google-api-python-client 2.170.0__py3-none-any.whl → 2.172.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/cloudkms.v1.json

@@ -228,6 +228,32 @@
 "https://www.googleapis.com/auth/cloudkms"
 ]
 },
+"getKajPolicyConfig": {
+"description": "Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.",
+"flatPath": "v1/folders/{foldersId}/kajPolicyConfig",
+"httpMethod": "GET",
+"id": "cloudkms.folders.getKajPolicyConfig",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the KeyAccessJustificationsPolicyConfig to get.",
+"location": "path",
+"pattern": "^folders/[^/]+/kajPolicyConfig$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
+},
 "updateAutokeyConfig": {
 "description": "Updates the AutokeyConfig for a folder. The caller must have both `cloudkms.autokeyConfigs.update` permission on the parent folder and `cloudkms.cryptoKeys.setIamPolicy` permission on the provided key project. A KeyHandle creation in the folder's descendant projects will use this configuration to determine where to create the resulting CryptoKey.",
 "flatPath": "v1/folders/{foldersId}/autokeyConfig",
@@ -262,11 +288,137 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/cloudkms"
 ]
+},
+"updateKajPolicyConfig": {
+"description": "Updates the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.",
+"flatPath": "v1/folders/{foldersId}/kajPolicyConfig",
+"httpMethod": "PATCH",
+"id": "cloudkms.folders.updateKajPolicyConfig",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in the format of \"{organizations|folders|projects}/*/kajPolicyConfig\".",
+"location": "path",
+"pattern": "^folders/[^/]+/kajPolicyConfig$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. The list of fields to update.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"request": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"response": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
+}
+}
+},
+"organizations": {
+"methods": {
+"getKajPolicyConfig": {
+"description": "Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.",
+"flatPath": "v1/organizations/{organizationsId}/kajPolicyConfig",
+"httpMethod": "GET",
+"id": "cloudkms.organizations.getKajPolicyConfig",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the KeyAccessJustificationsPolicyConfig to get.",
+"location": "path",
+"pattern": "^organizations/[^/]+/kajPolicyConfig$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
+},
+"updateKajPolicyConfig": {
+"description": "Updates the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.",
+"flatPath": "v1/organizations/{organizationsId}/kajPolicyConfig",
+"httpMethod": "PATCH",
+"id": "cloudkms.organizations.updateKajPolicyConfig",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in the format of \"{organizations|folders|projects}/*/kajPolicyConfig\".",
+"location": "path",
+"pattern": "^organizations/[^/]+/kajPolicyConfig$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. The list of fields to update.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"request": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"response": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
 }
 }
 },
 "projects": {
 "methods": {
+"getKajPolicyConfig": {
+"description": "Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.",
+"flatPath": "v1/projects/{projectsId}/kajPolicyConfig",
+"httpMethod": "GET",
+"id": "cloudkms.projects.getKajPolicyConfig",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the KeyAccessJustificationsPolicyConfig to get.",
+"location": "path",
+"pattern": "^projects/[^/]+/kajPolicyConfig$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
+},
 "showEffectiveAutokeyConfig": {
 "description": "Returns the effective Cloud KMS Autokey configuration for a given project.",
 "flatPath": "v1/projects/{projectsId}:showEffectiveAutokeyConfig",
@@ -292,6 +444,93 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/cloudkms"
 ]
+},
+"showEffectiveKeyAccessJustificationsEnrollmentConfig": {
+"description": "Returns the KeyAccessJustificationsEnrollmentConfig of the resource closest to the given project in hierarchy.",
+"flatPath": "v1/projects/{projectsId}:showEffectiveKeyAccessJustificationsEnrollmentConfig",
+"httpMethod": "GET",
+"id": "cloudkms.projects.showEffectiveKeyAccessJustificationsEnrollmentConfig",
+"parameterOrder": [
+"project"
+],
+"parameters": {
+"project": {
+"description": "Required. The number or id of the project to get the effective KeyAccessJustificationsEnrollmentConfig for.",
+"location": "path",
+"pattern": "^projects/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+project}:showEffectiveKeyAccessJustificationsEnrollmentConfig",
+"response": {
+"$ref": "ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
+},
+"showEffectiveKeyAccessJustificationsPolicyConfig": {
+"description": "Returns the KeyAccessJustificationsPolicyConfig of the resource closest to the given project in hierarchy.",
+"flatPath": "v1/projects/{projectsId}:showEffectiveKeyAccessJustificationsPolicyConfig",
+"httpMethod": "GET",
+"id": "cloudkms.projects.showEffectiveKeyAccessJustificationsPolicyConfig",
+"parameterOrder": [
+"project"
+],
+"parameters": {
+"project": {
+"description": "Required. The number or id of the project to get the effective KeyAccessJustificationsPolicyConfig. In the format of \"projects/{|}\"",
+"location": "path",
+"pattern": "^projects/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+project}:showEffectiveKeyAccessJustificationsPolicyConfig",
+"response": {
+"$ref": "ShowEffectiveKeyAccessJustificationsPolicyConfigResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
+},
+"updateKajPolicyConfig": {
+"description": "Updates the KeyAccessJustificationsPolicyConfig for a given organization/folder/projects.",
+"flatPath": "v1/projects/{projectsId}/kajPolicyConfig",
+"httpMethod": "PATCH",
+"id": "cloudkms.projects.updateKajPolicyConfig",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in the format of \"{organizations|folders|projects}/*/kajPolicyConfig\".",
+"location": "path",
+"pattern": "^projects/[^/]+/kajPolicyConfig$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. The list of fields to update.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"request": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"response": {
+"$ref": "KeyAccessJustificationsPolicyConfig"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloudkms"
+]
 }
 },
 "resources": {
@@ -2163,7 +2402,7 @@
 }
 }
 },
-"revision": "20250501",
+"revision": "20250523",
 "rootUrl": "https://cloudkms.googleapis.com/",
 "schemas": {
 "AsymmetricDecryptRequest": {
@@ -2347,6 +2586,10 @@
 "description": "Cloud KMS Autokey configuration for a folder.",
 "id": "AutokeyConfig",
 "properties": {
+"etag": {
+"description": "Optional. A checksum computed by the server based on the value of other fields. This may be sent on update requests to ensure that the client has an up-to-date value before proceeding. The request will be rejected with an ABORTED error on a mismatched etag.",
+"type": "string"
+},
 "keyProject": {
 "description": "Optional. Name of the key project, e.g. `projects/{PROJECT_ID}` or `projects/{PROJECT_NUMBER}`, where Cloud KMS Autokey will provision a new CryptoKey when a KeyHandle is created. On UpdateAutokeyConfig, the caller will require `cloudkms.cryptoKeys.setIamPolicy` permission on this key project. Once configured, for Cloud KMS Autokey to function properly, this key project must have the Cloud KMS API activated and the Cloud KMS Service Agent for this key project must be granted the `cloudkms.admin` role (or pertinent permissions). A request with an empty key project field will clear the configuration.",
 "type": "string"
@@ -2624,7 +2867,8 @@
 "HMAC_SHA224",
 "EXTERNAL_SYMMETRIC_ENCRYPTION",
 "PQ_SIGN_ML_DSA_65",
-"PQ_SIGN_SLH_DSA_SHA2_128S"
+"PQ_SIGN_SLH_DSA_SHA2_128S",
+"PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256"
 ],
 "enumDescriptions": [
 "Not specified.",
@@ -2664,7 +2908,8 @@
 "HMAC-SHA224 signing with a 224 bit key.",
 "Algorithm representing symmetric encryption by an external key manager.",
 "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 3. Randomized version.",
-"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version."
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version.",
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized pre-hash version supporting SHA256 digests."
 ],
 "readOnly": true,
 "type": "string"
@@ -2777,7 +3022,7 @@
 "This version is still being generated. It may not be used, enabled, disabled, or destroyed yet. Cloud KMS will automatically mark this version ENABLED as soon as the version is ready.",
 "This version may be used for cryptographic operations.",
 "This version may not be used, but the key material is still available, and the version can be placed back into the ENABLED state.",
-"This key material of this version is destroyed and no longer stored. This version may only become ENABLED again if this version is reimport_eligible and the original key material is reimported with a call to KeyManagementService.ImportCryptoKeyVersion.",
+"The key material of this version is destroyed and no longer stored. This version may only become ENABLED again if this version is reimport_eligible and the original key material is reimported with a call to KeyManagementService.ImportCryptoKeyVersion.",
 "This version is scheduled for destruction, and will be destroyed soon. Call RestoreCryptoKeyVersion to put it back into the DISABLED state.",
 "This version is still being imported. It may not be used, enabled, disabled, or destroyed yet. Cloud KMS will automatically mark this version ENABLED as soon as the version is ready.",
 "This version was not imported successfully. It may not be used, enabled, disabled, or destroyed. The submitted key material has been discarded. Additional details can be found in CryptoKeyVersion.import_failure_reason.",
@@ -2834,7 +3079,8 @@
 "HMAC_SHA224",
 "EXTERNAL_SYMMETRIC_ENCRYPTION",
 "PQ_SIGN_ML_DSA_65",
-"PQ_SIGN_SLH_DSA_SHA2_128S"
+"PQ_SIGN_SLH_DSA_SHA2_128S",
+"PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256"
 ],
 "enumDescriptions": [
 "Not specified.",
@@ -2874,7 +3120,8 @@
 "HMAC-SHA224 signing with a 224 bit key.",
 "Algorithm representing symmetric encryption by an external key manager.",
 "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 3. Randomized version.",
-"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version."
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version.",
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized pre-hash version supporting SHA256 digests."
 ],
 "type": "string"
 },
@@ -3259,7 +3506,8 @@
 "HMAC_SHA224",
 "EXTERNAL_SYMMETRIC_ENCRYPTION",
 "PQ_SIGN_ML_DSA_65",
-"PQ_SIGN_SLH_DSA_SHA2_128S"
+"PQ_SIGN_SLH_DSA_SHA2_128S",
+"PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256"
 ],
 "enumDescriptions": [
 "Not specified.",
@@ -3299,7 +3547,8 @@
 "HMAC-SHA224 signing with a 224 bit key.",
 "Algorithm representing symmetric encryption by an external key manager.",
 "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 3. Randomized version.",
-"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version."
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version.",
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized pre-hash version supporting SHA256 digests."
 ],
 "type": "string"
 },
@@ -3427,6 +3676,21 @@
 },
 "type": "object"
 },
+"KeyAccessJustificationsEnrollmentConfig": {
+"description": "The configuration of a protection level for a project's Key Access Justifications enrollment.",
+"id": "KeyAccessJustificationsEnrollmentConfig",
+"properties": {
+"auditLogging": {
+"description": "Whether the project has KAJ logging enabled.",
+"type": "boolean"
+},
+"policyEnforcement": {
+"description": "Whether the project is enrolled in KAJ policy enforcement.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "KeyAccessJustificationsPolicy": {
 "description": "A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey.",
 "id": "KeyAccessJustificationsPolicy",
@@ -3469,6 +3733,21 @@
 },
 "type": "object"
 },
+"KeyAccessJustificationsPolicyConfig": {
+"description": "A singleton configuration for Key Access Justifications policies.",
+"id": "KeyAccessJustificationsPolicyConfig",
+"properties": {
+"defaultKeyAccessJustificationPolicy": {
+"$ref": "KeyAccessJustificationsPolicy",
+"description": "Optional. The default key access justification policy used when a CryptoKey is created in this folder. This is only used when a Key Access Justifications policy is not provided in the CreateCryptoKeyRequest. This overrides any default policies in its ancestry."
+},
+"name": {
+"description": "Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in the format of \"{organizations|folders|projects}/*/kajPolicyConfig\".",
+"type": "string"
+}
+},
+"type": "object"
+},
 "KeyHandle": {
 "description": "Resource-oriented representation of a request to Cloud KMS Autokey and the resulting provisioning of a CryptoKey.",
 "id": "KeyHandle",
@@ -3982,7 +4261,8 @@
 "HMAC_SHA224",
 "EXTERNAL_SYMMETRIC_ENCRYPTION",
 "PQ_SIGN_ML_DSA_65",
-"PQ_SIGN_SLH_DSA_SHA2_128S"
+"PQ_SIGN_SLH_DSA_SHA2_128S",
+"PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256"
 ],
 "enumDescriptions": [
 "Not specified.",
@@ -4022,7 +4302,8 @@
 "HMAC-SHA224 signing with a 224 bit key.",
 "Algorithm representing symmetric encryption by an external key manager.",
 "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 3. Randomized version.",
-"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version."
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized version.",
+"The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized pre-hash version supporting SHA256 digests."
 ],
 "type": "string"
 },
@@ -4329,6 +4610,36 @@
 },
 "type": "object"
 },
+"ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse": {
+"description": "Response message for KeyAccessJustificationsConfig.ShowEffectiveKeyAccessJustificationsEnrollmentConfig",
+"id": "ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse",
+"properties": {
+"externalConfig": {
+"$ref": "KeyAccessJustificationsEnrollmentConfig",
+"description": "The effective KeyAccessJustificationsEnrollmentConfig for external keys."
+},
+"hardwareConfig": {
+"$ref": "KeyAccessJustificationsEnrollmentConfig",
+"description": "The effective KeyAccessJustificationsEnrollmentConfig for hardware keys."
+},
+"softwareConfig": {
+"$ref": "KeyAccessJustificationsEnrollmentConfig",
+"description": "The effective KeyAccessJustificationsEnrollmentConfig for software keys."
+}
+},
+"type": "object"
+},
+"ShowEffectiveKeyAccessJustificationsPolicyConfigResponse": {
+"description": "Response message for KeyAccessJustificationsConfig.ShowEffectiveKeyAccessJustificationsPolicyConfig.",
+"id": "ShowEffectiveKeyAccessJustificationsPolicyConfigResponse",
+"properties": {
+"effectiveKajPolicy": {
+"$ref": "KeyAccessJustificationsPolicyConfig",
+"description": "The effective KeyAccessJustificationsPolicyConfig."
+}
+},
+"type": "object"
+},
 "Status": {
 "description": "The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).",
 "id": "Status",

googleapiclient/discovery_cache/documents/cloudresourcemanager.v3.json

@@ -637,6 +637,104 @@
 }
 }
 },
+"locations": {
+"resources": {
+"effectiveTagBindingCollections": {
+"methods": {
+"get": {
+"description": "Returns effective tag bindings on a GCP resource.",
+"flatPath": "v3/locations/{locationsId}/effectiveTagBindingCollections/{effectiveTagBindingCollectionsId}",
+"httpMethod": "GET",
+"id": "cloudresourcemanager.locations.effectiveTagBindingCollections.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The full name of the EffectiveTagBindingCollection in format: `locations/{location}/effectiveTagBindingCollections/{encoded-full-resource-name}` where the encoded-full-resource-name is the UTF-8 encoded name of the resource the TagBindings are bound to. E.g. \"locations/global/effectiveTagBindingCollections/%2f%2fcloudresourcemanager.googleapis.com%2fprojects%2f123\"",
+"location": "path",
+"pattern": "^locations/[^/]+/effectiveTagBindingCollections/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v3/{+name}",
+"response": {
+"$ref": "EffectiveTagBindingCollection"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloud-platform.read-only"
+]
+}
+}
+},
+"tagBindingCollections": {
+"methods": {
+"get": {
+"description": "Returns tag bindings directly attached to a GCP resource.",
+"flatPath": "v3/locations/{locationsId}/tagBindingCollections/{tagBindingCollectionsId}",
+"httpMethod": "GET",
+"id": "cloudresourcemanager.locations.tagBindingCollections.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The full name of the TagBindingCollection in format: `locations/{location}/tagBindingCollections/{encoded-full-resource-name}` where the enoded-full-resource-name is the UTF-8 encoded name of the resource the TagBindings are bound to. E.g. \"locations/global/tagBindingCollections/%2f%2fcloudresourcemanager.googleapis.com%2fprojects%2f123\"",
+"location": "path",
+"pattern": "^locations/[^/]+/tagBindingCollections/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v3/{+name}",
+"response": {
+"$ref": "TagBindingCollection"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/cloud-platform.read-only"
+]
+},
+"patch": {
+"description": "Updates tag bindings directly attached to a GCP resource. Update_mask can be kept empty or \"*\".",
+"flatPath": "v3/locations/{locationsId}/tagBindingCollections/{tagBindingCollectionsId}",
+"httpMethod": "PATCH",
+"id": "cloudresourcemanager.locations.tagBindingCollections.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. The name of the TagBindingCollection, following the convention: `locations/{location}/tagBindingCollections/{encoded-full-resource-name}` where the encoded-full-resource-name is the UTF-8 encoded name of the GCP resource the TagBindings are bound to. \"locations/global/tagBindingCollections/%2f%2fcloudresourcemanager.googleapis.com%2fprojects%2f123\"",
+"location": "path",
+"pattern": "^locations/[^/]+/tagBindingCollections/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. An update mask to selectively update fields.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v3/{+name}",
+"request": {
+"$ref": "TagBindingCollection"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
+}
+}
+},
 "operations": {
 "methods": {
 "get": {
@@ -1870,7 +1968,7 @@
 }
 }
 },
-"revision": "20250508",
+"revision": "20250522",
 "rootUrl": "https://cloudresourcemanager.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -2144,6 +2242,28 @@
 },
 "type": "object"
 },
+"EffectiveTagBindingCollection": {
+"description": "Represents a collection of effective tag bindings for a GCP resource.",
+"id": "EffectiveTagBindingCollection",
+"properties": {
+"effectiveTags": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Tag keys/values effectively bound to this resource, specified in namespaced format. For example: \"123/environment\": \"production\"",
+"type": "object"
+},
+"fullResourceName": {
+"description": "The full resource name of the resource the TagBindings are bound to. E.g. `//cloudresourcemanager.googleapis.com/projects/123`",
+"type": "string"
+},
+"name": {
+"description": "Identifier. The name of the EffectiveTagBindingCollection, following the convention: `locations/{location}/effectiveTagBindingCollections/{encoded-full-resource-name}` where the encoded-full-resource-name is the UTF-8 encoded name of the GCP resource the TagBindings are bound to. E.g. \"locations/global/effectiveTagBindingCollections/%2f%2fcloudresourcemanager.googleapis.com%2fprojects%2f123\"",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Empty": {
 "description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }",
 "id": "Empty",
@@ -2909,6 +3029,32 @@
 },
 "type": "object"
 },
+"TagBindingCollection": {
+"description": "Represents a collection of tags directly bound to a GCP resource.",
+"id": "TagBindingCollection",
+"properties": {
+"etag": {
+"description": "Optional. A checksum based on the current bindings which can be passed to prevent race conditions. This field is always set in server responses.",
+"type": "string"
+},
+"fullResourceName": {
+"description": "The full resource name of the resource the TagBindings are bound to. E.g. `//cloudresourcemanager.googleapis.com/projects/123`",
+"type": "string"
+},
+"name": {
+"description": "Identifier. The name of the TagBindingCollection, following the convention: `locations/{location}/tagBindingCollections/{encoded-full-resource-name}` where the encoded-full-resource-name is the UTF-8 encoded name of the GCP resource the TagBindings are bound to. \"locations/global/tagBindingCollections/%2f%2fcloudresourcemanager.googleapis.com%2fprojects%2f123\"",
+"type": "string"
+},
+"tags": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Tag keys/values directly bound to this resource, specified in namespaced format. For example: \"123/environment\": \"production\"",
+"type": "object"
+}
+},
+"type": "object"
+},
 "TagHold": {
 "description": "A TagHold represents the use of a TagValue that is not captured by TagBindings. If a TagValue has any TagHolds, deletion will be blocked. This resource is intended to be created in the same cloud location as the `holder`.",
 "id": "TagHold",
@@ -2992,7 +3138,7 @@
 "type": "object"
 },
 "shortName": {
-"description": "Required. Immutable. The user friendly name for a TagKey. The short name should be unique for TagKeys within the same tag namespace. The short name must be 1-63 characters, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.",
+"description": "Required. Immutable. The user friendly name for a TagKey. The short name should be unique for TagKeys within the same tag namespace. The short name must be 1-256 characters, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.",
 "type": "string"
 },
 "updateTime": {
@@ -3036,7 +3182,7 @@
 "type": "string"
 },
 "shortName": {
-"description": "Required. Immutable. User-assigned short name for TagValue. The short name should be unique for TagValues within the same parent TagKey. The short name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.",
+"description": "Required. Immutable. User-assigned short name for TagValue. The short name should be unique for TagValues within the same parent TagKey. The short name must be 256 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.",
 "type": "string"
 },
 "updateTime": {