From 75905af5ab6cd89c354dcfb9d9ca0bfdd4d581b4 Mon Sep 17 00:00:00 2001
From: Google APIs <noreply@google.com>
Date: Mon, 1 Aug 2022 10:44:12 -0700
Subject: [PATCH] chore: deprecate the AwsCrossAccountRole property

feat: add Azure Properties to Connection

Azure properties are used by BigQuery Omni in Azure regions.

PiperOrigin-RevId: 464570667
---
 .../bigquery/connection/v1/connection.proto   | 34 ++++++++++++++++++-
 1 file changed, 33 insertions(+), 1 deletion(-)

diff --git a/google/cloud/bigquery/connection/v1/connection.proto b/google/cloud/bigquery/connection/v1/connection.proto
index cf4b5e29ee6ea..ee0dba14ad833 100644
--- a/google/cloud/bigquery/connection/v1/connection.proto
+++ b/google/cloud/bigquery/connection/v1/connection.proto
@@ -233,6 +233,9 @@ message Connection {
     // Amazon Web Services (AWS) properties.
     AwsProperties aws = 8;
 
+    // Azure properties.
+    AzureProperties azure = 11;
+
     // Cloud Spanner properties.
     CloudSpannerProperties cloud_spanner = 21;
 
@@ -308,7 +311,8 @@ message AwsProperties {
   oneof authentication_method {
     // Authentication using Google owned AWS IAM user's access key to assume
     // into customer's AWS IAM Role.
-    AwsCrossAccountRole cross_account_role = 2;
+    // Deprecated, do not use.
+    AwsCrossAccountRole cross_account_role = 2 [deprecated = true];
 
     // Authentication using Google owned service account to assume into
     // customer's AWS IAM Role.
@@ -344,6 +348,34 @@ message AwsAccessRole {
   string identity = 2;
 }
 
+// Container for connection properties specific to Azure.
+message AzureProperties {
+  // Output only. The name of the Azure Active Directory Application.
+  string application = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. The client id of the Azure Active Directory Application.
+  string client_id = 2 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. The object id of the Azure Active Directory Application.
+  string object_id = 3 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // The id of customer's directory that host the data.
+  string customer_tenant_id = 4;
+
+  // The URL user will be redirected to after granting consent during connection
+  // setup.
+  string redirect_uri = 5;
+
+  // The client id of the user's Azure Active Directory Application used for a
+  // federated connection.
+  string federated_application_client_id = 6;
+
+  // Output only. A unique Google-owned and Google-generated identity for the Connection.
+  // This identity will be used to access the user's Azure Active Directory
+  // Application.
+  string identity = 7 [(google.api.field_behavior) = OUTPUT_ONLY];
+}
+
 // Container for connection properties for delegation of access to GCP
 // resources.
 message CloudResourceProperties {