Class AccessApprovalAsyncClient (1.9.1)

This API allows a customer to manage accesses to cloud resources by Google personnel. It defines the following resource model:

• The API has a collection of ApprovalRequest resources, named approvalRequests/{approval_request}
• The API has top-level settings per Project/Folder/Organization, named accessApprovalSettings

The service also periodically emails a list of recipients, defined at the Project/Folder/Organization level in the accessApprovalSettings, when there is a pending ApprovalRequest for them to act on. The ApprovalRequests can also optionally be published to a Pub/Sub topic owned by the customer (contact support if you would like to enable Pub/Sub notifications).

ApprovalRequests can be approved or dismissed. Google personnel can only access the indicated resource or resources if the request is approved (subject to some exclusions: https://cloud.google.com/access-approval/docs/overview#exclusions).

Note: Using Access Approval functionality will mean that Google may not be able to meet the SLAs for your chosen products, as any support response times may be dramatically increased. As such the SLAs do not apply to any service disruption to the extent impacted by Customer's use of Access Approval. Do not enable Access Approval for projects where you may require high service availability and rapid response by Google Cloud Support.

After a request is approved or dismissed, no further action may be taken on it. Requests with the requested_expiration in the past or with no activity for 14 days are considered dismissed. When an approval expires, the request is considered dismissed.

If a request is not approved or dismissed, we call it pending.

Returns the transport used by the client instance.

Instantiates the access approval client.

Returns a fully-qualified access_approval_service_account string.

Returns a fully-qualified access_approval_settings string.

Returns a fully-qualified approval_request string.

Approves a request and returns the updated ApprovalRequest.

Returns NOT_FOUND if the request does not exist. Returns FAILED_PRECONDITION if the request exists but is not in a pending state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_approve_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.ApproveApprovalRequestMessage(
    )

    # Make the request
    response = await client.approve_approval_request(request=request)

    # Handle the response
    print(response)

Returns a fully-qualified billing_account string.

Returns a fully-qualified folder string.

Returns a fully-qualified location string.

Returns a fully-qualified organization string.

Returns a fully-qualified project string.

Deletes the settings associated with a project, folder, or organization. This will have the effect of disabling Access Approval for the project, folder, or organization, but only if all ancestors also have Access Approval disabled. If Access Approval is enabled at a higher level of the hierarchy, then Access Approval will still be enabled at this level as the settings are inherited.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_delete_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.DeleteAccessApprovalSettingsMessage(
    )

    # Make the request
    await client.delete_access_approval_settings(request=request)

Dismisses a request. Returns the updated ApprovalRequest.

NOTE: This does not deny access to the resource if another request has been made and approved. It is equivalent in effect to ignoring the request altogether.

Returns NOT_FOUND if the request does not exist.

Returns FAILED_PRECONDITION if the request exists but is not in a pending state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_dismiss_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.DismissApprovalRequestMessage(
    )

    # Make the request
    response = await client.dismiss_approval_request(request=request)

    # Handle the response
    print(response)

Creates an instance of this client using the provided credentials file.

Creates an instance of this client using the provided credentials info.

Creates an instance of this client using the provided credentials file.

Retrieves the service account that is used by Access Approval to access KMS keys for signing approved approval requests.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_get_access_approval_service_account():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetAccessApprovalServiceAccountMessage(
    )

    # Make the request
    response = await client.get_access_approval_service_account(request=request)

    # Handle the response
    print(response)

Gets the settings associated with a project, folder, or organization.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_get_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetAccessApprovalSettingsMessage(
    )

    # Make the request
    response = await client.get_access_approval_settings(request=request)

    # Handle the response
    print(response)

Gets an approval request. Returns NOT_FOUND if the request does not exist.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_get_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetApprovalRequestMessage(
    )

    # Make the request
    response = await client.get_approval_request(request=request)

    # Handle the response
    print(response)

Return the API endpoint and client cert source for mutual TLS.

The client cert source is determined in the following order: (1) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not "true", the client cert source is None. (2) if client_options.client_cert_source is provided, use the provided one; if the default client cert source exists, use the default one; otherwise the client cert source is None.

The API endpoint is determined in the following order: (1) if client_options.api_endpoint if provided, use the provided one. (2) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is "always", use the default mTLS endpoint; if the environment variabel is "never", use the default API endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise use the default API endpoint.

More details can be found at https://google.aip.dev/auth/4114.

Returns an appropriate transport class.

Invalidates an existing ApprovalRequest. Returns the updated ApprovalRequest.

NOTE: This does not deny access to the resource if another request has been made and approved. It only invalidates a single approval.

Returns FAILED_PRECONDITION if the request exists but is not in an approved state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_invalidate_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.InvalidateApprovalRequestMessage(
    )

    # Make the request
    response = await client.invalidate_approval_request(request=request)

    # Handle the response
    print(response)

Lists approval requests associated with a project, folder, or organization. Approval requests can be filtered by state (pending, active, dismissed). The order is reverse chronological.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_list_approval_requests():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.ListApprovalRequestsMessage(
    )

    # Make the request
    page_result = client.list_approval_requests(request=request)

    # Handle the response
    async for response in page_result:
        print(response)

Parses a access_approval_service_account path into its component segments.

Parses a access_approval_settings path into its component segments.

Parses a approval_request path into its component segments.

Parse a billing_account path into its component segments.

Parse a folder path into its component segments.

Parse a location path into its component segments.

Parse a organization path into its component segments.

Parse a project path into its component segments.

Updates the settings associated with a project, folder, or organization. Settings to update are determined by the value of field_mask.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_update_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.UpdateAccessApprovalSettingsMessage(
    )

    # Make the request
    response = await client.update_access_approval_settings(request=request)

    # Handle the response
    print(response)