Package Classes (3.26.1)

Asset service definition.

Asset service definition.

A pager for iterating through analyze_org_policies requests.

This class thinly wraps an initial AnalyzeOrgPoliciesResponse object, and provides an __aiter__ method to iterate through its org_policy_results field.

If there are more pages, the __aiter__ method will make additional AnalyzeOrgPolicies requests and continue to iterate through the org_policy_results field on the corresponding responses.

All the usual AnalyzeOrgPoliciesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through analyze_org_policies requests.

This class thinly wraps an initial AnalyzeOrgPoliciesResponse object, and provides an __iter__ method to iterate through its org_policy_results field.

If there are more pages, the __iter__ method will make additional AnalyzeOrgPolicies requests and continue to iterate through the org_policy_results field on the corresponding responses.

All the usual AnalyzeOrgPoliciesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through analyze_org_policy_governed_assets requests.

This class thinly wraps an initial AnalyzeOrgPolicyGovernedAssetsResponse object, and provides an __aiter__ method to iterate through its governed_assets field.

If there are more pages, the __aiter__ method will make additional AnalyzeOrgPolicyGovernedAssets requests and continue to iterate through the governed_assets field on the corresponding responses.

All the usual AnalyzeOrgPolicyGovernedAssetsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through analyze_org_policy_governed_assets requests.

This class thinly wraps an initial AnalyzeOrgPolicyGovernedAssetsResponse object, and provides an __iter__ method to iterate through its governed_assets field.

If there are more pages, the __iter__ method will make additional AnalyzeOrgPolicyGovernedAssets requests and continue to iterate through the governed_assets field on the corresponding responses.

All the usual AnalyzeOrgPolicyGovernedAssetsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through analyze_org_policy_governed_containers requests.

This class thinly wraps an initial AnalyzeOrgPolicyGovernedContainersResponse object, and provides an __aiter__ method to iterate through its governed_containers field.

If there are more pages, the __aiter__ method will make additional AnalyzeOrgPolicyGovernedContainers requests and continue to iterate through the governed_containers field on the corresponding responses.

All the usual AnalyzeOrgPolicyGovernedContainersResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through analyze_org_policy_governed_containers requests.

This class thinly wraps an initial AnalyzeOrgPolicyGovernedContainersResponse object, and provides an __iter__ method to iterate through its governed_containers field.

If there are more pages, the __iter__ method will make additional AnalyzeOrgPolicyGovernedContainers requests and continue to iterate through the governed_containers field on the corresponding responses.

All the usual AnalyzeOrgPolicyGovernedContainersResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through list_assets requests.

This class thinly wraps an initial ListAssetsResponse object, and provides an __aiter__ method to iterate through its assets field.

If there are more pages, the __aiter__ method will make additional ListAssets requests and continue to iterate through the assets field on the corresponding responses.

All the usual ListAssetsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through list_assets requests.

This class thinly wraps an initial ListAssetsResponse object, and provides an __iter__ method to iterate through its assets field.

If there are more pages, the __iter__ method will make additional ListAssets requests and continue to iterate through the assets field on the corresponding responses.

All the usual ListAssetsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through list_saved_queries requests.

This class thinly wraps an initial ListSavedQueriesResponse object, and provides an __aiter__ method to iterate through its saved_queries field.

If there are more pages, the __aiter__ method will make additional ListSavedQueries requests and continue to iterate through the saved_queries field on the corresponding responses.

All the usual ListSavedQueriesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through list_saved_queries requests.

This class thinly wraps an initial ListSavedQueriesResponse object, and provides an __iter__ method to iterate through its saved_queries field.

If there are more pages, the __iter__ method will make additional ListSavedQueries requests and continue to iterate through the saved_queries field on the corresponding responses.

All the usual ListSavedQueriesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through search_all_iam_policies requests.

This class thinly wraps an initial SearchAllIamPoliciesResponse object, and provides an __aiter__ method to iterate through its results field.

If there are more pages, the __aiter__ method will make additional SearchAllIamPolicies requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllIamPoliciesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through search_all_iam_policies requests.

This class thinly wraps an initial SearchAllIamPoliciesResponse object, and provides an __iter__ method to iterate through its results field.

If there are more pages, the __iter__ method will make additional SearchAllIamPolicies requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllIamPoliciesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through search_all_resources requests.

This class thinly wraps an initial SearchAllResourcesResponse object, and provides an __aiter__ method to iterate through its results field.

If there are more pages, the __aiter__ method will make additional SearchAllResources requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllResourcesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through search_all_resources requests.

This class thinly wraps an initial SearchAllResourcesResponse object, and provides an __iter__ method to iterate through its results field.

If there are more pages, the __iter__ method will make additional SearchAllResources requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllResourcesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

Represents the metadata of the longrunning operation for the AnalyzeIamPolicyLongrunning RPC.

A request message for AssetService.AnalyzeIamPolicyLongrunning.

A response message for AssetService.AnalyzeIamPolicyLongrunning.

A request message for AssetService.AnalyzeIamPolicy.

A response message for AssetService.AnalyzeIamPolicy.

An analysis message to group the query and results.

The request message for performing resource move analysis.

View enum for supporting partial analysis responses.

Values: ANALYSIS_VIEW_UNSPECIFIED (0): The default/unset value. The API will default to the FULL view. FULL (1): Full analysis including all level of impacts of the specified resource move. BASIC (2): Basic analysis only including blockers which will prevent the specified resource move at runtime.

The response message for resource move analysis.

A request message for AssetService.AnalyzeOrgPolicies.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

The response message for AssetService.AnalyzeOrgPolicies.

The organization policy result to the query.

A request message for AssetService.AnalyzeOrgPolicyGovernedAssets.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

The response message for AssetService.AnalyzeOrgPolicyGovernedAssets.

Represents a Google Cloud asset(resource or IAM policy) governed by the organization policies of the AnalyzeOrgPolicyGovernedAssetsRequest.constraint.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

The IAM policies governed by the organization policies of the AnalyzeOrgPolicyGovernedAssetsRequest.constraint.

The Google Cloud resources governed by the organization policies of the AnalyzeOrgPolicyGovernedAssetsRequest.constraint.

A request message for AssetService.AnalyzeOrgPolicyGovernedContainers.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

The response message for AssetService.AnalyzeOrgPolicyGovernedContainers.

The organization/folder/project resource governed by organization policies of AnalyzeOrgPolicyGovernedContainersRequest.constraint.

This organization policy message is a modified version of the one defined in the Organization Policy system. This message contains several fields defined in the original organization policy with some new fields for analysis purpose.

This rule message is a customized version of the one defined in the Organization Policy system. In addition to the fields defined in the original organization policy, it contains additional field(s) under specific circumstances to support analysis results.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

The string values for the list constraints.

The organization policy constraint definition.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

The definition of a constraint.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

A Constraint that is either enforced or not.

For example a constraint constraints/compute.disableSerialPortAccess. If it is enforced on a VM instance, serial port connections will not be opened to that instance.

Specifies the default behavior in the absence of any Policy for the Constraint. This must not be CONSTRAINT_DEFAULT_UNSPECIFIED.

Values: CONSTRAINT_DEFAULT_UNSPECIFIED (0): This is only used for distinguishing unset values and should never be used. ALLOW (1): Indicate that all values are allowed for list constraints. Indicate that enforcement is off for boolean constraints. DENY (2): Indicate that all values are denied for list constraints. Indicate that enforcement is on for boolean constraints.

A Constraint that allows or disallows a list of string values, which are configured by an organization's policy administrator with a Policy.

The definition of a custom constraint.

Allow or deny type.

Values: ACTION_TYPE_UNSPECIFIED (0): Unspecified. Will results in user error. ALLOW (1): Allowed action type. DENY (2): Deny action type.

The operation in which this constraint will be applied. For example: If the constraint applies only when create VMs, the method_types will be "CREATE" only. If the constraint applied when create or delete VMs, the method_types will be "CREATE" and "DELETE".

Values: METHOD_TYPE_UNSPECIFIED (0): Unspecified. Will results in user error. CREATE (1): Constraint applied when creating the resource. UPDATE (2): Constraint applied when updating the resource. DELETE (3): Constraint applied when deleting the resource.

An asset in Google Cloud. An asset can be any resource in the Google Cloud resource hierarchy <https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy>, a resource outside the Google Cloud resource hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy (e.g. IAM policy), or a relationship (e.g. an INSTANCE_TO_INSTANCEGROUP relationship). See Supported asset types <https://cloud.google.com/asset-inventory/docs/supported-asset-types> for more information.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attached resource representation, which is defined by the corresponding service provider. It represents an attached resource's payload.

Batch get assets history request.

Batch get assets history response.

A request message for AssetService.BatchGetEffectiveIamPolicies.

A response message for AssetService.BatchGetEffectiveIamPolicies.

The effective IAM policies on one resource.

The IAM policy and its attached resource.

A BigQuery destination for exporting assets to.

The condition evaluation.

Value of this expression.

Values: EVALUATION_VALUE_UNSPECIFIED (0): Reserved for future use. TRUE (1): The evaluation result is true. FALSE (2): The evaluation result is false. CONDITIONAL (3): The evaluation result is conditional when the condition expression contains variables that are either missing input values or have not been supported by Policy Analyzer yet.

Asset content type.

Values: CONTENT_TYPE_UNSPECIFIED (0): Unspecified content type. RESOURCE (1): Resource metadata. IAM_POLICY (2): The actual IAM policy set on a resource. ORG_POLICY (4): The organization policy set on an asset. ACCESS_POLICY (5): The Access Context Manager policy set on an asset. OS_INVENTORY (6): The runtime OS Inventory information. RELATIONSHIP (7): The related resources.

Create asset feed request.

Request to create a saved query.

Request to delete a saved query.

The effective tags and the ancestor resources from which they were inherited.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Export asset request.

The export asset response. This message is returned by the google.longrunning.Operations.GetOperation][google.longrunning.Operations.GetOperation] method in the returned google.longrunning.Operation.response][google.longrunning.Operation.response] field.

An asset feed used to export asset updates to a destinations. An asset feed filter controls what updates are exported. The asset feed must be created within a project, organization, or folder. Supported destinations are:

Pub/Sub topics.

Output configuration for asset feed destination.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

A Cloud Storage location.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

A Cloud Storage output result.

Get asset feed request.

Request to get a saved query.

Output configuration for export IAM policy analysis destination.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

A BigQuery destination.

This enum determines the partition key column for the bigquery tables. Partitioning can improve query performance and reduce query cost by filtering partitions. Refer to https://cloud.google.com/bigquery/docs/partitioned-tables for details.

Values: PARTITION_KEY_UNSPECIFIED (0): Unspecified partition key. Tables won't be partitioned using this option. REQUEST_TIME (1): The time when the request is received. If specified as partition key, the result table(s) is partitoned by the RequestTime column, an additional timestamp column representing when the request was received.

A Cloud Storage location.

IAM policy analysis query message.

Specifies roles and/or permissions to analyze, to determine both the identities possessing them and the resources they control. If multiple values are specified, results will include roles or permissions matching any of them. The total number of roles and permissions should be equal or less than 10.

The IAM conditions context.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Specifies an identity for which to determine resource access, based on roles assigned either directly to them or to the groups they belong to, directly or indirectly.

Contains query options.

Specifies the resource to analyze for access policies, which may be set directly on the resource, or on ancestors such as organizations, folders or projects.

IAM Policy analysis result, consisting of one IAM policy binding and derived access control lists.

An IAM role or permission under analysis.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

An access control list, derived from the above IAM policy binding, which contains a set of resources and accesses. May include one item from each set to compose an access control entry.

NOTICE that there could be multiple access control lists for one IAM policy binding. The access control lists are created based on resource and access combinations.

For example, assume we have the following cases in one IAM policy binding:

• Permission P1 and P2 apply to resource R1 and R2;
• Permission P3 applies to resource R2 and R3;

This will result in the following access control lists:

• AccessControlList 1: [R1, R2], [P1, P2]
• AccessControlList 2: [R2, R3], [P3]

A directional edge.

An identity under analysis.

The identities and group edges.

A Google Cloud resource under analysis.

Represents the detailed state of an entity under analysis, such as a resource, an identity or an access.

A result of IAM Policy search, containing information of an IAM policy.

Explanation about the IAM policy search result.

The abstract base class for a message.

IAM permissions

ListAssets request.

ListAssets response.

List asset feeds request.

Request to list saved queries.

Response of listing saved queries.

A message to group the analysis information.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

An analysis result including blockers and warnings.

A message to group impacts of moving the target resource.

Output configuration for export assets destination.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Output result of export assets.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Specifications of BigQuery partitioned table as export destination.

This enum is used to determine the partition key column when exporting assets to BigQuery partitioned table(s). Note that, if the partition key is a timestamp column, the actual partition is based on its date value (expressed in UTC. see details in https://cloud.google.com/bigquery/docs/partitioned-tables#date_timestamp_partitioned_tables).

Values: PARTITION_KEY_UNSPECIFIED (0): Unspecified partition key. If used, it means using non-partitioned table. READ_TIME (1): The time when the snapshot is taken. If specified as partition key, the result table(s) is partitoned by the additional timestamp column, readTime. If [read_time] in ExportAssetsRequest is specified, the readTime column's value will be the same as it. Otherwise, its value will be the current time that is used to take the snapshot. REQUEST_TIME (2): The time when the request is received and started to be processed. If specified as partition key, the result table(s) is partitoned by the requestTime column, an additional timestamp column representing when the request was received.

A Pub/Sub destination.

Output configuration query assets.

BigQuery destination.

QueryAssets request.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

QueryAssets response.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Execution results of the query.

The result is formatted as rows represented by BigQuery compatible [schema]. When pagination is necessary, it will contains the page token to retrieve the results of following pages.

An asset identifier in Google Cloud which contains its name, type and ancestors. An asset can be any resource in the Google Cloud resource hierarchy <https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy>, a resource outside the Google Cloud resource hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy (e.g. IAM policy). See Supported asset types <https://cloud.google.com/asset-inventory/docs/supported-asset-types> for more information.

DEPRECATED. This message only presents for the purpose of backward-compatibility. The server will never populate this message in responses. The detailed related assets with the relationship_type.

The detailed related resource.

The related resources of the primary resource.

DEPRECATED. This message only presents for the purpose of backward-compatibility. The server will never populate this message in responses. The relationship attributes which include type, source_resource_type, target_resource_type and action.

A representation of a Google Cloud resource.

A result of Resource Search, containing information of a cloud resource. Next ID: 34

The abstract base class for a message.

The abstract base class for a message.

The abstract base class for a message.

A saved query which can be shared with others or used later.

The abstract base class for a message.

The query content.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Search all IAM policies request.

Search all IAM policies response.

Search all resources request.

Search all resources response.

A field in TableSchema.

BigQuery Compatible table schema.

The key and value for a tag <https://cloud.google.com/resource-manager/docs/tags/tags-overview>__.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

An asset in Google Cloud and its temporal metadata, including the time window when it was observed and its status during that window.

State of prior asset.

Values: PRIOR_ASSET_STATE_UNSPECIFIED (0): prior_asset is not applicable for the current asset. PRESENT (1): prior_asset is populated correctly. INVALID (2): Failed to set prior_asset. DOES_NOT_EXIST (3): Current asset is the first known state. DELETED (4): prior_asset is a deletion.

A time window specified by its start_time and end_time.

Update asset feed request.

Request to update a saved query.

Resource representation as defined by the corresponding service providing the resource for a given API version.

Asset service definition.

Asset service definition.

A pager for iterating through search_all_iam_policies requests.

This class thinly wraps an initial SearchAllIamPoliciesResponse object, and provides an __aiter__ method to iterate through its results field.

If there are more pages, the __aiter__ method will make additional SearchAllIamPolicies requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllIamPoliciesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through search_all_iam_policies requests.

This class thinly wraps an initial SearchAllIamPoliciesResponse object, and provides an __iter__ method to iterate through its results field.

If there are more pages, the __iter__ method will make additional SearchAllIamPolicies requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllIamPoliciesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through search_all_resources requests.

This class thinly wraps an initial SearchAllResourcesResponse object, and provides an __aiter__ method to iterate through its results field.

If there are more pages, the __aiter__ method will make additional SearchAllResources requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllResourcesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through search_all_resources requests.

This class thinly wraps an initial SearchAllResourcesResponse object, and provides an __iter__ method to iterate through its results field.

If there are more pages, the __iter__ method will make additional SearchAllResources requests and continue to iterate through the results field on the corresponding responses.

All the usual SearchAllResourcesResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

The result for an IAM policy search.

Explanation about the IAM policy search result.

The abstract base class for a message.

IAM permissions.

Search all IAM policies request.

Search all IAM policies response.

Search all resources request.

Search all resources response.

The standard metadata of a cloud resource.

The abstract base class for a message.

Asset service definition.

Asset service definition.

An asset in Google Cloud. An asset can be any resource in the Google Cloud resource hierarchy <https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy>, a resource outside the Google Cloud resource hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy (e.g. IAM policy). See Supported asset types <https://cloud.google.com/asset-inventory/docs/supported-asset-types> for more information.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Batch get assets history response.

Asset content type.

Values: CONTENT_TYPE_UNSPECIFIED (0): Unspecified content type. RESOURCE (1): Resource metadata. IAM_POLICY (2): The actual IAM policy set on a resource.

Create asset feed request.

The export asset response. This message is returned by the google.longrunning.Operations.GetOperation][google.longrunning.Operations.GetOperation] method in the returned google.longrunning.Operation.response][google.longrunning.Operation.response] field.

An asset feed used to export asset updates to a destinations. An asset feed filter controls what updates are exported. The asset feed must be created within a project, organization, or folder. Supported destinations are:

Cloud Pub/Sub topics.

Output configuration for asset feed destination.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

A Cloud Storage location.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Get asset feed request.

List asset feeds request.

Output configuration for export assets destination.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

A Pub/Sub destination.

A representation of a Google Cloud resource.

An asset in Google Cloud and its temporal metadata, including the time window when it was observed and its status during that window.

A time window specified by its start_time and end_time.

Update asset feed request.

Asset service definition.

Asset service definition.

A request message for AssetService.AnalyzeIamPolicy.

Contains request options.

A response message for AssetService.AnalyzeIamPolicy.

An analysis message to group the query and results.

A request message for AssetService.ExportIamPolicyAnalysis.

Contains request options.

The export IAM policy analysis response. This message is returned by the [google.longrunning.Operations.GetOperation][] method in the returned [google.longrunning.Operation.response][] field.

Output configuration for export IAM policy analysis destination.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

A Cloud Storage location.

IAM policy analysis query message.

Specifies roles and/or permissions to analyze, to determine both the identities possessing them and the resources they control. If multiple values are specified, results will include identities and resources matching any of them.

Specifies an identity for which to determine resource access, based on roles assigned either directly to them or to the groups they belong to, directly or indirectly.

Specifies the resource to analyze for access policies, which may be set directly on the resource, or on ancestors such as organizations, folders or projects. At least one of ResourceSelector, IdentitySelector or AccessSelector must be specified in a request.

IAM Policy analysis result, consisting of one IAM policy binding and derived access control lists.

A role or permission that appears in an access control list.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

An access control list, derived from the above IAM policy binding, which contains a set of resources and accesses. May include one item from each set to compose an access control entry.

NOTICE that there could be multiple access control lists for one IAM policy binding. The access control lists are created based on resource and access combinations.

For example, assume we have the following cases in one IAM policy binding:

• Permission P1 and P2 apply to resource R1 and R2;
• Permission P3 applies to resource R2 and R3;

This will result in the following access control lists:

• AccessControlList 1: [R1, R2], [P1, P2]
• AccessControlList 2: [R2, R3], [P3]

Represents analysis state of each node in the result graph or non-critical errors in the response.

A directional edge.

An identity that appears in an access control list.

A GCP resource that appears in an access control list.

Asset service definition.

Asset service definition.

A pager for iterating through list_assets requests.

This class thinly wraps an initial ListAssetsResponse object, and provides an __aiter__ method to iterate through its assets field.

If there are more pages, the __aiter__ method will make additional ListAssets requests and continue to iterate through the assets field on the corresponding responses.

All the usual ListAssetsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

A pager for iterating through list_assets requests.

This class thinly wraps an initial ListAssetsResponse object, and provides an __iter__ method to iterate through its assets field.

If there are more pages, the __iter__ method will make additional ListAssets requests and continue to iterate through the assets field on the corresponding responses.

All the usual ListAssetsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

An asset in Google Cloud. An asset can be any resource in the Google Cloud resource hierarchy <https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy>, a resource outside the Google Cloud resource hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy (e.g. IAM policy). See Supported asset types <https://cloud.google.com/asset-inventory/docs/supported-asset-types> for more information.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Asset content type.

Values: CONTENT_TYPE_UNSPECIFIED (0): Unspecified content type. RESOURCE (1): Resource metadata. IAM_POLICY (2): The actual IAM policy set on a resource. ORG_POLICY (4): The organization policy set on an asset. ACCESS_POLICY (5): The Access Context Manager policy set on an asset.

ListAssets request.

ListAssets response.

A representation of a Google Cloud resource.

API documentation for asset_v1.services.asset_service.pagers module.

API documentation for asset_v1p1beta1.services.asset_service.pagers module.

API documentation for asset_v1p5beta1.services.asset_service.pagers module.