blob: 5774aaf4d1698e90931c1fcf08745d5eb18808cc [file] [log] [blame]
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001<html><body>
2<style>
3
4body, h1, h2, h3, div, span, p, pre, a {
5 margin: 0;
6 padding: 0;
7 border: 0;
8 font-weight: inherit;
9 font-style: inherit;
10 font-size: 100%;
11 font-family: inherit;
12 vertical-align: baseline;
13}
14
15body {
16 font-size: 13px;
17 padding: 1em;
18}
19
20h1 {
21 font-size: 26px;
22 margin-bottom: 1em;
23}
24
25h2 {
26 font-size: 24px;
27 margin-bottom: 1em;
28}
29
30h3 {
31 font-size: 20px;
32 margin-bottom: 1em;
33 margin-top: 1em;
34}
35
36pre, code {
37 line-height: 1.5;
38 font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
39}
40
41pre {
42 margin-top: 0.5em;
43}
44
45h1, h2, h3, p {
46 font-family: Arial, sans serif;
47}
48
49h1, h2, h3 {
50 border-bottom: solid #CCC 1px;
51}
52
53.toc_element {
54 margin-top: 0.5em;
55}
56
57.firstline {
58 margin-left: 2 em;
59}
60
61.method {
62 margin-top: 1em;
63 border: solid 1px #CCC;
64 padding: 1em;
65 background: #EEE;
66}
67
68.details {
69 font-weight: bold;
70 font-size: 14px;
71}
72
73</style>
74
75<h1><a href="cloudasset_v1beta1.html">Cloud Asset API</a> . <a href="cloudasset_v1beta1.projects.html">projects</a></h1>
76<h2>Instance Methods</h2>
77<p class="toc_element">
78 <code><a href="cloudasset_v1beta1.projects.operations.html">operations()</a></code>
79</p>
80<p class="firstline">Returns the operations Resource.</p>
81
82<p class="toc_element">
Bu Sun Kim65020912020-05-20 12:08:20 -070083 <code><a href="#batchGetAssetsHistory">batchGetAssetsHistory(parent, contentType=None, readTimeWindow_endTime=None, readTimeWindow_startTime=None, assetNames=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070084<p class="firstline">Batch gets the update history of assets that overlap a time window.</p>
85<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -070086 <code><a href="#exportAssets">exportAssets(parent, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070087<p class="firstline">Exports assets with time and resource types to a given Cloud Storage</p>
88<h3>Method Details</h3>
89<div class="method">
Bu Sun Kim65020912020-05-20 12:08:20 -070090 <code class="details" id="batchGetAssetsHistory">batchGetAssetsHistory(parent, contentType=None, readTimeWindow_endTime=None, readTimeWindow_startTime=None, assetNames=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070091 <pre>Batch gets the update history of assets that overlap a time window.
92For RESOURCE content, this API outputs history with asset in both
93non-delete or deleted status.
94For IAM_POLICY content, this API outputs history when the asset and its
95attached IAM POLICY both exist. This can create gaps in the output history.
96If a specified asset does not exist, this API returns an INVALID_ARGUMENT
97error.
98
99Args:
100 parent: string, Required. The relative name of the root asset. It can only be an
Bu Sun Kim65020912020-05-20 12:08:20 -0700101organization number (such as &quot;organizations/123&quot;), a project ID (such as
102&quot;projects/my-project-id&quot;)&quot;, or a project number (such as &quot;projects/12345&quot;). (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700103 contentType: string, Optional. The content type.
Bu Sun Kim65020912020-05-20 12:08:20 -0700104 readTimeWindow_endTime: string, End time of the time window (inclusive).
105Current timestamp if not specified.
106 readTimeWindow_startTime: string, Start time of the time window (exclusive).
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700107 assetNames: string, A list of the full names of the assets. For example:
108`//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
109See [Resource
110Names](https://cloud.google.com/apis/design/resource_names#full_resource_name)
111for more info.
112
113The request becomes a no-op if the asset name list is empty, and the max
114size of the asset name list is 100 in one request. (repeated)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700115 x__xgafv: string, V1 error format.
116 Allowed values
117 1 - v1 error format
118 2 - v2 error format
119
120Returns:
121 An object of the form:
122
123 { # Batch get assets history response.
Bu Sun Kim65020912020-05-20 12:08:20 -0700124 &quot;assets&quot;: [ # A list of assets with valid time windows.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700125 { # Temporal asset. In addition to the asset, the temporal asset includes the
126 # status of the asset and valid from and to time of it.
Bu Sun Kim65020912020-05-20 12:08:20 -0700127 &quot;deleted&quot;: True or False, # If the asset is deleted or not.
128 &quot;window&quot;: { # A time window of (start_time, end_time]. # The time window when the asset data and state was observed.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700129 &quot;startTime&quot;: &quot;A String&quot;, # Start time of the time window (exclusive).
Bu Sun Kim65020912020-05-20 12:08:20 -0700130 &quot;endTime&quot;: &quot;A String&quot;, # End time of the time window (inclusive).
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700131 # Current timestamp if not specified.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700132 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700133 &quot;asset&quot;: { # Cloud asset. This includes all Google Cloud Platform resources, # Asset.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700134 # Cloud IAM policies, and other non-GCP assets.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700135 &quot;resource&quot;: { # Representation of a cloud resource. # Representation of the resource.
136 &quot;version&quot;: &quot;A String&quot;, # The API version. Example: &quot;v1&quot;.
137 &quot;data&quot;: { # The content of the resource, in which some sensitive fields are scrubbed
138 # away and may not be present.
139 &quot;a_key&quot;: &quot;&quot;, # Properties of the object.
140 },
141 &quot;discoveryDocumentUri&quot;: &quot;A String&quot;, # The URL of the discovery document containing the resource&#x27;s JSON schema.
142 # For example:
143 # `&quot;https://www.googleapis.com/discovery/v1/apis/compute/v1/rest&quot;`.
144 # It will be left unspecified for resources without a discovery-based API,
145 # such as Cloud Bigtable.
146 &quot;parent&quot;: &quot;A String&quot;, # The full name of the immediate parent of this resource. See
147 # [Resource
148 # Names](https://cloud.google.com/apis/design/resource_names#full_resource_name)
149 # for more information.
150 #
151 # For GCP assets, it is the parent resource defined in the [Cloud IAM policy
152 # hierarchy](https://cloud.google.com/iam/docs/overview#policy_hierarchy).
153 # For example:
154 # `&quot;//cloudresourcemanager.googleapis.com/projects/my_project_123&quot;`.
155 #
156 # For third-party assets, it is up to the users to define.
157 &quot;resourceUrl&quot;: &quot;A String&quot;, # The REST URL for accessing the resource. An HTTP GET operation using this
158 # URL returns the resource itself.
159 # Example:
160 # `https://cloudresourcemanager.googleapis.com/v1/projects/my-project-123`.
161 # It will be left unspecified for resources without a REST API.
162 &quot;discoveryName&quot;: &quot;A String&quot;, # The JSON schema name listed in the discovery document.
163 # Example: &quot;Project&quot;. It will be left unspecified for resources (such as
164 # Cloud Bigtable) without a discovery-based API.
165 },
166 &quot;assetType&quot;: &quot;A String&quot;, # Type of the asset. Example: &quot;google.compute.Disk&quot;.
Bu Sun Kim65020912020-05-20 12:08:20 -0700167 &quot;name&quot;: &quot;A String&quot;, # The full name of the asset. For example:
168 # `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
169 # See [Resource
170 # Names](https://cloud.google.com/apis/design/resource_names#full_resource_name)
171 # for more information.
172 &quot;iamPolicy&quot;: { # An Identity and Access Management (IAM) policy, which specifies access # Representation of the actual Cloud IAM policy set on a cloud resource. For
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700173 # each resource, there must be at most one Cloud IAM policy set on it.
Dan O'Mearadd494642020-05-01 07:42:23 -0700174 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700175 #
176 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700177 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
178 # `members` to a single `role`. Members can be user accounts, service accounts,
179 # Google groups, and domains (such as G Suite). A `role` is a named list of
180 # permissions; each `role` can be an IAM predefined role or a user-created
181 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700182 #
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700183 # For some types of Google Cloud resources, a `binding` can also specify a
184 # `condition`, which is a logical expression that allows access to a resource
185 # only if the expression evaluates to `true`. A condition can add constraints
186 # based on attributes of the request, the resource, or both. To learn which
187 # resources support conditions in their IAM policies, see the
188 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700189 #
190 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700191 #
192 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700193 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700194 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700195 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
196 # &quot;members&quot;: [
197 # &quot;user:mike@example.com&quot;,
198 # &quot;group:admins@example.com&quot;,
199 # &quot;domain:google.com&quot;,
200 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700201 # ]
202 # },
203 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700204 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700205 # &quot;members&quot;: [
206 # &quot;user:eve@example.com&quot;
207 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700208 # &quot;condition&quot;: {
209 # &quot;title&quot;: &quot;expirable access&quot;,
210 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
211 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700212 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700213 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700214 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700215 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
216 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700217 # }
218 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700219 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700220 #
221 # bindings:
222 # - members:
223 # - user:mike@example.com
224 # - group:admins@example.com
225 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700226 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
227 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700228 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700229 # - user:eve@example.com
230 # role: roles/resourcemanager.organizationViewer
231 # condition:
232 # title: expirable access
233 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700234 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700235 # - etag: BwWWja0YfJA=
236 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700237 #
238 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700239 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700240 &quot;version&quot;: 42, # Specifies the format of the policy.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700241 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700242 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
243 # are rejected.
244 #
245 # Any operation that affects conditional role bindings must specify version
246 # `3`. This requirement applies to the following operations:
247 #
248 # * Getting a policy that includes a conditional role binding
249 # * Adding a conditional role binding to a policy
250 # * Changing a conditional role binding in a policy
251 # * Removing any role binding, with or without a condition, from a policy
252 # that includes conditions
253 #
254 # **Important:** If you use IAM Conditions, you must include the `etag` field
255 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
256 # you to overwrite a version `3` policy with a version `1` policy, and all of
257 # the conditions in the version `3` policy are lost.
258 #
259 # If a policy does not include any conditions, operations on that policy may
260 # specify any valid version or leave the field unset.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700261 #
262 # To learn which resources support conditions in their IAM policies, see the
263 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim65020912020-05-20 12:08:20 -0700264 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
265 { # Specifies the audit configuration for a service.
266 # The configuration determines which permission types are logged, and what
267 # identities, if any, are exempted from logging.
268 # An AuditConfig must have one or more AuditLogConfigs.
269 #
270 # If there are AuditConfigs for both `allServices` and a specific service,
271 # the union of the two AuditConfigs is used for that service: the log_types
272 # specified in each AuditConfig are enabled, and the exempted_members in each
273 # AuditLogConfig are exempted.
274 #
275 # Example Policy with multiple AuditConfigs:
276 #
277 # {
278 # &quot;audit_configs&quot;: [
279 # {
280 # &quot;service&quot;: &quot;allServices&quot;
281 # &quot;audit_log_configs&quot;: [
282 # {
283 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
284 # &quot;exempted_members&quot;: [
285 # &quot;user:jose@example.com&quot;
286 # ]
287 # },
288 # {
289 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
290 # },
291 # {
292 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;,
293 # }
294 # ]
295 # },
296 # {
297 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;
298 # &quot;audit_log_configs&quot;: [
299 # {
300 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
301 # },
302 # {
303 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
304 # &quot;exempted_members&quot;: [
305 # &quot;user:aliya@example.com&quot;
306 # ]
307 # }
308 # ]
309 # }
310 # ]
311 # }
312 #
313 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
314 # logging. It also exempts jose@example.com from DATA_READ logging, and
315 # aliya@example.com from DATA_WRITE logging.
316 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
317 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
318 # `allServices` is a special value that covers all services.
319 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
320 { # Provides the configuration for logging a type of permissions.
321 # Example:
322 #
323 # {
324 # &quot;audit_log_configs&quot;: [
325 # {
326 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
327 # &quot;exempted_members&quot;: [
328 # &quot;user:jose@example.com&quot;
329 # ]
330 # },
331 # {
332 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
333 # }
334 # ]
335 # }
336 #
337 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
338 # jose@example.com from DATA_READ logging.
339 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
340 # permission.
341 # Follows the same format of Binding.members.
342 &quot;A String&quot;,
343 ],
344 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
345 },
346 ],
347 },
348 ],
349 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700350 # `condition` that determines how and when the `bindings` are applied. Each
351 # of the `bindings` must contain at least one member.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700352 { # Associates `members` with a `role`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700353 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700354 # `members` can have the following values:
355 #
356 # * `allUsers`: A special identifier that represents anyone who is
357 # on the internet; with or without a Google account.
358 #
359 # * `allAuthenticatedUsers`: A special identifier that represents anyone
360 # who is authenticated with a Google account or a service account.
361 #
362 # * `user:{emailid}`: An email address that represents a specific Google
Dan O'Mearadd494642020-05-01 07:42:23 -0700363 # account. For example, `alice@example.com` .
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700364 #
365 #
366 # * `serviceAccount:{emailid}`: An email address that represents a service
367 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
368 #
369 # * `group:{emailid}`: An email address that represents a Google group.
370 # For example, `admins@example.com`.
371 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700372 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
373 # identifier) representing a user that has been recently deleted. For
374 # example, `alice@example.com?uid=123456789012345678901`. If the user is
375 # recovered, this value reverts to `user:{emailid}` and the recovered user
376 # retains the role in the binding.
377 #
378 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
379 # unique identifier) representing a service account that has been recently
380 # deleted. For example,
381 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
382 # If the service account is undeleted, this value reverts to
383 # `serviceAccount:{emailid}` and the undeleted service account retains the
384 # role in the binding.
385 #
386 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
387 # identifier) representing a Google group that has been recently
388 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
389 # the group is recovered, this value reverts to `group:{emailid}` and the
390 # recovered group retains the role in the binding.
391 #
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700392 #
393 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
394 # users of that domain. For example, `google.com` or `example.com`.
395 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700396 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700397 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700398 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
399 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700400 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
401 #
402 # If the condition evaluates to `true`, then this binding applies to the
403 # current request.
404 #
405 # If the condition evaluates to `false`, then this binding does not apply to
406 # the current request. However, a different role binding might grant the same
407 # role to one or more of the members in this binding.
408 #
409 # To learn which resources support conditions in their IAM policies, see the
410 # [IAM
411 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
412 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
413 # are documented at https://github.com/google/cel-spec.
414 #
415 # Example (Comparison):
416 #
417 # title: &quot;Summary size limit&quot;
418 # description: &quot;Determines if a summary is less than 100 chars&quot;
419 # expression: &quot;document.summary.size() &lt; 100&quot;
420 #
421 # Example (Equality):
422 #
423 # title: &quot;Requestor is owner&quot;
424 # description: &quot;Determines if requestor is the document owner&quot;
425 # expression: &quot;document.owner == request.auth.claims.email&quot;
426 #
427 # Example (Logic):
428 #
429 # title: &quot;Public documents&quot;
430 # description: &quot;Determine whether the document should be publicly visible&quot;
431 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
432 #
433 # Example (Data Manipulation):
434 #
435 # title: &quot;Notification string&quot;
436 # description: &quot;Create a notification string with a timestamp.&quot;
437 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
438 #
439 # The exact variables and functions that may be referenced within an expression
440 # are determined by the service that evaluates it. See the service
441 # documentation for additional information.
442 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
443 # syntax.
444 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
445 # its purpose. This can be used e.g. in UIs which allow to enter the
446 # expression.
447 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
448 # reporting, e.g. a file name and a position in the file.
449 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
450 # describes the expression, e.g. when hovered over it in a UI.
451 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700452 },
453 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700454 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
Dan O'Mearadd494642020-05-01 07:42:23 -0700455 # prevent simultaneous updates of a policy from overwriting each other.
456 # It is strongly suggested that systems make use of the `etag` in the
457 # read-modify-write cycle to perform policy updates in order to avoid race
458 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
459 # systems are expected to put that etag in the request to `setIamPolicy` to
460 # ensure that their change will be applied to the same version of the policy.
461 #
462 # **Important:** If you use IAM Conditions, you must include the `etag` field
463 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
464 # you to overwrite a version `3` policy with a version `1` policy, and all of
465 # the conditions in the version `3` policy are lost.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700466 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700467 },
468 },
469 ],
470 }</pre>
471</div>
472
473<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700474 <code class="details" id="exportAssets">exportAssets(parent, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700475 <pre>Exports assets with time and resource types to a given Cloud Storage
476location. The output format is newline-delimited JSON.
477This API implements the google.longrunning.Operation API allowing you
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700478to keep track of the export. We recommend intervals of at least 2 seconds
479with exponential retry to poll the export operation result. For
480regular-size resource parent, the export operation usually finishes within
4815 minutes.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700482
483Args:
484 parent: string, Required. The relative name of the root asset. This can only be an
Bu Sun Kim65020912020-05-20 12:08:20 -0700485organization number (such as &quot;organizations/123&quot;), a project ID (such as
486&quot;projects/my-project-id&quot;), a project number (such as &quot;projects/12345&quot;), or
487a folder number (such as &quot;folders/123&quot;). (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700488 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700489 The object takes the form of:
490
491{ # Export asset request.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700492 &quot;assetTypes&quot;: [ # A list of asset types of which to take a snapshot for. For example:
493 # &quot;google.compute.Disk&quot;. If specified, only matching assets will be returned.
494 # See [Introduction to Cloud Asset
495 # Inventory](https://cloud.google.com/resource-manager/docs/cloud-asset-inventory/overview)
496 # for all supported asset types.
497 &quot;A String&quot;,
498 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700499 &quot;readTime&quot;: &quot;A String&quot;, # Timestamp to take an asset snapshot. This can only be set to a timestamp
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700500 # between 2018-10-02 UTC (inclusive) and the current time. If not specified,
501 # the current time will be used. Due to delays in resource data collection
502 # and indexing, there is a volatile window during which running the same
503 # query may get different results.
Bu Sun Kim65020912020-05-20 12:08:20 -0700504 &quot;contentType&quot;: &quot;A String&quot;, # Asset content type. If not specified, no content but the asset name will be
505 # returned.
506 &quot;outputConfig&quot;: { # Output configuration for export assets destination. # Required. Output configuration indicating where the results will be output
507 # to. All results will be in newline delimited JSON format.
508 &quot;gcsDestination&quot;: { # A Cloud Storage location. # Destination on Cloud Storage.
509 &quot;uri&quot;: &quot;A String&quot;, # The uri of the Cloud Storage object. It&#x27;s the same uri that is used by
510 # gsutil. For example: &quot;gs://bucket_name/object_name&quot;. See [Viewing and
511 # Editing Object
512 # Metadata](https://cloud.google.com/storage/docs/viewing-editing-metadata)
513 # for more information.
514 &quot;uriPrefix&quot;: &quot;A String&quot;, # The uri prefix of all generated Cloud Storage objects. For example:
515 # &quot;gs://bucket_name/object_name_prefix&quot;. Each object uri is in format:
516 # &quot;gs://bucket_name/object_name_prefix/&lt;asset type&gt;/&lt;shard number&gt; and only
517 # contains assets for that type. &lt;shard number&gt; starts from 0. For example:
518 # &quot;gs://bucket_name/object_name_prefix/google.compute.disk/0&quot; is the first
519 # shard of output objects containing all google.compute.disk assets.
520 # An INVALID_ARGUMENT error will be returned if file with the same name
521 # &quot;gs://bucket_name/object_name_prefix&quot; already exists.
522 },
523 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700524 }
525
526 x__xgafv: string, V1 error format.
527 Allowed values
528 1 - v1 error format
529 2 - v2 error format
530
531Returns:
532 An object of the form:
533
534 { # This resource represents a long-running operation that is the result of a
535 # network API call.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700536 &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
537 # different programming environments, including REST APIs and RPC APIs. It is
538 # used by [gRPC](https://github.com/grpc). Each `Status` message contains
539 # three pieces of data: error code, error message, and error details.
540 #
541 # You can find out more about this error model and how to work with it in the
542 # [API Design Guide](https://cloud.google.com/apis/design/errors).
543 &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
544 # user-facing error message should be localized and sent in the
545 # google.rpc.Status.details field, or localized by the client.
546 &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of
547 # message types for APIs to use.
548 {
549 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
550 },
551 ],
552 &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
553 },
554 &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically
555 # contains progress information and common metadata such as create time.
556 # Some services might not provide such metadata. Any method that returns a
557 # long-running operation should document the metadata type, if any.
558 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
559 },
560 &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
561 # If `true`, the operation is completed, and either `error` or `response` is
562 # available.
Bu Sun Kim65020912020-05-20 12:08:20 -0700563 &quot;response&quot;: { # The normal response of the operation in case of success. If the original
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700564 # method returns no data on success, such as `Delete`, the response is
565 # `google.protobuf.Empty`. If the original method is standard
566 # `Get`/`Create`/`Update`, the response should be the resource. For other
567 # methods, the response should have the type `XxxResponse`, where `Xxx`
568 # is the original method name. For example, if the original method name
569 # is `TakeSnapshot()`, the inferred response type is
570 # `TakeSnapshotResponse`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700571 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700572 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700573 &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700574 # originally returns it. If you use the default HTTP mapping, the
Dan O'Mearadd494642020-05-01 07:42:23 -0700575 # `name` should be a resource name ending with `operations/{unique_id}`.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700576 }</pre>
577</div>
578
579</body></html>