str
The project that the associated GCP resource belongs to, in
the form of projects/{project_number}. If an IAM policy
is set on a resource (like VM instance, Cloud Storage
bucket), the project field will indicate the project that
contains the resource. If an IAM policy is set on a folder
or orgnization, the project field will be empty.
policy
.giv_policy.Policy
The IAM policy directly set on the given
resource. Note that the original IAM policy can
contain multiple bindings. This only contains
the bindings that match the given query. For
queries that don't contain a constrain on
policies (e.g. an empty query), this contains
all the bindings.
explanation
.assets.IamPolicySearchResult.Explanation
Explanation about the IAM policy search
result. It contains additional information to
explain why the search result matches the query.