|
|
2198
2288
|
/** V1 error format. */
|
|
2199
|
-
'$.xgafv'?:
|
|
2289
|
+
'$.xgafv'?: '1' | '2';
|
|
2200
2290
|
/** OAuth access token. */
|
|
2201
2291
|
access_token?: string;
|
|
2202
2292
|
/** Data format for response. */
|
|
2203
|
-
alt?:
|
|
2293
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2204
2294
|
/** JSONP */
|
|
2205
2295
|
callback?: string;
|
|
2206
2296
|
/** Selector specifying which fields to include in a partial response. */
|
|
@@ -2225,11 +2315,11 @@ declare namespace gapi.client {
|
|
|
2225
2315
|
/** Searches all IAM policies within the specified scope, such as a project, folder, or organization. The caller must be granted the `cloudasset.assets.searchAllIamPolicies` permission on the desired scope, otherwise the request will be rejected. */
|
|
2226
2316
|
searchAllIamPolicies(request?: {
|
|
2227
2317
|
/** V1 error format. */
|
|
2228
|
-
'$.xgafv'?:
|
|
2318
|
+
'$.xgafv'?: '1' | '2';
|
|
2229
2319
|
/** OAuth access token. */
|
|
2230
2320
|
access_token?: string;
|
|
2231
2321
|
/** Data format for response. */
|
|
2232
|
-
alt?:
|
|
2322
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2233
2323
|
/** Optional. A list of asset types that the IAM policies are attached to. If empty, it will search the IAM policies that are attached to all the asset types [supported by search APIs](https://cloud.google.com/asset-inventory/docs/supported-asset-types) Regular expressions are also supported. For example: * "compute.googleapis.com.*" snapshots IAM policies attached to asset type starts with "compute.googleapis.com". * ".*Instance" snapshots IAM policies attached to asset type ends with "Instance". * ".*Instance.*" snapshots IAM policies attached to asset type contains "Instance". See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported regular expression syntax. If the regular expression does not match any supported asset type, an INVALID_ARGUMENT error will be returned. */
|
|
2234
2324
|
assetTypes?: string | string[];
|
|
2235
2325
|
/** JSONP */
|
|
@@ -2262,11 +2352,11 @@ declare namespace gapi.client {
|
|
|
2262
2352
|
/** Searches all Google Cloud resources within the specified scope, such as a project, folder, or organization. The caller must be granted the `cloudasset.assets.searchAllResources` permission on the desired scope, otherwise the request will be rejected. */
|
|
2263
2353
|
searchAllResources(request?: {
|
|
2264
2354
|
/** V1 error format. */
|
|
2265
|
-
'$.xgafv'?:
|
|
2355
|
+
'$.xgafv'?: '1' | '2';
|
|
2266
2356
|
/** OAuth access token. */
|
|
2267
2357
|
access_token?: string;
|
|
2268
2358
|
/** Data format for response. */
|
|
2269
|
-
alt?:
|
|
2359
|
+
alt?: 'json' | 'media' | 'proto';
|
|
2270
2360
|
/** Optional. A list of asset types that this request searches for. If empty, it will search all the asset types [supported by search APIs](https://cloud.google.com/asset-inventory/docs/supported-asset-types). Regular expressions are also supported. For example: * "compute.googleapis.com.*" snapshots resources whose asset type starts with "compute.googleapis.com". * ".*Instance" snapshots resources whose asset type ends with "Instance". * ".*Instance.*" snapshots resources whose asset type contains "Instance". See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported regular expression syntax. If the regular expression does not match any supported asset type, an INVALID_ARGUMENT error will be returned. */
|
|
2271
2361
|
assetTypes?: string | string[];
|
|
2272
2362
|
/** JSONP */
|