| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 1 | <html><body> |
| 2 | <style> |
| 3 | |
| 4 | body, h1, h2, h3, div, span, p, pre, a { |
| 5 | margin: 0; |
| 6 | padding: 0; |
| 7 | border: 0; |
| 8 | font-weight: inherit; |
| 9 | font-style: inherit; |
| 10 | font-size: 100%; |
| 11 | font-family: inherit; |
| 12 | vertical-align: baseline; |
| 13 | } |
| 14 | |
| 15 | body { |
| 16 | font-size: 13px; |
| 17 | padding: 1em; |
| 18 | } |
| 19 | |
| 20 | h1 { |
| 21 | font-size: 26px; |
| 22 | margin-bottom: 1em; |
| 23 | } |
| 24 | |
| 25 | h2 { |
| 26 | font-size: 24px; |
| 27 | margin-bottom: 1em; |
| 28 | } |
| 29 | |
| 30 | h3 { |
| 31 | font-size: 20px; |
| 32 | margin-bottom: 1em; |
| 33 | margin-top: 1em; |
| 34 | } |
| 35 | |
| 36 | pre, code { |
| 37 | line-height: 1.5; |
| 38 | font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace; |
| 39 | } |
| 40 | |
| 41 | pre { |
| 42 | margin-top: 0.5em; |
| 43 | } |
| 44 | |
| 45 | h1, h2, h3, p { |
| 46 | font-family: Arial, sans serif; |
| 47 | } |
| 48 | |
| 49 | h1, h2, h3 { |
| 50 | border-bottom: solid #CCC 1px; |
| 51 | } |
| 52 | |
| 53 | .toc_element { |
| 54 | margin-top: 0.5em; |
| 55 | } |
| 56 | |
| 57 | .firstline { |
| 58 | margin-left: 2 em; |
| 59 | } |
| 60 | |
| 61 | .method { |
| 62 | margin-top: 1em; |
| 63 | border: solid 1px #CCC; |
| 64 | padding: 1em; |
| 65 | background: #EEE; |
| 66 | } |
| 67 | |
| 68 | .details { |
| 69 | font-weight: bold; |
| 70 | font-size: 14px; |
| 71 | } |
| 72 | |
| 73 | </style> |
| 74 | |
| 75 | <h1><a href="accesscontextmanager_v1.html">Access Context Manager API</a> . <a href="accesscontextmanager_v1.accessPolicies.html">accessPolicies</a> . <a href="accesscontextmanager_v1.accessPolicies.servicePerimeters.html">servicePerimeters</a></h1> |
| 76 | <h2>Instance Methods</h2> |
| 77 | <p class="toc_element"> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 78 | <code><a href="#commit">commit(parent, body=None, x__xgafv=None)</a></code></p> |
| 79 | <p class="firstline">Commit the dry-run spec for all the Service Perimeters in an</p> |
| 80 | <p class="toc_element"> |
| 81 | <code><a href="#create">create(parent, body=None, x__xgafv=None)</a></code></p> |
| 82 | <p class="firstline">Create a Service Perimeter. The</p> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 83 | <p class="toc_element"> |
| 84 | <code><a href="#delete">delete(name, x__xgafv=None)</a></code></p> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 85 | <p class="firstline">Delete a Service Perimeter by resource</p> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 86 | <p class="toc_element"> |
| 87 | <code><a href="#get">get(name, x__xgafv=None)</a></code></p> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 88 | <p class="firstline">Get a Service Perimeter by resource</p> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 89 | <p class="toc_element"> |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 90 | <code><a href="#list">list(parent, pageToken=None, pageSize=None, x__xgafv=None)</a></code></p> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 91 | <p class="firstline">List all Service Perimeters for an</p> |
| 92 | <p class="toc_element"> |
| 93 | <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p> |
| 94 | <p class="firstline">Retrieves the next page of results.</p> |
| 95 | <p class="toc_element"> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 96 | <code><a href="#patch">patch(name, body=None, updateMask=None, x__xgafv=None)</a></code></p> |
| 97 | <p class="firstline">Update a Service Perimeter. The</p> |
| 98 | <p class="toc_element"> |
| 99 | <code><a href="#replaceAll">replaceAll(parent, body=None, x__xgafv=None)</a></code></p> |
| 100 | <p class="firstline">Replace all existing Service Perimeters in an</p> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 101 | <h3>Method Details</h3> |
| 102 | <div class="method"> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 103 | <code class="details" id="commit">commit(parent, body=None, x__xgafv=None)</code> |
| 104 | <pre>Commit the dry-run spec for all the Service Perimeters in an |
| 105 | Access Policy. |
| 106 | A commit operation on a Service Perimeter involves copying its `spec` field |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 107 | to that Service Perimeter's `status` field. Only Service Perimeters with |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 108 | `use_explicit_dry_run_spec` field set to true are affected by a commit |
| 109 | operation. The longrunning operation from this RPC will have a successful |
| 110 | status once the dry-run specs for all the Service Perimeters have been |
| 111 | committed. If a commit fails, it will cause the longrunning operation to |
| 112 | return an error response and the entire commit operation will be cancelled. |
| 113 | When successful, Operation.response field will contain |
| 114 | CommitServicePerimetersResponse. The `dry_run` and the `spec` fields will |
| 115 | be cleared after a successful commit operation. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 116 | |
| 117 | Args: |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 118 | parent: string, Required. Resource name for the parent Access Policy which owns all |
| 119 | Service Perimeters in scope for |
| 120 | the commit operation. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 121 | |
| 122 | Format: `accessPolicies/{policy_id}` (required) |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 123 | body: object, The request body. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 124 | The object takes the form of: |
| 125 | |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 126 | { # A request to commit dry-run specs in all Service Perimeters belonging to |
| 127 | # an Access Policy. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 128 | "etag": "A String", # Optional. The etag for the version of the Access Policy that this |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 129 | # commit operation is to be performed on. If, at the time of commit, the |
| 130 | # etag for the Access Policy stored in Access Context Manager is different |
| 131 | # from the specified etag, then the commit operation will not be performed |
| 132 | # and the call will fail. This field is not required. If etag is not |
| 133 | # provided, the operation will be performed as if a valid etag is provided. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 134 | } |
| 135 | |
| 136 | x__xgafv: string, V1 error format. |
| 137 | Allowed values |
| 138 | 1 - v1 error format |
| 139 | 2 - v2 error format |
| 140 | |
| 141 | Returns: |
| 142 | An object of the form: |
| 143 | |
| 144 | { # This resource represents a long-running operation that is the result of a |
| 145 | # network API call. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 146 | "done": True or False, # If the value is `false`, it means the operation is still in progress. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 147 | # If `true`, the operation is completed, and either `error` or `response` is |
| 148 | # available. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 149 | "response": { # The normal response of the operation in case of success. If the original |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 150 | # method returns no data on success, such as `Delete`, the response is |
| 151 | # `google.protobuf.Empty`. If the original method is standard |
| 152 | # `Get`/`Create`/`Update`, the response should be the resource. For other |
| 153 | # methods, the response should have the type `XxxResponse`, where `Xxx` |
| 154 | # is the original method name. For example, if the original method name |
| 155 | # is `TakeSnapshot()`, the inferred response type is |
| 156 | # `TakeSnapshotResponse`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 157 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 158 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 159 | "name": "A String", # The server-assigned name, which is only unique within the same service that |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 160 | # originally returns it. If you use the default HTTP mapping, the |
| 161 | # `name` should be a resource name ending with `operations/{unique_id}`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 162 | "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation. |
| 163 | # different programming environments, including REST APIs and RPC APIs. It is |
| 164 | # used by [gRPC](https://github.com/grpc). Each `Status` message contains |
| 165 | # three pieces of data: error code, error message, and error details. |
| 166 | # |
| 167 | # You can find out more about this error model and how to work with it in the |
| 168 | # [API Design Guide](https://cloud.google.com/apis/design/errors). |
| 169 | "code": 42, # The status code, which should be an enum value of google.rpc.Code. |
| 170 | "message": "A String", # A developer-facing error message, which should be in English. Any |
| 171 | # user-facing error message should be localized and sent in the |
| 172 | # google.rpc.Status.details field, or localized by the client. |
| 173 | "details": [ # A list of messages that carry the error details. There is a common set of |
| 174 | # message types for APIs to use. |
| 175 | { |
| 176 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 177 | }, |
| 178 | ], |
| 179 | }, |
| 180 | "metadata": { # Service-specific metadata associated with the operation. It typically |
| 181 | # contains progress information and common metadata such as create time. |
| 182 | # Some services might not provide such metadata. Any method that returns a |
| 183 | # long-running operation should document the metadata type, if any. |
| 184 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 185 | }, |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 186 | }</pre> |
| 187 | </div> |
| 188 | |
| 189 | <div class="method"> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 190 | <code class="details" id="create">create(parent, body=None, x__xgafv=None)</code> |
| 191 | <pre>Create a Service Perimeter. The |
| 192 | longrunning operation from this RPC will have a successful status once the |
| 193 | Service Perimeter has |
| 194 | propagated to long-lasting storage. Service Perimeters containing |
| 195 | errors will result in an error response for the first error encountered. |
| 196 | |
| 197 | Args: |
| 198 | parent: string, Required. Resource name for the access policy which owns this Service |
| 199 | Perimeter. |
| 200 | |
| 201 | Format: `accessPolicies/{policy_id}` (required) |
| 202 | body: object, The request body. |
| 203 | The object takes the form of: |
| 204 | |
| 205 | { # `ServicePerimeter` describes a set of Google Cloud resources which can freely |
| 206 | # import and export data amongst themselves, but not export outside of the |
| 207 | # `ServicePerimeter`. If a request with a source within this `ServicePerimeter` |
| 208 | # has a target outside of the `ServicePerimeter`, the request will be blocked. |
| 209 | # Otherwise the request is allowed. There are two types of Service Perimeter - |
| 210 | # Regular and Bridge. Regular Service Perimeters cannot overlap, a single |
| 211 | # Google Cloud project can only belong to a single regular Service Perimeter. |
| 212 | # Service Perimeter Bridges can contain only Google Cloud projects as members, |
| 213 | # a single Google Cloud project may belong to multiple Service Perimeter |
| 214 | # Bridges. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 215 | "useExplicitDryRunSpec": True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly |
| 216 | # exists for all Service Perimeters, and that spec is identical to the |
| 217 | # status for those Service Perimeters. When this flag is set, it inhibits the |
| 218 | # generation of the implicit spec, thereby allowing the user to explicitly |
| 219 | # provide a configuration ("spec") to use in a dry-run version of the Service |
| 220 | # Perimeter. This allows the user to test changes to the enforced config |
| 221 | # ("status") without actually enforcing them. This testing is done through |
| 222 | # analyzing the differences between currently enforced and suggested |
| 223 | # restrictions. use_explicit_dry_run_spec must bet set to True if any of the |
| 224 | # fields in the spec are set to non-default values. |
| 225 | "description": "A String", # Description of the `ServicePerimeter` and its use. Does not affect |
| 226 | # behavior. |
| 227 | "status": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources, |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 228 | # restricted services and access levels that determine perimeter |
| 229 | # content and boundaries. |
| 230 | # describe specific Service Perimeter configuration. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 231 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 232 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 233 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 234 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 235 | # listed, resources within the perimeter can only be accessed via Google |
| 236 | # Cloud calls with request origins within the perimeter. Example: |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 237 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 238 | # For Service Perimeter Bridge, must be empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 239 | "A String", |
| 240 | ], |
| 241 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 242 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 243 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 244 | # access restrictions. |
| 245 | "A String", |
| 246 | ], |
| 247 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 248 | # Perimeter. |
| 249 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 250 | # APIs specified in 'allowed_services'. |
| 251 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 252 | # unless 'enable_restriction' is True. |
| 253 | "A String", |
| 254 | ], |
| 255 | }, |
| 256 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 257 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 258 | "A String", |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 259 | ], |
| 260 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 261 | "spec": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration |
| 262 | # allows to specify and test ServicePerimeter configuration without enforcing |
| 263 | # actual access restrictions. Only allowed to be set when the |
| 264 | # "use_explicit_dry_run_spec" flag is set. |
| 265 | # describe specific Service Perimeter configuration. |
| 266 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| 267 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 268 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 269 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 270 | # listed, resources within the perimeter can only be accessed via Google |
| 271 | # Cloud calls with request origins within the perimeter. Example: |
| 272 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| 273 | # For Service Perimeter Bridge, must be empty. |
| 274 | "A String", |
| 275 | ], |
| 276 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 277 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 278 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 279 | # access restrictions. |
| 280 | "A String", |
| 281 | ], |
| 282 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 283 | # Perimeter. |
| 284 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 285 | # APIs specified in 'allowed_services'. |
| 286 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 287 | # unless 'enable_restriction' is True. |
| 288 | "A String", |
| 289 | ], |
| 290 | }, |
| 291 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 292 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 293 | "A String", |
| 294 | ], |
| 295 | }, |
| 296 | "name": "A String", # Required. Resource name for the ServicePerimeter. The `short_name` |
| 297 | # component must begin with a letter and only include alphanumeric and '_'. |
| 298 | # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}` |
| 299 | "perimeterType": "A String", # Perimeter type indicator. A single project is |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 300 | # allowed to be a member of single regular perimeter, but multiple service |
| 301 | # perimeter bridges. A project cannot be a included in a perimeter bridge |
| 302 | # without being included in regular perimeter. For perimeter bridges, |
| 303 | # the restricted service list as well as access level lists must be |
| 304 | # empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 305 | "title": "A String", # Human readable title. Must be unique within the Policy. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 306 | } |
| 307 | |
| 308 | x__xgafv: string, V1 error format. |
| 309 | Allowed values |
| 310 | 1 - v1 error format |
| 311 | 2 - v2 error format |
| 312 | |
| 313 | Returns: |
| 314 | An object of the form: |
| 315 | |
| 316 | { # This resource represents a long-running operation that is the result of a |
| 317 | # network API call. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 318 | "done": True or False, # If the value is `false`, it means the operation is still in progress. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 319 | # If `true`, the operation is completed, and either `error` or `response` is |
| 320 | # available. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 321 | "response": { # The normal response of the operation in case of success. If the original |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 322 | # method returns no data on success, such as `Delete`, the response is |
| 323 | # `google.protobuf.Empty`. If the original method is standard |
| 324 | # `Get`/`Create`/`Update`, the response should be the resource. For other |
| 325 | # methods, the response should have the type `XxxResponse`, where `Xxx` |
| 326 | # is the original method name. For example, if the original method name |
| 327 | # is `TakeSnapshot()`, the inferred response type is |
| 328 | # `TakeSnapshotResponse`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 329 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 330 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 331 | "name": "A String", # The server-assigned name, which is only unique within the same service that |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 332 | # originally returns it. If you use the default HTTP mapping, the |
| 333 | # `name` should be a resource name ending with `operations/{unique_id}`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 334 | "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation. |
| 335 | # different programming environments, including REST APIs and RPC APIs. It is |
| 336 | # used by [gRPC](https://github.com/grpc). Each `Status` message contains |
| 337 | # three pieces of data: error code, error message, and error details. |
| 338 | # |
| 339 | # You can find out more about this error model and how to work with it in the |
| 340 | # [API Design Guide](https://cloud.google.com/apis/design/errors). |
| 341 | "code": 42, # The status code, which should be an enum value of google.rpc.Code. |
| 342 | "message": "A String", # A developer-facing error message, which should be in English. Any |
| 343 | # user-facing error message should be localized and sent in the |
| 344 | # google.rpc.Status.details field, or localized by the client. |
| 345 | "details": [ # A list of messages that carry the error details. There is a common set of |
| 346 | # message types for APIs to use. |
| 347 | { |
| 348 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 349 | }, |
| 350 | ], |
| 351 | }, |
| 352 | "metadata": { # Service-specific metadata associated with the operation. It typically |
| 353 | # contains progress information and common metadata such as create time. |
| 354 | # Some services might not provide such metadata. Any method that returns a |
| 355 | # long-running operation should document the metadata type, if any. |
| 356 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 357 | }, |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 358 | }</pre> |
| 359 | </div> |
| 360 | |
| 361 | <div class="method"> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 362 | <code class="details" id="delete">delete(name, x__xgafv=None)</code> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 363 | <pre>Delete a Service Perimeter by resource |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 364 | name. The longrunning operation from this RPC will have a successful status |
| 365 | once the Service Perimeter has been |
| 366 | removed from long-lasting storage. |
| 367 | |
| 368 | Args: |
| 369 | name: string, Required. Resource name for the Service Perimeter. |
| 370 | |
| 371 | Format: |
| 372 | `accessPolicies/{policy_id}/servicePerimeters/{service_perimeter_id}` (required) |
| 373 | x__xgafv: string, V1 error format. |
| 374 | Allowed values |
| 375 | 1 - v1 error format |
| 376 | 2 - v2 error format |
| 377 | |
| 378 | Returns: |
| 379 | An object of the form: |
| 380 | |
| 381 | { # This resource represents a long-running operation that is the result of a |
| 382 | # network API call. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 383 | "done": True or False, # If the value is `false`, it means the operation is still in progress. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 384 | # If `true`, the operation is completed, and either `error` or `response` is |
| 385 | # available. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 386 | "response": { # The normal response of the operation in case of success. If the original |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 387 | # method returns no data on success, such as `Delete`, the response is |
| 388 | # `google.protobuf.Empty`. If the original method is standard |
| 389 | # `Get`/`Create`/`Update`, the response should be the resource. For other |
| 390 | # methods, the response should have the type `XxxResponse`, where `Xxx` |
| 391 | # is the original method name. For example, if the original method name |
| 392 | # is `TakeSnapshot()`, the inferred response type is |
| 393 | # `TakeSnapshotResponse`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 394 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 395 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 396 | "name": "A String", # The server-assigned name, which is only unique within the same service that |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 397 | # originally returns it. If you use the default HTTP mapping, the |
| 398 | # `name` should be a resource name ending with `operations/{unique_id}`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 399 | "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation. |
| 400 | # different programming environments, including REST APIs and RPC APIs. It is |
| 401 | # used by [gRPC](https://github.com/grpc). Each `Status` message contains |
| 402 | # three pieces of data: error code, error message, and error details. |
| 403 | # |
| 404 | # You can find out more about this error model and how to work with it in the |
| 405 | # [API Design Guide](https://cloud.google.com/apis/design/errors). |
| 406 | "code": 42, # The status code, which should be an enum value of google.rpc.Code. |
| 407 | "message": "A String", # A developer-facing error message, which should be in English. Any |
| 408 | # user-facing error message should be localized and sent in the |
| 409 | # google.rpc.Status.details field, or localized by the client. |
| 410 | "details": [ # A list of messages that carry the error details. There is a common set of |
| 411 | # message types for APIs to use. |
| 412 | { |
| 413 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 414 | }, |
| 415 | ], |
| 416 | }, |
| 417 | "metadata": { # Service-specific metadata associated with the operation. It typically |
| 418 | # contains progress information and common metadata such as create time. |
| 419 | # Some services might not provide such metadata. Any method that returns a |
| 420 | # long-running operation should document the metadata type, if any. |
| 421 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 422 | }, |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 423 | }</pre> |
| 424 | </div> |
| 425 | |
| 426 | <div class="method"> |
| 427 | <code class="details" id="get">get(name, x__xgafv=None)</code> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 428 | <pre>Get a Service Perimeter by resource |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 429 | name. |
| 430 | |
| 431 | Args: |
| 432 | name: string, Required. Resource name for the Service Perimeter. |
| 433 | |
| 434 | Format: |
| 435 | `accessPolicies/{policy_id}/servicePerimeters/{service_perimeters_id}` (required) |
| 436 | x__xgafv: string, V1 error format. |
| 437 | Allowed values |
| 438 | 1 - v1 error format |
| 439 | 2 - v2 error format |
| 440 | |
| 441 | Returns: |
| 442 | An object of the form: |
| 443 | |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 444 | { # `ServicePerimeter` describes a set of Google Cloud resources which can freely |
| 445 | # import and export data amongst themselves, but not export outside of the |
| 446 | # `ServicePerimeter`. If a request with a source within this `ServicePerimeter` |
| 447 | # has a target outside of the `ServicePerimeter`, the request will be blocked. |
| 448 | # Otherwise the request is allowed. There are two types of Service Perimeter - |
| 449 | # Regular and Bridge. Regular Service Perimeters cannot overlap, a single |
| 450 | # Google Cloud project can only belong to a single regular Service Perimeter. |
| 451 | # Service Perimeter Bridges can contain only Google Cloud projects as members, |
| 452 | # a single Google Cloud project may belong to multiple Service Perimeter |
| 453 | # Bridges. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 454 | "useExplicitDryRunSpec": True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly |
| 455 | # exists for all Service Perimeters, and that spec is identical to the |
| 456 | # status for those Service Perimeters. When this flag is set, it inhibits the |
| 457 | # generation of the implicit spec, thereby allowing the user to explicitly |
| 458 | # provide a configuration ("spec") to use in a dry-run version of the Service |
| 459 | # Perimeter. This allows the user to test changes to the enforced config |
| 460 | # ("status") without actually enforcing them. This testing is done through |
| 461 | # analyzing the differences between currently enforced and suggested |
| 462 | # restrictions. use_explicit_dry_run_spec must bet set to True if any of the |
| 463 | # fields in the spec are set to non-default values. |
| 464 | "description": "A String", # Description of the `ServicePerimeter` and its use. Does not affect |
| 465 | # behavior. |
| 466 | "status": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources, |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 467 | # restricted services and access levels that determine perimeter |
| 468 | # content and boundaries. |
| 469 | # describe specific Service Perimeter configuration. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 470 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 471 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 472 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 473 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 474 | # listed, resources within the perimeter can only be accessed via Google |
| 475 | # Cloud calls with request origins within the perimeter. Example: |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 476 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 477 | # For Service Perimeter Bridge, must be empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 478 | "A String", |
| 479 | ], |
| 480 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 481 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 482 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 483 | # access restrictions. |
| 484 | "A String", |
| 485 | ], |
| 486 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 487 | # Perimeter. |
| 488 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 489 | # APIs specified in 'allowed_services'. |
| 490 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 491 | # unless 'enable_restriction' is True. |
| 492 | "A String", |
| 493 | ], |
| 494 | }, |
| 495 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 496 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 497 | "A String", |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 498 | ], |
| 499 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 500 | "spec": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration |
| 501 | # allows to specify and test ServicePerimeter configuration without enforcing |
| 502 | # actual access restrictions. Only allowed to be set when the |
| 503 | # "use_explicit_dry_run_spec" flag is set. |
| 504 | # describe specific Service Perimeter configuration. |
| 505 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| 506 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 507 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 508 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 509 | # listed, resources within the perimeter can only be accessed via Google |
| 510 | # Cloud calls with request origins within the perimeter. Example: |
| 511 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| 512 | # For Service Perimeter Bridge, must be empty. |
| 513 | "A String", |
| 514 | ], |
| 515 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 516 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 517 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 518 | # access restrictions. |
| 519 | "A String", |
| 520 | ], |
| 521 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 522 | # Perimeter. |
| 523 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 524 | # APIs specified in 'allowed_services'. |
| 525 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 526 | # unless 'enable_restriction' is True. |
| 527 | "A String", |
| 528 | ], |
| 529 | }, |
| 530 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 531 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 532 | "A String", |
| 533 | ], |
| 534 | }, |
| 535 | "name": "A String", # Required. Resource name for the ServicePerimeter. The `short_name` |
| 536 | # component must begin with a letter and only include alphanumeric and '_'. |
| 537 | # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}` |
| 538 | "perimeterType": "A String", # Perimeter type indicator. A single project is |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 539 | # allowed to be a member of single regular perimeter, but multiple service |
| 540 | # perimeter bridges. A project cannot be a included in a perimeter bridge |
| 541 | # without being included in regular perimeter. For perimeter bridges, |
| 542 | # the restricted service list as well as access level lists must be |
| 543 | # empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 544 | "title": "A String", # Human readable title. Must be unique within the Policy. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 545 | }</pre> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 546 | </div> |
| 547 | |
| 548 | <div class="method"> |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 549 | <code class="details" id="list">list(parent, pageToken=None, pageSize=None, x__xgafv=None)</code> |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 550 | <pre>List all Service Perimeters for an |
| 551 | access policy. |
| 552 | |
| 553 | Args: |
| 554 | parent: string, Required. Resource name for the access policy to list Service Perimeters from. |
| 555 | |
| 556 | Format: |
| 557 | `accessPolicies/{policy_id}` (required) |
| 558 | pageToken: string, Next page token for the next batch of Service Perimeter instances. |
| 559 | Defaults to the first page of results. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 560 | pageSize: integer, Number of Service Perimeters to include |
| 561 | in the list. Default 100. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 562 | x__xgafv: string, V1 error format. |
| 563 | Allowed values |
| 564 | 1 - v1 error format |
| 565 | 2 - v2 error format |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 566 | |
| 567 | Returns: |
| 568 | An object of the form: |
| 569 | |
| 570 | { # A response to `ListServicePerimetersRequest`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 571 | "nextPageToken": "A String", # The pagination token to retrieve the next page of results. If the value is |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 572 | # empty, no further results remain. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 573 | "servicePerimeters": [ # List of the Service Perimeter instances. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 574 | { # `ServicePerimeter` describes a set of Google Cloud resources which can freely |
| 575 | # import and export data amongst themselves, but not export outside of the |
| 576 | # `ServicePerimeter`. If a request with a source within this `ServicePerimeter` |
| 577 | # has a target outside of the `ServicePerimeter`, the request will be blocked. |
| 578 | # Otherwise the request is allowed. There are two types of Service Perimeter - |
| 579 | # Regular and Bridge. Regular Service Perimeters cannot overlap, a single |
| 580 | # Google Cloud project can only belong to a single regular Service Perimeter. |
| 581 | # Service Perimeter Bridges can contain only Google Cloud projects as members, |
| 582 | # a single Google Cloud project may belong to multiple Service Perimeter |
| 583 | # Bridges. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 584 | "useExplicitDryRunSpec": True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly |
| 585 | # exists for all Service Perimeters, and that spec is identical to the |
| 586 | # status for those Service Perimeters. When this flag is set, it inhibits the |
| 587 | # generation of the implicit spec, thereby allowing the user to explicitly |
| 588 | # provide a configuration ("spec") to use in a dry-run version of the Service |
| 589 | # Perimeter. This allows the user to test changes to the enforced config |
| 590 | # ("status") without actually enforcing them. This testing is done through |
| 591 | # analyzing the differences between currently enforced and suggested |
| 592 | # restrictions. use_explicit_dry_run_spec must bet set to True if any of the |
| 593 | # fields in the spec are set to non-default values. |
| 594 | "description": "A String", # Description of the `ServicePerimeter` and its use. Does not affect |
| 595 | # behavior. |
| 596 | "status": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources, |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 597 | # restricted services and access levels that determine perimeter |
| 598 | # content and boundaries. |
| 599 | # describe specific Service Perimeter configuration. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 600 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 601 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 602 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 603 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 604 | # listed, resources within the perimeter can only be accessed via Google |
| 605 | # Cloud calls with request origins within the perimeter. Example: |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 606 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 607 | # For Service Perimeter Bridge, must be empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 608 | "A String", |
| 609 | ], |
| 610 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 611 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 612 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 613 | # access restrictions. |
| 614 | "A String", |
| 615 | ], |
| 616 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 617 | # Perimeter. |
| 618 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 619 | # APIs specified in 'allowed_services'. |
| 620 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 621 | # unless 'enable_restriction' is True. |
| 622 | "A String", |
| 623 | ], |
| 624 | }, |
| 625 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 626 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 627 | "A String", |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 628 | ], |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 629 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 630 | "spec": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration |
| 631 | # allows to specify and test ServicePerimeter configuration without enforcing |
| 632 | # actual access restrictions. Only allowed to be set when the |
| 633 | # "use_explicit_dry_run_spec" flag is set. |
| 634 | # describe specific Service Perimeter configuration. |
| 635 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| 636 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 637 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 638 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 639 | # listed, resources within the perimeter can only be accessed via Google |
| 640 | # Cloud calls with request origins within the perimeter. Example: |
| 641 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| 642 | # For Service Perimeter Bridge, must be empty. |
| 643 | "A String", |
| 644 | ], |
| 645 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 646 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 647 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 648 | # access restrictions. |
| 649 | "A String", |
| 650 | ], |
| 651 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 652 | # Perimeter. |
| 653 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 654 | # APIs specified in 'allowed_services'. |
| 655 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 656 | # unless 'enable_restriction' is True. |
| 657 | "A String", |
| 658 | ], |
| 659 | }, |
| 660 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 661 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 662 | "A String", |
| 663 | ], |
| 664 | }, |
| 665 | "name": "A String", # Required. Resource name for the ServicePerimeter. The `short_name` |
| 666 | # component must begin with a letter and only include alphanumeric and '_'. |
| 667 | # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}` |
| 668 | "perimeterType": "A String", # Perimeter type indicator. A single project is |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 669 | # allowed to be a member of single regular perimeter, but multiple service |
| 670 | # perimeter bridges. A project cannot be a included in a perimeter bridge |
| 671 | # without being included in regular perimeter. For perimeter bridges, |
| 672 | # the restricted service list as well as access level lists must be |
| 673 | # empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 674 | "title": "A String", # Human readable title. Must be unique within the Policy. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 675 | }, |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 676 | ], |
| 677 | }</pre> |
| 678 | </div> |
| 679 | |
| 680 | <div class="method"> |
| 681 | <code class="details" id="list_next">list_next(previous_request, previous_response)</code> |
| 682 | <pre>Retrieves the next page of results. |
| 683 | |
| 684 | Args: |
| 685 | previous_request: The request for the previous page. (required) |
| 686 | previous_response: The response from the request for the previous page. (required) |
| 687 | |
| 688 | Returns: |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 689 | A request object that you can call 'execute()' on to request the next |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 690 | page. Returns None if there are no more items in the collection. |
| 691 | </pre> |
| 692 | </div> |
| 693 | |
| 694 | <div class="method"> |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 695 | <code class="details" id="patch">patch(name, body=None, updateMask=None, x__xgafv=None)</code> |
| 696 | <pre>Update a Service Perimeter. The |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 697 | longrunning operation from this RPC will have a successful status once the |
| 698 | changes to the Service Perimeter have |
| 699 | propagated to long-lasting storage. Service Perimeter containing |
| 700 | errors will result in an error response for the first error encountered. |
| 701 | |
| 702 | Args: |
| 703 | name: string, Required. Resource name for the ServicePerimeter. The `short_name` |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 704 | component must begin with a letter and only include alphanumeric and '_'. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 705 | Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}` (required) |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 706 | body: object, The request body. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 707 | The object takes the form of: |
| 708 | |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 709 | { # `ServicePerimeter` describes a set of Google Cloud resources which can freely |
| 710 | # import and export data amongst themselves, but not export outside of the |
| 711 | # `ServicePerimeter`. If a request with a source within this `ServicePerimeter` |
| 712 | # has a target outside of the `ServicePerimeter`, the request will be blocked. |
| 713 | # Otherwise the request is allowed. There are two types of Service Perimeter - |
| 714 | # Regular and Bridge. Regular Service Perimeters cannot overlap, a single |
| 715 | # Google Cloud project can only belong to a single regular Service Perimeter. |
| 716 | # Service Perimeter Bridges can contain only Google Cloud projects as members, |
| 717 | # a single Google Cloud project may belong to multiple Service Perimeter |
| 718 | # Bridges. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 719 | "useExplicitDryRunSpec": True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly |
| 720 | # exists for all Service Perimeters, and that spec is identical to the |
| 721 | # status for those Service Perimeters. When this flag is set, it inhibits the |
| 722 | # generation of the implicit spec, thereby allowing the user to explicitly |
| 723 | # provide a configuration ("spec") to use in a dry-run version of the Service |
| 724 | # Perimeter. This allows the user to test changes to the enforced config |
| 725 | # ("status") without actually enforcing them. This testing is done through |
| 726 | # analyzing the differences between currently enforced and suggested |
| 727 | # restrictions. use_explicit_dry_run_spec must bet set to True if any of the |
| 728 | # fields in the spec are set to non-default values. |
| 729 | "description": "A String", # Description of the `ServicePerimeter` and its use. Does not affect |
| 730 | # behavior. |
| 731 | "status": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources, |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 732 | # restricted services and access levels that determine perimeter |
| 733 | # content and boundaries. |
| 734 | # describe specific Service Perimeter configuration. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 735 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 736 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 737 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 738 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 739 | # listed, resources within the perimeter can only be accessed via Google |
| 740 | # Cloud calls with request origins within the perimeter. Example: |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 741 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 742 | # For Service Perimeter Bridge, must be empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 743 | "A String", |
| 744 | ], |
| 745 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 746 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 747 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 748 | # access restrictions. |
| 749 | "A String", |
| 750 | ], |
| 751 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 752 | # Perimeter. |
| 753 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 754 | # APIs specified in 'allowed_services'. |
| 755 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 756 | # unless 'enable_restriction' is True. |
| 757 | "A String", |
| 758 | ], |
| 759 | }, |
| 760 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 761 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 762 | "A String", |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 763 | ], |
| 764 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 765 | "spec": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration |
| 766 | # allows to specify and test ServicePerimeter configuration without enforcing |
| 767 | # actual access restrictions. Only allowed to be set when the |
| 768 | # "use_explicit_dry_run_spec" flag is set. |
| 769 | # describe specific Service Perimeter configuration. |
| 770 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| 771 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 772 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 773 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 774 | # listed, resources within the perimeter can only be accessed via Google |
| 775 | # Cloud calls with request origins within the perimeter. Example: |
| 776 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| 777 | # For Service Perimeter Bridge, must be empty. |
| 778 | "A String", |
| 779 | ], |
| 780 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 781 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 782 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 783 | # access restrictions. |
| 784 | "A String", |
| 785 | ], |
| 786 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 787 | # Perimeter. |
| 788 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 789 | # APIs specified in 'allowed_services'. |
| 790 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 791 | # unless 'enable_restriction' is True. |
| 792 | "A String", |
| 793 | ], |
| 794 | }, |
| 795 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 796 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 797 | "A String", |
| 798 | ], |
| 799 | }, |
| 800 | "name": "A String", # Required. Resource name for the ServicePerimeter. The `short_name` |
| 801 | # component must begin with a letter and only include alphanumeric and '_'. |
| 802 | # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}` |
| 803 | "perimeterType": "A String", # Perimeter type indicator. A single project is |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 804 | # allowed to be a member of single regular perimeter, but multiple service |
| 805 | # perimeter bridges. A project cannot be a included in a perimeter bridge |
| 806 | # without being included in regular perimeter. For perimeter bridges, |
| 807 | # the restricted service list as well as access level lists must be |
| 808 | # empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 809 | "title": "A String", # Human readable title. Must be unique within the Policy. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 810 | } |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 811 | |
| 812 | updateMask: string, Required. Mask to control which fields get updated. Must be non-empty. |
| 813 | x__xgafv: string, V1 error format. |
| 814 | Allowed values |
| 815 | 1 - v1 error format |
| 816 | 2 - v2 error format |
| 817 | |
| 818 | Returns: |
| 819 | An object of the form: |
| 820 | |
| 821 | { # This resource represents a long-running operation that is the result of a |
| 822 | # network API call. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 823 | "done": True or False, # If the value is `false`, it means the operation is still in progress. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 824 | # If `true`, the operation is completed, and either `error` or `response` is |
| 825 | # available. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 826 | "response": { # The normal response of the operation in case of success. If the original |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 827 | # method returns no data on success, such as `Delete`, the response is |
| 828 | # `google.protobuf.Empty`. If the original method is standard |
| 829 | # `Get`/`Create`/`Update`, the response should be the resource. For other |
| 830 | # methods, the response should have the type `XxxResponse`, where `Xxx` |
| 831 | # is the original method name. For example, if the original method name |
| 832 | # is `TakeSnapshot()`, the inferred response type is |
| 833 | # `TakeSnapshotResponse`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 834 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 835 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 836 | "name": "A String", # The server-assigned name, which is only unique within the same service that |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 837 | # originally returns it. If you use the default HTTP mapping, the |
| 838 | # `name` should be a resource name ending with `operations/{unique_id}`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 839 | "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation. |
| 840 | # different programming environments, including REST APIs and RPC APIs. It is |
| 841 | # used by [gRPC](https://github.com/grpc). Each `Status` message contains |
| 842 | # three pieces of data: error code, error message, and error details. |
| 843 | # |
| 844 | # You can find out more about this error model and how to work with it in the |
| 845 | # [API Design Guide](https://cloud.google.com/apis/design/errors). |
| 846 | "code": 42, # The status code, which should be an enum value of google.rpc.Code. |
| 847 | "message": "A String", # A developer-facing error message, which should be in English. Any |
| 848 | # user-facing error message should be localized and sent in the |
| 849 | # google.rpc.Status.details field, or localized by the client. |
| 850 | "details": [ # A list of messages that carry the error details. There is a common set of |
| 851 | # message types for APIs to use. |
| 852 | { |
| 853 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 854 | }, |
| 855 | ], |
| 856 | }, |
| 857 | "metadata": { # Service-specific metadata associated with the operation. It typically |
| 858 | # contains progress information and common metadata such as create time. |
| 859 | # Some services might not provide such metadata. Any method that returns a |
| 860 | # long-running operation should document the metadata type, if any. |
| 861 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 862 | }, |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 863 | }</pre> |
| 864 | </div> |
| 865 | |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 866 | <div class="method"> |
| 867 | <code class="details" id="replaceAll">replaceAll(parent, body=None, x__xgafv=None)</code> |
| 868 | <pre>Replace all existing Service Perimeters in an |
| 869 | Access Policy |
| 870 | with the Service Perimeters provided. |
| 871 | This is done atomically. The longrunning operation from this |
| 872 | RPC will have a successful status once all replacements have propagated to |
| 873 | long-lasting storage. Replacements containing errors will result in an |
| 874 | error response for the first error encountered. Replacement will be |
| 875 | cancelled on error, existing Service Perimeters will not be |
| 876 | affected. Operation.response field will contain |
| 877 | ReplaceServicePerimetersResponse. |
| 878 | |
| 879 | Args: |
| 880 | parent: string, Required. Resource name for the access policy which owns these |
| 881 | Service Perimeters. |
| 882 | |
| 883 | Format: `accessPolicies/{policy_id}` (required) |
| 884 | body: object, The request body. |
| 885 | The object takes the form of: |
| 886 | |
| 887 | { # A request to replace all existing Service Perimeters in an Access Policy |
| 888 | # with the Service Perimeters provided. This is done atomically. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 889 | "etag": "A String", # Optional. The etag for the version of the Access Policy that this |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 890 | # replace operation is to be performed on. If, at the time of replace, the |
| 891 | # etag for the Access Policy stored in Access Context Manager is different |
| 892 | # from the specified etag, then the replace operation will not be performed |
| 893 | # and the call will fail. This field is not required. If etag is not |
| 894 | # provided, the operation will be performed as if a valid etag is provided. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 895 | "servicePerimeters": [ # Required. The desired Service Perimeters that should |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 896 | # replace all existing Service Perimeters in the |
| 897 | # Access Policy. |
| 898 | { # `ServicePerimeter` describes a set of Google Cloud resources which can freely |
| 899 | # import and export data amongst themselves, but not export outside of the |
| 900 | # `ServicePerimeter`. If a request with a source within this `ServicePerimeter` |
| 901 | # has a target outside of the `ServicePerimeter`, the request will be blocked. |
| 902 | # Otherwise the request is allowed. There are two types of Service Perimeter - |
| 903 | # Regular and Bridge. Regular Service Perimeters cannot overlap, a single |
| 904 | # Google Cloud project can only belong to a single regular Service Perimeter. |
| 905 | # Service Perimeter Bridges can contain only Google Cloud projects as members, |
| 906 | # a single Google Cloud project may belong to multiple Service Perimeter |
| 907 | # Bridges. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 908 | "useExplicitDryRunSpec": True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly |
| 909 | # exists for all Service Perimeters, and that spec is identical to the |
| 910 | # status for those Service Perimeters. When this flag is set, it inhibits the |
| 911 | # generation of the implicit spec, thereby allowing the user to explicitly |
| 912 | # provide a configuration ("spec") to use in a dry-run version of the Service |
| 913 | # Perimeter. This allows the user to test changes to the enforced config |
| 914 | # ("status") without actually enforcing them. This testing is done through |
| 915 | # analyzing the differences between currently enforced and suggested |
| 916 | # restrictions. use_explicit_dry_run_spec must bet set to True if any of the |
| 917 | # fields in the spec are set to non-default values. |
| 918 | "description": "A String", # Description of the `ServicePerimeter` and its use. Does not affect |
| 919 | # behavior. |
| 920 | "status": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources, |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 921 | # restricted services and access levels that determine perimeter |
| 922 | # content and boundaries. |
| 923 | # describe specific Service Perimeter configuration. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 924 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 925 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 926 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 927 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 928 | # listed, resources within the perimeter can only be accessed via Google |
| 929 | # Cloud calls with request origins within the perimeter. Example: |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 930 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 931 | # For Service Perimeter Bridge, must be empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 932 | "A String", |
| 933 | ], |
| 934 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 935 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 936 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 937 | # access restrictions. |
| 938 | "A String", |
| 939 | ], |
| 940 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 941 | # Perimeter. |
| 942 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 943 | # APIs specified in 'allowed_services'. |
| 944 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 945 | # unless 'enable_restriction' is True. |
| 946 | "A String", |
| 947 | ], |
| 948 | }, |
| 949 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 950 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 951 | "A String", |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 952 | ], |
| 953 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 954 | "spec": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration |
| 955 | # allows to specify and test ServicePerimeter configuration without enforcing |
| 956 | # actual access restrictions. Only allowed to be set when the |
| 957 | # "use_explicit_dry_run_spec" flag is set. |
| 958 | # describe specific Service Perimeter configuration. |
| 959 | "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the |
| 960 | # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed |
| 961 | # must be in the same policy as this `ServicePerimeter`. Referencing a |
| 962 | # nonexistent `AccessLevel` is a syntax error. If no `AccessLevel` names are |
| 963 | # listed, resources within the perimeter can only be accessed via Google |
| 964 | # Cloud calls with request origins within the perimeter. Example: |
| 965 | # `"accessPolicies/MY_POLICY/accessLevels/MY_LEVEL"`. |
| 966 | # For Service Perimeter Bridge, must be empty. |
| 967 | "A String", |
| 968 | ], |
| 969 | "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter |
| 970 | # restrictions. For example, if `storage.googleapis.com` is specified, access |
| 971 | # to the storage buckets inside the perimeter must meet the perimeter's |
| 972 | # access restrictions. |
| 973 | "A String", |
| 974 | ], |
| 975 | "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Configuration for APIs allowed within Perimeter. |
| 976 | # Perimeter. |
| 977 | "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of |
| 978 | # APIs specified in 'allowed_services'. |
| 979 | "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty |
| 980 | # unless 'enable_restriction' is True. |
| 981 | "A String", |
| 982 | ], |
| 983 | }, |
| 984 | "resources": [ # A list of Google Cloud resources that are inside of the service perimeter. |
| 985 | # Currently only projects are allowed. Format: `projects/{project_number}` |
| 986 | "A String", |
| 987 | ], |
| 988 | }, |
| 989 | "name": "A String", # Required. Resource name for the ServicePerimeter. The `short_name` |
| 990 | # component must begin with a letter and only include alphanumeric and '_'. |
| 991 | # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}` |
| 992 | "perimeterType": "A String", # Perimeter type indicator. A single project is |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 993 | # allowed to be a member of single regular perimeter, but multiple service |
| 994 | # perimeter bridges. A project cannot be a included in a perimeter bridge |
| 995 | # without being included in regular perimeter. For perimeter bridges, |
| 996 | # the restricted service list as well as access level lists must be |
| 997 | # empty. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 998 | "title": "A String", # Human readable title. Must be unique within the Policy. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 999 | }, |
| 1000 | ], |
| 1001 | } |
| 1002 | |
| 1003 | x__xgafv: string, V1 error format. |
| 1004 | Allowed values |
| 1005 | 1 - v1 error format |
| 1006 | 2 - v2 error format |
| 1007 | |
| 1008 | Returns: |
| 1009 | An object of the form: |
| 1010 | |
| 1011 | { # This resource represents a long-running operation that is the result of a |
| 1012 | # network API call. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 1013 | "done": True or False, # If the value is `false`, it means the operation is still in progress. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 1014 | # If `true`, the operation is completed, and either `error` or `response` is |
| 1015 | # available. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 1016 | "response": { # The normal response of the operation in case of success. If the original |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 1017 | # method returns no data on success, such as `Delete`, the response is |
| 1018 | # `google.protobuf.Empty`. If the original method is standard |
| 1019 | # `Get`/`Create`/`Update`, the response should be the resource. For other |
| 1020 | # methods, the response should have the type `XxxResponse`, where `Xxx` |
| 1021 | # is the original method name. For example, if the original method name |
| 1022 | # is `TakeSnapshot()`, the inferred response type is |
| 1023 | # `TakeSnapshotResponse`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 1024 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 1025 | }, |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 1026 | "name": "A String", # The server-assigned name, which is only unique within the same service that |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 1027 | # originally returns it. If you use the default HTTP mapping, the |
| 1028 | # `name` should be a resource name ending with `operations/{unique_id}`. |
| Bu Sun Kim | 6502091 | 2020-05-20 12:08:20 -0700 | [diff] [blame] | 1029 | "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation. |
| 1030 | # different programming environments, including REST APIs and RPC APIs. It is |
| 1031 | # used by [gRPC](https://github.com/grpc). Each `Status` message contains |
| 1032 | # three pieces of data: error code, error message, and error details. |
| 1033 | # |
| 1034 | # You can find out more about this error model and how to work with it in the |
| 1035 | # [API Design Guide](https://cloud.google.com/apis/design/errors). |
| 1036 | "code": 42, # The status code, which should be an enum value of google.rpc.Code. |
| 1037 | "message": "A String", # A developer-facing error message, which should be in English. Any |
| 1038 | # user-facing error message should be localized and sent in the |
| 1039 | # google.rpc.Status.details field, or localized by the client. |
| 1040 | "details": [ # A list of messages that carry the error details. There is a common set of |
| 1041 | # message types for APIs to use. |
| 1042 | { |
| 1043 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 1044 | }, |
| 1045 | ], |
| 1046 | }, |
| 1047 | "metadata": { # Service-specific metadata associated with the operation. It typically |
| 1048 | # contains progress information and common metadata such as create time. |
| 1049 | # Some services might not provide such metadata. Any method that returns a |
| 1050 | # long-running operation should document the metadata type, if any. |
| 1051 | "a_key": "", # Properties of the object. Contains field @type with type URL. |
| 1052 | }, |
| Dan O'Meara | dd49464 | 2020-05-01 07:42:23 -0700 | [diff] [blame] | 1053 | }</pre> |
| 1054 | </div> |
| 1055 | |
| Bu Sun Kim | 715bd7f | 2019-06-14 16:50:42 -0700 | [diff] [blame] | 1056 | </body></html> |