@maxim_mazurok/gapi.client.networksecurity-v1beta1 0.0.20230701 → 0.0.20230713

package/index.d.ts

@@ -9,7 +9,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://networksecurity.googleapis.com/$discovery/rest?version=v1beta1
-// Revision: 20230701
+// Revision: 20230713
 
 /// <reference types="gapi.client" />
 
@@ -179,6 +179,61 @@ declare namespace gapi.client {
             title?:
                 string;
         }
+        interface FirewallEndpoint {
+            /**
+             * Output only. List of networks that are associated with this endpoint in the local zone. This is a projection of the FirewallEndpointAssociations pointing at this endpoint. A network
+             * will only appear in this list after traffic routing is fully configured. Format: projects/{project}/global/networks/{name}.
+             */
+            associatedNetworks?:
+                string[];
+            /** Output only. Create time stamp */
+            createTime?:
+                string;
+            /** Labels as key value pairs */
+            labels?:
+                { [P in string]: string };
+            /** Output only. name of resource */
+            name?:
+                string;
+            /** Output only. Whether reconciling is in progress, recommended per https://google.aip.dev/128. */
+            reconciling?:
+                boolean;
+            /** Output only. Current state of the endpoint. */
+            state?:
+                string;
+            /** Output only. Update time stamp */
+            updateTime?:
+                string;
+        }
+        interface FirewallEndpointAssociation {
+            /** Output only. Create time stamp */
+            createTime?:
+                string;
+            /** Required. The URL of the FirewallEndpoint that is being associated. */
+            firewallEndpoint?:
+                string;
+            /** Labels as key value pairs */
+            labels?:
+                { [P in string]: string };
+            /** Output only. name of resource */
+            name?:
+                string;
+            /** Required. The URL of the network that is being associated. */
+            network?:
+                string;
+            /** Output only. Whether reconciling is in progress, recommended per https://google.aip.dev/128. */
+            reconciling?:
+                boolean;
+            /** Output only. Current state of the association. */
+            state?:
+                string;
+            /** Optional. The URL of the TlsInspectionPolicy that is being associated. */
+            tlsInspectionPolicy?:
+                string;
+            /** Output only. Update time stamp */
+            updateTime?:
+                string;
+        }
         interface GatewaySecurityPolicy {
             /** Output only. The timestamp when the resource was created. */
             createTime?:
@@ -422,6 +477,28 @@ declare namespace gapi.client {
             nextPageToken?:
                 string;
         }
+        interface ListFirewallEndpointAssociationsResponse {
+            /** The list of Association */
+            firewallEndpointAssociations?:
+                FirewallEndpointAssociation[];
+            /** A token identifying a page of results the server should return. */
+            nextPageToken?:
+                string;
+            /** Locations that could not be reached. */
+            unreachable?:
+                string[];
+        }
+        interface ListFirewallEndpointsResponse {
+            /** The list of Endpoint */
+            firewallEndpoints?:
+                FirewallEndpoint[];
+            /** A token identifying a page of results the server should return. */
+            nextPageToken?:
+                string;
+            /** Locations that could not be reached. */
+            unreachable?:
+                string[];
+        }
         interface ListGatewaySecurityPoliciesResponse {
             /** List of GatewaySecurityPolicies resources. */
             gatewaySecurityPolicies?:
@@ -700,15 +777,51 @@ declare namespace gapi.client {
             /** Output only. The timestamp when the resource was created. */
             createTime?:
                 string;
+            /**
+             * Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The compute.SslPoliciesService.ListAvailableFeatures
+             * method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.
+             */
+            customTlsFeatures?:
+                string[];
             /** Optional. Free-text description of the resource. */
             description?:
                 string;
+            /**
+             * Optional. If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config. These public CAs are currently based on the Mozilla Root
+             * Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use
+             * public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is *not recommended* unless the traffic in question is outbound to public web
+             * servers. When possible, prefer setting this to "false" and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this
+             * field.
+             */
+            excludePublicCaSet?:
+                boolean;
+            /**
+             * Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the
+             * broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some
+             * clients or servers. Note that Secure Web Proxy does not yet honor this field.
+             */
+            minTlsVersion?:
+                string;
             /**
              * Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the
              * pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
              */
             name?:
                 string;
+            /**
+             * Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more
+             * restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this
+             * field.
+             */
+            tlsFeatureProfile?:
+                string;
+            /**
+             * Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form
+             * "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or
+             * self-signed certificates. Note that Secure Web Proxy does not yet honor this field.
+             */
+            trustConfig?:
+                string;
             /** Output only. The timestamp when the resource was updated. */
             updateTime?:
                 string;
@@ -1391,14 +1504,9 @@ declare namespace gapi.client {
             },
             body: RemoveAddressGroupItemsRequest): Request<Operation>;
         }
-        interface OperationsResource {
-            /**
-             * Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support
-             * this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the
-             * operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a
-             * google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.
-             */
-            cancel(request: {
+        interface FirewallEndpointsResource {
+            /** Creates a new FirewallEndpoint in a given project and location. */
+            create(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -1414,21 +1522,33 @@ declare namespace gapi.client {
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
+                /** Required. Id of the requesting object. If auto-generating Id server-side, remove this field and firewall_endpoint_id from the method_signature of Create RPC. */
+                firewallEndpointId?:
+                    string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** The name of the operation resource to be cancelled. */
-                name:
-                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
+                /** Required. Value for parent. */
+                parent:
+                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -1437,9 +1557,9 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    CancelOperationRequest;
-            }): Request<{}>;
-            cancel(request: {
+                    FirewallEndpoint;
+            }): Request<Operation>;
+            create(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -1455,21 +1575,33 @@ declare namespace gapi.client {
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
+                /** Required. Id of the requesting object. If auto-generating Id server-side, remove this field and firewall_endpoint_id from the method_signature of Create RPC. */
+                firewallEndpointId?:
+                    string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** The name of the operation resource to be cancelled. */
-                name:
-                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
+                /** Required. Value for parent. */
+                parent:
+                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -1477,11 +1609,8 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: CancelOperationRequest): Request<{}>;
-            /**
-             * Deletes a long-running operation. This method indicates that the client is no longer interested in the operation result. It does not cancel the operation. If the server doesn't
-             * support this method, it returns `google.rpc.Code.UNIMPLEMENTED`.
-             */
+            body: FirewallEndpoint): Request<Operation>;
+            /** Deletes a single Endpoint. */
             delete(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -1501,7 +1630,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** The name of the operation resource to be deleted. */
+                /** Required. Name of the resource */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -1513,14 +1642,23 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<{}>;
-            /** Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service. */
+            }): Request<Operation>;
+            /** Gets details of a single Endpoint. */
             get(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -1540,7 +1678,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** The name of the operation resource. */
+                /** Required. Name of the resource */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -1558,8 +1696,8 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<Operation>;
-            /** Lists operations that match the specified filter in the request. If the server doesn't support this method, it returns `UNIMPLEMENTED`. */
+            }): Request<FirewallEndpoint>;
+            /** Lists FirewallEndpoints in a given project and location. */
             list(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -1576,24 +1714,27 @@ declare namespace gapi.client {
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
-                /** The standard list filter. */
+                /** Filtering results */
                 filter?:
                     string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** The name of the operation's parent resource. */
-                name:
-                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** The standard list page size. */
+                /** Hint for how to order the results */
+                orderBy?:
+                    string;
+                /** Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. */
                 pageSize?:
                     number;
-                /** The standard list page token. */
+                /** A token identifying a page of results the server should return. */
                 pageToken?:
                     string;
+                /** Required. Parent value for ListEndpointsRequest */
+                parent:
+                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
@@ -1606,30 +1747,15 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<ListOperationsResponse>;
-        }
-        interface LocationsResource {
-            addressGroups:
-                AddressGroupsResource;
-            operations:
-                OperationsResource;
-        }
-        interface OrganizationsResource {
-            locations:
-                LocationsResource;
-        }
-        interface AddressGroupsResource {
-            /** Adds items to an address group. */
-            addItems(request: {
+            }): Request<ListFirewallEndpointsResponse>;
+            /** Update a single Endpoint. */
+            patch(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /** Required. A name of the AddressGroup to add items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
-                addressGroup:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -1642,6 +1768,9 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** Output only. name of resource */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
@@ -1651,6 +1780,21 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
+                /**
+                 * Required. Field mask is used to specify the fields to be overwritten in the Endpoint resource by the update. The fields specified in the update_mask are relative to the
+                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 */
+                updateMask?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -1659,18 +1803,15 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    AddAddressGroupItemsRequest;
+                    FirewallEndpoint;
             }): Request<Operation>;
-            addItems(request: {
+            patch(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /** Required. A name of the AddressGroup to add items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
-                addressGroup:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -1683,6 +1824,9 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** Output only. name of resource */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
@@ -1692,6 +1836,21 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
+                /**
+                 * Required. Field mask is used to specify the fields to be overwritten in the Endpoint resource by the update. The fields specified in the update_mask are relative to the
+                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 */
+                updateMask?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -1699,18 +1858,22 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: AddAddressGroupItemsRequest): Request<Operation>;
-            /** Clones items from one address group to another. */
-            cloneItems(request: {
+            body: FirewallEndpoint): Request<Operation>;
+        }
+        interface OperationsResource {
+            /**
+             * Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support
+             * this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the
+             * operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a
+             * google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.
+             */
+            cancel(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /** Required. A name of the AddressGroup to clone items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
-                addressGroup:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -1723,6 +1886,9 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** The name of the operation resource to be cancelled. */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
@@ -1740,18 +1906,15 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    CloneAddressGroupItemsRequest;
-            }): Request<Operation>;
-            cloneItems(request: {
+                    CancelOperationRequest;
+            }): Request<{}>;
+            cancel(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /** Required. A name of the AddressGroup to clone items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
-                addressGroup:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -1764,6 +1927,9 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** The name of the operation resource to be cancelled. */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
@@ -1780,21 +1946,18 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: CloneAddressGroupItemsRequest): Request<Operation>;
-            /** Creates a new address group in a given project and location. */
-            create(request: {
+            body: CancelOperationRequest): Request<{}>;
+            /**
+             * Deletes a long-running operation. This method indicates that the client is no longer interested in the operation result. It does not cancel the operation. If the server doesn't
+             * support this method, it returns `google.rpc.Code.UNIMPLEMENTED`.
+             */
+            delete(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /**
-                 * Required. Short name of the AddressGroup resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
-                 * should not start with a number. E.g. "authz_policy".
-                 */
-                addressGroupId?:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -1807,46 +1970,354 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** The name of the operation resource to be deleted. */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Required. The parent resource of the AddressGroup. Must be in the format `projects/*‍/locations/{location}`. */
-                parent:
-                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
-                /**
-                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
-                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
-                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
-                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
-                 * supported (00000000-0000-0000-0000-000000000000).
-                 */
-                requestId?:
-                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-                /** Request body */
-                resource:
-                    AddressGroup;
-            }): Request<Operation>;
-            create(request: {
+            }): Request<{}>;
+            /** Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service. */
+            get(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /**
-                 * Required. Short name of the AddressGroup resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** The name of the operation resource. */
+                name:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            }): Request<Operation>;
+            /** Lists operations that match the specified filter in the request. If the server doesn't support this method, it returns `UNIMPLEMENTED`. */
+            list(request?: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** The standard list filter. */
+                filter?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** The name of the operation's parent resource. */
+                name:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** The standard list page size. */
+                pageSize?:
+                    number;
+                /** The standard list page token. */
+                pageToken?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            }): Request<ListOperationsResponse>;
+        }
+        interface LocationsResource {
+            addressGroups:
+                AddressGroupsResource;
+            firewallEndpoints:
+                FirewallEndpointsResource;
+            operations:
+                OperationsResource;
+        }
+        interface OrganizationsResource {
+            locations:
+                LocationsResource;
+        }
+        interface AddressGroupsResource {
+            /** Adds items to an address group. */
+            addItems(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Required. A name of the AddressGroup to add items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
+                addressGroup:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+                /** Request body */
+                resource:
+                    AddAddressGroupItemsRequest;
+            }): Request<Operation>;
+            addItems(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Required. A name of the AddressGroup to add items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
+                addressGroup:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            },
+            body: AddAddressGroupItemsRequest): Request<Operation>;
+            /** Clones items from one address group to another. */
+            cloneItems(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Required. A name of the AddressGroup to clone items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
+                addressGroup:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+                /** Request body */
+                resource:
+                    CloneAddressGroupItemsRequest;
+            }): Request<Operation>;
+            cloneItems(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Required. A name of the AddressGroup to clone items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
+                addressGroup:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            },
+            body: CloneAddressGroupItemsRequest): Request<Operation>;
+            /** Creates a new address group in a given project and location. */
+            create(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /**
+                 * Required. Short name of the AddressGroup resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
+                 * should not start with a number. E.g. "authz_policy".
+                 */
+                addressGroupId?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Required. The parent resource of the AddressGroup. Must be in the format `projects/*‍/locations/{location}`. */
+                parent:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+                /** Request body */
+                resource:
+                    AddressGroup;
+            }): Request<Operation>;
+            create(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /**
+                 * Required. Short name of the AddressGroup resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
                  * should not start with a number. E.g. "authz_policy".
                  */
                 addressGroupId?:
@@ -1866,8 +2337,291 @@ declare namespace gapi.client {
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Required. The parent resource of the AddressGroup. Must be in the format `projects/*‍/locations/{location}`. */
-                parent:
+                /** Required. The parent resource of the AddressGroup. Must be in the format `projects/*‍/locations/{location}`. */
+                parent:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            },
+            body: AddressGroup): Request<Operation>;
+            /** Deletes a single address group. */
+            delete(request?: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** Required. A name of the AddressGroup to delete. Must be in the format `projects/*‍/locations/{location}/addressGroups/*`. */
+                name:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            }): Request<Operation>;
+            /** Gets details of a single address group. */
+            get(request?: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** Required. A name of the AddressGroup to get. Must be in the format `projects/*‍/locations/{location}/addressGroups/*`. */
+                name:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            }): Request<AddressGroup>;
+            /** Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set. */
+            getIamPolicy(request?: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /**
+                 * Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for
+                 * policies with any conditional role bindings must specify version 3. Policies with no conditional role bindings may specify any valid value or leave the field unset. The policy
+                 * in the response might use the policy version that you specified, or it might use a lower policy version. For example, if you specify version 3, but the policy has no conditional
+                 * role bindings, the response uses version 1. To learn which resources support conditions in their IAM policies, see the [IAM
+                 * documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+                 */
+                "options.requestedPolicyVersion"?:
+                    number;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /**
+                 * REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this
+                 * field.
+                 */
+                resource:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            }): Request<GoogleIamV1Policy>;
+            /** Lists address groups in a given project and location. */
+            list(request?: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Maximum number of AddressGroups to return per call. */
+                pageSize?:
+                    number;
+                /**
+                 * The value returned by the last `ListAddressGroupsResponse` Indicates that this is a continuation of a prior `ListAddressGroups` call, and that the system should return the next
+                 * page of data.
+                 */
+                pageToken?:
+                    string;
+                /** Required. The project and location from which the AddressGroups should be listed, specified in the format `projects/*‍/locations/{location}`. */
+                parent:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            }): Request<ListAddressGroupsResponse>;
+            /** Lists references of an address group. */
+            listReferences(request?: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Required. A name of the AddressGroup to clone items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
+                addressGroup:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /**
+                 * The maximum number of references to return. If unspecified, server will pick an appropriate default. Server may return fewer items than requested. A caller should only rely on
+                 * response's next_page_token to determine if there are more AddressGroupUsers left to be queried.
+                 */
+                pageSize?:
+                    number;
+                /** The next_page_token value returned from a previous List request, if any. */
+                pageToken?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            }): Request<ListAddressGroupReferencesResponse>;
+            /** Updates the parameters of a single address group. */
+            patch(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** Required. Name of the AddressGroup resource. It matches pattern `projects/*‍/locations/{location}/addressGroups/`. */
+                name:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
                     string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
@@ -1884,16 +2638,23 @@ declare namespace gapi.client {
                  */
                 requestId?:
                     string;
+                /**
+                 * Optional. Field mask is used to specify the fields to be overwritten in the AddressGroup resource by the update. The fields specified in the update_mask are relative to the
+                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 */
+                updateMask?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            },
-            body: AddressGroup): Request<Operation>;
-            /** Deletes a single address group. */
-            delete(request?: {
+                /** Request body */
+                resource:
+                    AddressGroup;
+            }): Request<Operation>;
+            patch(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -1912,7 +2673,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. A name of the AddressGroup to delete. Must be in the format `projects/*‍/locations/{location}/addressGroups/*`. */
+                /** Required. Name of the AddressGroup resource. It matches pattern `projects/*‍/locations/{location}/addressGroups/`. */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -1931,7 +2692,183 @@ declare namespace gapi.client {
                  * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
                  * supported (00000000-0000-0000-0000-000000000000).
                  */
-                requestId?:
+                requestId?:
+                    string;
+                /**
+                 * Optional. Field mask is used to specify the fields to be overwritten in the AddressGroup resource by the update. The fields specified in the update_mask are relative to the
+                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 */
+                updateMask?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            },
+            body: AddressGroup): Request<Operation>;
+            /** Removes items from an address group. */
+            removeItems(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Required. A name of the AddressGroup to remove items from. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
+                addressGroup:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+                /** Request body */
+                resource:
+                    RemoveAddressGroupItemsRequest;
+            }): Request<Operation>;
+            removeItems(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Required. A name of the AddressGroup to remove items from. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
+                addressGroup:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            },
+            body: RemoveAddressGroupItemsRequest): Request<Operation>;
+            /** Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. */
+            setIamPolicy(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /**
+                 * REQUIRED: The resource for which the policy is being specified. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this
+                 * field.
+                 */
+                resource:
+                    string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?:
+                    string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?:
+                    string;
+            },
+            body: GoogleIamV1SetIamPolicyRequest): Request<GoogleIamV1Policy>;
+            /**
+             * Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a `NOT_FOUND` error. Note: This
+             * operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.
+             */
+            testIamPermissions(request: {
+                /** V1 error format. */
+                "$.xgafv"?:
+                    string;
+                /** OAuth access token. */
+                access_token?:
+                    string;
+                /** Data format for response. */
+                alt?:
+                    string;
+                /** JSONP */
+                callback?:
+                    string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?:
+                    string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?:
+                    string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?:
+                    string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?:
+                    boolean;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?:
+                    string;
+                /**
+                 * REQUIRED: The resource for which the policy detail is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for
+                 * this field.
+                 */
+                resource:
                     string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
@@ -1939,9 +2876,12 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<Operation>;
-            /** Gets details of a single address group. */
-            get(request?: {
+            },
+            body: GoogleIamV1TestIamPermissionsRequest): Request<GoogleIamV1TestIamPermissionsResponse>;
+        }
+        interface AuthorizationPoliciesResource {
+            /** Creates a new AuthorizationPolicy in a given project and location. */
+            create(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -1951,6 +2891,12 @@ declare namespace gapi.client {
                 /** Data format for response. */
                 alt?:
                     string;
+                /**
+                 * Required. Short name of the AuthorizationPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores,
+                 * and should not start with a number. E.g. "authz_policy".
+                 */
+                authorizationPolicyId?:
+                    string;
                 /** JSONP */
                 callback?:
                     string;
@@ -1960,12 +2906,12 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. A name of the AddressGroup to get. Must be in the format `projects/*‍/locations/{location}/addressGroups/*`. */
-                name:
-                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
+                /** Required. The parent resource of the AuthorizationPolicy. Must be in the format `projects/{project}/locations/{location}`. */
+                parent:
+                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
@@ -1978,9 +2924,11 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<AddressGroup>;
-            /** Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set. */
-            getIamPolicy(request?: {
+                /** Request body */
+                resource:
+                    AuthorizationPolicy;
+            }): Request<Operation>;
+            create(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -1990,6 +2938,12 @@ declare namespace gapi.client {
                 /** Data format for response. */
                 alt?:
                     string;
+                /**
+                 * Required. Short name of the AuthorizationPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores,
+                 * and should not start with a number. E.g. "authz_policy".
+                 */
+                authorizationPolicyId?:
+                    string;
                 /** JSONP */
                 callback?:
                     string;
@@ -2002,36 +2956,25 @@ declare namespace gapi.client {
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /**
-                 * Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for
-                 * policies with any conditional role bindings must specify version 3. Policies with no conditional role bindings may specify any valid value or leave the field unset. The policy
-                 * in the response might use the policy version that you specified, or it might use a lower policy version. For example, if you specify version 3, but the policy has no conditional
-                 * role bindings, the response uses version 1. To learn which resources support conditions in their IAM policies, see the [IAM
-                 * documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
-                 */
-                "options.requestedPolicyVersion"?:
-                    number;
+                /** Required. The parent resource of the AuthorizationPolicy. Must be in the format `projects/{project}/locations/{location}`. */
+                parent:
+                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
-                /**
-                 * REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this
-                 * field.
-                 */
-                resource:
-                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<GoogleIamV1Policy>;
-            /** Lists address groups in a given project and location. */
-            list(request?: {
+            },
+            body: AuthorizationPolicy): Request<Operation>;
+            /** Deletes a single AuthorizationPolicy. */
+            delete(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -2050,21 +2993,12 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** Required. A name of the AuthorizationPolicy to delete. Must be in the format `projects/{project}/locations/{location}/authorizationPolicies/*`. */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Maximum number of AddressGroups to return per call. */
-                pageSize?:
-                    number;
-                /**
-                 * The value returned by the last `ListAddressGroupsResponse` Indicates that this is a continuation of a prior `ListAddressGroups` call, and that the system should return the next
-                 * page of data.
-                 */
-                pageToken?:
-                    string;
-                /** Required. The project and location from which the AddressGroups should be listed, specified in the format `projects/*‍/locations/{location}`. */
-                parent:
-                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
@@ -2077,18 +3011,15 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<ListAddressGroupsResponse>;
-            /** Lists references of an address group. */
-            listReferences(request?: {
+            }): Request<Operation>;
+            /** Gets details of a single AuthorizationPolicy. */
+            get(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /** Required. A name of the AddressGroup to clone items to. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
-                addressGroup:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -2101,18 +3032,12 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** Required. A name of the AuthorizationPolicy to get. Must be in the format `projects/{project}/locations/{location}/authorizationPolicies/*`. */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /**
-                 * The maximum number of references to return. If unspecified, server will pick an appropriate default. Server may return fewer items than requested. A caller should only rely on
-                 * response's next_page_token to determine if there are more AddressGroupUsers left to be queried.
-                 */
-                pageSize?:
-                    number;
-                /** The next_page_token value returned from a previous List request, if any. */
-                pageToken?:
-                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
@@ -2125,9 +3050,9 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<ListAddressGroupReferencesResponse>;
-            /** Updates the parameters of a single address group. */
-            patch(request: {
+            }): Request<AuthorizationPolicy>;
+            /** Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set. */
+            getIamPolicy(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -2146,12 +3071,18 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. Name of the AddressGroup resource. It matches pattern `projects/*‍/locations/{location}/addressGroups/`. */
-                name:
-                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
+                /**
+                 * Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for
+                 * policies with any conditional role bindings must specify version 3. Policies with no conditional role bindings may specify any valid value or leave the field unset. The policy
+                 * in the response might use the policy version that you specified, or it might use a lower policy version. For example, if you specify version 3, but the policy has no conditional
+                 * role bindings, the response uses version 1. To learn which resources support conditions in their IAM policies, see the [IAM
+                 * documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+                 */
+                "options.requestedPolicyVersion"?:
+                    number;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
@@ -2159,19 +3090,10 @@ declare namespace gapi.client {
                 quotaUser?:
                     string;
                 /**
-                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
-                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
-                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
-                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
-                 * supported (00000000-0000-0000-0000-000000000000).
-                 */
-                requestId?:
-                    string;
-                /**
-                 * Optional. Field mask is used to specify the fields to be overwritten in the AddressGroup resource by the update. The fields specified in the update_mask are relative to the
-                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 * REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this
+                 * field.
                  */
-                updateMask?:
+                resource:
                     string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
@@ -2179,11 +3101,9 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-                /** Request body */
-                resource:
-                    AddressGroup;
-            }): Request<Operation>;
-            patch(request: {
+            }): Request<GoogleIamV1Policy>;
+            /** Lists AuthorizationPolicies in a given project and location. */
+            list(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
@@ -2202,52 +3122,42 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. Name of the AddressGroup resource. It matches pattern `projects/*‍/locations/{location}/addressGroups/`. */
-                name:
-                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
+                /** Maximum number of AuthorizationPolicies to return per call. */
+                pageSize?:
+                    number;
+                /**
+                 * The value returned by the last `ListAuthorizationPoliciesResponse` Indicates that this is a continuation of a prior `ListAuthorizationPolicies` call, and that the system should
+                 * return the next page of data.
+                 */
+                pageToken?:
+                    string;
+                /** Required. The project and location from which the AuthorizationPolicies should be listed, specified in the format `projects/{project}/locations/{location}`. */
+                parent:
+                    string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?:
                     boolean;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
-                /**
-                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
-                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
-                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
-                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
-                 * supported (00000000-0000-0000-0000-000000000000).
-                 */
-                requestId?:
-                    string;
-                /**
-                 * Optional. Field mask is used to specify the fields to be overwritten in the AddressGroup resource by the update. The fields specified in the update_mask are relative to the
-                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
-                 */
-                updateMask?:
-                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            },
-            body: AddressGroup): Request<Operation>;
-            /** Removes items from an address group. */
-            removeItems(request: {
+            }): Request<ListAuthorizationPoliciesResponse>;
+            /** Updates the parameters of a single AuthorizationPolicy. */
+            patch(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /** Required. A name of the AddressGroup to remove items from. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
-                addressGroup:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -2260,6 +3170,9 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** Required. Name of the AuthorizationPolicy resource. It matches pattern `projects/{project}/locations/{location}/authorizationPolicies/`. */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
@@ -2269,6 +3182,12 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. Field mask is used to specify the fields to be overwritten in the AuthorizationPolicy resource by the update. The fields specified in the update_mask are relative to
+                 * the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 */
+                updateMask?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -2277,18 +3196,15 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    RemoveAddressGroupItemsRequest;
+                    AuthorizationPolicy;
             }): Request<Operation>;
-            removeItems(request: {
+            patch(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
                     string;
                 /** OAuth access token. */
                 access_token?:
                     string;
-                /** Required. A name of the AddressGroup to remove items from. Must be in the format `projects|organization/*‍/locations/{location}/addressGroups/*`. */
-                addressGroup:
-                    string;
                 /** Data format for response. */
                 alt?:
                     string;
@@ -2301,6 +3217,9 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
+                /** Required. Name of the AuthorizationPolicy resource. It matches pattern `projects/{project}/locations/{location}/authorizationPolicies/`. */
+                name:
+                    string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
@@ -2310,6 +3229,12 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. Field mask is used to specify the fields to be overwritten in the AuthorizationPolicy resource by the update. The fields specified in the update_mask are relative to
+                 * the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 */
+                updateMask?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -2317,7 +3242,7 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: RemoveAddressGroupItemsRequest): Request<Operation>;
+            body: AuthorizationPolicy): Request<Operation>;
             /** Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. */
             setIamPolicy(request: {
                 /** V1 error format. */
@@ -2408,8 +3333,8 @@ declare namespace gapi.client {
             },
             body: GoogleIamV1TestIamPermissionsRequest): Request<GoogleIamV1TestIamPermissionsResponse>;
         }
-        interface AuthorizationPoliciesResource {
-            /** Creates a new AuthorizationPolicy in a given project and location. */
+        interface ClientTlsPoliciesResource {
+            /** Creates a new ClientTlsPolicy in a given project and location. */
             create(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -2420,15 +3345,15 @@ declare namespace gapi.client {
                 /** Data format for response. */
                 alt?:
                     string;
-                /**
-                 * Required. Short name of the AuthorizationPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores,
-                 * and should not start with a number. E.g. "authz_policy".
-                 */
-                authorizationPolicyId?:
-                    string;
                 /** JSONP */
                 callback?:
                     string;
+                /**
+                 * Required. Short name of the ClientTlsPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
+                 * should not start with a number. E.g. "client_mtls_policy".
+                 */
+                clientTlsPolicyId?:
+                    string;
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
@@ -2438,7 +3363,7 @@ declare namespace gapi.client {
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Required. The parent resource of the AuthorizationPolicy. Must be in the format `projects/{project}/locations/{location}`. */
+                /** Required. The parent resource of the ClientTlsPolicy. Must be in the format `projects/*‍/locations/{location}`. */
                 parent:
                     string;
                 /** Returns response with indentations and line breaks. */
@@ -2455,7 +3380,7 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    AuthorizationPolicy;
+                    ClientTlsPolicy;
             }): Request<Operation>;
             create(request: {
                 /** V1 error format. */
@@ -2467,15 +3392,15 @@ declare namespace gapi.client {
                 /** Data format for response. */
                 alt?:
                     string;
-                /**
-                 * Required. Short name of the AuthorizationPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores,
-                 * and should not start with a number. E.g. "authz_policy".
-                 */
-                authorizationPolicyId?:
-                    string;
                 /** JSONP */
                 callback?:
                     string;
+                /**
+                 * Required. Short name of the ClientTlsPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
+                 * should not start with a number. E.g. "client_mtls_policy".
+                 */
+                clientTlsPolicyId?:
+                    string;
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
@@ -2485,7 +3410,7 @@ declare namespace gapi.client {
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Required. The parent resource of the AuthorizationPolicy. Must be in the format `projects/{project}/locations/{location}`. */
+                /** Required. The parent resource of the ClientTlsPolicy. Must be in the format `projects/*‍/locations/{location}`. */
                 parent:
                     string;
                 /** Returns response with indentations and line breaks. */
@@ -2501,8 +3426,8 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: AuthorizationPolicy): Request<Operation>;
-            /** Deletes a single AuthorizationPolicy. */
+            body: ClientTlsPolicy): Request<Operation>;
+            /** Deletes a single ClientTlsPolicy. */
             delete(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -2522,7 +3447,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. A name of the AuthorizationPolicy to delete. Must be in the format `projects/{project}/locations/{location}/authorizationPolicies/*`. */
+                /** Required. A name of the ClientTlsPolicy to delete. Must be in the format `projects/*‍/locations/{location}/clientTlsPolicies/*`. */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -2541,7 +3466,7 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             }): Request<Operation>;
-            /** Gets details of a single AuthorizationPolicy. */
+            /** Gets details of a single ClientTlsPolicy. */
             get(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -2561,7 +3486,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. A name of the AuthorizationPolicy to get. Must be in the format `projects/{project}/locations/{location}/authorizationPolicies/*`. */
+                /** Required. A name of the ClientTlsPolicy to get. Must be in the format `projects/*‍/locations/{location}/clientTlsPolicies/*`. */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -2579,7 +3504,7 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<AuthorizationPolicy>;
+            }): Request<ClientTlsPolicy>;
             /** Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set. */
             getIamPolicy(request?: {
                 /** V1 error format. */
@@ -2631,7 +3556,7 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             }): Request<GoogleIamV1Policy>;
-            /** Lists AuthorizationPolicies in a given project and location. */
+            /** Lists ClientTlsPolicies in a given project and location. */
             list(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -2654,16 +3579,16 @@ declare namespace gapi.client {
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Maximum number of AuthorizationPolicies to return per call. */
+                /** Maximum number of ClientTlsPolicies to return per call. */
                 pageSize?:
                     number;
                 /**
-                 * The value returned by the last `ListAuthorizationPoliciesResponse` Indicates that this is a continuation of a prior `ListAuthorizationPolicies` call, and that the system should
-                 * return the next page of data.
+                 * The value returned by the last `ListClientTlsPoliciesResponse` Indicates that this is a continuation of a prior `ListClientTlsPolicies` call, and that the system should return
+                 * the next page of data.
                  */
                 pageToken?:
                     string;
-                /** Required. The project and location from which the AuthorizationPolicies should be listed, specified in the format `projects/{project}/locations/{location}`. */
+                /** Required. The project and location from which the ClientTlsPolicies should be listed, specified in the format `projects/*‍/locations/{location}`. */
                 parent:
                     string;
                 /** Returns response with indentations and line breaks. */
@@ -2678,8 +3603,8 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<ListAuthorizationPoliciesResponse>;
-            /** Updates the parameters of a single AuthorizationPolicy. */
+            }): Request<ListClientTlsPoliciesResponse>;
+            /** Updates the parameters of a single ClientTlsPolicy. */
             patch(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -2699,7 +3624,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. Name of the AuthorizationPolicy resource. It matches pattern `projects/{project}/locations/{location}/authorizationPolicies/`. */
+                /** Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/*‍/locations/{location}/clientTlsPolicies/{client_tls_policy}` */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -2712,8 +3637,8 @@ declare namespace gapi.client {
                 quotaUser?:
                     string;
                 /**
-                 * Optional. Field mask is used to specify the fields to be overwritten in the AuthorizationPolicy resource by the update. The fields specified in the update_mask are relative to
-                 * the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 * Optional. Field mask is used to specify the fields to be overwritten in the ClientTlsPolicy resource by the update. The fields specified in the update_mask are relative to the
+                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
                  */
                 updateMask?:
                     string;
@@ -2725,7 +3650,7 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    AuthorizationPolicy;
+                    ClientTlsPolicy;
             }): Request<Operation>;
             patch(request: {
                 /** V1 error format. */
@@ -2746,7 +3671,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. Name of the AuthorizationPolicy resource. It matches pattern `projects/{project}/locations/{location}/authorizationPolicies/`. */
+                /** Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/*‍/locations/{location}/clientTlsPolicies/{client_tls_policy}` */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -2759,8 +3684,8 @@ declare namespace gapi.client {
                 quotaUser?:
                     string;
                 /**
-                 * Optional. Field mask is used to specify the fields to be overwritten in the AuthorizationPolicy resource by the update. The fields specified in the update_mask are relative to
-                 * the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
+                 * Optional. Field mask is used to specify the fields to be overwritten in the ClientTlsPolicy resource by the update. The fields specified in the update_mask are relative to the
+                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
                  */
                 updateMask?:
                     string;
@@ -2771,7 +3696,7 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: AuthorizationPolicy): Request<Operation>;
+            body: ClientTlsPolicy): Request<Operation>;
             /** Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. */
             setIamPolicy(request: {
                 /** V1 error format. */
@@ -2862,8 +3787,8 @@ declare namespace gapi.client {
             },
             body: GoogleIamV1TestIamPermissionsRequest): Request<GoogleIamV1TestIamPermissionsResponse>;
         }
-        interface ClientTlsPoliciesResource {
-            /** Creates a new ClientTlsPolicy in a given project and location. */
+        interface FirewallEndpointAssociationsResource {
+            /** Creates a new FirewallEndpointAssociation in a given project and location. */
             create(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -2877,22 +3802,19 @@ declare namespace gapi.client {
                 /** JSONP */
                 callback?:
                     string;
-                /**
-                 * Required. Short name of the ClientTlsPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
-                 * should not start with a number. E.g. "client_mtls_policy".
-                 */
-                clientTlsPolicyId?:
-                    string;
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
+                /** Required. Id of the requesting object. If auto-generating Id server-side, remove this field and firewall_endpoint_association_id from the method_signature of Create RPC. */
+                firewallEndpointAssociationId?:
+                    string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Required. The parent resource of the ClientTlsPolicy. Must be in the format `projects/*‍/locations/{location}`. */
+                /** Required. Value for parent. */
                 parent:
                     string;
                 /** Returns response with indentations and line breaks. */
@@ -2901,6 +3823,15 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -2909,7 +3840,7 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    ClientTlsPolicy;
+                    FirewallEndpointAssociation;
             }): Request<Operation>;
             create(request: {
                 /** V1 error format. */
@@ -2924,22 +3855,19 @@ declare namespace gapi.client {
                 /** JSONP */
                 callback?:
                     string;
-                /**
-                 * Required. Short name of the ClientTlsPolicy resource to be created. This value should be 1-63 characters long, containing only letters, numbers, hyphens, and underscores, and
-                 * should not start with a number. E.g. "client_mtls_policy".
-                 */
-                clientTlsPolicyId?:
-                    string;
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
+                /** Required. Id of the requesting object. If auto-generating Id server-side, remove this field and firewall_endpoint_association_id from the method_signature of Create RPC. */
+                firewallEndpointAssociationId?:
+                    string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Required. The parent resource of the ClientTlsPolicy. Must be in the format `projects/*‍/locations/{location}`. */
+                /** Required. Value for parent. */
                 parent:
                     string;
                 /** Returns response with indentations and line breaks. */
@@ -2948,6 +3876,15 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -2955,8 +3892,8 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: ClientTlsPolicy): Request<Operation>;
-            /** Deletes a single ClientTlsPolicy. */
+            body: FirewallEndpointAssociation): Request<Operation>;
+            /** Deletes a single FirewallEndpointAssociation. */
             delete(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -2976,7 +3913,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. A name of the ClientTlsPolicy to delete. Must be in the format `projects/*‍/locations/{location}/clientTlsPolicies/*`. */
+                /** Required. Name of the resource */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -2988,6 +3925,15 @@ declare namespace gapi.client {
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?:
                     string;
+                /**
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
                     string;
@@ -2995,7 +3941,7 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             }): Request<Operation>;
-            /** Gets details of a single ClientTlsPolicy. */
+            /** Gets details of a single FirewallEndpointAssociation. */
             get(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -3015,7 +3961,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. A name of the ClientTlsPolicy to get. Must be in the format `projects/*‍/locations/{location}/clientTlsPolicies/*`. */
+                /** Required. Name of the resource */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -3033,59 +3979,8 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<ClientTlsPolicy>;
-            /** Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set. */
-            getIamPolicy(request?: {
-                /** V1 error format. */
-                "$.xgafv"?:
-                    string;
-                /** OAuth access token. */
-                access_token?:
-                    string;
-                /** Data format for response. */
-                alt?:
-                    string;
-                /** JSONP */
-                callback?:
-                    string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?:
-                    string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?:
-                    string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?:
-                    string;
-                /**
-                 * Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for
-                 * policies with any conditional role bindings must specify version 3. Policies with no conditional role bindings may specify any valid value or leave the field unset. The policy
-                 * in the response might use the policy version that you specified, or it might use a lower policy version. For example, if you specify version 3, but the policy has no conditional
-                 * role bindings, the response uses version 1. To learn which resources support conditions in their IAM policies, see the [IAM
-                 * documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
-                 */
-                "options.requestedPolicyVersion"?:
-                    number;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?:
-                    boolean;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?:
-                    string;
-                /**
-                 * REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this
-                 * field.
-                 */
-                resource:
-                    string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?:
-                    string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?:
-                    string;
-            }): Request<GoogleIamV1Policy>;
-            /** Lists ClientTlsPolicies in a given project and location. */
+            }): Request<FirewallEndpointAssociation>;
+            /** Lists Associations in a given project and location. */
             list(request?: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -3102,22 +3997,25 @@ declare namespace gapi.client {
                 /** Selector specifying which fields to include in a partial response. */
                 fields?:
                     string;
+                /** Filtering results */
+                filter?:
+                    string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?:
                     string;
-                /** Maximum number of ClientTlsPolicies to return per call. */
+                /** Hint for how to order the results */
+                orderBy?:
+                    string;
+                /** Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. */
                 pageSize?:
                     number;
-                /**
-                 * The value returned by the last `ListClientTlsPoliciesResponse` Indicates that this is a continuation of a prior `ListClientTlsPolicies` call, and that the system should return
-                 * the next page of data.
-                 */
+                /** A token identifying a page of results the server should return. */
                 pageToken?:
                     string;
-                /** Required. The project and location from which the ClientTlsPolicies should be listed, specified in the format `projects/*‍/locations/{location}`. */
+                /** Required. Parent value for ListAssociationsRequest */
                 parent:
                     string;
                 /** Returns response with indentations and line breaks. */
@@ -3132,8 +4030,8 @@ declare namespace gapi.client {
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?:
                     string;
-            }): Request<ListClientTlsPoliciesResponse>;
-            /** Updates the parameters of a single ClientTlsPolicy. */
+            }): Request<ListFirewallEndpointAssociationsResponse>;
+            /** Update a single FirewallEndpointAssociation. */
             patch(request: {
                 /** V1 error format. */
                 "$.xgafv"?:
@@ -3153,7 +4051,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/*‍/locations/{location}/clientTlsPolicies/{client_tls_policy}` */
+                /** Output only. name of resource */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -3166,7 +4064,16 @@ declare namespace gapi.client {
                 quotaUser?:
                     string;
                 /**
-                 * Optional. Field mask is used to specify the fields to be overwritten in the ClientTlsPolicy resource by the update. The fields specified in the update_mask are relative to the
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?:
+                    string;
+                /**
+                 * Required. Field mask is used to specify the fields to be overwritten in the Association resource by the update. The fields specified in the update_mask are relative to the
                  * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
                  */
                 updateMask?:
@@ -3179,7 +4086,7 @@ declare namespace gapi.client {
                     string;
                 /** Request body */
                 resource:
-                    ClientTlsPolicy;
+                    FirewallEndpointAssociation;
             }): Request<Operation>;
             patch(request: {
                 /** V1 error format. */
@@ -3200,7 +4107,7 @@ declare namespace gapi.client {
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?:
                     string;
-                /** Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/*‍/locations/{location}/clientTlsPolicies/{client_tls_policy}` */
+                /** Output only. name of resource */
                 name:
                     string;
                 /** OAuth 2.0 token for the current user. */
@@ -3213,99 +4120,19 @@ declare namespace gapi.client {
                 quotaUser?:
                     string;
                 /**
-                 * Optional. Field mask is used to specify the fields to be overwritten in the ClientTlsPolicy resource by the update. The fields specified in the update_mask are relative to the
-                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
-                 */
-                updateMask?:
-                    string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?:
-                    string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?:
-                    string;
-            },
-            body: ClientTlsPolicy): Request<Operation>;
-            /** Sets the access control policy on the specified resource. Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors. */
-            setIamPolicy(request: {
-                /** V1 error format. */
-                "$.xgafv"?:
-                    string;
-                /** OAuth access token. */
-                access_token?:
-                    string;
-                /** Data format for response. */
-                alt?:
-                    string;
-                /** JSONP */
-                callback?:
-                    string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?:
-                    string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?:
-                    string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?:
-                    string;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?:
-                    boolean;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?:
-                    string;
-                /**
-                 * REQUIRED: The resource for which the policy is being specified. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this
-                 * field.
+                 * Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has
+                 * already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and
+                 * the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will
+                 * ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not
+                 * supported (00000000-0000-0000-0000-000000000000).
                  */
-                resource:
-                    string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?:
-                    string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?:
-                    string;
-            },
-            body: GoogleIamV1SetIamPolicyRequest): Request<GoogleIamV1Policy>;
-            /**
-             * Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a `NOT_FOUND` error. Note: This
-             * operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.
-             */
-            testIamPermissions(request: {
-                /** V1 error format. */
-                "$.xgafv"?:
-                    string;
-                /** OAuth access token. */
-                access_token?:
-                    string;
-                /** Data format for response. */
-                alt?:
-                    string;
-                /** JSONP */
-                callback?:
-                    string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?:
-                    string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?:
-                    string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?:
-                    string;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?:
-                    boolean;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?:
+                requestId?:
                     string;
                 /**
-                 * REQUIRED: The resource for which the policy detail is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for
-                 * this field.
+                 * Required. Field mask is used to specify the fields to be overwritten in the Association resource by the update. The fields specified in the update_mask are relative to the
+                 * resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.
                  */
-                resource:
+                updateMask?:
                     string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?:
@@ -3314,7 +4141,7 @@ declare namespace gapi.client {
                 uploadType?:
                     string;
             },
-            body: GoogleIamV1TestIamPermissionsRequest): Request<GoogleIamV1TestIamPermissionsResponse>;
+            body: FirewallEndpointAssociation): Request<Operation>;
         }
         interface RulesResource {
             /** Creates a new GatewaySecurityPolicy in a given project and location. */
@@ -5369,6 +6196,8 @@ declare namespace gapi.client {
                 AuthorizationPoliciesResource;
             clientTlsPolicies:
                 ClientTlsPoliciesResource;
+            firewallEndpointAssociations:
+                FirewallEndpointAssociationsResource;
             gatewaySecurityPolicies:
                 GatewaySecurityPoliciesResource;
             operations: