@maxim_mazurok/gapi.client.cloudasset-v1 0.3.20260930 → 0.3.20261017
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.d.ts +36 -35
- package/package.json +1 -1
package/index.d.ts
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
// This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
|
|
10
10
|
// In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
|
|
11
11
|
// Generated from: https://cloudasset.googleapis.com/$discovery/rest?version=v1
|
|
12
|
-
// Revision:
|
|
12
|
+
// Revision: 20261017
|
|
13
13
|
|
|
14
14
|
/// <reference types="gapi.client" />
|
|
15
15
|
|
|
@@ -577,19 +577,19 @@ declare namespace gapi.client {
|
|
|
577
577
|
description?: string;
|
|
578
578
|
/** Identifier. Resource name for the `AccessLevel`. Format: `accessPolicies/{access_policy}/accessLevels/{access_level}`. The `access_level` component must begin with a letter, followed by alphanumeric characters or `_`. Its maximum length is 50 characters. After you create an `AccessLevel`, you cannot change its `name`. */
|
|
579
579
|
name?: string;
|
|
580
|
-
/** Human
|
|
580
|
+
/** Human-readable title. Must be unique within the policy. */
|
|
581
581
|
title?: string;
|
|
582
582
|
}
|
|
583
583
|
interface GoogleIdentityAccesscontextmanagerV1AccessPolicy {
|
|
584
|
-
/** Output only. An opaque identifier for the current version of the `AccessPolicy`. This will always be a strongly validated etag, meaning that two
|
|
584
|
+
/** Output only. An opaque identifier for the current version of the `AccessPolicy`. This will always be a strongly validated etag, meaning that two access policies will be identical if and only if their etags are identical. Clients should not expect this to be in any specific format. */
|
|
585
585
|
etag?: string;
|
|
586
586
|
/** Output only. Identifier. Resource name of the `AccessPolicy`. Format: `accessPolicies/{access_policy}` */
|
|
587
587
|
name?: string;
|
|
588
588
|
/** Required. The parent of this `AccessPolicy` in the Cloud Resource Hierarchy. Currently immutable once created. Format: `organizations/{organization_id}` */
|
|
589
589
|
parent?: string;
|
|
590
|
-
/** The scopes of the AccessPolicy. Scopes define which resources a policy can restrict and where its resources can be referenced. For example, policy A with `scopes=["folders/123"]` has the following behavior: - ServicePerimeter can only restrict projects within `folders/123`. - ServicePerimeter within policy A can only reference access levels defined within policy A. - Only one policy can include a given scope; thus, attempting to create a second policy
|
|
590
|
+
/** The scopes of the AccessPolicy. Scopes define which resources a policy can restrict and where its resources can be referenced. For example, policy A with `scopes=["folders/123"]` has the following behavior: - ServicePerimeter can only restrict projects within `folders/123`. - ServicePerimeter within policy A can only reference access levels defined within policy A. - Only one policy can include a given scope; thus, attempting to create a second policy that includes `folders/123` will result in an error. If no scopes are provided, then any resource within the organization can be restricted. Scopes cannot be modified after a policy is created. Policies can only have a single scope. Format: list of `folders/{folder_number}` or `projects/{project_number}` */
|
|
591
591
|
scopes?: string[];
|
|
592
|
-
/** Required. Human
|
|
592
|
+
/** Required. Human-readable title. Does not affect behavior. */
|
|
593
593
|
title?: string;
|
|
594
594
|
}
|
|
595
595
|
interface GoogleIdentityAccesscontextmanagerV1AddRequestHeader {
|
|
@@ -605,23 +605,23 @@ declare namespace gapi.client {
|
|
|
605
605
|
serviceName?: string;
|
|
606
606
|
}
|
|
607
607
|
interface GoogleIdentityAccesscontextmanagerV1BasicLevel {
|
|
608
|
-
/** How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If AND is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If OR is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is AND
|
|
608
|
+
/** How the `conditions` list should be combined to determine if a request is granted this `AccessLevel`. If `AND` is used, each `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. If `OR` is used, at least one `Condition` in `conditions` must be satisfied for the `AccessLevel` to be applied. Default behavior is `AND`. */
|
|
609
609
|
combiningFunction?: 'AND' | 'OR';
|
|
610
610
|
/** Required. A list of requirements for the `AccessLevel` to be granted. */
|
|
611
611
|
conditions?: GoogleIdentityAccesscontextmanagerV1Condition[];
|
|
612
612
|
}
|
|
613
613
|
interface GoogleIdentityAccesscontextmanagerV1Condition {
|
|
614
|
-
/** Device
|
|
614
|
+
/** Device-specific restrictions. All restrictions must hold for the `Condition` to be true. If not specified, all devices are allowed. */
|
|
615
615
|
devicePolicy?: GoogleIdentityAccesscontextmanagerV1DevicePolicy;
|
|
616
|
-
/** CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (
|
|
616
|
+
/** CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (that is, all the host bits must be zero) or the input is considered malformed. For example, `"192.0.2.0/24"` is accepted, but `"192.0.2.1/24"` is not. Similarly, for IPv6, `"2001:db8::/32"` is accepted, whereas `"2001:db8::1/32"` is not. The originating IP of a request must be in one of the listed subnets in order for this `Condition` to be true. If empty, all IP addresses are allowed. */
|
|
617
617
|
ipSubnetworks?: string[];
|
|
618
618
|
/** The request must be made by one of the provided user or service accounts. Groups are not supported. Syntax: `user:{emailid}` `serviceAccount:{emailid}` If not specified, a request may come from any user. */
|
|
619
619
|
members?: string[];
|
|
620
|
-
/** Whether to negate the Condition
|
|
620
|
+
/** Whether to negate the `Condition`. If `true`, the `Condition` becomes a NAND over its non-empty fields. Any non-empty field criteria evaluating to `false` will result in the `Condition` being satisfied. Defaults to `false`. */
|
|
621
621
|
negate?: boolean;
|
|
622
622
|
/** The request must originate from one of the provided countries/regions. Must be valid ISO 3166-1 alpha-2 codes. */
|
|
623
623
|
regions?: string[];
|
|
624
|
-
/** A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel`
|
|
624
|
+
/** A list of other access levels defined in the same `Policy`, referenced by resource name. Referencing an `AccessLevel` that does not exist is an error. All access levels listed must be granted for the `Condition` to be true. Example: `"accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"` */
|
|
625
625
|
requiredAccessLevels?: string[];
|
|
626
626
|
/** The request must originate from one of the provided VPC networks in Google Cloud. Cannot specify this field together with `ip_subnetworks`. */
|
|
627
627
|
vpcNetworkSources?: GoogleIdentityAccesscontextmanagerV1VpcNetworkSource[];
|
|
@@ -631,22 +631,22 @@ declare namespace gapi.client {
|
|
|
631
631
|
expr?: Expr;
|
|
632
632
|
}
|
|
633
633
|
interface GoogleIdentityAccesscontextmanagerV1DevicePolicy {
|
|
634
|
-
/** Allowed device management levels
|
|
634
|
+
/** Allowed device management levels. An empty list allows all management levels. */
|
|
635
635
|
allowedDeviceManagementLevels?:
|
|
636
636
|
'MANAGEMENT_UNSPECIFIED' | 'NONE' | 'BASIC' | 'COMPLETE'[];
|
|
637
|
-
/** Allowed
|
|
637
|
+
/** Allowed encryption statuses. An empty list allows all statuses. */
|
|
638
638
|
allowedEncryptionStatuses?:
|
|
639
639
|
| 'ENCRYPTION_UNSPECIFIED'
|
|
640
640
|
| 'ENCRYPTION_UNSUPPORTED'
|
|
641
641
|
| 'UNENCRYPTED'
|
|
642
642
|
| 'ENCRYPTED'[];
|
|
643
|
-
/** Allowed OS versions
|
|
643
|
+
/** Allowed OS versions. An empty list allows all types and all versions. */
|
|
644
644
|
osConstraints?: GoogleIdentityAccesscontextmanagerV1OsConstraint[];
|
|
645
645
|
/** Whether the device needs to be approved by the customer admin. */
|
|
646
646
|
requireAdminApproval?: boolean;
|
|
647
|
-
/** Whether the device needs to be corp
|
|
647
|
+
/** Whether the device needs to be corp-owned. */
|
|
648
648
|
requireCorpOwned?: boolean;
|
|
649
|
-
/** Whether or not screenlock is required for the DevicePolicy to be true. Defaults to `false`. */
|
|
649
|
+
/** Whether or not screenlock is required for the `DevicePolicy` to be true. Defaults to `false`. */
|
|
650
650
|
requireScreenlock?: boolean;
|
|
651
651
|
}
|
|
652
652
|
interface GoogleIdentityAccesscontextmanagerV1EgressFrom {
|
|
@@ -658,7 +658,7 @@ declare namespace gapi.client {
|
|
|
658
658
|
| 'ANY_IDENTITY'
|
|
659
659
|
| 'ANY_USER_ACCOUNT'
|
|
660
660
|
| 'ANY_SERVICE_ACCOUNT';
|
|
661
|
-
/** Whether to enforce traffic restrictions based on `sources` field. If the `sources`
|
|
661
|
+
/** Whether to enforce traffic restrictions based on `sources` field. If the `sources` field is not empty, then this field must be set to `SOURCE_RESTRICTION_ENABLED`. */
|
|
662
662
|
sourceRestriction?:
|
|
663
663
|
| 'SOURCE_RESTRICTION_UNSPECIFIED'
|
|
664
664
|
| 'SOURCE_RESTRICTION_ENABLED'
|
|
@@ -671,7 +671,7 @@ declare namespace gapi.client {
|
|
|
671
671
|
egressFrom?: GoogleIdentityAccesscontextmanagerV1EgressFrom;
|
|
672
672
|
/** Defines the conditions on the ApiOperation and destination resources that cause this EgressPolicy to apply. */
|
|
673
673
|
egressTo?: GoogleIdentityAccesscontextmanagerV1EgressTo;
|
|
674
|
-
/** Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and
|
|
674
|
+
/** Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and cannot exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters. */
|
|
675
675
|
title?: string;
|
|
676
676
|
}
|
|
677
677
|
interface GoogleIdentityAccesscontextmanagerV1EgressSource {
|
|
@@ -679,17 +679,17 @@ declare namespace gapi.client {
|
|
|
679
679
|
accessLevel?: string;
|
|
680
680
|
/** A PrivateServiceConnectEndpoint that is allowed to access data outside the perimeter. The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in. */
|
|
681
681
|
pscEndpoint?: GoogleIdentityAccesscontextmanagerV1PrivateServiceConnectEndpoint;
|
|
682
|
-
/** A Google Cloud resource from the service perimeter that you want to allow to access data outside the perimeter. This field supports
|
|
682
|
+
/** A Google Cloud resource from the service perimeter that you want to allow to access data outside the perimeter. This field supports projects, folders, and organizations in the form `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`. You can't use `*` in this field to allow all Google Cloud resources. */
|
|
683
683
|
resource?: string;
|
|
684
684
|
}
|
|
685
685
|
interface GoogleIdentityAccesscontextmanagerV1EgressTo {
|
|
686
|
-
/** A list of external resources that are allowed to be accessed. Only AWS and Azure resources are supported. For Amazon S3, the supported formats are s3://BUCKET_NAME
|
|
686
|
+
/** A list of external resources that are allowed to be accessed. Only AWS and Azure resources are supported. For Amazon S3, the supported formats are `s3://BUCKET_NAME`, `s3a://BUCKET_NAME`, and `s3n://BUCKET_NAME`. For Azure Storage, the supported format is `azure://myaccount.blob.core.windows.net/CONTAINER_NAME`. A request matches if it contains an external resource in this list (Example: `s3://bucket/path`). Currently `'*'` is not allowed. */
|
|
687
687
|
externalResources?: string[];
|
|
688
688
|
/** A list of ApiOperations allowed to be performed by the sources specified in the corresponding EgressFrom. A request matches if it uses an operation/service in this list. */
|
|
689
689
|
operations?: GoogleIdentityAccesscontextmanagerV1ApiOperation[];
|
|
690
|
-
/** A list of resources, currently
|
|
690
|
+
/** A list of resources, currently projects, folders, and organizations in the form `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter. */
|
|
691
691
|
resources?: string[];
|
|
692
|
-
/** IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom
|
|
692
|
+
/** IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom are allowed to perform in this ServicePerimeter. */
|
|
693
693
|
roles?: string[];
|
|
694
694
|
}
|
|
695
695
|
interface GoogleIdentityAccesscontextmanagerV1IngressFrom {
|
|
@@ -709,21 +709,21 @@ declare namespace gapi.client {
|
|
|
709
709
|
ingressFrom?: GoogleIdentityAccesscontextmanagerV1IngressFrom;
|
|
710
710
|
/** Defines the conditions on the ApiOperation and request destination that cause this IngressPolicy to apply. */
|
|
711
711
|
ingressTo?: GoogleIdentityAccesscontextmanagerV1IngressTo;
|
|
712
|
-
/** Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and
|
|
712
|
+
/** Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and cannot exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters. */
|
|
713
713
|
title?: string;
|
|
714
714
|
}
|
|
715
715
|
interface GoogleIdentityAccesscontextmanagerV1IngressSource {
|
|
716
|
-
/** An AccessLevel resource name that
|
|
716
|
+
/** An AccessLevel resource name that allows resources within the ServicePerimeters to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel will cause an error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`. If a single `*` is specified for `access_level`, then all IngressSources will be allowed. */
|
|
717
717
|
accessLevel?: string;
|
|
718
718
|
/** A PrivateServiceConnectEndpoint that is allowed to access the perimeter. The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in. */
|
|
719
719
|
pscEndpoint?: GoogleIdentityAccesscontextmanagerV1PrivateServiceConnectEndpoint;
|
|
720
|
-
/** A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently
|
|
720
|
+
/** A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}` Organization format: `organizations/{organization_id}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported. */
|
|
721
721
|
resource?: string;
|
|
722
722
|
}
|
|
723
723
|
interface GoogleIdentityAccesscontextmanagerV1IngressTo {
|
|
724
724
|
/** A list of ApiOperations allowed to be performed by the sources specified in corresponding IngressFrom in this ServicePerimeter. */
|
|
725
725
|
operations?: GoogleIdentityAccesscontextmanagerV1ApiOperation[];
|
|
726
|
-
/** A list of resources, currently
|
|
726
|
+
/** A list of resources, currently projects, folders, and organizations in the form `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter is allowed. */
|
|
727
727
|
resources?: string[];
|
|
728
728
|
/** IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter. */
|
|
729
729
|
roles?: string[];
|
|
@@ -748,9 +748,10 @@ declare namespace gapi.client {
|
|
|
748
748
|
| 'DESKTOP_WINDOWS'
|
|
749
749
|
| 'DESKTOP_LINUX'
|
|
750
750
|
| 'DESKTOP_CHROME_OS'
|
|
751
|
+
| 'GOOGLEBOOK_OS'
|
|
751
752
|
| 'ANDROID'
|
|
752
753
|
| 'IOS';
|
|
753
|
-
/** Only allows requests from devices with a verified Chrome OS.
|
|
754
|
+
/** Only allows requests from devices with a verified Chrome OS. Verification includes requirements that the device is enterprise-managed, conforms to domain policies, and the caller has permission to call the API targeted by the request. */
|
|
754
755
|
requireVerifiedChromeOs?: boolean;
|
|
755
756
|
}
|
|
756
757
|
interface GoogleIdentityAccesscontextmanagerV1PrivateServiceConnectEndpoint {
|
|
@@ -760,7 +761,7 @@ declare namespace gapi.client {
|
|
|
760
761
|
interface GoogleIdentityAccesscontextmanagerV1ServicePattern {
|
|
761
762
|
/** Modifiers to apply to the requests that match the URL pattern. */
|
|
762
763
|
modifiers?: GoogleIdentityAccesscontextmanagerV1Modifier[];
|
|
763
|
-
/** URL pattern to allow. Only patterns of ".googleapis.com/*"
|
|
764
|
+
/** URL pattern to allow. Only patterns of `".googleapis.com/*"`, `"www.googleapis.com//*"`, and `"*.appspot.com/*"` forms are supported, where `` should be an alphanumeric name. */
|
|
764
765
|
pattern?: string;
|
|
765
766
|
/** Supported service to allow. */
|
|
766
767
|
service?: string;
|
|
@@ -772,15 +773,15 @@ declare namespace gapi.client {
|
|
|
772
773
|
etag?: string;
|
|
773
774
|
/** Identifier. Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`. */
|
|
774
775
|
name?: string;
|
|
775
|
-
/** Perimeter type indicator. A single project or VPC network is allowed to be a member of single regular perimeter, but multiple service perimeter bridges. A project cannot be
|
|
776
|
+
/** Perimeter type indicator. A single project or VPC network is allowed to be a member of a single regular perimeter, but multiple service perimeter bridges. A project cannot be included in a perimeter bridge without being included in a regular perimeter. For perimeter bridges, the restricted service list as well as access level lists must be empty. */
|
|
776
777
|
perimeterType?: 'PERIMETER_TYPE_REGULAR' | 'PERIMETER_TYPE_BRIDGE';
|
|
777
|
-
/** Proposed (or dry run) ServicePerimeter configuration. This configuration allows to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the
|
|
778
|
+
/** Proposed (or dry run) ServicePerimeter configuration. This configuration allows you to specify and test ServicePerimeter configuration without enforcing actual access restrictions. Only allowed to be set when the `use_explicit_dry_run_spec` flag is set. */
|
|
778
779
|
spec?: GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig;
|
|
779
|
-
/** Current ServicePerimeter configuration. Specifies sets of resources, restricted services and access levels that determine perimeter content and boundaries. */
|
|
780
|
+
/** Current ServicePerimeter configuration. Specifies sets of resources, restricted services, and access levels that determine perimeter content and boundaries. */
|
|
780
781
|
status?: GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig;
|
|
781
782
|
/** Human readable title. Must be unique within the Policy. */
|
|
782
783
|
title?: string;
|
|
783
|
-
/** Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences between currently enforced and suggested restrictions. use_explicit_dry_run_spec must
|
|
784
|
+
/** Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly exists for all Service Perimeters, and that spec is identical to the status for those Service Perimeters. When this flag is set, it inhibits the generation of the implicit spec, thereby allowing the user to explicitly provide a configuration ("spec") to use in a dry-run version of the Service Perimeter. This allows the user to test changes to the enforced config ("status") without actually enforcing them. This testing is done through analyzing the differences between currently enforced and suggested restrictions. `use_explicit_dry_run_spec` must be set to `true` if any of the fields in the spec are set to non-default values. */
|
|
784
785
|
useExplicitDryRunSpec?: boolean;
|
|
785
786
|
}
|
|
786
787
|
interface GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig {
|
|
@@ -790,7 +791,7 @@ declare namespace gapi.client {
|
|
|
790
791
|
egressPolicies?: GoogleIdentityAccesscontextmanagerV1EgressPolicy[];
|
|
791
792
|
/** List of IngressPolicies to apply to the perimeter. A perimeter may have multiple IngressPolicies, each of which is evaluated separately. Access is granted if any Ingress Policy grants it. Must be empty for a perimeter bridge. */
|
|
792
793
|
ingressPolicies?: GoogleIdentityAccesscontextmanagerV1IngressPolicy[];
|
|
793
|
-
/** A list of Google Cloud resources that are inside of the service perimeter. Currently
|
|
794
|
+
/** A list of Google Cloud resources that are inside of the service perimeter. Currently projects, folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. */
|
|
794
795
|
resources?: string[];
|
|
795
796
|
/** Google Cloud services that are subject to the Service Perimeter restrictions. For example, if `storage.googleapis.com` is specified, access to the storage buckets inside the perimeter must meet the perimeter's access restrictions. */
|
|
796
797
|
restrictedServices?: string[];
|
|
@@ -800,9 +801,9 @@ declare namespace gapi.client {
|
|
|
800
801
|
interface GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices {
|
|
801
802
|
/** Specifies which Google services are allowed to be accessed from VPC networks in the service perimeter. */
|
|
802
803
|
allowedServicePatterns?: GoogleIdentityAccesscontextmanagerV1ServicePattern[];
|
|
803
|
-
/** The list of APIs usable within the Service Perimeter. Must be empty unless
|
|
804
|
+
/** The list of APIs usable within the Service Perimeter. Must be empty unless `enable_restriction` is `true`. You can specify a list of individual services, as well as include the `'RESTRICTED-SERVICES'` value, which automatically includes all of the services protected by the perimeter. */
|
|
804
805
|
allowedServices?: string[];
|
|
805
|
-
/** Whether to restrict API calls within the Service Perimeter to the list of APIs specified in
|
|
806
|
+
/** Whether to restrict API calls within the Service Perimeter to the list of APIs specified in `allowed_services`. */
|
|
806
807
|
enableRestriction?: boolean;
|
|
807
808
|
/** Defines the enforcement scopes of service patterns. */
|
|
808
809
|
servicePatternsEnforcementScopes?:
|
|
@@ -816,7 +817,7 @@ declare namespace gapi.client {
|
|
|
816
817
|
interface GoogleIdentityAccesscontextmanagerV1VpcSubNetwork {
|
|
817
818
|
/** Required. Network name. If the network is not part of the organization, the `compute.network.get` permission must be granted to the caller. Format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NETWORK_NAME}` Example: `//compute.googleapis.com/projects/my-project/global/networks/network-1` */
|
|
818
819
|
network?: string;
|
|
819
|
-
/** CIDR block IP subnetwork specification. The IP address must be an IPv4 address and can be a public or private IP address. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (
|
|
820
|
+
/** CIDR block IP subnetwork specification. The IP address must be an IPv4 address and can be a public or private IP address. Note that for a CIDR IP address block, the specified IP address portion must be properly truncated (that is, all the host bits must be zero) or the input is considered malformed. For example, `"192.0.2.0/24"` is accepted, but `"192.0.2.1/24"` is not. If empty, all IP addresses are allowed. */
|
|
820
821
|
vpcIpSubnetworks?: string[];
|
|
821
822
|
}
|
|
822
823
|
interface IamPolicyAnalysis {
|