diff --git a/packages/google-cloud-asset/google/cloud/asset/gapic_version.py b/packages/google-cloud-asset/google/cloud/asset/gapic_version.py index 3bf30e23b6f9..360a0d13ebdd 100644 --- a/packages/google-cloud-asset/google/cloud/asset/gapic_version.py +++ b/packages/google-cloud-asset/google/cloud/asset/gapic_version.py @@ -13,4 +13,4 @@ # See the License for the specific language governing permissions and # limitations under the License. # -__version__ = "3.22.0" # {x-release-please-version} +__version__ = "0.0.0" # {x-release-please-version} diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/gapic_version.py b/packages/google-cloud-asset/google/cloud/asset_v1/gapic_version.py index 3bf30e23b6f9..360a0d13ebdd 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1/gapic_version.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1/gapic_version.py @@ -13,4 +13,4 @@ # See the License for the specific language governing permissions and # limitations under the License. # -__version__ = "3.22.0" # {x-release-please-version} +__version__ = "0.0.0" # {x-release-please-version} diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/async_client.py b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/async_client.py index b1886de65b95..7957c84c6caa 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/async_client.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/async_client.py @@ -1229,38 +1229,36 @@ async def sample_search_all_resources(): have a label ``env``. - ``tagKeys:env`` to find Google Cloud resources that have directly attached tags where the - ```TagKey`` `__ - .\ ``namespacedName`` contains ``env``. + ```TagKey.namespacedName`` `__ + contains ``env``. - ``tagValues:prod*`` to find Google Cloud resources that have directly attached tags where the - ```TagValue`` `__ - .\ ``namespacedName`` contains a word prefixed by - ``prod``. + ```TagValue.namespacedName`` `__ + contains a word prefixed by ``prod``. - ``tagValueIds=tagValues/123`` to find Google Cloud resources that have directly attached tags where the - ```TagValue`` `__ - .\ ``name`` is exactly ``tagValues/123``. + ```TagValue.name`` `__ + is exactly ``tagValues/123``. - ``effectiveTagKeys:env`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagKey`` `__ - .\ ``namespacedName`` contains ``env``. + ```TagKey.namespacedName`` `__ + contains ``env``. - ``effectiveTagValues:prod*`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagValue`` `__ - .\ ``namespacedName`` contains a word prefixed by - ``prod``. + ```TagValue.namespacedName`` `__ + contains a word prefixed by ``prod``. - ``effectiveTagValueIds=tagValues/123`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagValue`` `__ - .\ ``name`` is exactly ``tagValues/123``. + ```TagValue.name`` `__ + is exactly ``tagValues/123``. - ``kmsKey:key`` to find Google Cloud resources encrypted with a customer-managed encryption key whose name contains ``key`` as a word. This field is - deprecated. Please use the ``kmsKeys`` field to - retrieve Cloud KMS key information. + deprecated. Use the ``kmsKeys`` field to retrieve + Cloud KMS key information. - ``kmsKeys:key`` to find Google Cloud resources encrypted with customer-managed encryption keys whose name contains the word ``key``. @@ -1275,6 +1273,12 @@ async def sample_search_all_resources(): relationships with ``instance-group-1`` in the Compute Engine instance group resource name, for relationship type ``INSTANCE_TO_INSTANCEGROUP``. + - ``sccSecurityMarks.key=value`` to find Cloud + resources that are attached with security marks whose + key is ``key`` and value is ``value``. + - ``sccSecurityMarks.key:*`` to find Cloud resources + that are attached with security marks whose key is + ``key``. - ``state:ACTIVE`` to find Google Cloud resources whose state contains ``ACTIVE`` as a word. - ``NOT state:ACTIVE`` to find Google Cloud resources @@ -1308,7 +1312,7 @@ async def sample_search_all_resources(): Optional. A list of asset types that this request searches for. If empty, it will search all the `searchable asset - types `__. + types `__. Regular expressions are also supported. For example: @@ -2767,13 +2771,17 @@ async def sample_analyze_org_policies(): filter (:class:`str`): The expression to filter [AnalyzeOrgPoliciesResponse.org_policy_results][google.cloud.asset.v1.AnalyzeOrgPoliciesResponse.org_policy_results]. - The only supported field is - ``consolidated_policy.attached_resource``, and the only - supported operator is ``=``. + Filtering is currently available for bare literal values + and the following fields: - Example: + - consolidated_policy.attached_resource + - consolidated_policy.rules.enforce + + When filtering by a specific field, the only supported + operator is ``=``. For example, filtering by consolidated_policy.attached_resource="//cloudresourcemanager.googleapis.com/folders/001" - will return the org policy results of"folders/001". + will return all the Organization Policy results attached + to "folders/001". This corresponds to the ``filter`` field on the ``request`` instance; if ``request`` is provided, this @@ -2928,13 +2936,18 @@ async def sample_analyze_org_policy_governed_containers(): on the ``request`` instance; if ``request`` is provided, this should not be set. filter (:class:`str`): - The expression to filter the governed containers in - result. The only supported field is ``parent``, and the - only supported operator is ``=``. + The expression to filter + [AnalyzeOrgPolicyGovernedContainersResponse.governed_containers][google.cloud.asset.v1.AnalyzeOrgPolicyGovernedContainersResponse.governed_containers]. + Filtering is currently available for bare literal values + and the following fields: - Example: + - parent + - consolidated_policy.rules.enforce + + When filtering by a specific field, the only supported + operator is ``=``. For example, filtering by parent="//cloudresourcemanager.googleapis.com/folders/001" - will return all containers under "folders/001". + will return all the containers under "folders/001". This corresponds to the ``filter`` field on the ``request`` instance; if ``request`` is provided, this @@ -3049,7 +3062,7 @@ async def analyze_org_policy_governed_assets( This RPC only returns either resources of types supported by `searchable asset - types `__, + types `__, or IAM policies. .. code-block:: python @@ -3107,24 +3120,40 @@ async def sample_analyze_org_policy_governed_assets(): on the ``request`` instance; if ``request`` is provided, this should not be set. filter (:class:`str`): - The expression to filter the governed assets in result. - The only supported fields for governed resources are - ``governed_resource.project`` and - ``governed_resource.folders``. The only supported fields - for governed iam policies are - ``governed_iam_policy.project`` and - ``governed_iam_policy.folders``. The only supported - operator is ``=``. - - Example 1: governed_resource.project="projects/12345678" - filter will return all governed resources under - projects/12345678 including the project ifself, if - applicable. - - Example 2: - governed_iam_policy.folders="folders/12345678" filter - will return all governed iam policies under - folders/12345678, if applicable. + The expression to filter + [AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets][google.cloud.asset.v1.AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets]. + + For governed resources, filtering is currently available + for bare literal values and the following fields: + + - governed_resource.project + - governed_resource.folders + - consolidated_policy.rules.enforce When filtering by + ``governed_resource.project`` or + ``consolidated_policy.rules.enforce``, the only + supported operator is ``=``. When filtering by + ``governed_resource.folders``, the supported + operators are ``=`` and ``:``. For example, filtering + by ``governed_resource.project="projects/12345678"`` + will return all the governed resources under + "projects/12345678", including the project itself if + applicable. + + For governed IAM policies, filtering is currently + available for bare literal values and the following + fields: + + - governed_iam_policy.project + - governed_iam_policy.folders + - consolidated_policy.rules.enforce When filtering by + ``governed_iam_policy.project`` or + ``consolidated_policy.rules.enforce``, the only + supported operator is ``=``. When filtering by + ``governed_iam_policy.folders``, the supported + operators are ``=`` and ``:``. For example, filtering + by ``governed_iam_policy.folders:"folders/12345678"`` + will return all the governed IAM policies under + "folders/001". This corresponds to the ``filter`` field on the ``request`` instance; if ``request`` is provided, this diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/client.py b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/client.py index fa28082fbe76..ef8c1f7c668f 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/client.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/client.py @@ -1500,38 +1500,36 @@ def sample_search_all_resources(): have a label ``env``. - ``tagKeys:env`` to find Google Cloud resources that have directly attached tags where the - ```TagKey`` `__ - .\ ``namespacedName`` contains ``env``. + ```TagKey.namespacedName`` `__ + contains ``env``. - ``tagValues:prod*`` to find Google Cloud resources that have directly attached tags where the - ```TagValue`` `__ - .\ ``namespacedName`` contains a word prefixed by - ``prod``. + ```TagValue.namespacedName`` `__ + contains a word prefixed by ``prod``. - ``tagValueIds=tagValues/123`` to find Google Cloud resources that have directly attached tags where the - ```TagValue`` `__ - .\ ``name`` is exactly ``tagValues/123``. + ```TagValue.name`` `__ + is exactly ``tagValues/123``. - ``effectiveTagKeys:env`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagKey`` `__ - .\ ``namespacedName`` contains ``env``. + ```TagKey.namespacedName`` `__ + contains ``env``. - ``effectiveTagValues:prod*`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagValue`` `__ - .\ ``namespacedName`` contains a word prefixed by - ``prod``. + ```TagValue.namespacedName`` `__ + contains a word prefixed by ``prod``. - ``effectiveTagValueIds=tagValues/123`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagValue`` `__ - .\ ``name`` is exactly ``tagValues/123``. + ```TagValue.name`` `__ + is exactly ``tagValues/123``. - ``kmsKey:key`` to find Google Cloud resources encrypted with a customer-managed encryption key whose name contains ``key`` as a word. This field is - deprecated. Please use the ``kmsKeys`` field to - retrieve Cloud KMS key information. + deprecated. Use the ``kmsKeys`` field to retrieve + Cloud KMS key information. - ``kmsKeys:key`` to find Google Cloud resources encrypted with customer-managed encryption keys whose name contains the word ``key``. @@ -1546,6 +1544,12 @@ def sample_search_all_resources(): relationships with ``instance-group-1`` in the Compute Engine instance group resource name, for relationship type ``INSTANCE_TO_INSTANCEGROUP``. + - ``sccSecurityMarks.key=value`` to find Cloud + resources that are attached with security marks whose + key is ``key`` and value is ``value``. + - ``sccSecurityMarks.key:*`` to find Cloud resources + that are attached with security marks whose key is + ``key``. - ``state:ACTIVE`` to find Google Cloud resources whose state contains ``ACTIVE`` as a word. - ``NOT state:ACTIVE`` to find Google Cloud resources @@ -1579,7 +1583,7 @@ def sample_search_all_resources(): Optional. A list of asset types that this request searches for. If empty, it will search all the `searchable asset - types `__. + types `__. Regular expressions are also supported. For example: @@ -2972,13 +2976,17 @@ def sample_analyze_org_policies(): filter (str): The expression to filter [AnalyzeOrgPoliciesResponse.org_policy_results][google.cloud.asset.v1.AnalyzeOrgPoliciesResponse.org_policy_results]. - The only supported field is - ``consolidated_policy.attached_resource``, and the only - supported operator is ``=``. + Filtering is currently available for bare literal values + and the following fields: - Example: + - consolidated_policy.attached_resource + - consolidated_policy.rules.enforce + + When filtering by a specific field, the only supported + operator is ``=``. For example, filtering by consolidated_policy.attached_resource="//cloudresourcemanager.googleapis.com/folders/001" - will return the org policy results of"folders/001". + will return all the Organization Policy results attached + to "folders/001". This corresponds to the ``filter`` field on the ``request`` instance; if ``request`` is provided, this @@ -3123,13 +3131,18 @@ def sample_analyze_org_policy_governed_containers(): on the ``request`` instance; if ``request`` is provided, this should not be set. filter (str): - The expression to filter the governed containers in - result. The only supported field is ``parent``, and the - only supported operator is ``=``. + The expression to filter + [AnalyzeOrgPolicyGovernedContainersResponse.governed_containers][google.cloud.asset.v1.AnalyzeOrgPolicyGovernedContainersResponse.governed_containers]. + Filtering is currently available for bare literal values + and the following fields: - Example: + - parent + - consolidated_policy.rules.enforce + + When filtering by a specific field, the only supported + operator is ``=``. For example, filtering by parent="//cloudresourcemanager.googleapis.com/folders/001" - will return all containers under "folders/001". + will return all the containers under "folders/001". This corresponds to the ``filter`` field on the ``request`` instance; if ``request`` is provided, this @@ -3238,7 +3251,7 @@ def analyze_org_policy_governed_assets( This RPC only returns either resources of types supported by `searchable asset - types `__, + types `__, or IAM policies. .. code-block:: python @@ -3296,24 +3309,40 @@ def sample_analyze_org_policy_governed_assets(): on the ``request`` instance; if ``request`` is provided, this should not be set. filter (str): - The expression to filter the governed assets in result. - The only supported fields for governed resources are - ``governed_resource.project`` and - ``governed_resource.folders``. The only supported fields - for governed iam policies are - ``governed_iam_policy.project`` and - ``governed_iam_policy.folders``. The only supported - operator is ``=``. - - Example 1: governed_resource.project="projects/12345678" - filter will return all governed resources under - projects/12345678 including the project ifself, if - applicable. - - Example 2: - governed_iam_policy.folders="folders/12345678" filter - will return all governed iam policies under - folders/12345678, if applicable. + The expression to filter + [AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets][google.cloud.asset.v1.AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets]. + + For governed resources, filtering is currently available + for bare literal values and the following fields: + + - governed_resource.project + - governed_resource.folders + - consolidated_policy.rules.enforce When filtering by + ``governed_resource.project`` or + ``consolidated_policy.rules.enforce``, the only + supported operator is ``=``. When filtering by + ``governed_resource.folders``, the supported + operators are ``=`` and ``:``. For example, filtering + by ``governed_resource.project="projects/12345678"`` + will return all the governed resources under + "projects/12345678", including the project itself if + applicable. + + For governed IAM policies, filtering is currently + available for bare literal values and the following + fields: + + - governed_iam_policy.project + - governed_iam_policy.folders + - consolidated_policy.rules.enforce When filtering by + ``governed_iam_policy.project`` or + ``consolidated_policy.rules.enforce``, the only + supported operator is ``=``. When filtering by + ``governed_iam_policy.folders``, the supported + operators are ``=`` and ``:``. For example, filtering + by ``governed_iam_policy.folders:"folders/12345678"`` + will return all the governed IAM policies under + "folders/001". This corresponds to the ``filter`` field on the ``request`` instance; if ``request`` is provided, this diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc.py b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc.py index fbd9de25e1ae..0a1aa65dad86 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc.py @@ -942,7 +942,7 @@ def analyze_org_policy_governed_assets( This RPC only returns either resources of types supported by `searchable asset - types `__, + types `__, or IAM policies. Returns: diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc_asyncio.py b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc_asyncio.py index d9da0888dd3d..d545361c821e 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc_asyncio.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1/services/asset_service/transports/grpc_asyncio.py @@ -964,7 +964,7 @@ def analyze_org_policy_governed_assets( This RPC only returns either resources of types supported by `searchable asset - types `__, + types `__, or IAM policies. Returns: diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_service.py b/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_service.py index 8b52ff457c89..773a614cfb15 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_service.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_service.py @@ -1114,37 +1114,35 @@ class SearchAllResourcesRequest(proto.Message): a label ``env``. - ``tagKeys:env`` to find Google Cloud resources that have directly attached tags where the - ```TagKey`` `__ - .\ ``namespacedName`` contains ``env``. + ```TagKey.namespacedName`` `__ + contains ``env``. - ``tagValues:prod*`` to find Google Cloud resources that have directly attached tags where the - ```TagValue`` `__ - .\ ``namespacedName`` contains a word prefixed by - ``prod``. + ```TagValue.namespacedName`` `__ + contains a word prefixed by ``prod``. - ``tagValueIds=tagValues/123`` to find Google Cloud resources that have directly attached tags where the - ```TagValue`` `__ - .\ ``name`` is exactly ``tagValues/123``. + ```TagValue.name`` `__ + is exactly ``tagValues/123``. - ``effectiveTagKeys:env`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagKey`` `__ - .\ ``namespacedName`` contains ``env``. + ```TagKey.namespacedName`` `__ + contains ``env``. - ``effectiveTagValues:prod*`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagValue`` `__ - .\ ``namespacedName`` contains a word prefixed by - ``prod``. + ```TagValue.namespacedName`` `__ + contains a word prefixed by ``prod``. - ``effectiveTagValueIds=tagValues/123`` to find Google Cloud resources that have directly attached or inherited tags where the - ```TagValue`` `__ - .\ ``name`` is exactly ``tagValues/123``. + ```TagValue.name`` `__ + is exactly ``tagValues/123``. - ``kmsKey:key`` to find Google Cloud resources encrypted with a customer-managed encryption key whose name - contains ``key`` as a word. This field is deprecated. - Please use the ``kmsKeys`` field to retrieve Cloud KMS - key information. + contains ``key`` as a word. This field is deprecated. Use + the ``kmsKeys`` field to retrieve Cloud KMS key + information. - ``kmsKeys:key`` to find Google Cloud resources encrypted with customer-managed encryption keys whose name contains the word ``key``. @@ -1159,6 +1157,11 @@ class SearchAllResourcesRequest(proto.Message): with ``instance-group-1`` in the Compute Engine instance group resource name, for relationship type ``INSTANCE_TO_INSTANCEGROUP``. + - ``sccSecurityMarks.key=value`` to find Cloud resources + that are attached with security marks whose key is + ``key`` and value is ``value``. + - ``sccSecurityMarks.key:*`` to find Cloud resources that + are attached with security marks whose key is ``key``. - ``state:ACTIVE`` to find Google Cloud resources whose state contains ``ACTIVE`` as a word. - ``NOT state:ACTIVE`` to find Google Cloud resources whose @@ -1183,7 +1186,7 @@ class SearchAllResourcesRequest(proto.Message): asset_types (MutableSequence[str]): Optional. A list of asset types that this request searches for. If empty, it will search all the `searchable asset - types `__. + types `__. Regular expressions are also supported. For example: @@ -1409,7 +1412,7 @@ class SearchAllIamPoliciesRequest(proto.Message): Optional. A list of asset types that the IAM policies are attached to. If empty, it will search the IAM policies that are attached to all the `searchable asset - types `__. + types `__. Regular expressions are also supported. For example: @@ -1803,8 +1806,8 @@ class AnalyzeIamPolicyRequest(proto.Message): If both ``analysis_query`` and ``saved_analysis_query`` are provided, they will be merged together with the ``saved_analysis_query`` as base and the ``analysis_query`` - as overrides. For more details of the merge behavior, please - refer to the + as overrides. For more details of the merge behavior, refer + to the `MergeFrom `__ page. @@ -2084,8 +2087,8 @@ class AnalyzeIamPolicyLongrunningRequest(proto.Message): If both ``analysis_query`` and ``saved_analysis_query`` are provided, they will be merged together with the ``saved_analysis_query`` as base and the ``analysis_query`` - as overrides. For more details of the merge behavior, please - refer to the + as overrides. For more details of the merge behavior, refer + to the `MergeFrom `__ doc. @@ -2960,7 +2963,7 @@ class BatchGetEffectiveIamPoliciesRequest(proto.Message): Required. The names refer to the [full_resource_names] (https://cloud.google.com/asset-inventory/docs/resource-name-format) of `searchable asset - types `__. + types `__. A maximum of 20 resources' effective policies can be retrieved in a batch. """ @@ -3514,13 +3517,17 @@ class AnalyzeOrgPoliciesRequest(proto.Message): filter (str): The expression to filter [AnalyzeOrgPoliciesResponse.org_policy_results][google.cloud.asset.v1.AnalyzeOrgPoliciesResponse.org_policy_results]. - The only supported field is - ``consolidated_policy.attached_resource``, and the only - supported operator is ``=``. + Filtering is currently available for bare literal values and + the following fields: - Example: + - consolidated_policy.attached_resource + - consolidated_policy.rules.enforce + + When filtering by a specific field, the only supported + operator is ``=``. For example, filtering by consolidated_policy.attached_resource="//cloudresourcemanager.googleapis.com/folders/001" - will return the org policy results of"folders/001". + will return all the Organization Policy results attached to + "folders/001". page_size (int): The maximum number of items to return per page. If unspecified, @@ -3647,13 +3654,18 @@ class AnalyzeOrgPolicyGovernedContainersRequest(proto.Message): only contains organization policies for the provided constraint. filter (str): - The expression to filter the governed containers in result. - The only supported field is ``parent``, and the only - supported operator is ``=``. + The expression to filter + [AnalyzeOrgPolicyGovernedContainersResponse.governed_containers][google.cloud.asset.v1.AnalyzeOrgPolicyGovernedContainersResponse.governed_containers]. + Filtering is currently available for bare literal values and + the following fields: - Example: + - parent + - consolidated_policy.rules.enforce + + When filtering by a specific field, the only supported + operator is ``=``. For example, filtering by parent="//cloudresourcemanager.googleapis.com/folders/001" - will return all containers under "folders/001". + will return all the containers under "folders/001". page_size (int): The maximum number of items to return per page. If unspecified, @@ -3797,22 +3809,38 @@ class AnalyzeOrgPolicyGovernedAssetsRequest(proto.Message): contains analyzed organization policies for the provided constraint. filter (str): - The expression to filter the governed assets in result. The - only supported fields for governed resources are - ``governed_resource.project`` and - ``governed_resource.folders``. The only supported fields for - governed iam policies are ``governed_iam_policy.project`` - and ``governed_iam_policy.folders``. The only supported - operator is ``=``. - - Example 1: governed_resource.project="projects/12345678" - filter will return all governed resources under - projects/12345678 including the project ifself, if - applicable. - - Example 2: governed_iam_policy.folders="folders/12345678" - filter will return all governed iam policies under - folders/12345678, if applicable. + The expression to filter + [AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets][google.cloud.asset.v1.AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets]. + + For governed resources, filtering is currently available for + bare literal values and the following fields: + + - governed_resource.project + - governed_resource.folders + - consolidated_policy.rules.enforce When filtering by + ``governed_resource.project`` or + ``consolidated_policy.rules.enforce``, the only supported + operator is ``=``. When filtering by + ``governed_resource.folders``, the supported operators + are ``=`` and ``:``. For example, filtering by + ``governed_resource.project="projects/12345678"`` will + return all the governed resources under + "projects/12345678", including the project itself if + applicable. + + For governed IAM policies, filtering is currently available + for bare literal values and the following fields: + + - governed_iam_policy.project + - governed_iam_policy.folders + - consolidated_policy.rules.enforce When filtering by + ``governed_iam_policy.project`` or + ``consolidated_policy.rules.enforce``, the only supported + operator is ``=``. When filtering by + ``governed_iam_policy.folders``, the supported operators + are ``=`` and ``:``. For example, filtering by + ``governed_iam_policy.folders:"folders/12345678"`` will + return all the governed IAM policies under "folders/001". page_size (int): The maximum number of items to return per page. If unspecified, diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/types/assets.py b/packages/google-cloud-asset/google/cloud/asset_v1/types/assets.py index 2dfdab3435cf..4e0fd8c73780 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1/types/assets.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1/types/assets.py @@ -202,17 +202,17 @@ class Asset(proto.Message): There can be more than one organization policy with different constraints set on a given resource. access_policy (google.identity.accesscontextmanager.v1.access_policy_pb2.AccessPolicy): - Please also refer to the `access policy user + Also refer to the `access policy user guide `__. This field is a member of `oneof`_ ``access_context_policy``. access_level (google.identity.accesscontextmanager.v1.access_level_pb2.AccessLevel): - Please also refer to the `access level user + Also refer to the `access level user guide `__. This field is a member of `oneof`_ ``access_context_policy``. service_perimeter (google.identity.accesscontextmanager.v1.service_perimeter_pb2.ServicePerimeter): - Please also refer to the `service perimeter user + Also refer to the `service perimeter user guide `__. This field is a member of `oneof`_ ``access_context_policy``. @@ -346,8 +346,6 @@ class Resource(proto.Message): hierarchy `__. Example: ``//cloudresourcemanager.googleapis.com/projects/my_project_123`` - - For third-party assets, this field may be set differently. data (google.protobuf.struct_pb2.Struct): The content of the resource, in which some sensitive fields are removed and may not be @@ -714,10 +712,10 @@ class ResourceSearchResult(proto.Message): name. This field only presents for the purpose of backward - compatibility. Please use the ``kms_keys`` field to retrieve - Cloud KMS key information. This field is available only when - the resource's Protobuf contains it and will only be - populated for `these resource + compatibility. Use the ``kms_keys`` field to retrieve Cloud + KMS key information. This field is available only when the + resource's Protobuf contains it and will only be populated + for `these resource types `__ for backward compatible purposes. @@ -799,7 +797,7 @@ class ResourceSearchResult(proto.Message): provided by the corresponding Google Cloud service (e.g., Compute Engine). see `API references and supported searchable - attributes `__ + attributes `__ to see which fields are included. You can search values of these fields through free text @@ -849,7 +847,7 @@ class ResourceSearchResult(proto.Message): types `__. tag_keys (MutableSequence[str]): This field is only present for the purpose of backward - compatibility. Please use the ``tags`` field instead. + compatibility. Use the ``tags`` field instead. TagKey namespaced names, in the format of {ORG_ID}/{TAG_KEY_SHORT_NAME}. To search against the @@ -866,7 +864,7 @@ class ResourceSearchResult(proto.Message): - ``env`` tag_values (MutableSequence[str]): This field is only present for the purpose of backward - compatibility. Please use the ``tags`` field instead. + compatibility. Use the ``tags`` field instead. TagValue namespaced names, in the format of {ORG_ID}/{TAG_KEY_SHORT_NAME}/{TAG_VALUE_SHORT_NAME}. To @@ -884,7 +882,7 @@ class ResourceSearchResult(proto.Message): - ``prod`` tag_value_ids (MutableSequence[str]): This field is only present for the purpose of backward - compatibility. Please use the ``tags`` field instead. + compatibility. Use the ``tags`` field instead. TagValue IDs, in the format of tagValues/{TAG_VALUE_ID}. To search against the ``tagValueIds``: @@ -948,12 +946,7 @@ class ResourceSearchResult(proto.Message): The actual content of Security Command Center security marks associated with the asset. - Note that both staging & prod SecurityMarks are attached on - prod resources. In CAS preprod/prod, both staging & prod - SecurityMarks are ingested and returned in the following - ``security_marks`` map. In that case, the prefix "staging." - will be added to the keys of all the staging marks. To - search against SCC SecurityMarks field: + To search against SCC SecurityMarks field: - Use a field query: @@ -1107,7 +1100,7 @@ class VersionedResource(proto.Message): You can find the resource definition for each supported resource type in this table: - ``https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types`` + ``https://cloud.google.com/asset-inventory/docs/supported-asset-types`` """ version: str = proto.Field( @@ -1134,7 +1127,7 @@ class AttachedResource(proto.Message): You can find the supported attached asset types of each resource in this table: - ``https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types`` + ``https://cloud.google.com/asset-inventory/docs/supported-asset-types`` versioned_resources (MutableSequence[google.cloud.asset_v1.types.VersionedResource]): Versioned resource representations of this attached resource. This is repeated because diff --git a/packages/google-cloud-asset/google/cloud/asset_v1p1beta1/gapic_version.py b/packages/google-cloud-asset/google/cloud/asset_v1p1beta1/gapic_version.py index 3bf30e23b6f9..360a0d13ebdd 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1p1beta1/gapic_version.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1p1beta1/gapic_version.py @@ -13,4 +13,4 @@ # See the License for the specific language governing permissions and # limitations under the License. # -__version__ = "3.22.0" # {x-release-please-version} +__version__ = "0.0.0" # {x-release-please-version} diff --git a/packages/google-cloud-asset/google/cloud/asset_v1p2beta1/gapic_version.py b/packages/google-cloud-asset/google/cloud/asset_v1p2beta1/gapic_version.py index 3bf30e23b6f9..360a0d13ebdd 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1p2beta1/gapic_version.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1p2beta1/gapic_version.py @@ -13,4 +13,4 @@ # See the License for the specific language governing permissions and # limitations under the License. # -__version__ = "3.22.0" # {x-release-please-version} +__version__ = "0.0.0" # {x-release-please-version} diff --git a/packages/google-cloud-asset/google/cloud/asset_v1p5beta1/gapic_version.py b/packages/google-cloud-asset/google/cloud/asset_v1p5beta1/gapic_version.py index 3bf30e23b6f9..360a0d13ebdd 100644 --- a/packages/google-cloud-asset/google/cloud/asset_v1p5beta1/gapic_version.py +++ b/packages/google-cloud-asset/google/cloud/asset_v1p5beta1/gapic_version.py @@ -13,4 +13,4 @@ # See the License for the specific language governing permissions and # limitations under the License. # -__version__ = "3.22.0" # {x-release-please-version} +__version__ = "0.0.0" # {x-release-please-version} diff --git a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1.json b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1.json index 560a8887808b..5a90dfa88b31 100644 --- a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1.json +++ b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1.json @@ -8,7 +8,7 @@ ], "language": "PYTHON", "name": "google-cloud-asset", - "version": "3.22.0" + "version": "0.1.0" }, "snippets": [ { diff --git a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p1beta1.json b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p1beta1.json index c0a93f5beae0..dcbeb822733b 100644 --- a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p1beta1.json +++ b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p1beta1.json @@ -8,7 +8,7 @@ ], "language": "PYTHON", "name": "google-cloud-asset", - "version": "3.22.0" + "version": "0.1.0" }, "snippets": [ { diff --git a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p2beta1.json b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p2beta1.json index 676fbc80702b..38eaede856da 100644 --- a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p2beta1.json +++ b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p2beta1.json @@ -8,7 +8,7 @@ ], "language": "PYTHON", "name": "google-cloud-asset", - "version": "3.22.0" + "version": "0.1.0" }, "snippets": [ { diff --git a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p5beta1.json b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p5beta1.json index fa92f32b1b4c..13ffc229e3a7 100644 --- a/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p5beta1.json +++ b/packages/google-cloud-asset/samples/generated_samples/snippet_metadata_google.cloud.asset.v1p5beta1.json @@ -8,7 +8,7 @@ ], "language": "PYTHON", "name": "google-cloud-asset", - "version": "3.22.0" + "version": "0.1.0" }, "snippets": [ {