asset

package
v0.0.0-...-6cb3ea0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jun 7, 2021 License: Apache-2.0 Imports: 22 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var (
	ContentType_name = map[int32]string{
		0: "CONTENT_TYPE_UNSPECIFIED",
		1: "RESOURCE",
		2: "IAM_POLICY",
		4: "ORG_POLICY",
		5: "ACCESS_POLICY",
		6: "OS_INVENTORY",
	}
	ContentType_value = map[string]int32{
		"CONTENT_TYPE_UNSPECIFIED": 0,
		"RESOURCE":                 1,
		"IAM_POLICY":               2,
		"ORG_POLICY":               4,
		"ACCESS_POLICY":            5,
		"OS_INVENTORY":             6,
	}
)

Enum value maps for ContentType.

View Source 
var (
	PartitionSpec_PartitionKey_name = map[int32]string{
		0: "PARTITION_KEY_UNSPECIFIED",
		1: "READ_TIME",
		2: "REQUEST_TIME",
	}
	PartitionSpec_PartitionKey_value = map[string]int32{
		"PARTITION_KEY_UNSPECIFIED": 0,
		"READ_TIME":                 1,
		"REQUEST_TIME":              2,
	}
)

Enum value maps for PartitionSpec_PartitionKey.

View Source 
var (
	IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey_name = map[int32]string{
		0: "PARTITION_KEY_UNSPECIFIED",
		1: "REQUEST_TIME",
	}
	IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey_value = map[string]int32{
		"PARTITION_KEY_UNSPECIFIED": 0,
		"REQUEST_TIME":              1,
	}
)

Enum value maps for IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey.

View Source 
var (
	TemporalAsset_PriorAssetState_name = map[int32]string{
		0: "PRIOR_ASSET_STATE_UNSPECIFIED",
		1: "PRESENT",
		2: "INVALID",
		3: "DOES_NOT_EXIST",
		4: "DELETED",
	}
	TemporalAsset_PriorAssetState_value = map[string]int32{
		"PRIOR_ASSET_STATE_UNSPECIFIED": 0,
		"PRESENT":                       1,
		"INVALID":                       2,
		"DOES_NOT_EXIST":                3,
		"DELETED":                       4,
	}
)

Enum value maps for TemporalAsset_PriorAssetState.

View Source 
var (
	ConditionEvaluation_EvaluationValue_name = map[int32]string{
		0: "EVALUATION_VALUE_UNSPECIFIED",
		1: "TRUE",
		2: "FALSE",
		3: "CONDITIONAL",
	}
	ConditionEvaluation_EvaluationValue_value = map[string]int32{
		"EVALUATION_VALUE_UNSPECIFIED": 0,
		"TRUE":                         1,
		"FALSE":                        2,
		"CONDITIONAL":                  3,
	}
)

Enum value maps for ConditionEvaluation_EvaluationValue.

View Source 
var File_google_cloud_asset_v1_asset_service_proto protoreflect.FileDescriptor
View Source 
var File_google_cloud_asset_v1_assets_proto protoreflect.FileDescriptor

Functions

func RegisterAssetServiceServer 

func RegisterAssetServiceServer(s *grpc.Server, srv AssetServiceServer)

Types

type AnalyzeIamPolicyLongrunningRequest 

type AnalyzeIamPolicyLongrunningRequest struct {

	// Required. The request query.
	AnalysisQuery *IamPolicyAnalysisQuery `protobuf:"bytes,1,opt,name=analysis_query,json=analysisQuery,proto3" json:"analysis_query,omitempty"`
	// Required. Output configuration indicating where the results will be output to.
	OutputConfig *IamPolicyAnalysisOutputConfig `protobuf:"bytes,2,opt,name=output_config,json=outputConfig,proto3" json:"output_config,omitempty"`
	// contains filtered or unexported fields
}

A request message for [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning].

func (*AnalyzeIamPolicyLongrunningRequest) Descriptor deprecated 

func (*AnalyzeIamPolicyLongrunningRequest) Descriptor() ([]byte, []int)

Deprecated: Use AnalyzeIamPolicyLongrunningRequest.ProtoReflect.Descriptor instead.

func (*AnalyzeIamPolicyLongrunningRequest) GetAnalysisQuery 

func (x *AnalyzeIamPolicyLongrunningRequest) GetAnalysisQuery() *IamPolicyAnalysisQuery

func (*AnalyzeIamPolicyLongrunningRequest) GetOutputConfig 

func (x *AnalyzeIamPolicyLongrunningRequest) GetOutputConfig() *IamPolicyAnalysisOutputConfig

func (*AnalyzeIamPolicyLongrunningRequest) ProtoMessage 

func (*AnalyzeIamPolicyLongrunningRequest) ProtoMessage()

func (*AnalyzeIamPolicyLongrunningRequest) ProtoReflect 

func (x *AnalyzeIamPolicyLongrunningRequest) ProtoReflect() protoreflect.Message

func (*AnalyzeIamPolicyLongrunningRequest) Reset 

func (x *AnalyzeIamPolicyLongrunningRequest) Reset()

func (*AnalyzeIamPolicyLongrunningRequest) String 

func (x *AnalyzeIamPolicyLongrunningRequest) String() string

type AnalyzeIamPolicyLongrunningResponse 

type AnalyzeIamPolicyLongrunningResponse struct {
	// contains filtered or unexported fields
}

A response message for [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning].

func (*AnalyzeIamPolicyLongrunningResponse) Descriptor deprecated 

func (*AnalyzeIamPolicyLongrunningResponse) Descriptor() ([]byte, []int)

Deprecated: Use AnalyzeIamPolicyLongrunningResponse.ProtoReflect.Descriptor instead.

func (*AnalyzeIamPolicyLongrunningResponse) ProtoMessage 

func (*AnalyzeIamPolicyLongrunningResponse) ProtoMessage()

func (*AnalyzeIamPolicyLongrunningResponse) ProtoReflect 

func (x *AnalyzeIamPolicyLongrunningResponse) ProtoReflect() protoreflect.Message

func (*AnalyzeIamPolicyLongrunningResponse) Reset 

func (x *AnalyzeIamPolicyLongrunningResponse) Reset()

func (*AnalyzeIamPolicyLongrunningResponse) String 

func (x *AnalyzeIamPolicyLongrunningResponse) String() string

type AnalyzeIamPolicyRequest 

type AnalyzeIamPolicyRequest struct {

	// Required. The request query.
	AnalysisQuery *IamPolicyAnalysisQuery `protobuf:"bytes,1,opt,name=analysis_query,json=analysisQuery,proto3" json:"analysis_query,omitempty"`
	// Optional. Amount of time executable has to complete.  See JSON representation of
	// [Duration](https://developers.google.com/protocol-buffers/docs/proto3#json).
	//
	// If this field is set with a value less than the RPC deadline, and the
	// execution of your query hasn't finished in the specified
	// execution timeout,  you will get a response with partial result.
	// Otherwise, your query's execution will continue until the RPC deadline.
	// If it's not finished until then, you will get a  DEADLINE_EXCEEDED error.
	//
	// Default is empty.
	ExecutionTimeout *durationpb.Duration `protobuf:"bytes,2,opt,name=execution_timeout,json=executionTimeout,proto3" json:"execution_timeout,omitempty"`
	// contains filtered or unexported fields
}

A request message for [AssetService.AnalyzeIamPolicy][google.cloud.asset.v1.AssetService.AnalyzeIamPolicy].

func (*AnalyzeIamPolicyRequest) Descriptor deprecated 

func (*AnalyzeIamPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use AnalyzeIamPolicyRequest.ProtoReflect.Descriptor instead.

func (*AnalyzeIamPolicyRequest) GetAnalysisQuery 

func (x *AnalyzeIamPolicyRequest) GetAnalysisQuery() *IamPolicyAnalysisQuery

func (*AnalyzeIamPolicyRequest) GetExecutionTimeout 

func (x *AnalyzeIamPolicyRequest) GetExecutionTimeout() *durationpb.Duration

func (*AnalyzeIamPolicyRequest) ProtoMessage 

func (*AnalyzeIamPolicyRequest) ProtoMessage()

func (*AnalyzeIamPolicyRequest) ProtoReflect 

func (x *AnalyzeIamPolicyRequest) ProtoReflect() protoreflect.Message

func (*AnalyzeIamPolicyRequest) Reset 

func (x *AnalyzeIamPolicyRequest) Reset()

func (*AnalyzeIamPolicyRequest) String 

func (x *AnalyzeIamPolicyRequest) String() string

type AnalyzeIamPolicyResponse 

type AnalyzeIamPolicyResponse struct {

	// The main analysis that matches the original request.
	MainAnalysis *AnalyzeIamPolicyResponse_IamPolicyAnalysis `protobuf:"bytes,1,opt,name=main_analysis,json=mainAnalysis,proto3" json:"main_analysis,omitempty"`
	// The service account impersonation analysis if
	// [AnalyzeIamPolicyRequest.analyze_service_account_impersonation][] is
	// enabled.
	ServiceAccountImpersonationAnalysis []*AnalyzeIamPolicyResponse_IamPolicyAnalysis `` /* 170-byte string literal not displayed */
	// Represents whether all entries in the [main_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.main_analysis] and
	// [service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis] have been fully explored to
	// answer the query in the request.
	FullyExplored bool `protobuf:"varint,3,opt,name=fully_explored,json=fullyExplored,proto3" json:"fully_explored,omitempty"`
	// contains filtered or unexported fields
}

A response message for [AssetService.AnalyzeIamPolicy][google.cloud.asset.v1.AssetService.AnalyzeIamPolicy].

func (*AnalyzeIamPolicyResponse) Descriptor deprecated 

func (*AnalyzeIamPolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use AnalyzeIamPolicyResponse.ProtoReflect.Descriptor instead.

func (*AnalyzeIamPolicyResponse) GetFullyExplored 

func (x *AnalyzeIamPolicyResponse) GetFullyExplored() bool

func (*AnalyzeIamPolicyResponse) GetMainAnalysis 

func (x *AnalyzeIamPolicyResponse) GetMainAnalysis() *AnalyzeIamPolicyResponse_IamPolicyAnalysis

func (*AnalyzeIamPolicyResponse) GetServiceAccountImpersonationAnalysis 

func (x *AnalyzeIamPolicyResponse) GetServiceAccountImpersonationAnalysis() []*AnalyzeIamPolicyResponse_IamPolicyAnalysis

func (*AnalyzeIamPolicyResponse) ProtoMessage 

func (*AnalyzeIamPolicyResponse) ProtoMessage()

func (*AnalyzeIamPolicyResponse) ProtoReflect 

func (x *AnalyzeIamPolicyResponse) ProtoReflect() protoreflect.Message

func (*AnalyzeIamPolicyResponse) Reset 

func (x *AnalyzeIamPolicyResponse) Reset()

func (*AnalyzeIamPolicyResponse) String 

func (x *AnalyzeIamPolicyResponse) String() string

type AnalyzeIamPolicyResponse_IamPolicyAnalysis 

type AnalyzeIamPolicyResponse_IamPolicyAnalysis struct {

	// The analysis query.
	AnalysisQuery *IamPolicyAnalysisQuery `protobuf:"bytes,1,opt,name=analysis_query,json=analysisQuery,proto3" json:"analysis_query,omitempty"`
	// A list of [IamPolicyAnalysisResult][google.cloud.asset.v1.IamPolicyAnalysisResult] that matches the analysis query, or
	// empty if no result is found.
	AnalysisResults []*IamPolicyAnalysisResult `protobuf:"bytes,2,rep,name=analysis_results,json=analysisResults,proto3" json:"analysis_results,omitempty"`
	// Represents whether all entries in the [analysis_results][google.cloud.asset.v1.AnalyzeIamPolicyResponse.IamPolicyAnalysis.analysis_results] have been
	// fully explored to answer the query.
	FullyExplored bool `protobuf:"varint,3,opt,name=fully_explored,json=fullyExplored,proto3" json:"fully_explored,omitempty"`
	// A list of non-critical errors happened during the query handling.
	NonCriticalErrors []*IamPolicyAnalysisState `protobuf:"bytes,5,rep,name=non_critical_errors,json=nonCriticalErrors,proto3" json:"non_critical_errors,omitempty"`
	// contains filtered or unexported fields
}

An analysis message to group the query and results.

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) Descriptor deprecated 

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) Descriptor() ([]byte, []int)

Deprecated: Use AnalyzeIamPolicyResponse_IamPolicyAnalysis.ProtoReflect.Descriptor instead.

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetAnalysisQuery 

func (x *AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetAnalysisQuery() *IamPolicyAnalysisQuery

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetAnalysisResults 

func (x *AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetAnalysisResults() []*IamPolicyAnalysisResult

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetFullyExplored 

func (x *AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetFullyExplored() bool

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetNonCriticalErrors 

func (x *AnalyzeIamPolicyResponse_IamPolicyAnalysis) GetNonCriticalErrors() []*IamPolicyAnalysisState

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) ProtoMessage 

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) ProtoMessage()

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) ProtoReflect 

func (x *AnalyzeIamPolicyResponse_IamPolicyAnalysis) ProtoReflect() protoreflect.Message

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) Reset 

func (x *AnalyzeIamPolicyResponse_IamPolicyAnalysis) Reset()

func (*AnalyzeIamPolicyResponse_IamPolicyAnalysis) String 

func (x *AnalyzeIamPolicyResponse_IamPolicyAnalysis) String() string

type Asset 

type Asset struct {

	// The last update timestamp of an asset. update_time is updated when
	// create/update/delete operation is performed.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,11,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// The full name of the asset. Example:
	// `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`
	//
	// See [Resource
	// names](https://cloud.google.com/apis/design/resource_names#full_resource_name)
	// for more information.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The type of the asset. Example: `compute.googleapis.com/Disk`
	//
	// See [Supported asset
	// types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
	// for more information.
	AssetType string `protobuf:"bytes,2,opt,name=asset_type,json=assetType,proto3" json:"asset_type,omitempty"`
	// A representation of the resource.
	Resource *Resource `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
	// A representation of the Cloud IAM policy set on a Google Cloud resource.
	// There can be a maximum of one Cloud IAM policy set on any given resource.
	// In addition, Cloud IAM policies inherit their granted access scope from any
	// policies set on parent resources in the resource hierarchy. Therefore, the
	// effectively policy is the union of both the policy set on this resource
	// and each policy set on all of the resource's ancestry resource levels in
	// the hierarchy. See
	// [this topic](https://cloud.google.com/iam/docs/policies#inheritance) for
	// more information.
	IamPolicy *v1.Policy `protobuf:"bytes,4,opt,name=iam_policy,json=iamPolicy,proto3" json:"iam_policy,omitempty"`
	// A representation of an [organization
	// policy](https://cloud.google.com/resource-manager/docs/organization-policy/overview#organization_policy).
	// There can be more than one organization policy with different constraints
	// set on a given resource.
	OrgPolicy []*v11.Policy `protobuf:"bytes,6,rep,name=org_policy,json=orgPolicy,proto3" json:"org_policy,omitempty"`
	// A representation of an [access
	// policy](https://cloud.google.com/access-context-manager/docs/overview#access-policies).
	//
	// Types that are assignable to AccessContextPolicy:
	//	*Asset_AccessPolicy
	//	*Asset_AccessLevel
	//	*Asset_ServicePerimeter
	AccessContextPolicy isAsset_AccessContextPolicy `protobuf_oneof:"access_context_policy"`
	// A representation of runtime OS Inventory information. See [this
	// topic](https://cloud.google.com/compute/docs/instances/os-inventory-management)
	// for more information.
	OsInventory *v12.Inventory `protobuf:"bytes,12,opt,name=os_inventory,json=osInventory,proto3" json:"os_inventory,omitempty"`
	// The ancestry path of an asset in Google Cloud [resource
	// hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy),
	// represented as a list of relative resource names. An ancestry path starts
	// with the closest ancestor in the hierarchy and ends at root. If the asset
	// is a project, folder, or organization, the ancestry path starts from the
	// asset itself.
	//
	// Example: `["projects/123456789", "folders/5432", "organizations/1234"]`
	Ancestors []string `protobuf:"bytes,10,rep,name=ancestors,proto3" json:"ancestors,omitempty"`
	// contains filtered or unexported fields
}

An asset in Google Cloud. An asset can be any resource in the Google Cloud [resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy), a resource outside the Google Cloud resource hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy (e.g. Cloud IAM policy), or a relationship (e.g. an INSTANCE_TO_INSTANCEGROUP relationship). See [Supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) for more information.

func (*Asset) Descriptor deprecated 

func (*Asset) Descriptor() ([]byte, []int)

Deprecated: Use Asset.ProtoReflect.Descriptor instead.

func (*Asset) GetAccessContextPolicy 

func (m *Asset) GetAccessContextPolicy() isAsset_AccessContextPolicy

func (*Asset) GetAccessLevel 

func (x *Asset) GetAccessLevel() *v13.AccessLevel

func (*Asset) GetAccessPolicy 

func (x *Asset) GetAccessPolicy() *v13.AccessPolicy

func (*Asset) GetAncestors 

func (x *Asset) GetAncestors() []string

func (*Asset) GetAssetType 

func (x *Asset) GetAssetType() string

func (*Asset) GetIamPolicy 

func (x *Asset) GetIamPolicy() *v1.Policy

func (*Asset) GetName 

func (x *Asset) GetName() string

func (*Asset) GetOrgPolicy 

func (x *Asset) GetOrgPolicy() []*v11.Policy

func (*Asset) GetOsInventory 

func (x *Asset) GetOsInventory() *v12.Inventory

func (*Asset) GetResource 

func (x *Asset) GetResource() *Resource

func (*Asset) GetServicePerimeter 

func (x *Asset) GetServicePerimeter() *v13.ServicePerimeter

func (*Asset) GetUpdateTime 

func (x *Asset) GetUpdateTime() *timestamppb.Timestamp

func (*Asset) ProtoMessage 

func (*Asset) ProtoMessage()

func (*Asset) ProtoReflect 

func (x *Asset) ProtoReflect() protoreflect.Message

func (*Asset) Reset 

func (x *Asset) Reset()

func (*Asset) String 

func (x *Asset) String() string

type AssetServiceClient 

type AssetServiceClient interface {
	// Exports assets with time and resource types to a given Cloud Storage
	// location/BigQuery table. For Cloud Storage location destinations, the
	// output format is newline-delimited JSON. Each line represents a
	// [google.cloud.asset.v1.Asset][google.cloud.asset.v1.Asset] in the JSON format; for BigQuery table
	// destinations, the output table stores the fields in asset proto as columns.
	// This API implements the [google.longrunning.Operation][google.longrunning.Operation] API
	// , which allows you to keep track of the export. We recommend intervals of
	// at least 2 seconds with exponential retry to poll the export operation
	// result. For regular-size resource parent, the export operation usually
	// finishes within 5 minutes.
	ExportAssets(ctx context.Context, in *ExportAssetsRequest, opts ...grpc.CallOption) (*longrunning.Operation, error)
	// Lists assets with time and resource types and returns paged results in
	// response.
	ListAssets(ctx context.Context, in *ListAssetsRequest, opts ...grpc.CallOption) (*ListAssetsResponse, error)
	// Batch gets the update history of assets that overlap a time window.
	// For IAM_POLICY content, this API outputs history when the asset and its
	// attached IAM POLICY both exist. This can create gaps in the output history.
	// Otherwise, this API outputs history with asset in both non-delete or
	// deleted status.
	// If a specified asset does not exist, this API returns an INVALID_ARGUMENT
	// error.
	BatchGetAssetsHistory(ctx context.Context, in *BatchGetAssetsHistoryRequest, opts ...grpc.CallOption) (*BatchGetAssetsHistoryResponse, error)
	// Creates a feed in a parent project/folder/organization to listen to its
	// asset updates.
	CreateFeed(ctx context.Context, in *CreateFeedRequest, opts ...grpc.CallOption) (*Feed, error)
	// Gets details about an asset feed.
	GetFeed(ctx context.Context, in *GetFeedRequest, opts ...grpc.CallOption) (*Feed, error)
	// Lists all asset feeds in a parent project/folder/organization.
	ListFeeds(ctx context.Context, in *ListFeedsRequest, opts ...grpc.CallOption) (*ListFeedsResponse, error)
	// Updates an asset feed configuration.
	UpdateFeed(ctx context.Context, in *UpdateFeedRequest, opts ...grpc.CallOption) (*Feed, error)
	// Deletes an asset feed.
	DeleteFeed(ctx context.Context, in *DeleteFeedRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Searches all Cloud resources within the specified scope, such as a project,
	// folder, or organization. The caller must be granted the
	// `cloudasset.assets.searchAllResources` permission on the desired scope,
	// otherwise the request will be rejected.
	SearchAllResources(ctx context.Context, in *SearchAllResourcesRequest, opts ...grpc.CallOption) (*SearchAllResourcesResponse, error)
	// Searches all IAM policies within the specified scope, such as a project,
	// folder, or organization. The caller must be granted the
	// `cloudasset.assets.searchAllIamPolicies` permission on the desired scope,
	// otherwise the request will be rejected.
	SearchAllIamPolicies(ctx context.Context, in *SearchAllIamPoliciesRequest, opts ...grpc.CallOption) (*SearchAllIamPoliciesResponse, error)
	// Analyzes IAM policies to answer which identities have what accesses on
	// which resources.
	AnalyzeIamPolicy(ctx context.Context, in *AnalyzeIamPolicyRequest, opts ...grpc.CallOption) (*AnalyzeIamPolicyResponse, error)
	// Analyzes IAM policies asynchronously to answer which identities have what
	// accesses on which resources, and writes the analysis results to a Google
	// Cloud Storage or a BigQuery destination. For Cloud Storage destination, the
	// output format is the JSON format that represents a
	// [AnalyzeIamPolicyResponse][google.cloud.asset.v1.AnalyzeIamPolicyResponse]. This method implements the
	// [google.longrunning.Operation][google.longrunning.Operation], which allows you to track the operation
	// status. We recommend intervals of at least 2 seconds with exponential
	// backoff retry to poll the operation result. The metadata contains the
	// request to help callers to map responses to requests.
	AnalyzeIamPolicyLongrunning(ctx context.Context, in *AnalyzeIamPolicyLongrunningRequest, opts ...grpc.CallOption) (*longrunning.Operation, error)
}

AssetServiceClient is the client API for AssetService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

func NewAssetServiceClient 

func NewAssetServiceClient(cc grpc.ClientConnInterface) AssetServiceClient

type AssetServiceServer 

type AssetServiceServer interface {
	// Exports assets with time and resource types to a given Cloud Storage
	// location/BigQuery table. For Cloud Storage location destinations, the
	// output format is newline-delimited JSON. Each line represents a
	// [google.cloud.asset.v1.Asset][google.cloud.asset.v1.Asset] in the JSON format; for BigQuery table
	// destinations, the output table stores the fields in asset proto as columns.
	// This API implements the [google.longrunning.Operation][google.longrunning.Operation] API
	// , which allows you to keep track of the export. We recommend intervals of
	// at least 2 seconds with exponential retry to poll the export operation
	// result. For regular-size resource parent, the export operation usually
	// finishes within 5 minutes.
	ExportAssets(context.Context, *ExportAssetsRequest) (*longrunning.Operation, error)
	// Lists assets with time and resource types and returns paged results in
	// response.
	ListAssets(context.Context, *ListAssetsRequest) (*ListAssetsResponse, error)
	// Batch gets the update history of assets that overlap a time window.
	// For IAM_POLICY content, this API outputs history when the asset and its
	// attached IAM POLICY both exist. This can create gaps in the output history.
	// Otherwise, this API outputs history with asset in both non-delete or
	// deleted status.
	// If a specified asset does not exist, this API returns an INVALID_ARGUMENT
	// error.
	BatchGetAssetsHistory(context.Context, *BatchGetAssetsHistoryRequest) (*BatchGetAssetsHistoryResponse, error)
	// Creates a feed in a parent project/folder/organization to listen to its
	// asset updates.
	CreateFeed(context.Context, *CreateFeedRequest) (*Feed, error)
	// Gets details about an asset feed.
	GetFeed(context.Context, *GetFeedRequest) (*Feed, error)
	// Lists all asset feeds in a parent project/folder/organization.
	ListFeeds(context.Context, *ListFeedsRequest) (*ListFeedsResponse, error)
	// Updates an asset feed configuration.
	UpdateFeed(context.Context, *UpdateFeedRequest) (*Feed, error)
	// Deletes an asset feed.
	DeleteFeed(context.Context, *DeleteFeedRequest) (*emptypb.Empty, error)
	// Searches all Cloud resources within the specified scope, such as a project,
	// folder, or organization. The caller must be granted the
	// `cloudasset.assets.searchAllResources` permission on the desired scope,
	// otherwise the request will be rejected.
	SearchAllResources(context.Context, *SearchAllResourcesRequest) (*SearchAllResourcesResponse, error)
	// Searches all IAM policies within the specified scope, such as a project,
	// folder, or organization. The caller must be granted the
	// `cloudasset.assets.searchAllIamPolicies` permission on the desired scope,
	// otherwise the request will be rejected.
	SearchAllIamPolicies(context.Context, *SearchAllIamPoliciesRequest) (*SearchAllIamPoliciesResponse, error)
	// Analyzes IAM policies to answer which identities have what accesses on
	// which resources.
	AnalyzeIamPolicy(context.Context, *AnalyzeIamPolicyRequest) (*AnalyzeIamPolicyResponse, error)
	// Analyzes IAM policies asynchronously to answer which identities have what
	// accesses on which resources, and writes the analysis results to a Google
	// Cloud Storage or a BigQuery destination. For Cloud Storage destination, the
	// output format is the JSON format that represents a
	// [AnalyzeIamPolicyResponse][google.cloud.asset.v1.AnalyzeIamPolicyResponse]. This method implements the
	// [google.longrunning.Operation][google.longrunning.Operation], which allows you to track the operation
	// status. We recommend intervals of at least 2 seconds with exponential
	// backoff retry to poll the operation result. The metadata contains the
	// request to help callers to map responses to requests.
	AnalyzeIamPolicyLongrunning(context.Context, *AnalyzeIamPolicyLongrunningRequest) (*longrunning.Operation, error)
}

AssetServiceServer is the server API for AssetService service.

type Asset_AccessLevel 

type Asset_AccessLevel struct {
	// Please also refer to the [access level user
	// guide](https://cloud.google.com/access-context-manager/docs/overview#access-levels).
	AccessLevel *v13.AccessLevel `protobuf:"bytes,8,opt,name=access_level,json=accessLevel,proto3,oneof"`
}

type Asset_AccessPolicy 

type Asset_AccessPolicy struct {
	// Please also refer to the [access policy user
	// guide](https://cloud.google.com/access-context-manager/docs/overview#access-policies).
	AccessPolicy *v13.AccessPolicy `protobuf:"bytes,7,opt,name=access_policy,json=accessPolicy,proto3,oneof"`
}

type Asset_ServicePerimeter 

type Asset_ServicePerimeter struct {
	// Please also refer to the [service perimeter user
	// guide](https://cloud.google.com/vpc-service-controls/docs/overview).
	ServicePerimeter *v13.ServicePerimeter `protobuf:"bytes,9,opt,name=service_perimeter,json=servicePerimeter,proto3,oneof"`
}

type BatchGetAssetsHistoryRequest 

type BatchGetAssetsHistoryRequest struct {

	// Required. The relative name of the root asset. It can only be an
	// organization number (such as "organizations/123"), a project ID (such as
	// "projects/my-project-id")", or a project number (such as "projects/12345").
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// A list of the full names of the assets.
	// See: https://cloud.google.com/asset-inventory/docs/resource-name-format
	// Example:
	//
	// `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
	//
	// The request becomes a no-op if the asset name list is empty, and the max
	// size of the asset name list is 100 in one request.
	AssetNames []string `protobuf:"bytes,2,rep,name=asset_names,json=assetNames,proto3" json:"asset_names,omitempty"`
	// Optional. The content type.
	ContentType ContentType `` /* 134-byte string literal not displayed */
	// Optional. The time window for the asset history. Both start_time and
	// end_time are optional and if set, it must be after the current time minus
	// 35 days. If end_time is not set, it is default to current timestamp.
	// If start_time is not set, the snapshot of the assets at end_time will be
	// returned. The returned results contain all temporal assets whose time
	// window overlap with read_time_window.
	ReadTimeWindow *TimeWindow `protobuf:"bytes,4,opt,name=read_time_window,json=readTimeWindow,proto3" json:"read_time_window,omitempty"`
	// contains filtered or unexported fields
}

Batch get assets history request.

func (*BatchGetAssetsHistoryRequest) Descriptor deprecated 

func (*BatchGetAssetsHistoryRequest) Descriptor() ([]byte, []int)

Deprecated: Use BatchGetAssetsHistoryRequest.ProtoReflect.Descriptor instead.

func (*BatchGetAssetsHistoryRequest) GetAssetNames 

func (x *BatchGetAssetsHistoryRequest) GetAssetNames() []string

func (*BatchGetAssetsHistoryRequest) GetContentType 

func (x *BatchGetAssetsHistoryRequest) GetContentType() ContentType

func (*BatchGetAssetsHistoryRequest) GetParent 

func (x *BatchGetAssetsHistoryRequest) GetParent() string

func (*BatchGetAssetsHistoryRequest) GetReadTimeWindow 

func (x *BatchGetAssetsHistoryRequest) GetReadTimeWindow() *TimeWindow

func (*BatchGetAssetsHistoryRequest) ProtoMessage 

func (*BatchGetAssetsHistoryRequest) ProtoMessage()

func (*BatchGetAssetsHistoryRequest) ProtoReflect 

func (x *BatchGetAssetsHistoryRequest) ProtoReflect() protoreflect.Message

func (*BatchGetAssetsHistoryRequest) Reset 

func (x *BatchGetAssetsHistoryRequest) Reset()

func (*BatchGetAssetsHistoryRequest) String 

func (x *BatchGetAssetsHistoryRequest) String() string

type BatchGetAssetsHistoryResponse 

type BatchGetAssetsHistoryResponse struct {

	// A list of assets with valid time windows.
	Assets []*TemporalAsset `protobuf:"bytes,1,rep,name=assets,proto3" json:"assets,omitempty"`
	// contains filtered or unexported fields
}

Batch get assets history response.

func (*BatchGetAssetsHistoryResponse) Descriptor deprecated 

func (*BatchGetAssetsHistoryResponse) Descriptor() ([]byte, []int)

Deprecated: Use BatchGetAssetsHistoryResponse.ProtoReflect.Descriptor instead.

func (*BatchGetAssetsHistoryResponse) GetAssets 

func (x *BatchGetAssetsHistoryResponse) GetAssets() []*TemporalAsset

func (*BatchGetAssetsHistoryResponse) ProtoMessage 

func (*BatchGetAssetsHistoryResponse) ProtoMessage()

func (*BatchGetAssetsHistoryResponse) ProtoReflect 

func (x *BatchGetAssetsHistoryResponse) ProtoReflect() protoreflect.Message

func (*BatchGetAssetsHistoryResponse) Reset 

func (x *BatchGetAssetsHistoryResponse) Reset()

func (*BatchGetAssetsHistoryResponse) String 

func (x *BatchGetAssetsHistoryResponse) String() string

type BigQueryDestination 

type BigQueryDestination struct {

	// Required. The BigQuery dataset in format
	// "projects/projectId/datasets/datasetId", to which the snapshot result
	// should be exported. If this dataset does not exist, the export call returns
	// an INVALID_ARGUMENT error.
	Dataset string `protobuf:"bytes,1,opt,name=dataset,proto3" json:"dataset,omitempty"`
	// Required. The BigQuery table to which the snapshot result should be
	// written. If this table does not exist, a new table with the given name
	// will be created.
	Table string `protobuf:"bytes,2,opt,name=table,proto3" json:"table,omitempty"`
	// If the destination table already exists and this flag is `TRUE`, the
	// table will be overwritten by the contents of assets snapshot. If the flag
	// is `FALSE` or unset and the destination table already exists, the export
	// call returns an INVALID_ARGUMEMT error.
	Force bool `protobuf:"varint,3,opt,name=force,proto3" json:"force,omitempty"`
	// [partition_spec] determines whether to export to partitioned table(s) and
	// how to partition the data.
	//
	// If [partition_spec] is unset or [partition_spec.partition_key] is unset or
	// `PARTITION_KEY_UNSPECIFIED`, the snapshot results will be exported to
	// non-partitioned table(s). [force] will decide whether to overwrite existing
	// table(s).
	//
	// If [partition_spec] is specified. First, the snapshot results will be
	// written to partitioned table(s) with two additional timestamp columns,
	// readTime and requestTime, one of which will be the partition key. Secondly,
	// in the case when any destination table already exists, it will first try to
	// update existing table's schema as necessary by appending additional
	// columns. Then, if [force] is `TRUE`, the corresponding partition will be
	// overwritten by the snapshot results (data in different partitions will
	// remain intact); if [force] is unset or `FALSE`, it will append the data. An
	// error will be returned if the schema update or data appension fails.
	PartitionSpec *PartitionSpec `protobuf:"bytes,4,opt,name=partition_spec,json=partitionSpec,proto3" json:"partition_spec,omitempty"`
	// If this flag is `TRUE`, the snapshot results will be written to one or
	// multiple tables, each of which contains results of one asset type. The
	// [force] and [partition_spec] fields will apply to each of them.
	//
	// Field [table] will be concatenated with "_" and the asset type names (see
	// https://cloud.google.com/asset-inventory/docs/supported-asset-types for
	// supported asset types) to construct per-asset-type table names, in which
	// all non-alphanumeric characters like "." and "/" will be substituted by
	// "_". Example: if field [table] is "mytable" and snapshot results
	// contain "storage.googleapis.com/Bucket" assets, the corresponding table
	// name will be "mytable_storage_googleapis_com_Bucket". If any of these
	// tables does not exist, a new table with the concatenated name will be
	// created.
	//
	// When [content_type] in the ExportAssetsRequest is `RESOURCE`, the schema of
	// each table will include RECORD-type columns mapped to the nested fields in
	// the Asset.resource.data field of that asset type (up to the 15 nested level
	// BigQuery supports
	// (https://cloud.google.com/bigquery/docs/nested-repeated#limitations)). The
	// fields in >15 nested levels will be stored in JSON format string as a child
	// column of its parent RECORD column.
	//
	// If error occurs when exporting to any table, the whole export call will
	// return an error but the export results that already succeed will persist.
	// Example: if exporting to table_type_A succeeds when exporting to
	// table_type_B fails during one export call, the results in table_type_A will
	// persist and there will not be partial results persisting in a table.
	SeparateTablesPerAssetType bool `` /* 146-byte string literal not displayed */
	// contains filtered or unexported fields
}

A BigQuery destination for exporting assets to.

func (*BigQueryDestination) Descriptor deprecated 

func (*BigQueryDestination) Descriptor() ([]byte, []int)

Deprecated: Use BigQueryDestination.ProtoReflect.Descriptor instead.

func (*BigQueryDestination) GetDataset 

func (x *BigQueryDestination) GetDataset() string

func (*BigQueryDestination) GetForce 

func (x *BigQueryDestination) GetForce() bool

func (*BigQueryDestination) GetPartitionSpec 

func (x *BigQueryDestination) GetPartitionSpec() *PartitionSpec

func (*BigQueryDestination) GetSeparateTablesPerAssetType 

func (x *BigQueryDestination) GetSeparateTablesPerAssetType() bool

func (*BigQueryDestination) GetTable 

func (x *BigQueryDestination) GetTable() string

func (*BigQueryDestination) ProtoMessage 

func (*BigQueryDestination) ProtoMessage()

func (*BigQueryDestination) ProtoReflect 

func (x *BigQueryDestination) ProtoReflect() protoreflect.Message

func (*BigQueryDestination) Reset 

func (x *BigQueryDestination) Reset()

func (*BigQueryDestination) String 

func (x *BigQueryDestination) String() string

type ConditionEvaluation 

type ConditionEvaluation struct {

	// The evaluation result.
	EvaluationValue ConditionEvaluation_EvaluationValue `` /* 170-byte string literal not displayed */
	// contains filtered or unexported fields
}

The Condition evaluation.

func (*ConditionEvaluation) Descriptor deprecated 

func (*ConditionEvaluation) Descriptor() ([]byte, []int)

Deprecated: Use ConditionEvaluation.ProtoReflect.Descriptor instead.

func (*ConditionEvaluation) GetEvaluationValue 

func (x *ConditionEvaluation) GetEvaluationValue() ConditionEvaluation_EvaluationValue

func (*ConditionEvaluation) ProtoMessage 

func (*ConditionEvaluation) ProtoMessage()

func (*ConditionEvaluation) ProtoReflect 

func (x *ConditionEvaluation) ProtoReflect() protoreflect.Message

func (*ConditionEvaluation) Reset 

func (x *ConditionEvaluation) Reset()

func (*ConditionEvaluation) String 

func (x *ConditionEvaluation) String() string

type ConditionEvaluation_EvaluationValue 

type ConditionEvaluation_EvaluationValue int32

Value of this expression. 

const (
	// Reserved for future use.
	ConditionEvaluation_EVALUATION_VALUE_UNSPECIFIED ConditionEvaluation_EvaluationValue = 0
	// The evaluation result is `true`.
	ConditionEvaluation_TRUE ConditionEvaluation_EvaluationValue = 1
	// The evaluation result is `false`.
	ConditionEvaluation_FALSE ConditionEvaluation_EvaluationValue = 2
	// The evaluation result is `conditional` when the condition expression
	// contains variables that are either missing input values or have not been
	// supported by Analyzer yet.
	ConditionEvaluation_CONDITIONAL ConditionEvaluation_EvaluationValue = 3
)

func (ConditionEvaluation_EvaluationValue) Descriptor 

func (ConditionEvaluation_EvaluationValue) Descriptor() protoreflect.EnumDescriptor

func (ConditionEvaluation_EvaluationValue) Enum 

func (x ConditionEvaluation_EvaluationValue) Enum() *ConditionEvaluation_EvaluationValue

func (ConditionEvaluation_EvaluationValue) EnumDescriptor deprecated 

func (ConditionEvaluation_EvaluationValue) EnumDescriptor() ([]byte, []int)

Deprecated: Use ConditionEvaluation_EvaluationValue.Descriptor instead.

func (ConditionEvaluation_EvaluationValue) Number 

func (x ConditionEvaluation_EvaluationValue) Number() protoreflect.EnumNumber

func (ConditionEvaluation_EvaluationValue) String 

func (x ConditionEvaluation_EvaluationValue) String() string

func (ConditionEvaluation_EvaluationValue) Type 

func (ConditionEvaluation_EvaluationValue) Type() protoreflect.EnumType

type ContentType 

type ContentType int32

Asset content type. 

const (
	// Unspecified content type.
	ContentType_CONTENT_TYPE_UNSPECIFIED ContentType = 0
	// Resource metadata.
	ContentType_RESOURCE ContentType = 1
	// The actual IAM policy set on a resource.
	ContentType_IAM_POLICY ContentType = 2
	// The Cloud Organization Policy set on an asset.
	ContentType_ORG_POLICY ContentType = 4
	// The Cloud Access context manager Policy set on an asset.
	ContentType_ACCESS_POLICY ContentType = 5
	// The runtime OS Inventory information.
	ContentType_OS_INVENTORY ContentType = 6
)

func (ContentType) Descriptor 

func (ContentType) Descriptor() protoreflect.EnumDescriptor

func (ContentType) Enum 

func (x ContentType) Enum() *ContentType

func (ContentType) EnumDescriptor deprecated 

func (ContentType) EnumDescriptor() ([]byte, []int)

Deprecated: Use ContentType.Descriptor instead.

func (ContentType) Number 

func (x ContentType) Number() protoreflect.EnumNumber

func (ContentType) String 

func (x ContentType) String() string

func (ContentType) Type 

func (ContentType) Type() protoreflect.EnumType

type CreateFeedRequest 

type CreateFeedRequest struct {

	// Required. The name of the project/folder/organization where this feed
	// should be created in. It can only be an organization number (such as
	// "organizations/123"), a folder number (such as "folders/123"), a project ID
	// (such as "projects/my-project-id")", or a project number (such as
	// "projects/12345").
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. This is the client-assigned asset feed identifier and it needs to
	// be unique under a specific parent project/folder/organization.
	FeedId string `protobuf:"bytes,2,opt,name=feed_id,json=feedId,proto3" json:"feed_id,omitempty"`
	// Required. The feed details. The field `name` must be empty and it will be generated
	// in the format of:
	// projects/project_number/feeds/feed_id
	// folders/folder_number/feeds/feed_id
	// organizations/organization_number/feeds/feed_id
	Feed *Feed `protobuf:"bytes,3,opt,name=feed,proto3" json:"feed,omitempty"`
	// contains filtered or unexported fields
}

Create asset feed request.

func (*CreateFeedRequest) Descriptor deprecated 

func (*CreateFeedRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateFeedRequest.ProtoReflect.Descriptor instead.

func (*CreateFeedRequest) GetFeed 

func (x *CreateFeedRequest) GetFeed() *Feed

func (*CreateFeedRequest) GetFeedId 

func (x *CreateFeedRequest) GetFeedId() string

func (*CreateFeedRequest) GetParent 

func (x *CreateFeedRequest) GetParent() string

func (*CreateFeedRequest) ProtoMessage 

func (*CreateFeedRequest) ProtoMessage()

func (*CreateFeedRequest) ProtoReflect 

func (x *CreateFeedRequest) ProtoReflect() protoreflect.Message

func (*CreateFeedRequest) Reset 

func (x *CreateFeedRequest) Reset()

func (*CreateFeedRequest) String 

func (x *CreateFeedRequest) String() string

type DeleteFeedRequest 

type DeleteFeedRequest struct {

	// Required. The name of the feed and it must be in the format of:
	// projects/project_number/feeds/feed_id
	// folders/folder_number/feeds/feed_id
	// organizations/organization_number/feeds/feed_id
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

func (*DeleteFeedRequest) Descriptor deprecated 

func (*DeleteFeedRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteFeedRequest.ProtoReflect.Descriptor instead.

func (*DeleteFeedRequest) GetName 

func (x *DeleteFeedRequest) GetName() string

func (*DeleteFeedRequest) ProtoMessage 

func (*DeleteFeedRequest) ProtoMessage()

func (*DeleteFeedRequest) ProtoReflect 

func (x *DeleteFeedRequest) ProtoReflect() protoreflect.Message

func (*DeleteFeedRequest) Reset 

func (x *DeleteFeedRequest) Reset()

func (*DeleteFeedRequest) String 

func (x *DeleteFeedRequest) String() string

type ExportAssetsRequest 

type ExportAssetsRequest struct {

	// Required. The relative name of the root asset. This can only be an
	// organization number (such as "organizations/123"), a project ID (such as
	// "projects/my-project-id"), or a project number (such as "projects/12345"),
	// or a folder number (such as "folders/123").
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Timestamp to take an asset snapshot. This can only be set to a timestamp
	// between the current time and the current time minus 35 days (inclusive).
	// If not specified, the current time will be used. Due to delays in resource
	// data collection and indexing, there is a volatile window during which
	// running the same query may get different results.
	ReadTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=read_time,json=readTime,proto3" json:"read_time,omitempty"`
	// A list of asset types to take a snapshot for. For example:
	// "compute.googleapis.com/Disk".
	//
	// Regular expressions are also supported. For example:
	//
	// * "compute.googleapis.com.*" snapshots resources whose asset type starts
	// with "compute.googleapis.com".
	// * ".*Instance" snapshots resources whose asset type ends with "Instance".
	// * ".*Instance.*" snapshots resources whose asset type contains "Instance".
	//
	// See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
	// regular expression syntax. If the regular expression does not match any
	// supported asset type, an INVALID_ARGUMENT error will be returned.
	//
	// If specified, only matching assets will be returned, otherwise, it will
	// snapshot all asset types. See [Introduction to Cloud Asset
	// Inventory](https://cloud.google.com/asset-inventory/docs/overview)
	// for all supported asset types.
	AssetTypes []string `protobuf:"bytes,3,rep,name=asset_types,json=assetTypes,proto3" json:"asset_types,omitempty"`
	// Asset content type. If not specified, no content but the asset name will be
	// returned.
	ContentType ContentType `` /* 134-byte string literal not displayed */
	// Required. Output configuration indicating where the results will be output to.
	OutputConfig *OutputConfig `protobuf:"bytes,5,opt,name=output_config,json=outputConfig,proto3" json:"output_config,omitempty"`
	// contains filtered or unexported fields
}

Export asset request.

func (*ExportAssetsRequest) Descriptor deprecated 

func (*ExportAssetsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ExportAssetsRequest.ProtoReflect.Descriptor instead.

func (*ExportAssetsRequest) GetAssetTypes 

func (x *ExportAssetsRequest) GetAssetTypes() []string

func (*ExportAssetsRequest) GetContentType 

func (x *ExportAssetsRequest) GetContentType() ContentType

func (*ExportAssetsRequest) GetOutputConfig 

func (x *ExportAssetsRequest) GetOutputConfig() *OutputConfig

func (*ExportAssetsRequest) GetParent 

func (x *ExportAssetsRequest) GetParent() string

func (*ExportAssetsRequest) GetReadTime 

func (x *ExportAssetsRequest) GetReadTime() *timestamppb.Timestamp

func (*ExportAssetsRequest) ProtoMessage 

func (*ExportAssetsRequest) ProtoMessage()

func (*ExportAssetsRequest) ProtoReflect 

func (x *ExportAssetsRequest) ProtoReflect() protoreflect.Message

func (*ExportAssetsRequest) Reset 

func (x *ExportAssetsRequest) Reset()

func (*ExportAssetsRequest) String 

func (x *ExportAssetsRequest) String() string

type ExportAssetsResponse 

type ExportAssetsResponse struct {

	// Time the snapshot was taken.
	ReadTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=read_time,json=readTime,proto3" json:"read_time,omitempty"`
	// Output configuration indicating where the results were output to.
	OutputConfig *OutputConfig `protobuf:"bytes,2,opt,name=output_config,json=outputConfig,proto3" json:"output_config,omitempty"`
	// Output result indicating where the assets were exported to. For example, a
	// set of actual Google Cloud Storage object uris where the assets are
	// exported to. The uris can be different from what [output_config] has
	// specified, as the service will split the output object into multiple ones
	// once it exceeds a single Google Cloud Storage object limit.
	OutputResult *OutputResult `protobuf:"bytes,3,opt,name=output_result,json=outputResult,proto3" json:"output_result,omitempty"`
	// contains filtered or unexported fields
}

The export asset response. This message is returned by the [google.longrunning.Operations.GetOperation][google.longrunning.Operations.GetOperation] method in the returned [google.longrunning.Operation.response][google.longrunning.Operation.response] field.

func (*ExportAssetsResponse) Descriptor deprecated 

func (*ExportAssetsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ExportAssetsResponse.ProtoReflect.Descriptor instead.

func (*ExportAssetsResponse) GetOutputConfig 

func (x *ExportAssetsResponse) GetOutputConfig() *OutputConfig

func (*ExportAssetsResponse) GetOutputResult 

func (x *ExportAssetsResponse) GetOutputResult() *OutputResult

func (*ExportAssetsResponse) GetReadTime 

func (x *ExportAssetsResponse) GetReadTime() *timestamppb.Timestamp

func (*ExportAssetsResponse) ProtoMessage 

func (*ExportAssetsResponse) ProtoMessage()

func (*ExportAssetsResponse) ProtoReflect 

func (x *ExportAssetsResponse) ProtoReflect() protoreflect.Message

func (*ExportAssetsResponse) Reset 

func (x *ExportAssetsResponse) Reset()

func (*ExportAssetsResponse) String 

func (x *ExportAssetsResponse) String() string

type Feed 

type Feed struct {

	// Required. The format will be
	// projects/{project_number}/feeds/{client-assigned_feed_identifier} or
	// folders/{folder_number}/feeds/{client-assigned_feed_identifier} or
	// organizations/{organization_number}/feeds/{client-assigned_feed_identifier}
	//
	// The client-assigned feed identifier must be unique within the parent
	// project/folder/organization.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// A list of the full names of the assets to receive updates. You must specify
	// either or both of asset_names and asset_types. Only asset updates matching
	// specified asset_names or asset_types are exported to the feed.
	// Example:
	// `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
	// See [Resource
	// Names](https://cloud.google.com/apis/design/resource_names#full_resource_name)
	// for more info.
	AssetNames []string `protobuf:"bytes,2,rep,name=asset_names,json=assetNames,proto3" json:"asset_names,omitempty"`
	// A list of types of the assets to receive updates. You must specify either
	// or both of asset_names and asset_types. Only asset updates matching
	// specified asset_names or asset_types are exported to the feed.
	// Example: `"compute.googleapis.com/Disk"`
	//
	// See [this
	// topic](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
	// for a list of all supported asset types.
	AssetTypes []string `protobuf:"bytes,3,rep,name=asset_types,json=assetTypes,proto3" json:"asset_types,omitempty"`
	// Asset content type. If not specified, no content but the asset name and
	// type will be returned.
	ContentType ContentType `` /* 134-byte string literal not displayed */
	// Required. Feed output configuration defining where the asset updates are
	// published to.
	FeedOutputConfig *FeedOutputConfig `protobuf:"bytes,5,opt,name=feed_output_config,json=feedOutputConfig,proto3" json:"feed_output_config,omitempty"`
	// A condition which determines whether an asset update should be published.
	// If specified, an asset will be returned only when the expression evaluates
	// to true.
	// When set, `expression` field in the `Expr` must be a valid [CEL expression]
	// (https://github.com/google/cel-spec) on a TemporalAsset with name
	// `temporal_asset`. Example: a Feed with expression ("temporal_asset.deleted
	// == true") will only publish Asset deletions. Other fields of `Expr` are
	// optional.
	//
	// See our [user
	// guide](https://cloud.google.com/asset-inventory/docs/monitoring-asset-changes#feed_with_condition)
	// for detailed instructions.
	Condition *expr.Expr `protobuf:"bytes,6,opt,name=condition,proto3" json:"condition,omitempty"`
	// contains filtered or unexported fields
}

An asset feed used to export asset updates to a destinations. An asset feed filter controls what updates are exported. The asset feed must be created within a project, organization, or folder. Supported destinations are: Pub/Sub topics.

func (*Feed) Descriptor deprecated 

func (*Feed) Descriptor() ([]byte, []int)

Deprecated: Use Feed.ProtoReflect.Descriptor instead.

func (*Feed) GetAssetNames 

func (x *Feed) GetAssetNames() []string

func (*Feed) GetAssetTypes 

func (x *Feed) GetAssetTypes() []string

func (*Feed) GetCondition 

func (x *Feed) GetCondition() *expr.Expr

func (*Feed) GetContentType 

func (x *Feed) GetContentType() ContentType

func (*Feed) GetFeedOutputConfig 

func (x *Feed) GetFeedOutputConfig() *FeedOutputConfig

func (*Feed) GetName 

func (x *Feed) GetName() string

func (*Feed) ProtoMessage 

func (*Feed) ProtoMessage()

func (*Feed) ProtoReflect 

func (x *Feed) ProtoReflect() protoreflect.Message

func (*Feed) Reset 

func (x *Feed) Reset()

func (*Feed) String 

func (x *Feed) String() string

type FeedOutputConfig 

type FeedOutputConfig struct {

	// Asset feed destination.
	//
	// Types that are assignable to Destination:
	//	*FeedOutputConfig_PubsubDestination
	Destination isFeedOutputConfig_Destination `protobuf_oneof:"destination"`
	// contains filtered or unexported fields
}

Output configuration for asset feed destination.

func (*FeedOutputConfig) Descriptor deprecated 

func (*FeedOutputConfig) Descriptor() ([]byte, []int)

Deprecated: Use FeedOutputConfig.ProtoReflect.Descriptor instead.

func (*FeedOutputConfig) GetDestination 

func (m *FeedOutputConfig) GetDestination() isFeedOutputConfig_Destination

func (*FeedOutputConfig) GetPubsubDestination 

func (x *FeedOutputConfig) GetPubsubDestination() *PubsubDestination

func (*FeedOutputConfig) ProtoMessage 

func (*FeedOutputConfig) ProtoMessage()

func (*FeedOutputConfig) ProtoReflect 

func (x *FeedOutputConfig) ProtoReflect() protoreflect.Message

func (*FeedOutputConfig) Reset 

func (x *FeedOutputConfig) Reset()

func (*FeedOutputConfig) String 

func (x *FeedOutputConfig) String() string

type FeedOutputConfig_PubsubDestination 

type FeedOutputConfig_PubsubDestination struct {
	// Destination on Pub/Sub.
	PubsubDestination *PubsubDestination `protobuf:"bytes,1,opt,name=pubsub_destination,json=pubsubDestination,proto3,oneof"`
}

type GcsDestination 

type GcsDestination struct {

	// Required.
	//
	// Types that are assignable to ObjectUri:
	//	*GcsDestination_Uri
	//	*GcsDestination_UriPrefix
	ObjectUri isGcsDestination_ObjectUri `protobuf_oneof:"object_uri"`
	// contains filtered or unexported fields
}

A Cloud Storage location.

func (*GcsDestination) Descriptor deprecated 

func (*GcsDestination) Descriptor() ([]byte, []int)

Deprecated: Use GcsDestination.ProtoReflect.Descriptor instead.

func (*GcsDestination) GetObjectUri 

func (m *GcsDestination) GetObjectUri() isGcsDestination_ObjectUri

func (*GcsDestination) GetUri 

func (x *GcsDestination) GetUri() string

func (*GcsDestination) GetUriPrefix 

func (x *GcsDestination) GetUriPrefix() string

func (*GcsDestination) ProtoMessage 

func (*GcsDestination) ProtoMessage()

func (*GcsDestination) ProtoReflect 

func (x *GcsDestination) ProtoReflect() protoreflect.Message

func (*GcsDestination) Reset 

func (x *GcsDestination) Reset()

func (*GcsDestination) String 

func (x *GcsDestination) String() string

type GcsDestination_Uri 

type GcsDestination_Uri struct {
	// The uri of the Cloud Storage object. It's the same uri that is used by
	// gsutil. Example: "gs://bucket_name/object_name". See [Viewing and
	// Editing Object
	// Metadata](https://cloud.google.com/storage/docs/viewing-editing-metadata)
	// for more information.
	//
	// If the specified Cloud Storage object already exists and there is no
	// [hold](https://cloud.google.com/storage/docs/object-holds), it will be
	// overwritten with the exported result.
	Uri string `protobuf:"bytes,1,opt,name=uri,proto3,oneof"`
}

type GcsDestination_UriPrefix 

type GcsDestination_UriPrefix struct {
	// The uri prefix of all generated Cloud Storage objects. Example:
	// "gs://bucket_name/object_name_prefix". Each object uri is in format:
	// "gs://bucket_name/object_name_prefix/<asset type>/<shard number> and only
	// contains assets for that type. <shard number> starts from 0. Example:
	// "gs://bucket_name/object_name_prefix/compute.googleapis.com/Disk/0" is
	// the first shard of output objects containing all
	// compute.googleapis.com/Disk assets. An INVALID_ARGUMENT error will be
	// returned if file with the same name "gs://bucket_name/object_name_prefix"
	// already exists.
	UriPrefix string `protobuf:"bytes,2,opt,name=uri_prefix,json=uriPrefix,proto3,oneof"`
}

type GcsOutputResult 

type GcsOutputResult struct {

	// List of uris of the Cloud Storage objects. Example:
	// "gs://bucket_name/object_name".
	Uris []string `protobuf:"bytes,1,rep,name=uris,proto3" json:"uris,omitempty"`
	// contains filtered or unexported fields
}

A Cloud Storage output result.

func (*GcsOutputResult) Descriptor deprecated 

func (*GcsOutputResult) Descriptor() ([]byte, []int)

Deprecated: Use GcsOutputResult.ProtoReflect.Descriptor instead.

func (*GcsOutputResult) GetUris 

func (x *GcsOutputResult) GetUris() []string

func (*GcsOutputResult) ProtoMessage 

func (*GcsOutputResult) ProtoMessage()

func (*GcsOutputResult) ProtoReflect 

func (x *GcsOutputResult) ProtoReflect() protoreflect.Message

func (*GcsOutputResult) Reset 

func (x *GcsOutputResult) Reset()

func (*GcsOutputResult) String 

func (x *GcsOutputResult) String() string

type GetFeedRequest 

type GetFeedRequest struct {

	// Required. The name of the Feed and it must be in the format of:
	// projects/project_number/feeds/feed_id
	// folders/folder_number/feeds/feed_id
	// organizations/organization_number/feeds/feed_id
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Get asset feed request.

func (*GetFeedRequest) Descriptor deprecated 

func (*GetFeedRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetFeedRequest.ProtoReflect.Descriptor instead.

func (*GetFeedRequest) GetName 

func (x *GetFeedRequest) GetName() string

func (*GetFeedRequest) ProtoMessage 

func (*GetFeedRequest) ProtoMessage()

func (*GetFeedRequest) ProtoReflect 

func (x *GetFeedRequest) ProtoReflect() protoreflect.Message

func (*GetFeedRequest) Reset 

func (x *GetFeedRequest) Reset()

func (*GetFeedRequest) String 

func (x *GetFeedRequest) String() string

type IamPolicyAnalysisOutputConfig 

type IamPolicyAnalysisOutputConfig struct {

	// IAM policy analysis export destination.
	//
	// Types that are assignable to Destination:
	//	*IamPolicyAnalysisOutputConfig_GcsDestination_
	//	*IamPolicyAnalysisOutputConfig_BigqueryDestination
	Destination isIamPolicyAnalysisOutputConfig_Destination `protobuf_oneof:"destination"`
	// contains filtered or unexported fields
}

Output configuration for export IAM policy analysis destination.

func (*IamPolicyAnalysisOutputConfig) Descriptor deprecated 

func (*IamPolicyAnalysisOutputConfig) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisOutputConfig.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisOutputConfig) GetBigqueryDestination 

func (x *IamPolicyAnalysisOutputConfig) GetBigqueryDestination() *IamPolicyAnalysisOutputConfig_BigQueryDestination

func (*IamPolicyAnalysisOutputConfig) GetDestination 

func (m *IamPolicyAnalysisOutputConfig) GetDestination() isIamPolicyAnalysisOutputConfig_Destination

func (*IamPolicyAnalysisOutputConfig) GetGcsDestination 

func (x *IamPolicyAnalysisOutputConfig) GetGcsDestination() *IamPolicyAnalysisOutputConfig_GcsDestination

func (*IamPolicyAnalysisOutputConfig) ProtoMessage 

func (*IamPolicyAnalysisOutputConfig) ProtoMessage()

func (*IamPolicyAnalysisOutputConfig) ProtoReflect 

func (x *IamPolicyAnalysisOutputConfig) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisOutputConfig) Reset 

func (x *IamPolicyAnalysisOutputConfig) Reset()

func (*IamPolicyAnalysisOutputConfig) String 

func (x *IamPolicyAnalysisOutputConfig) String() string

type IamPolicyAnalysisOutputConfig_BigQueryDestination 

type IamPolicyAnalysisOutputConfig_BigQueryDestination struct {

	// Required. The BigQuery dataset in format "projects/projectId/datasets/datasetId",
	// to which the analysis results should be exported. If this dataset does
	// not exist, the export call will return an INVALID_ARGUMENT error.
	Dataset string `protobuf:"bytes,1,opt,name=dataset,proto3" json:"dataset,omitempty"`
	// Required. The prefix of the BigQuery tables to which the analysis results will be
	// written. Tables will be created based on this table_prefix if not exist:
	// * <table_prefix>_analysis table will contain export operation's metadata.
	// * <table_prefix>_analysis_result will contain all the
	//   [IamPolicyAnalysisResult][google.cloud.asset.v1.IamPolicyAnalysisResult].
	// When [partition_key] is specified, both tables will be partitioned based
	// on the [partition_key].
	TablePrefix string `protobuf:"bytes,2,opt,name=table_prefix,json=tablePrefix,proto3" json:"table_prefix,omitempty"`
	// The partition key for BigQuery partitioned table.
	PartitionKey IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey `` /* 188-byte string literal not displayed */
	// Optional. Specifies the action that occurs if the destination table or partition
	// already exists. The following values are supported:
	//
	// * WRITE_TRUNCATE: If the table or partition already exists, BigQuery
	// overwrites the entire table or all the partitions data.
	// * WRITE_APPEND: If the table or partition already exists, BigQuery
	// appends the data to the table or the latest partition.
	// * WRITE_EMPTY: If the table already exists and contains data, an error is
	// returned.
	//
	// The default value is WRITE_APPEND. Each action is atomic and only occurs
	// if BigQuery is able to complete the job successfully. Details are at
	// https://cloud.google.com/bigquery/docs/loading-data-local#appending_to_or_overwriting_a_table_using_a_local_file.
	WriteDisposition string `protobuf:"bytes,4,opt,name=write_disposition,json=writeDisposition,proto3" json:"write_disposition,omitempty"`
	// contains filtered or unexported fields
}

A BigQuery destination.

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) Descriptor deprecated 

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisOutputConfig_BigQueryDestination.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) GetDataset 

func (x *IamPolicyAnalysisOutputConfig_BigQueryDestination) GetDataset() string

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) GetPartitionKey 

func (x *IamPolicyAnalysisOutputConfig_BigQueryDestination) GetPartitionKey() IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) GetTablePrefix 

func (x *IamPolicyAnalysisOutputConfig_BigQueryDestination) GetTablePrefix() string

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) GetWriteDisposition 

func (x *IamPolicyAnalysisOutputConfig_BigQueryDestination) GetWriteDisposition() string

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) ProtoMessage 

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) ProtoMessage()

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) ProtoReflect 

func (x *IamPolicyAnalysisOutputConfig_BigQueryDestination) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) Reset 

func (x *IamPolicyAnalysisOutputConfig_BigQueryDestination) Reset()

func (*IamPolicyAnalysisOutputConfig_BigQueryDestination) String 

func (x *IamPolicyAnalysisOutputConfig_BigQueryDestination) String() string

type IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey 

type IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey int32

This enum determines the partition key column for the bigquery tables. Partitioning can improve query performance and reduce query cost by filtering partitions. Refer to https://cloud.google.com/bigquery/docs/partitioned-tables for details. 

const (
	// Unspecified partition key. Tables won't be partitioned using this
	// option.
	IamPolicyAnalysisOutputConfig_BigQueryDestination_PARTITION_KEY_UNSPECIFIED IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey = 0
	// The time when the request is received. If specified as partition key,
	// the result table(s) is partitoned by the RequestTime column, an
	// additional timestamp column representing when the request was received.
	IamPolicyAnalysisOutputConfig_BigQueryDestination_REQUEST_TIME IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey = 1
)

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Descriptor 

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Descriptor() protoreflect.EnumDescriptor

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Enum 

func (x IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Enum() *IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) EnumDescriptor deprecated 

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) EnumDescriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey.Descriptor instead.

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Number 

func (x IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Number() protoreflect.EnumNumber

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) String 

func (x IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) String() string

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Type 

func (IamPolicyAnalysisOutputConfig_BigQueryDestination_PartitionKey) Type() protoreflect.EnumType

type IamPolicyAnalysisOutputConfig_BigqueryDestination 

type IamPolicyAnalysisOutputConfig_BigqueryDestination struct {
	// Destination on BigQuery.
	BigqueryDestination *IamPolicyAnalysisOutputConfig_BigQueryDestination `protobuf:"bytes,2,opt,name=bigquery_destination,json=bigqueryDestination,proto3,oneof"`
}

type IamPolicyAnalysisOutputConfig_GcsDestination 

type IamPolicyAnalysisOutputConfig_GcsDestination struct {

	// Required. The uri of the Cloud Storage object. It's the same uri that is used by
	// gsutil. Example: "gs://bucket_name/object_name". See [Viewing and
	// Editing Object
	// Metadata](https://cloud.google.com/storage/docs/viewing-editing-metadata)
	// for more information.
	//
	// If the specified Cloud Storage object already exists and there is no
	// [hold](https://cloud.google.com/storage/docs/object-holds), it will be
	// overwritten with the analysis result.
	Uri string `protobuf:"bytes,1,opt,name=uri,proto3" json:"uri,omitempty"`
	// contains filtered or unexported fields
}

A Cloud Storage location.

func (*IamPolicyAnalysisOutputConfig_GcsDestination) Descriptor deprecated 

func (*IamPolicyAnalysisOutputConfig_GcsDestination) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisOutputConfig_GcsDestination.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisOutputConfig_GcsDestination) GetUri 

func (x *IamPolicyAnalysisOutputConfig_GcsDestination) GetUri() string

func (*IamPolicyAnalysisOutputConfig_GcsDestination) ProtoMessage 

func (*IamPolicyAnalysisOutputConfig_GcsDestination) ProtoMessage()

func (*IamPolicyAnalysisOutputConfig_GcsDestination) ProtoReflect 

func (x *IamPolicyAnalysisOutputConfig_GcsDestination) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisOutputConfig_GcsDestination) Reset 

func (x *IamPolicyAnalysisOutputConfig_GcsDestination) Reset()

func (*IamPolicyAnalysisOutputConfig_GcsDestination) String 

func (x *IamPolicyAnalysisOutputConfig_GcsDestination) String() string

type IamPolicyAnalysisOutputConfig_GcsDestination_ 

type IamPolicyAnalysisOutputConfig_GcsDestination_ struct {
	// Destination on Cloud Storage.
	GcsDestination *IamPolicyAnalysisOutputConfig_GcsDestination `protobuf:"bytes,1,opt,name=gcs_destination,json=gcsDestination,proto3,oneof"`
}

type IamPolicyAnalysisQuery 

type IamPolicyAnalysisQuery struct {

	// Required. The relative name of the root asset. Only resources and IAM policies within
	// the scope will be analyzed.
	//
	// This can only be an organization number (such as "organizations/123"), a
	// folder number (such as "folders/123"), a project ID (such as
	// "projects/my-project-id"), or a project number (such as "projects/12345").
	//
	// To know how to get organization id, visit [here
	// ](https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id).
	//
	// To know how to get folder or project id, visit [here
	// ](https://cloud.google.com/resource-manager/docs/creating-managing-folders#viewing_or_listing_folders_and_projects).
	Scope string `protobuf:"bytes,1,opt,name=scope,proto3" json:"scope,omitempty"`
	// Optional. Specifies a resource for analysis.
	ResourceSelector *IamPolicyAnalysisQuery_ResourceSelector `protobuf:"bytes,2,opt,name=resource_selector,json=resourceSelector,proto3" json:"resource_selector,omitempty"`
	// Optional. Specifies an identity for analysis.
	IdentitySelector *IamPolicyAnalysisQuery_IdentitySelector `protobuf:"bytes,3,opt,name=identity_selector,json=identitySelector,proto3" json:"identity_selector,omitempty"`
	// Optional. Specifies roles or permissions for analysis. This is optional.
	AccessSelector *IamPolicyAnalysisQuery_AccessSelector `protobuf:"bytes,4,opt,name=access_selector,json=accessSelector,proto3" json:"access_selector,omitempty"`
	// Optional. The query options.
	Options *IamPolicyAnalysisQuery_Options `protobuf:"bytes,5,opt,name=options,proto3" json:"options,omitempty"`
	// Optional. The hypothetical context for IAM conditions evaluation.
	ConditionContext *IamPolicyAnalysisQuery_ConditionContext `protobuf:"bytes,6,opt,name=condition_context,json=conditionContext,proto3" json:"condition_context,omitempty"`
	// contains filtered or unexported fields
}

## IAM policy analysis query message.

func (*IamPolicyAnalysisQuery) Descriptor deprecated 

func (*IamPolicyAnalysisQuery) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisQuery.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisQuery) GetAccessSelector 

func (x *IamPolicyAnalysisQuery) GetAccessSelector() *IamPolicyAnalysisQuery_AccessSelector

func (*IamPolicyAnalysisQuery) GetConditionContext 

func (x *IamPolicyAnalysisQuery) GetConditionContext() *IamPolicyAnalysisQuery_ConditionContext

func (*IamPolicyAnalysisQuery) GetIdentitySelector 

func (x *IamPolicyAnalysisQuery) GetIdentitySelector() *IamPolicyAnalysisQuery_IdentitySelector

func (*IamPolicyAnalysisQuery) GetOptions 

func (x *IamPolicyAnalysisQuery) GetOptions() *IamPolicyAnalysisQuery_Options

func (*IamPolicyAnalysisQuery) GetResourceSelector 

func (x *IamPolicyAnalysisQuery) GetResourceSelector() *IamPolicyAnalysisQuery_ResourceSelector

func (*IamPolicyAnalysisQuery) GetScope 

func (x *IamPolicyAnalysisQuery) GetScope() string

func (*IamPolicyAnalysisQuery) ProtoMessage 

func (*IamPolicyAnalysisQuery) ProtoMessage()

func (*IamPolicyAnalysisQuery) ProtoReflect 

func (x *IamPolicyAnalysisQuery) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisQuery) Reset 

func (x *IamPolicyAnalysisQuery) Reset()

func (*IamPolicyAnalysisQuery) String 

func (x *IamPolicyAnalysisQuery) String() string

type IamPolicyAnalysisQuery_AccessSelector 

type IamPolicyAnalysisQuery_AccessSelector struct {

	// Optional. The roles to appear in result.
	Roles []string `protobuf:"bytes,1,rep,name=roles,proto3" json:"roles,omitempty"`
	// Optional. The permissions to appear in result.
	Permissions []string `protobuf:"bytes,2,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

Specifies roles and/or permissions to analyze, to determine both the identities possessing them and the resources they control. If multiple values are specified, results will include roles or permissions matching any of them. The total number of roles and permissions should be equal or less than 10.

func (*IamPolicyAnalysisQuery_AccessSelector) Descriptor deprecated 

func (*IamPolicyAnalysisQuery_AccessSelector) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisQuery_AccessSelector.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisQuery_AccessSelector) GetPermissions 

func (x *IamPolicyAnalysisQuery_AccessSelector) GetPermissions() []string

func (*IamPolicyAnalysisQuery_AccessSelector) GetRoles 

func (x *IamPolicyAnalysisQuery_AccessSelector) GetRoles() []string

func (*IamPolicyAnalysisQuery_AccessSelector) ProtoMessage 

func (*IamPolicyAnalysisQuery_AccessSelector) ProtoMessage()

func (*IamPolicyAnalysisQuery_AccessSelector) ProtoReflect 

func (x *IamPolicyAnalysisQuery_AccessSelector) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisQuery_AccessSelector) Reset 

func (x *IamPolicyAnalysisQuery_AccessSelector) Reset()

func (*IamPolicyAnalysisQuery_AccessSelector) String 

func (x *IamPolicyAnalysisQuery_AccessSelector) String() string

type IamPolicyAnalysisQuery_ConditionContext 

type IamPolicyAnalysisQuery_ConditionContext struct {

	// The IAM conditions time context.
	//
	// Types that are assignable to TimeContext:
	//	*IamPolicyAnalysisQuery_ConditionContext_AccessTime
	TimeContext isIamPolicyAnalysisQuery_ConditionContext_TimeContext `protobuf_oneof:"TimeContext"`
	// contains filtered or unexported fields
}

The IAM conditions context.

func (*IamPolicyAnalysisQuery_ConditionContext) Descriptor deprecated 

func (*IamPolicyAnalysisQuery_ConditionContext) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisQuery_ConditionContext.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisQuery_ConditionContext) GetAccessTime 

func (x *IamPolicyAnalysisQuery_ConditionContext) GetAccessTime() *timestamppb.Timestamp

func (*IamPolicyAnalysisQuery_ConditionContext) GetTimeContext 

func (m *IamPolicyAnalysisQuery_ConditionContext) GetTimeContext() isIamPolicyAnalysisQuery_ConditionContext_TimeContext

func (*IamPolicyAnalysisQuery_ConditionContext) ProtoMessage 

func (*IamPolicyAnalysisQuery_ConditionContext) ProtoMessage()

func (*IamPolicyAnalysisQuery_ConditionContext) ProtoReflect 

func (x *IamPolicyAnalysisQuery_ConditionContext) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisQuery_ConditionContext) Reset 

func (x *IamPolicyAnalysisQuery_ConditionContext) Reset()

func (*IamPolicyAnalysisQuery_ConditionContext) String 

func (x *IamPolicyAnalysisQuery_ConditionContext) String() string

type IamPolicyAnalysisQuery_ConditionContext_AccessTime 

type IamPolicyAnalysisQuery_ConditionContext_AccessTime struct {
	// The hypothetical access timestamp to evaluate IAM conditions. Note that
	// this value must not be earlier than the current time; otherwise, an
	// INVALID_ARGUMENT error will be returned.
	AccessTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=access_time,json=accessTime,proto3,oneof"`
}

type IamPolicyAnalysisQuery_IdentitySelector 

type IamPolicyAnalysisQuery_IdentitySelector struct {

	// Required. The identity appear in the form of members in
	// [IAM policy
	// binding](https://cloud.google.com/iam/reference/rest/v1/Binding).
	//
	// The examples of supported forms are:
	// "user:mike@example.com",
	// "group:admins@example.com",
	// "domain:google.com",
	// "serviceAccount:my-project-id@appspot.gserviceaccount.com".
	//
	// Notice that wildcard characters (such as * and ?) are not supported.
	// You must give a specific identity.
	Identity string `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	// contains filtered or unexported fields
}

Specifies an identity for which to determine resource access, based on roles assigned either directly to them or to the groups they belong to, directly or indirectly.

func (*IamPolicyAnalysisQuery_IdentitySelector) Descriptor deprecated 

func (*IamPolicyAnalysisQuery_IdentitySelector) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisQuery_IdentitySelector.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisQuery_IdentitySelector) GetIdentity 

func (x *IamPolicyAnalysisQuery_IdentitySelector) GetIdentity() string

func (*IamPolicyAnalysisQuery_IdentitySelector) ProtoMessage 

func (*IamPolicyAnalysisQuery_IdentitySelector) ProtoMessage()

func (*IamPolicyAnalysisQuery_IdentitySelector) ProtoReflect 

func (x *IamPolicyAnalysisQuery_IdentitySelector) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisQuery_IdentitySelector) Reset 

func (x *IamPolicyAnalysisQuery_IdentitySelector) Reset()

func (*IamPolicyAnalysisQuery_IdentitySelector) String 

func (x *IamPolicyAnalysisQuery_IdentitySelector) String() string

type IamPolicyAnalysisQuery_Options 

type IamPolicyAnalysisQuery_Options struct {

	// Optional. If true, the identities section of the result will expand any
	// Google groups appearing in an IAM policy binding.
	//
	// If [IamPolicyAnalysisQuery.identity_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.identity_selector] is specified, the
	// identity in the result will be determined by the selector, and this flag
	// is not allowed to set.
	//
	// Default is false.
	ExpandGroups bool `protobuf:"varint,1,opt,name=expand_groups,json=expandGroups,proto3" json:"expand_groups,omitempty"`
	// Optional. If true, the access section of result will expand any roles
	// appearing in IAM policy bindings to include their permissions.
	//
	// If [IamPolicyAnalysisQuery.access_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.access_selector] is specified, the access
	// section of the result will be determined by the selector, and this flag
	// is not allowed to set.
	//
	// Default is false.
	ExpandRoles bool `protobuf:"varint,2,opt,name=expand_roles,json=expandRoles,proto3" json:"expand_roles,omitempty"`
	// Optional. If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is not
	// specified, the resource section of the result will expand any resource
	// attached to an IAM policy to include resources lower in the resource
	// hierarchy.
	//
	// For example, if the request analyzes for which resources user A has
	// permission P, and the results include an IAM policy with P on a GCP
	// folder, the results will also include resources in that folder with
	// permission P.
	//
	// If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is specified,
	// the resource section of the result will expand the specified resource to
	// include resources lower in the resource hierarchy. Only project or
	// lower resources are supported. Folder and organization resource cannot be
	// used together with this option.
	//
	// For example, if the request analyzes for which users have permission P on
	// a GCP project with this option enabled, the results will include all
	// users who have permission P on that project or any lower resource.
	//
	// Default is false.
	ExpandResources bool `protobuf:"varint,3,opt,name=expand_resources,json=expandResources,proto3" json:"expand_resources,omitempty"`
	// Optional. If true, the result will output resource edges, starting
	// from the policy attached resource, to any expanded resources.
	// Default is false.
	OutputResourceEdges bool `protobuf:"varint,4,opt,name=output_resource_edges,json=outputResourceEdges,proto3" json:"output_resource_edges,omitempty"`
	// Optional. If true, the result will output group identity edges, starting
	// from the binding's group members, to any expanded identities.
	// Default is false.
	OutputGroupEdges bool `protobuf:"varint,5,opt,name=output_group_edges,json=outputGroupEdges,proto3" json:"output_group_edges,omitempty"`
	// Optional. If true, the response will include access analysis from identities to
	// resources via service account impersonation. This is a very expensive
	// operation, because many derived queries will be executed. We highly
	// recommend you use [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning] rpc
	// instead.
	//
	// For example, if the request analyzes for which resources user A has
	// permission P, and there's an IAM policy states user A has
	// iam.serviceAccounts.getAccessToken permission to a service account SA,
	// and there's another IAM policy states service account SA has permission P
	// to a GCP folder F, then user A potentially has access to the GCP folder
	// F. And those advanced analysis results will be included in
	// [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis].
	//
	// Another example, if the request analyzes for who has
	// permission P to a GCP folder F, and there's an IAM policy states user A
	// has iam.serviceAccounts.actAs permission to a service account SA, and
	// there's another IAM policy states service account SA has permission P to
	// the GCP folder F, then user A potentially has access to the GCP folder
	// F. And those advanced analysis results will be included in
	// [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis].
	//
	// Default is false.
	AnalyzeServiceAccountImpersonation bool `` /* 168-byte string literal not displayed */
	// contains filtered or unexported fields
}

Contains query options.

func (*IamPolicyAnalysisQuery_Options) Descriptor deprecated 

func (*IamPolicyAnalysisQuery_Options) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisQuery_Options.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisQuery_Options) GetAnalyzeServiceAccountImpersonation 

func (x *IamPolicyAnalysisQuery_Options) GetAnalyzeServiceAccountImpersonation() bool

func (*IamPolicyAnalysisQuery_Options) GetExpandGroups 

func (x *IamPolicyAnalysisQuery_Options) GetExpandGroups() bool

func (*IamPolicyAnalysisQuery_Options) GetExpandResources 

func (x *IamPolicyAnalysisQuery_Options) GetExpandResources() bool

func (*IamPolicyAnalysisQuery_Options) GetExpandRoles 

func (x *IamPolicyAnalysisQuery_Options) GetExpandRoles() bool

func (*IamPolicyAnalysisQuery_Options) GetOutputGroupEdges 

func (x *IamPolicyAnalysisQuery_Options) GetOutputGroupEdges() bool

func (*IamPolicyAnalysisQuery_Options) GetOutputResourceEdges 

func (x *IamPolicyAnalysisQuery_Options) GetOutputResourceEdges() bool

func (*IamPolicyAnalysisQuery_Options) ProtoMessage 

func (*IamPolicyAnalysisQuery_Options) ProtoMessage()

func (*IamPolicyAnalysisQuery_Options) ProtoReflect 

func (x *IamPolicyAnalysisQuery_Options) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisQuery_Options) Reset 

func (x *IamPolicyAnalysisQuery_Options) Reset()

func (*IamPolicyAnalysisQuery_Options) String 

func (x *IamPolicyAnalysisQuery_Options) String() string

type IamPolicyAnalysisQuery_ResourceSelector 

type IamPolicyAnalysisQuery_ResourceSelector struct {

	// Required. The [full resource name]
	// (https://cloud.google.com/asset-inventory/docs/resource-name-format)
	// of a resource of [supported resource
	// types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#analyzable_asset_types).
	FullResourceName string `protobuf:"bytes,1,opt,name=full_resource_name,json=fullResourceName,proto3" json:"full_resource_name,omitempty"`
	// contains filtered or unexported fields
}

Specifies the resource to analyze for access policies, which may be set directly on the resource, or on ancestors such as organizations, folders or projects.

func (*IamPolicyAnalysisQuery_ResourceSelector) Descriptor deprecated 

func (*IamPolicyAnalysisQuery_ResourceSelector) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisQuery_ResourceSelector.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisQuery_ResourceSelector) GetFullResourceName 

func (x *IamPolicyAnalysisQuery_ResourceSelector) GetFullResourceName() string

func (*IamPolicyAnalysisQuery_ResourceSelector) ProtoMessage 

func (*IamPolicyAnalysisQuery_ResourceSelector) ProtoMessage()

func (*IamPolicyAnalysisQuery_ResourceSelector) ProtoReflect 

func (x *IamPolicyAnalysisQuery_ResourceSelector) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisQuery_ResourceSelector) Reset 

func (x *IamPolicyAnalysisQuery_ResourceSelector) Reset()

func (*IamPolicyAnalysisQuery_ResourceSelector) String 

func (x *IamPolicyAnalysisQuery_ResourceSelector) String() string

type IamPolicyAnalysisResult 

type IamPolicyAnalysisResult struct {

	// The [full resource
	// name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
	// of the resource to which the [iam_binding][google.cloud.asset.v1.IamPolicyAnalysisResult.iam_binding] policy attaches.
	AttachedResourceFullName string `` /* 137-byte string literal not displayed */
	// The Cloud IAM policy binding under analysis.
	IamBinding *v1.Binding `protobuf:"bytes,2,opt,name=iam_binding,json=iamBinding,proto3" json:"iam_binding,omitempty"`
	// The access control lists derived from the [iam_binding][google.cloud.asset.v1.IamPolicyAnalysisResult.iam_binding] that match or
	// potentially match resource and access selectors specified in the request.
	AccessControlLists []*IamPolicyAnalysisResult_AccessControlList `protobuf:"bytes,3,rep,name=access_control_lists,json=accessControlLists,proto3" json:"access_control_lists,omitempty"`
	// The identity list derived from members of the [iam_binding][google.cloud.asset.v1.IamPolicyAnalysisResult.iam_binding] that match or
	// potentially match identity selector specified in the request.
	IdentityList *IamPolicyAnalysisResult_IdentityList `protobuf:"bytes,4,opt,name=identity_list,json=identityList,proto3" json:"identity_list,omitempty"`
	// Represents whether all analyses on the [iam_binding][google.cloud.asset.v1.IamPolicyAnalysisResult.iam_binding] have successfully
	// finished.
	FullyExplored bool `protobuf:"varint,5,opt,name=fully_explored,json=fullyExplored,proto3" json:"fully_explored,omitempty"`
	// contains filtered or unexported fields
}

IAM Policy analysis result, consisting of one IAM policy binding and derived access control lists.

func (*IamPolicyAnalysisResult) Descriptor deprecated 

func (*IamPolicyAnalysisResult) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisResult.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisResult) GetAccessControlLists 

func (x *IamPolicyAnalysisResult) GetAccessControlLists() []*IamPolicyAnalysisResult_AccessControlList

func (*IamPolicyAnalysisResult) GetAttachedResourceFullName 

func (x *IamPolicyAnalysisResult) GetAttachedResourceFullName() string

func (*IamPolicyAnalysisResult) GetFullyExplored 

func (x *IamPolicyAnalysisResult) GetFullyExplored() bool

func (*IamPolicyAnalysisResult) GetIamBinding 

func (x *IamPolicyAnalysisResult) GetIamBinding() *v1.Binding

func (*IamPolicyAnalysisResult) GetIdentityList 

func (x *IamPolicyAnalysisResult) GetIdentityList() *IamPolicyAnalysisResult_IdentityList

func (*IamPolicyAnalysisResult) ProtoMessage 

func (*IamPolicyAnalysisResult) ProtoMessage()

func (*IamPolicyAnalysisResult) ProtoReflect 

func (x *IamPolicyAnalysisResult) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisResult) Reset 

func (x *IamPolicyAnalysisResult) Reset()

func (*IamPolicyAnalysisResult) String 

func (x *IamPolicyAnalysisResult) String() string

type IamPolicyAnalysisResult_Access 

type IamPolicyAnalysisResult_Access struct {

	// Types that are assignable to OneofAccess:
	//	*IamPolicyAnalysisResult_Access_Role
	//	*IamPolicyAnalysisResult_Access_Permission
	OneofAccess isIamPolicyAnalysisResult_Access_OneofAccess `protobuf_oneof:"oneof_access"`
	// The analysis state of this access.
	AnalysisState *IamPolicyAnalysisState `protobuf:"bytes,3,opt,name=analysis_state,json=analysisState,proto3" json:"analysis_state,omitempty"`
	// contains filtered or unexported fields
}

An IAM role or permission under analysis.

func (*IamPolicyAnalysisResult_Access) Descriptor deprecated 

func (*IamPolicyAnalysisResult_Access) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisResult_Access.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisResult_Access) GetAnalysisState 

func (x *IamPolicyAnalysisResult_Access) GetAnalysisState() *IamPolicyAnalysisState

func (*IamPolicyAnalysisResult_Access) GetOneofAccess 

func (m *IamPolicyAnalysisResult_Access) GetOneofAccess() isIamPolicyAnalysisResult_Access_OneofAccess

func (*IamPolicyAnalysisResult_Access) GetPermission 

func (x *IamPolicyAnalysisResult_Access) GetPermission() string

func (*IamPolicyAnalysisResult_Access) GetRole 

func (x *IamPolicyAnalysisResult_Access) GetRole() string

func (*IamPolicyAnalysisResult_Access) ProtoMessage 

func (*IamPolicyAnalysisResult_Access) ProtoMessage()

func (*IamPolicyAnalysisResult_Access) ProtoReflect 

func (x *IamPolicyAnalysisResult_Access) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisResult_Access) Reset 

func (x *IamPolicyAnalysisResult_Access) Reset()

func (*IamPolicyAnalysisResult_Access) String 

func (x *IamPolicyAnalysisResult_Access) String() string

type IamPolicyAnalysisResult_AccessControlList 

type IamPolicyAnalysisResult_AccessControlList struct {

	// The resources that match one of the following conditions:
	// - The resource_selector, if it is specified in request;
	// - Otherwise, resources reachable from the policy attached resource.
	Resources []*IamPolicyAnalysisResult_Resource `protobuf:"bytes,1,rep,name=resources,proto3" json:"resources,omitempty"`
	// The accesses that match one of the following conditions:
	// - The access_selector, if it is specified in request;
	// - Otherwise, access specifiers reachable from the policy binding's role.
	Accesses []*IamPolicyAnalysisResult_Access `protobuf:"bytes,2,rep,name=accesses,proto3" json:"accesses,omitempty"`
	// Resource edges of the graph starting from the policy attached
	// resource to any descendant resources. The [Edge.source_node][google.cloud.asset.v1.IamPolicyAnalysisResult.Edge.source_node] contains
	// the full resource name of a parent resource and [Edge.target_node][google.cloud.asset.v1.IamPolicyAnalysisResult.Edge.target_node]
	// contains the full resource name of a child resource. This field is
	// present only if the output_resource_edges option is enabled in request.
	ResourceEdges []*IamPolicyAnalysisResult_Edge `protobuf:"bytes,3,rep,name=resource_edges,json=resourceEdges,proto3" json:"resource_edges,omitempty"`
	// Condition evaluation for this AccessControlList, if there is a condition
	// defined in the above IAM policy binding.
	ConditionEvaluation *ConditionEvaluation `protobuf:"bytes,4,opt,name=condition_evaluation,json=conditionEvaluation,proto3" json:"condition_evaluation,omitempty"`
	// contains filtered or unexported fields
}

An access control list, derived from the above IAM policy binding, which contains a set of resources and accesses. May include one item from each set to compose an access control entry.

NOTICE that there could be multiple access control lists for one IAM policy binding. The access control lists are created based on resource and access combinations.

For example, assume we have the following cases in one IAM policy binding: - Permission P1 and P2 apply to resource R1 and R2; - Permission P3 applies to resource R2 and R3;

This will result in the following access control lists: - AccessControlList 1: [R1, R2], [P1, P2] - AccessControlList 2: [R2, R3], [P3]

func (*IamPolicyAnalysisResult_AccessControlList) Descriptor deprecated 

func (*IamPolicyAnalysisResult_AccessControlList) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisResult_AccessControlList.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisResult_AccessControlList) GetAccesses 

func (x *IamPolicyAnalysisResult_AccessControlList) GetAccesses() []*IamPolicyAnalysisResult_Access

func (*IamPolicyAnalysisResult_AccessControlList) GetConditionEvaluation 

func (x *IamPolicyAnalysisResult_AccessControlList) GetConditionEvaluation() *ConditionEvaluation

func (*IamPolicyAnalysisResult_AccessControlList) GetResourceEdges 

func (x *IamPolicyAnalysisResult_AccessControlList) GetResourceEdges() []*IamPolicyAnalysisResult_Edge

func (*IamPolicyAnalysisResult_AccessControlList) GetResources 

func (x *IamPolicyAnalysisResult_AccessControlList) GetResources() []*IamPolicyAnalysisResult_Resource

func (*IamPolicyAnalysisResult_AccessControlList) ProtoMessage 

func (*IamPolicyAnalysisResult_AccessControlList) ProtoMessage()

func (*IamPolicyAnalysisResult_AccessControlList) ProtoReflect 

func (x *IamPolicyAnalysisResult_AccessControlList) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisResult_AccessControlList) Reset 

func (x *IamPolicyAnalysisResult_AccessControlList) Reset()

func (*IamPolicyAnalysisResult_AccessControlList) String 

func (x *IamPolicyAnalysisResult_AccessControlList) String() string

type IamPolicyAnalysisResult_Access_Permission 

type IamPolicyAnalysisResult_Access_Permission struct {
	// The permission.
	Permission string `protobuf:"bytes,2,opt,name=permission,proto3,oneof"`
}

type IamPolicyAnalysisResult_Access_Role 

type IamPolicyAnalysisResult_Access_Role struct {
	// The role.
	Role string `protobuf:"bytes,1,opt,name=role,proto3,oneof"`
}

type IamPolicyAnalysisResult_Edge 

type IamPolicyAnalysisResult_Edge struct {

	// The source node of the edge. For example, it could be a full resource
	// name for a resource node or an email of an identity.
	SourceNode string `protobuf:"bytes,1,opt,name=source_node,json=sourceNode,proto3" json:"source_node,omitempty"`
	// The target node of the edge. For example, it could be a full resource
	// name for a resource node or an email of an identity.
	TargetNode string `protobuf:"bytes,2,opt,name=target_node,json=targetNode,proto3" json:"target_node,omitempty"`
	// contains filtered or unexported fields
}

A directional edge.

func (*IamPolicyAnalysisResult_Edge) Descriptor deprecated 

func (*IamPolicyAnalysisResult_Edge) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisResult_Edge.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisResult_Edge) GetSourceNode 

func (x *IamPolicyAnalysisResult_Edge) GetSourceNode() string

func (*IamPolicyAnalysisResult_Edge) GetTargetNode 

func (x *IamPolicyAnalysisResult_Edge) GetTargetNode() string

func (*IamPolicyAnalysisResult_Edge) ProtoMessage 

func (*IamPolicyAnalysisResult_Edge) ProtoMessage()

func (*IamPolicyAnalysisResult_Edge) ProtoReflect 

func (x *IamPolicyAnalysisResult_Edge) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisResult_Edge) Reset 

func (x *IamPolicyAnalysisResult_Edge) Reset()

func (*IamPolicyAnalysisResult_Edge) String 

func (x *IamPolicyAnalysisResult_Edge) String() string

type IamPolicyAnalysisResult_Identity 

type IamPolicyAnalysisResult_Identity struct {

	// The identity name in any form of members appear in
	// [IAM policy
	// binding](https://cloud.google.com/iam/reference/rest/v1/Binding), such
	// as:
	// - user:foo@google.com
	// - group:group1@google.com
	// - serviceAccount:s1@prj1.iam.gserviceaccount.com
	// - projectOwner:some_project_id
	// - domain:google.com
	// - allUsers
	// - etc.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The analysis state of this identity.
	AnalysisState *IamPolicyAnalysisState `protobuf:"bytes,2,opt,name=analysis_state,json=analysisState,proto3" json:"analysis_state,omitempty"`
	// contains filtered or unexported fields
}

An identity under analysis.

func (*IamPolicyAnalysisResult_Identity) Descriptor deprecated 

func (*IamPolicyAnalysisResult_Identity) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisResult_Identity.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisResult_Identity) GetAnalysisState 

func (x *IamPolicyAnalysisResult_Identity) GetAnalysisState() *IamPolicyAnalysisState

func (*IamPolicyAnalysisResult_Identity) GetName 

func (x *IamPolicyAnalysisResult_Identity) GetName() string

func (*IamPolicyAnalysisResult_Identity) ProtoMessage 

func (*IamPolicyAnalysisResult_Identity) ProtoMessage()

func (*IamPolicyAnalysisResult_Identity) ProtoReflect 

func (x *IamPolicyAnalysisResult_Identity) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisResult_Identity) Reset 

func (x *IamPolicyAnalysisResult_Identity) Reset()

func (*IamPolicyAnalysisResult_Identity) String 

func (x *IamPolicyAnalysisResult_Identity) String() string

type IamPolicyAnalysisResult_IdentityList 

type IamPolicyAnalysisResult_IdentityList struct {

	// Only the identities that match one of the following conditions will be
	// presented:
	// - The identity_selector, if it is specified in request;
	// - Otherwise, identities reachable from the policy binding's members.
	Identities []*IamPolicyAnalysisResult_Identity `protobuf:"bytes,1,rep,name=identities,proto3" json:"identities,omitempty"`
	// Group identity edges of the graph starting from the binding's
	// group members to any node of the [identities][google.cloud.asset.v1.IamPolicyAnalysisResult.IdentityList.identities]. The [Edge.source_node][google.cloud.asset.v1.IamPolicyAnalysisResult.Edge.source_node]
	// contains a group, such as `group:parent@google.com`. The
	// [Edge.target_node][google.cloud.asset.v1.IamPolicyAnalysisResult.Edge.target_node] contains a member of the group,
	// such as `group:child@google.com` or `user:foo@google.com`.
	// This field is present only if the output_group_edges option is enabled in
	// request.
	GroupEdges []*IamPolicyAnalysisResult_Edge `protobuf:"bytes,2,rep,name=group_edges,json=groupEdges,proto3" json:"group_edges,omitempty"`
	// contains filtered or unexported fields
}

The identities and group edges.

func (*IamPolicyAnalysisResult_IdentityList) Descriptor deprecated 

func (*IamPolicyAnalysisResult_IdentityList) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisResult_IdentityList.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisResult_IdentityList) GetGroupEdges 

func (x *IamPolicyAnalysisResult_IdentityList) GetGroupEdges() []*IamPolicyAnalysisResult_Edge

func (*IamPolicyAnalysisResult_IdentityList) GetIdentities 

func (x *IamPolicyAnalysisResult_IdentityList) GetIdentities() []*IamPolicyAnalysisResult_Identity

func (*IamPolicyAnalysisResult_IdentityList) ProtoMessage 

func (*IamPolicyAnalysisResult_IdentityList) ProtoMessage()

func (*IamPolicyAnalysisResult_IdentityList) ProtoReflect 

func (x *IamPolicyAnalysisResult_IdentityList) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisResult_IdentityList) Reset 

func (x *IamPolicyAnalysisResult_IdentityList) Reset()

func (*IamPolicyAnalysisResult_IdentityList) String 

func (x *IamPolicyAnalysisResult_IdentityList) String() string

type IamPolicyAnalysisResult_Resource 

type IamPolicyAnalysisResult_Resource struct {

	// The [full resource
	// name](https://cloud.google.com/asset-inventory/docs/resource-name-format)
	FullResourceName string `protobuf:"bytes,1,opt,name=full_resource_name,json=fullResourceName,proto3" json:"full_resource_name,omitempty"`
	// The analysis state of this resource.
	AnalysisState *IamPolicyAnalysisState `protobuf:"bytes,2,opt,name=analysis_state,json=analysisState,proto3" json:"analysis_state,omitempty"`
	// contains filtered or unexported fields
}

A Google Cloud resource under analysis.

func (*IamPolicyAnalysisResult_Resource) Descriptor deprecated 

func (*IamPolicyAnalysisResult_Resource) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisResult_Resource.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisResult_Resource) GetAnalysisState 

func (x *IamPolicyAnalysisResult_Resource) GetAnalysisState() *IamPolicyAnalysisState

func (*IamPolicyAnalysisResult_Resource) GetFullResourceName 

func (x *IamPolicyAnalysisResult_Resource) GetFullResourceName() string

func (*IamPolicyAnalysisResult_Resource) ProtoMessage 

func (*IamPolicyAnalysisResult_Resource) ProtoMessage()

func (*IamPolicyAnalysisResult_Resource) ProtoReflect 

func (x *IamPolicyAnalysisResult_Resource) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisResult_Resource) Reset 

func (x *IamPolicyAnalysisResult_Resource) Reset()

func (*IamPolicyAnalysisResult_Resource) String 

func (x *IamPolicyAnalysisResult_Resource) String() string

type IamPolicyAnalysisState 

type IamPolicyAnalysisState struct {

	// The Google standard error code that best describes the state.
	// For example:
	// - OK means the analysis on this entity has been successfully finished;
	// - PERMISSION_DENIED means an access denied error is encountered;
	// - DEADLINE_EXCEEDED means the analysis on this entity hasn't been started
	// in time;
	Code code.Code `protobuf:"varint,1,opt,name=code,proto3,enum=google.rpc.Code" json:"code,omitempty"`
	// The human-readable description of the cause of failure.
	Cause string `protobuf:"bytes,2,opt,name=cause,proto3" json:"cause,omitempty"`
	// contains filtered or unexported fields
}

Represents the detailed state of an entity under analysis, such as a resource, an identity or an access.

func (*IamPolicyAnalysisState) Descriptor deprecated 

func (*IamPolicyAnalysisState) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicyAnalysisState.ProtoReflect.Descriptor instead.

func (*IamPolicyAnalysisState) GetCause 

func (x *IamPolicyAnalysisState) GetCause() string

func (*IamPolicyAnalysisState) GetCode 

func (x *IamPolicyAnalysisState) GetCode() code.Code

func (*IamPolicyAnalysisState) ProtoMessage 

func (*IamPolicyAnalysisState) ProtoMessage()

func (*IamPolicyAnalysisState) ProtoReflect 

func (x *IamPolicyAnalysisState) ProtoReflect() protoreflect.Message

func (*IamPolicyAnalysisState) Reset 

func (x *IamPolicyAnalysisState) Reset()

func (*IamPolicyAnalysisState) String 

func (x *IamPolicyAnalysisState) String() string

type IamPolicySearchResult 

type IamPolicySearchResult struct {

	// The full resource name of the resource associated with this IAM policy.
	// Example:
	// `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
	// See [Cloud Asset Inventory Resource Name
	// Format](https://cloud.google.com/asset-inventory/docs/resource-name-format)
	// for more information.
	//
	// To search against the `resource`:
	//
	// * use a field query. Example: `resource:organizations/123`
	Resource string `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
	// The project that the associated GCP resource belongs to, in the form of
	// projects/{PROJECT_NUMBER}. If an IAM policy is set on a resource (like VM
	// instance, Cloud Storage bucket), the project field will indicate the
	// project that contains the resource. If an IAM policy is set on a folder or
	// orgnization, this field will be empty.
	//
	// To search against the `project`:
	//
	// * specify the `scope` field as this project in your search request.
	Project string `protobuf:"bytes,2,opt,name=project,proto3" json:"project,omitempty"`
	// The IAM policy directly set on the given resource. Note that the original
	// IAM policy can contain multiple bindings. This only contains the bindings
	// that match the given query. For queries that don't contain a constrain on
	// policies (e.g., an empty query), this contains all the bindings.
	//
	// To search against the `policy` bindings:
	//
	// * use a field query:
	//     - query by the policy contained members. Example:
	//       `policy:amy@gmail.com`
	//     - query by the policy contained roles. Example:
	//       `policy:roles/compute.admin`
	//     - query by the policy contained roles' included permissions. Example:
	//       `policy.role.permissions:compute.instances.create`
	Policy *v1.Policy `protobuf:"bytes,3,opt,name=policy,proto3" json:"policy,omitempty"`
	// Explanation about the IAM policy search result. It contains additional
	// information to explain why the search result matches the query.
	Explanation *IamPolicySearchResult_Explanation `protobuf:"bytes,4,opt,name=explanation,proto3" json:"explanation,omitempty"`
	// contains filtered or unexported fields
}

A result of IAM Policy search, containing information of an IAM policy.

func (*IamPolicySearchResult) Descriptor deprecated 

func (*IamPolicySearchResult) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicySearchResult.ProtoReflect.Descriptor instead.

func (*IamPolicySearchResult) GetExplanation 

func (x *IamPolicySearchResult) GetExplanation() *IamPolicySearchResult_Explanation

func (*IamPolicySearchResult) GetPolicy 

func (x *IamPolicySearchResult) GetPolicy() *v1.Policy

func (*IamPolicySearchResult) GetProject 

func (x *IamPolicySearchResult) GetProject() string

func (*IamPolicySearchResult) GetResource 

func (x *IamPolicySearchResult) GetResource() string

func (*IamPolicySearchResult) ProtoMessage 

func (*IamPolicySearchResult) ProtoMessage()

func (*IamPolicySearchResult) ProtoReflect 

func (x *IamPolicySearchResult) ProtoReflect() protoreflect.Message

func (*IamPolicySearchResult) Reset 

func (x *IamPolicySearchResult) Reset()

func (*IamPolicySearchResult) String 

func (x *IamPolicySearchResult) String() string

type IamPolicySearchResult_Explanation 

type IamPolicySearchResult_Explanation struct {

	// The map from roles to their included permissions that match the
	// permission query (i.e., a query containing `policy.role.permissions:`).
	// Example: if query `policy.role.permissions:compute.disk.get`
	// matches a policy binding that contains owner role, the
	// matched_permissions will be `{"roles/owner": ["compute.disk.get"]}`. The
	// roles can also be found in the returned `policy` bindings. Note that the
	// map is populated only for requests with permission queries.
	MatchedPermissions map[string]*IamPolicySearchResult_Explanation_Permissions `` /* 203-byte string literal not displayed */
	// contains filtered or unexported fields
}

Explanation about the IAM policy search result.

func (*IamPolicySearchResult_Explanation) Descriptor deprecated 

func (*IamPolicySearchResult_Explanation) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicySearchResult_Explanation.ProtoReflect.Descriptor instead.

func (*IamPolicySearchResult_Explanation) GetMatchedPermissions 

func (x *IamPolicySearchResult_Explanation) GetMatchedPermissions() map[string]*IamPolicySearchResult_Explanation_Permissions

func (*IamPolicySearchResult_Explanation) ProtoMessage 

func (*IamPolicySearchResult_Explanation) ProtoMessage()

func (*IamPolicySearchResult_Explanation) ProtoReflect 

func (x *IamPolicySearchResult_Explanation) ProtoReflect() protoreflect.Message

func (*IamPolicySearchResult_Explanation) Reset 

func (x *IamPolicySearchResult_Explanation) Reset()

func (*IamPolicySearchResult_Explanation) String 

func (x *IamPolicySearchResult_Explanation) String() string

type IamPolicySearchResult_Explanation_Permissions 

type IamPolicySearchResult_Explanation_Permissions struct {

	// A list of permissions. A sample permission string: `compute.disk.get`.
	Permissions []string `protobuf:"bytes,1,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

IAM permissions

func (*IamPolicySearchResult_Explanation_Permissions) Descriptor deprecated 

func (*IamPolicySearchResult_Explanation_Permissions) Descriptor() ([]byte, []int)

Deprecated: Use IamPolicySearchResult_Explanation_Permissions.ProtoReflect.Descriptor instead.

func (*IamPolicySearchResult_Explanation_Permissions) GetPermissions 

func (x *IamPolicySearchResult_Explanation_Permissions) GetPermissions() []string

func (*IamPolicySearchResult_Explanation_Permissions) ProtoMessage 

func (*IamPolicySearchResult_Explanation_Permissions) ProtoMessage()

func (*IamPolicySearchResult_Explanation_Permissions) ProtoReflect 

func (x *IamPolicySearchResult_Explanation_Permissions) ProtoReflect() protoreflect.Message

func (*IamPolicySearchResult_Explanation_Permissions) Reset 

func (x *IamPolicySearchResult_Explanation_Permissions) Reset()

func (*IamPolicySearchResult_Explanation_Permissions) String 

func (x *IamPolicySearchResult_Explanation_Permissions) String() string

type ListAssetsRequest 

type ListAssetsRequest struct {

	// Required. Name of the organization or project the assets belong to. Format:
	// "organizations/[organization-number]" (such as "organizations/123"),
	// "projects/[project-id]" (such as "projects/my-project-id"), or
	// "projects/[project-number]" (such as "projects/12345").
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Timestamp to take an asset snapshot. This can only be set to a timestamp
	// between the current time and the current time minus 35 days (inclusive).
	// If not specified, the current time will be used. Due to delays in resource
	// data collection and indexing, there is a volatile window during which
	// running the same query may get different results.
	ReadTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=read_time,json=readTime,proto3" json:"read_time,omitempty"`
	// A list of asset types to take a snapshot for. For example:
	// "compute.googleapis.com/Disk".
	//
	// Regular expression is also supported. For example:
	//
	// * "compute.googleapis.com.*" snapshots resources whose asset type starts
	// with "compute.googleapis.com".
	// * ".*Instance" snapshots resources whose asset type ends with "Instance".
	// * ".*Instance.*" snapshots resources whose asset type contains "Instance".
	//
	// See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
	// regular expression syntax. If the regular expression does not match any
	// supported asset type, an INVALID_ARGUMENT error will be returned.
	//
	// If specified, only matching assets will be returned, otherwise, it will
	// snapshot all asset types. See [Introduction to Cloud Asset
	// Inventory](https://cloud.google.com/asset-inventory/docs/overview)
	// for all supported asset types.
	AssetTypes []string `protobuf:"bytes,3,rep,name=asset_types,json=assetTypes,proto3" json:"asset_types,omitempty"`
	// Asset content type. If not specified, no content but the asset name will
	// be returned.
	ContentType ContentType `` /* 134-byte string literal not displayed */
	// The maximum number of assets to be returned in a single response. Default
	// is 100, minimum is 1, and maximum is 1000.
	PageSize int32 `protobuf:"varint,5,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The `next_page_token` returned from the previous `ListAssetsResponse`, or
	// unspecified for the first `ListAssetsRequest`. It is a continuation of a
	// prior `ListAssets` call, and the API should return the next page of assets.
	PageToken string `protobuf:"bytes,6,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

ListAssets request.

func (*ListAssetsRequest) Descriptor deprecated 

func (*ListAssetsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListAssetsRequest.ProtoReflect.Descriptor instead.

func (*ListAssetsRequest) GetAssetTypes 

func (x *ListAssetsRequest) GetAssetTypes() []string

func (*ListAssetsRequest) GetContentType 

func (x *ListAssetsRequest) GetContentType() ContentType

func (*ListAssetsRequest) GetPageSize 

func (x *ListAssetsRequest) GetPageSize() int32

func (*ListAssetsRequest) GetPageToken 

func (x *ListAssetsRequest) GetPageToken() string

func (*ListAssetsRequest) GetParent 

func (x *ListAssetsRequest) GetParent() string

func (*ListAssetsRequest) GetReadTime 

func (x *ListAssetsRequest) GetReadTime() *timestamppb.Timestamp

func (*ListAssetsRequest) ProtoMessage 

func (*ListAssetsRequest) ProtoMessage()

func (*ListAssetsRequest) ProtoReflect 

func (x *ListAssetsRequest) ProtoReflect() protoreflect.Message

func (*ListAssetsRequest) Reset 

func (x *ListAssetsRequest) Reset()

func (*ListAssetsRequest) String 

func (x *ListAssetsRequest) String() string

type ListAssetsResponse 

type ListAssetsResponse struct {

	// Time the snapshot was taken.
	ReadTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=read_time,json=readTime,proto3" json:"read_time,omitempty"`
	// Assets.
	Assets []*Asset `protobuf:"bytes,2,rep,name=assets,proto3" json:"assets,omitempty"`
	// Token to retrieve the next page of results. It expires 72 hours after the
	// page token for the first page is generated. Set to empty if there are no
	// remaining results.
	NextPageToken string `protobuf:"bytes,3,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

ListAssets response.

func (*ListAssetsResponse) Descriptor deprecated 

func (*ListAssetsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListAssetsResponse.ProtoReflect.Descriptor instead.

func (*ListAssetsResponse) GetAssets 

func (x *ListAssetsResponse) GetAssets() []*Asset

func (*ListAssetsResponse) GetNextPageToken 

func (x *ListAssetsResponse) GetNextPageToken() string

func (*ListAssetsResponse) GetReadTime 

func (x *ListAssetsResponse) GetReadTime() *timestamppb.Timestamp

func (*ListAssetsResponse) ProtoMessage 

func (*ListAssetsResponse) ProtoMessage()

func (*ListAssetsResponse) ProtoReflect 

func (x *ListAssetsResponse) ProtoReflect() protoreflect.Message

func (*ListAssetsResponse) Reset 

func (x *ListAssetsResponse) Reset()

func (*ListAssetsResponse) String 

func (x *ListAssetsResponse) String() string

type ListFeedsRequest 

type ListFeedsRequest struct {

	// Required. The parent project/folder/organization whose feeds are to be
	// listed. It can only be using project/folder/organization number (such as
	// "folders/12345")", or a project ID (such as "projects/my-project-id").
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// contains filtered or unexported fields
}

List asset feeds request.

func (*ListFeedsRequest) Descriptor deprecated 

func (*ListFeedsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListFeedsRequest.ProtoReflect.Descriptor instead.

func (*ListFeedsRequest) GetParent 

func (x *ListFeedsRequest) GetParent() string

func (*ListFeedsRequest) ProtoMessage 

func (*ListFeedsRequest) ProtoMessage()

func (*ListFeedsRequest) ProtoReflect 

func (x *ListFeedsRequest) ProtoReflect() protoreflect.Message

func (*ListFeedsRequest) Reset 

func (x *ListFeedsRequest) Reset()

func (*ListFeedsRequest) String 

func (x *ListFeedsRequest) String() string

type ListFeedsResponse 

type ListFeedsResponse struct {

	// A list of feeds.
	Feeds []*Feed `protobuf:"bytes,1,rep,name=feeds,proto3" json:"feeds,omitempty"`
	// contains filtered or unexported fields
}

func (*ListFeedsResponse) Descriptor deprecated 

func (*ListFeedsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListFeedsResponse.ProtoReflect.Descriptor instead.

func (*ListFeedsResponse) GetFeeds 

func (x *ListFeedsResponse) GetFeeds() []*Feed

func (*ListFeedsResponse) ProtoMessage 

func (*ListFeedsResponse) ProtoMessage()

func (*ListFeedsResponse) ProtoReflect 

func (x *ListFeedsResponse) ProtoReflect() protoreflect.Message

func (*ListFeedsResponse) Reset 

func (x *ListFeedsResponse) Reset()

func (*ListFeedsResponse) String 

func (x *ListFeedsResponse) String() string

type OutputConfig 

type OutputConfig struct {

	// Asset export destination.
	//
	// Types that are assignable to Destination:
	//	*OutputConfig_GcsDestination
	//	*OutputConfig_BigqueryDestination
	Destination isOutputConfig_Destination `protobuf_oneof:"destination"`
	// contains filtered or unexported fields
}

Output configuration for export assets destination.

func (*OutputConfig) Descriptor deprecated 

func (*OutputConfig) Descriptor() ([]byte, []int)

Deprecated: Use OutputConfig.ProtoReflect.Descriptor instead.

func (*OutputConfig) GetBigqueryDestination 

func (x *OutputConfig) GetBigqueryDestination() *BigQueryDestination

func (*OutputConfig) GetDestination 

func (m *OutputConfig) GetDestination() isOutputConfig_Destination

func (*OutputConfig) GetGcsDestination 

func (x *OutputConfig) GetGcsDestination() *GcsDestination

func (*OutputConfig) ProtoMessage 

func (*OutputConfig) ProtoMessage()

func (*OutputConfig) ProtoReflect 

func (x *OutputConfig) ProtoReflect() protoreflect.Message

func (*OutputConfig) Reset 

func (x *OutputConfig) Reset()

func (*OutputConfig) String 

func (x *OutputConfig) String() string

type OutputConfig_BigqueryDestination 

type OutputConfig_BigqueryDestination struct {
	// Destination on BigQuery. The output table stores the fields in asset
	// proto as columns in BigQuery.
	BigqueryDestination *BigQueryDestination `protobuf:"bytes,2,opt,name=bigquery_destination,json=bigqueryDestination,proto3,oneof"`
}

type OutputConfig_GcsDestination 

type OutputConfig_GcsDestination struct {
	// Destination on Cloud Storage.
	GcsDestination *GcsDestination `protobuf:"bytes,1,opt,name=gcs_destination,json=gcsDestination,proto3,oneof"`
}

type OutputResult 

type OutputResult struct {

	// Asset export result.
	//
	// Types that are assignable to Result:
	//	*OutputResult_GcsResult
	Result isOutputResult_Result `protobuf_oneof:"result"`
	// contains filtered or unexported fields
}

Output result of export assets.

func (*OutputResult) Descriptor deprecated 

func (*OutputResult) Descriptor() ([]byte, []int)

Deprecated: Use OutputResult.ProtoReflect.Descriptor instead.

func (*OutputResult) GetGcsResult 

func (x *OutputResult) GetGcsResult() *GcsOutputResult

func (*OutputResult) GetResult 

func (m *OutputResult) GetResult() isOutputResult_Result

func (*OutputResult) ProtoMessage 

func (*OutputResult) ProtoMessage()

func (*OutputResult) ProtoReflect 

func (x *OutputResult) ProtoReflect() protoreflect.Message

func (*OutputResult) Reset 

func (x *OutputResult) Reset()

func (*OutputResult) String 

func (x *OutputResult) String() string

type OutputResult_GcsResult 

type OutputResult_GcsResult struct {
	// Export result on Cloud Storage.
	GcsResult *GcsOutputResult `protobuf:"bytes,1,opt,name=gcs_result,json=gcsResult,proto3,oneof"`
}

type PartitionSpec 

type PartitionSpec struct {

	// The partition key for BigQuery partitioned table.
	PartitionKey PartitionSpec_PartitionKey `` /* 152-byte string literal not displayed */
	// contains filtered or unexported fields
}

Specifications of BigQuery partitioned table as export destination.

func (*PartitionSpec) Descriptor deprecated 

func (*PartitionSpec) Descriptor() ([]byte, []int)

Deprecated: Use PartitionSpec.ProtoReflect.Descriptor instead.

func (*PartitionSpec) GetPartitionKey 

func (x *PartitionSpec) GetPartitionKey() PartitionSpec_PartitionKey

func (*PartitionSpec) ProtoMessage 

func (*PartitionSpec) ProtoMessage()

func (*PartitionSpec) ProtoReflect 

func (x *PartitionSpec) ProtoReflect() protoreflect.Message

func (*PartitionSpec) Reset 

func (x *PartitionSpec) Reset()

func (*PartitionSpec) String 

func (x *PartitionSpec) String() string

type PartitionSpec_PartitionKey 

type PartitionSpec_PartitionKey int32

This enum is used to determine the partition key column when exporting assets to BigQuery partitioned table(s). Note that, if the partition key is a timestamp column, the actual partition is based on its date value (expressed in UTC. see details in https://cloud.google.com/bigquery/docs/partitioned-tables#date_timestamp_partitioned_tables). 

const (
	// Unspecified partition key. If used, it means using non-partitioned table.
	PartitionSpec_PARTITION_KEY_UNSPECIFIED PartitionSpec_PartitionKey = 0
	// The time when the snapshot is taken. If specified as partition key, the
	// result table(s) is partitoned by the additional timestamp column,
	// readTime. If [read_time] in ExportAssetsRequest is specified, the
	// readTime column's value will be the same as it. Otherwise, its value will
	// be the current time that is used to take the snapshot.
	PartitionSpec_READ_TIME PartitionSpec_PartitionKey = 1
	// The time when the request is received and started to be processed. If
	// specified as partition key, the result table(s) is partitoned by the
	// requestTime column, an additional timestamp column representing when the
	// request was received.
	PartitionSpec_REQUEST_TIME PartitionSpec_PartitionKey = 2
)

func (PartitionSpec_PartitionKey) Descriptor 

func (PartitionSpec_PartitionKey) Descriptor() protoreflect.EnumDescriptor

func (PartitionSpec_PartitionKey) Enum 

func (x PartitionSpec_PartitionKey) Enum() *PartitionSpec_PartitionKey

func (PartitionSpec_PartitionKey) EnumDescriptor deprecated 

func (PartitionSpec_PartitionKey) EnumDescriptor() ([]byte, []int)

Deprecated: Use PartitionSpec_PartitionKey.Descriptor instead.

func (PartitionSpec_PartitionKey) Number 

func (x PartitionSpec_PartitionKey) Number() protoreflect.EnumNumber

func (PartitionSpec_PartitionKey) String 

func (x PartitionSpec_PartitionKey) String() string

func (PartitionSpec_PartitionKey) Type 

func (PartitionSpec_PartitionKey) Type() protoreflect.EnumType

type PubsubDestination 

type PubsubDestination struct {

	// The name of the Pub/Sub topic to publish to.
	// Example: `projects/PROJECT_ID/topics/TOPIC_ID`.
	Topic string `protobuf:"bytes,1,opt,name=topic,proto3" json:"topic,omitempty"`
	// contains filtered or unexported fields
}

A Pub/Sub destination.

func (*PubsubDestination) Descriptor deprecated 

func (*PubsubDestination) Descriptor() ([]byte, []int)

Deprecated: Use PubsubDestination.ProtoReflect.Descriptor instead.

func (*PubsubDestination) GetTopic 

func (x *PubsubDestination) GetTopic() string

func (*PubsubDestination) ProtoMessage 

func (*PubsubDestination) ProtoMessage()

func (*PubsubDestination) ProtoReflect 

func (x *PubsubDestination) ProtoReflect() protoreflect.Message

func (*PubsubDestination) Reset 

func (x *PubsubDestination) Reset()

func (*PubsubDestination) String 

func (x *PubsubDestination) String() string

type Resource 

type Resource struct {

	// The API version. Example: `v1`
	Version string `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
	// The URL of the discovery document containing the resource's JSON schema.
	// Example:
	// `https://www.googleapis.com/discovery/v1/apis/compute/v1/rest`
	//
	// This value is unspecified for resources that do not have an API based on a
	// discovery document, such as Cloud Bigtable.
	DiscoveryDocumentUri string `protobuf:"bytes,2,opt,name=discovery_document_uri,json=discoveryDocumentUri,proto3" json:"discovery_document_uri,omitempty"`
	// The JSON schema name listed in the discovery document. Example:
	// `Project`
	//
	// This value is unspecified for resources that do not have an API based on a
	// discovery document, such as Cloud Bigtable.
	DiscoveryName string `protobuf:"bytes,3,opt,name=discovery_name,json=discoveryName,proto3" json:"discovery_name,omitempty"`
	// The REST URL for accessing the resource. An HTTP `GET` request using this
	// URL returns the resource itself. Example:
	// `https://cloudresourcemanager.googleapis.com/v1/projects/my-project-123`
	//
	// This value is unspecified for resources without a REST API.
	ResourceUrl string `protobuf:"bytes,4,opt,name=resource_url,json=resourceUrl,proto3" json:"resource_url,omitempty"`
	// The full name of the immediate parent of this resource. See
	// [Resource
	// Names](https://cloud.google.com/apis/design/resource_names#full_resource_name)
	// for more information.
	//
	// For Google Cloud assets, this value is the parent resource defined in the
	// [Cloud IAM policy
	// hierarchy](https://cloud.google.com/iam/docs/overview#policy_hierarchy).
	// Example:
	// `//cloudresourcemanager.googleapis.com/projects/my_project_123`
	//
	// For third-party assets, this field may be set differently.
	Parent string `protobuf:"bytes,5,opt,name=parent,proto3" json:"parent,omitempty"`
	// The content of the resource, in which some sensitive fields are removed
	// and may not be present.
	Data *structpb.Struct `protobuf:"bytes,6,opt,name=data,proto3" json:"data,omitempty"`
	// The location of the resource in Google Cloud, such as its zone and region.
	// For more information, see https://cloud.google.com/about/locations/.
	Location string `protobuf:"bytes,8,opt,name=location,proto3" json:"location,omitempty"`
	// contains filtered or unexported fields
}

A representation of a Google Cloud resource.

func (*Resource) Descriptor deprecated 

func (*Resource) Descriptor() ([]byte, []int)

Deprecated: Use Resource.ProtoReflect.Descriptor instead.

func (*Resource) GetData 

func (x *Resource) GetData() *structpb.Struct

func (*Resource) GetDiscoveryDocumentUri 

func (x *Resource) GetDiscoveryDocumentUri() string

func (*Resource) GetDiscoveryName 

func (x *Resource) GetDiscoveryName() string

func (*Resource) GetLocation 

func (x *Resource) GetLocation() string

func (*Resource) GetParent 

func (x *Resource) GetParent() string

func (*Resource) GetResourceUrl 

func (x *Resource) GetResourceUrl() string

func (*Resource) GetVersion 

func (x *Resource) GetVersion() string

func (*Resource) ProtoMessage 

func (*Resource) ProtoMessage()

func (*Resource) ProtoReflect 

func (x *Resource) ProtoReflect() protoreflect.Message

func (*Resource) Reset 

func (x *Resource) Reset()

func (*Resource) String 

func (x *Resource) String() string

type ResourceSearchResult 

type ResourceSearchResult struct {

	// The full resource name of this resource. Example:
	// `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
	// See [Cloud Asset Inventory Resource Name
	// Format](https://cloud.google.com/asset-inventory/docs/resource-name-format)
	// for more information.
	//
	// To search against the `name`:
	//
	// * use a field query. Example: `name:instance1`
	// * use a free text query. Example: `instance1`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The type of this resource. Example: `compute.googleapis.com/Disk`.
	//
	// To search against the `asset_type`:
	//
	// * specify the `asset_type` field in your search request.
	AssetType string `protobuf:"bytes,2,opt,name=asset_type,json=assetType,proto3" json:"asset_type,omitempty"`
	// The project that this resource belongs to, in the form of
	// projects/{PROJECT_NUMBER}. This field is available when the resource
	// belongs to a project.
	//
	// To search against `project`:
	//
	// * use a field query. Example: `project:12345`
	// * use a free text query. Example: `12345`
	// * specify the `scope` field as this project in your search request.
	Project string `protobuf:"bytes,3,opt,name=project,proto3" json:"project,omitempty"`
	// The folder(s) that this resource belongs to, in the form of
	// folders/{FOLDER_NUMBER}. This field is available when the resource
	// belongs to one or more folders.
	//
	// To search against `folders`:
	//
	// * use a field query. Example: `folders:(123 OR 456)`
	// * use a free text query. Example: `123`
	// * specify the `scope` field as this folder in your search request.
	Folders []string `protobuf:"bytes,17,rep,name=folders,proto3" json:"folders,omitempty"`
	// The organization that this resource belongs to, in the form of
	// organizations/{ORGANIZATION_NUMBER}. This field is available when the
	// resource belongs to an organization.
	//
	// To search against `organization`:
	//
	// * use a field query. Example: `organization:123`
	// * use a free text query. Example: `123`
	// * specify the `scope` field as this organization in your search request.
	Organization string `protobuf:"bytes,18,opt,name=organization,proto3" json:"organization,omitempty"`
	// The display name of this resource. This field is available only when the
	// resource's proto contains it.
	//
	// To search against the `display_name`:
	//
	// * use a field query. Example: `displayName:"My Instance"`
	// * use a free text query. Example: `"My Instance"`
	DisplayName string `protobuf:"bytes,4,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// One or more paragraphs of text description of this resource. Maximum length
	// could be up to 1M bytes. This field is available only when the resource's
	// proto contains it.
	//
	// To search against the `description`:
	//
	// * use a field query. Example: `description:"important instance"`
	// * use a free text query. Example: `"important instance"`
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// Location can be `global`, regional like `us-east1`, or zonal like
	// `us-west1-b`. This field is available only when the resource's proto
	// contains it.
	//
	// To search against the `location`:
	//
	// * use a field query. Example: `location:us-west*`
	// * use a free text query. Example: `us-west*`
	Location string `protobuf:"bytes,6,opt,name=location,proto3" json:"location,omitempty"`
	// Labels associated with this resource. See [Labelling and grouping GCP
	// resources](https://cloud.google.com/blog/products/gcp/labelling-and-grouping-your-google-cloud-platform-resources)
	// for more information. This field is available only when the resource's
	// proto contains it.
	//
	// To search against the `labels`:
	//
	// * use a field query:
	//     - query on any label's key or value. Example: `labels:prod`
	//     - query by a given label. Example: `labels.env:prod`
	//     - query by a given label's existence. Example: `labels.env:*`
	// * use a free text query. Example: `prod`
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// Network tags associated with this resource. Like labels, network tags are a
	// type of annotations used to group GCP resources. See [Labelling GCP
	// resources](https://cloud.google.com/blog/products/gcp/labelling-and-grouping-your-google-cloud-platform-resources)
	// for more information. This field is available only when the resource's
	// proto contains it.
	//
	// To search against the `network_tags`:
	//
	// * use a field query. Example: `networkTags:internal`
	// * use a free text query. Example: `internal`
	NetworkTags []string `protobuf:"bytes,8,rep,name=network_tags,json=networkTags,proto3" json:"network_tags,omitempty"`
	// The Cloud KMS
	// [CryptoKey](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys?hl=en)
	// name or
	// [CryptoKeyVersion](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys.cryptoKeyVersions?hl=en)
	// name. This field is available only when the resource's proto contains it.
	//
	// To search against the `kms_key`:
	//
	// * use a field query. Example: `kmsKey:key`
	// * use a free text query. Example: `key`
	KmsKey string `protobuf:"bytes,10,opt,name=kms_key,json=kmsKey,proto3" json:"kms_key,omitempty"`
	// The create timestamp of this resource, at which the resource was created.
	// The granularity is in seconds. Timestamp.nanos will always be 0. This field
	// is available only when the resource's proto contains it.
	//
	// To search against `create_time`:
	//
	// * use a field query.
	//     - value in seconds since unix epoch. Example: `createTime > 1609459200`
	//     - value in date string. Example: `createTime > 2021-01-01`
	//     - value in date-time string (must be quoted). Example: `createTime >
	//     "2021-01-01T00:00:00"`
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,11,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// The last update timestamp of this resource, at which the resource was last
	// modified or deleted. The granularity is in seconds. Timestamp.nanos will
	// always be 0. This field is available only when the resource's proto
	// contains it.
	//
	// To search against `update_time`:
	//
	// * use a field query.
	//     - value in seconds since unix epoch. Example: `updateTime < 1609459200`
	//     - value in date string. Example: `updateTime < 2021-01-01`
	//     - value in date-time string (must be quoted). Example: `updateTime <
	//     "2021-01-01T00:00:00"`
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,12,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// The state of this resource. Different resources types have different state
	// definitions that are mapped from various fields of different resource
	// types. This field is available only when the resource's proto contains it.
	//
	// Example:
	// If the resource is an instance provided by Compute Engine,
	// its state will include PROVISIONING, STAGING, RUNNING, STOPPING,
	// SUSPENDING, SUSPENDED, REPAIRING, and TERMINATED. See `status` definition
	// in [API
	// Reference](https://cloud.google.com/compute/docs/reference/rest/v1/instances).
	// If the resource is a project provided by Cloud Resource Manager, its state
	// will include LIFECYCLE_STATE_UNSPECIFIED, ACTIVE, DELETE_REQUESTED and
	// DELETE_IN_PROGRESS. See `lifecycleState` definition in [API
	// Reference](https://cloud.google.com/resource-manager/reference/rest/v1/projects).
	//
	// To search against the `state`:
	//
	// * use a field query. Example: `state:RUNNING`
	// * use a free text query. Example: `RUNNING`
	State string `protobuf:"bytes,13,opt,name=state,proto3" json:"state,omitempty"`
	// The additional searchable attributes of this resource. The attributes may
	// vary from one resource type to another. Examples: `projectId` for Project,
	// `dnsName` for DNS ManagedZone. This field contains a subset of the resource
	// metadata fields that are returned by the List or Get APIs provided by the
	// corresponding GCP service (e.g., Compute Engine). see [API references and
	// supported searchable
	// attributes](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types)
	// to see which fields are included.
	//
	// You can search values of these fields through free text search. However,
	// you should not consume the field programically as the field names and
	// values may change as the GCP service updates to a new incompatible API
	// version.
	//
	// To search against the `additional_attributes`:
	//
	// * use a free text query to match the attributes values. Example: to search
	//   `additional_attributes = { dnsName: "foobar" }`, you can issue a query
	//   `foobar`.
	AdditionalAttributes *structpb.Struct `protobuf:"bytes,9,opt,name=additional_attributes,json=additionalAttributes,proto3" json:"additional_attributes,omitempty"`
	// The full resource name of this resource's parent, if it has one.
	// To search against the `parent_full_resource_name`:
	//
	// * use a field query. Example:
	// `parentFullResourceName:"project-name"`
	// * use a free text query. Example:
	// `project-name`
	ParentFullResourceName string `` /* 132-byte string literal not displayed */
	// The type of this resource's immediate parent, if there is one.
	//
	// To search against the `parent_asset_type`:
	//
	// * use a field query. Example:
	// `parentAssetType:"cloudresourcemanager.googleapis.com/Project"`
	// * use a free text query. Example:
	// `cloudresourcemanager.googleapis.com/Project`
	ParentAssetType string `protobuf:"bytes,103,opt,name=parent_asset_type,json=parentAssetType,proto3" json:"parent_asset_type,omitempty"`
	// contains filtered or unexported fields
}

A result of Resource Search, containing information of a cloud resource.

func (*ResourceSearchResult) Descriptor deprecated 

func (*ResourceSearchResult) Descriptor() ([]byte, []int)

Deprecated: Use ResourceSearchResult.ProtoReflect.Descriptor instead.

func (*ResourceSearchResult) GetAdditionalAttributes 

func (x *ResourceSearchResult) GetAdditionalAttributes() *structpb.Struct

func (*ResourceSearchResult) GetAssetType 

func (x *ResourceSearchResult) GetAssetType() string

func (*ResourceSearchResult) GetCreateTime 

func (x *ResourceSearchResult) GetCreateTime() *timestamppb.Timestamp

func (*ResourceSearchResult) GetDescription 

func (x *ResourceSearchResult) GetDescription() string

func (*ResourceSearchResult) GetDisplayName 

func (x *ResourceSearchResult) GetDisplayName() string

func (*ResourceSearchResult) GetFolders 

func (x *ResourceSearchResult) GetFolders() []string

func (*ResourceSearchResult) GetKmsKey 

func (x *ResourceSearchResult) GetKmsKey() string

func (*ResourceSearchResult) GetLabels 

func (x *ResourceSearchResult) GetLabels() map[string]string

func (*ResourceSearchResult) GetLocation 

func (x *ResourceSearchResult) GetLocation() string

func (*ResourceSearchResult) GetName 

func (x *ResourceSearchResult) GetName() string

func (*ResourceSearchResult) GetNetworkTags 

func (x *ResourceSearchResult) GetNetworkTags() []string

func (*ResourceSearchResult) GetOrganization 

func (x *ResourceSearchResult) GetOrganization() string

func (*ResourceSearchResult) GetParentAssetType 

func (x *ResourceSearchResult) GetParentAssetType() string

func (*ResourceSearchResult) GetParentFullResourceName 

func (x *ResourceSearchResult) GetParentFullResourceName() string

func (*ResourceSearchResult) GetProject 

func (x *ResourceSearchResult) GetProject() string

func (*ResourceSearchResult) GetState 

func (x *ResourceSearchResult) GetState() string

func (*ResourceSearchResult) GetUpdateTime 

func (x *ResourceSearchResult) GetUpdateTime() *timestamppb.Timestamp

func (*ResourceSearchResult) ProtoMessage 

func (*ResourceSearchResult) ProtoMessage()

func (*ResourceSearchResult) ProtoReflect 

func (x *ResourceSearchResult) ProtoReflect() protoreflect.Message

func (*ResourceSearchResult) Reset 

func (x *ResourceSearchResult) Reset()

func (*ResourceSearchResult) String 

func (x *ResourceSearchResult) String() string

type SearchAllIamPoliciesRequest 

type SearchAllIamPoliciesRequest struct {

	// Required. A scope can be a project, a folder, or an organization. The search is
	// limited to the IAM policies within the `scope`. The caller must be granted
	// the
	// [`cloudasset.assets.searchAllIamPolicies`](https://cloud.google.com/asset-inventory/docs/access-control#required_permissions)
	// permission on the desired scope.
	//
	// The allowed values are:
	//
	// * projects/{PROJECT_ID} (e.g., "projects/foo-bar")
	// * projects/{PROJECT_NUMBER} (e.g., "projects/12345678")
	// * folders/{FOLDER_NUMBER} (e.g., "folders/1234567")
	// * organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
	Scope string `protobuf:"bytes,1,opt,name=scope,proto3" json:"scope,omitempty"`
	// Optional. The query statement. See [how to construct a
	// query](https://cloud.google.com/asset-inventory/docs/searching-iam-policies#how_to_construct_a_query)
	// for more information. If not specified or empty, it will search all the
	// IAM policies within the specified `scope`. Note that the query string is
	// compared against each Cloud IAM policy binding, including its members,
	// roles, and Cloud IAM conditions. The returned Cloud IAM policies will only
	// contain the bindings that match your query. To learn more about the IAM
	// policy structure, see [IAM policy
	// doc](https://cloud.google.com/iam/docs/policies#structure).
	//
	// Examples:
	//
	// * `policy:amy@gmail.com` to find IAM policy bindings that specify user
	//   "amy@gmail.com".
	// * `policy:roles/compute.admin` to find IAM policy bindings that specify
	//   the Compute Admin role.
	// * `policy:comp*` to find IAM policy bindings that contain "comp" as a
	//   prefix of any word in the binding.
	// * `policy.role.permissions:storage.buckets.update` to find IAM policy
	//   bindings that specify a role containing "storage.buckets.update"
	//   permission. Note that if callers don't have `iam.roles.get` access to a
	//   role's included permissions, policy bindings that specify this role will
	//   be dropped from the search results.
	// * `policy.role.permissions:upd*` to find IAM policy bindings that specify a
	//   role containing "upd" as a prefix of any word in the role permission.
	//   Note that if callers don't have `iam.roles.get` access to a role's
	//   included permissions, policy bindings that specify this role will be
	//   dropped from the search results.
	// * `resource:organizations/123456` to find IAM policy bindings
	//   that are set on "organizations/123456".
	// * `resource=//cloudresourcemanager.googleapis.com/projects/myproject` to
	//   find IAM policy bindings that are set on the project named "myproject".
	// * `Important` to find IAM policy bindings that contain "Important" as a
	//   word in any of the searchable fields (except for the included
	//   permissions).
	// * `resource:(instance1 OR instance2) policy:amy` to find
	//   IAM policy bindings that are set on resources "instance1" or
	//   "instance2" and also specify user "amy".
	Query string `protobuf:"bytes,2,opt,name=query,proto3" json:"query,omitempty"`
	// Optional. The page size for search result pagination. Page size is capped at 500 even
	// if a larger value is given. If set to zero, server will pick an appropriate
	// default. Returned results may be fewer than requested. When this happens,
	// there could be more results as long as `next_page_token` is returned.
	PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. If present, retrieve the next batch of results from the preceding call to
	// this method. `page_token` must be the value of `next_page_token` from the
	// previous response. The values of all other method parameters must be
	// identical to those in the previous call.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

Search all IAM policies request.

func (*SearchAllIamPoliciesRequest) Descriptor deprecated 

func (*SearchAllIamPoliciesRequest) Descriptor() ([]byte, []int)

Deprecated: Use SearchAllIamPoliciesRequest.ProtoReflect.Descriptor instead.

func (*SearchAllIamPoliciesRequest) GetPageSize 

func (x *SearchAllIamPoliciesRequest) GetPageSize() int32

func (*SearchAllIamPoliciesRequest) GetPageToken 

func (x *SearchAllIamPoliciesRequest) GetPageToken() string

func (*SearchAllIamPoliciesRequest) GetQuery 

func (x *SearchAllIamPoliciesRequest) GetQuery() string

func (*SearchAllIamPoliciesRequest) GetScope 

func (x *SearchAllIamPoliciesRequest) GetScope() string

func (*SearchAllIamPoliciesRequest) ProtoMessage 

func (*SearchAllIamPoliciesRequest) ProtoMessage()

func (*SearchAllIamPoliciesRequest) ProtoReflect 

func (x *SearchAllIamPoliciesRequest) ProtoReflect() protoreflect.Message

func (*SearchAllIamPoliciesRequest) Reset 

func (x *SearchAllIamPoliciesRequest) Reset()

func (*SearchAllIamPoliciesRequest) String 

func (x *SearchAllIamPoliciesRequest) String() string

type SearchAllIamPoliciesResponse 

type SearchAllIamPoliciesResponse struct {

	// A list of IamPolicy that match the search query. Related information such
	// as the associated resource is returned along with the policy.
	Results []*IamPolicySearchResult `protobuf:"bytes,1,rep,name=results,proto3" json:"results,omitempty"`
	// Set if there are more results than those appearing in this response; to get
	// the next set of results, call this method again, using this value as the
	// `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Search all IAM policies response.

func (*SearchAllIamPoliciesResponse) Descriptor deprecated 

func (*SearchAllIamPoliciesResponse) Descriptor() ([]byte, []int)

Deprecated: Use SearchAllIamPoliciesResponse.ProtoReflect.Descriptor instead.

func (*SearchAllIamPoliciesResponse) GetNextPageToken 

func (x *SearchAllIamPoliciesResponse) GetNextPageToken() string

func (*SearchAllIamPoliciesResponse) GetResults 

func (x *SearchAllIamPoliciesResponse) GetResults() []*IamPolicySearchResult

func (*SearchAllIamPoliciesResponse) ProtoMessage 

func (*SearchAllIamPoliciesResponse) ProtoMessage()

func (*SearchAllIamPoliciesResponse) ProtoReflect 

func (x *SearchAllIamPoliciesResponse) ProtoReflect() protoreflect.Message

func (*SearchAllIamPoliciesResponse) Reset 

func (x *SearchAllIamPoliciesResponse) Reset()

func (*SearchAllIamPoliciesResponse) String 

func (x *SearchAllIamPoliciesResponse) String() string

type SearchAllResourcesRequest 

type SearchAllResourcesRequest struct {

	// Required. A scope can be a project, a folder, or an organization. The search is
	// limited to the resources within the `scope`. The caller must be granted the
	// [`cloudasset.assets.searchAllResources`](https://cloud.google.com/asset-inventory/docs/access-control#required_permissions)
	// permission on the desired scope.
	//
	// The allowed values are:
	//
	// * projects/{PROJECT_ID} (e.g., "projects/foo-bar")
	// * projects/{PROJECT_NUMBER} (e.g., "projects/12345678")
	// * folders/{FOLDER_NUMBER} (e.g., "folders/1234567")
	// * organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
	Scope string `protobuf:"bytes,1,opt,name=scope,proto3" json:"scope,omitempty"`
	// Optional. The query statement. See [how to construct a
	// query](https://cloud.google.com/asset-inventory/docs/searching-resources#how_to_construct_a_query)
	// for more information. If not specified or empty, it will search all the
	// resources within the specified `scope`.
	//
	// Examples:
	//
	// * `name:Important` to find Cloud resources whose name contains
	//   "Important" as a word.
	// * `name=Important` to find the Cloud resource whose name is exactly
	//   "Important".
	// * `displayName:Impor*` to find Cloud resources whose display name
	//   contains "Impor" as a prefix of any word in the field.
	// * `location:us-west*` to find Cloud resources whose location contains both
	//   "us" and "west" as prefixes.
	// * `labels:prod` to find Cloud resources whose labels contain "prod" as
	//   a key or value.
	// * `labels.env:prod` to find Cloud resources that have a label "env"
	//   and its value is "prod".
	// * `labels.env:*` to find Cloud resources that have a label "env".
	// * `kmsKey:key` to find Cloud resources encrypted with a customer-managed
	//   encryption key whose name contains the word "key".
	// * `state:ACTIVE` to find Cloud resources whose state contains "ACTIVE" as a
	//   word.
	// * `NOT state:ACTIVE` to find {{gcp_name}} resources whose state
	//   doesn't contain "ACTIVE" as a word.
	// * `createTime<1609459200` to find Cloud resources that were created before
	//   "2021-01-01 00:00:00 UTC". 1609459200 is the epoch timestamp of
	//   "2021-01-01 00:00:00 UTC" in seconds.
	// * `updateTime>1609459200` to find Cloud resources that were updated after
	//   "2021-01-01 00:00:00 UTC". 1609459200 is the epoch timestamp of
	//   "2021-01-01 00:00:00 UTC" in seconds.
	// * `Important` to find Cloud resources that contain "Important" as a word
	//   in any of the searchable fields.
	// * `Impor*` to find Cloud resources that contain "Impor" as a prefix of any
	//   word in any of the searchable fields.
	// * `Important location:(us-west1 OR global)` to find Cloud
	//   resources that contain "Important" as a word in any of the searchable
	//   fields and are also located in the "us-west1" region or the "global"
	//   location.
	Query string `protobuf:"bytes,2,opt,name=query,proto3" json:"query,omitempty"`
	// Optional. A list of asset types that this request searches for. If empty, it will
	// search all the [searchable asset
	// types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
	//
	// Regular expressions are also supported. For example:
	//
	// * "compute.googleapis.com.*" snapshots resources whose asset type starts
	// with "compute.googleapis.com".
	// * ".*Instance" snapshots resources whose asset type ends with "Instance".
	// * ".*Instance.*" snapshots resources whose asset type contains "Instance".
	//
	// See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
	// regular expression syntax. If the regular expression does not match any
	// supported asset type, an INVALID_ARGUMENT error will be returned.
	AssetTypes []string `protobuf:"bytes,3,rep,name=asset_types,json=assetTypes,proto3" json:"asset_types,omitempty"`
	// Optional. The page size for search result pagination. Page size is capped at 500 even
	// if a larger value is given. If set to zero, server will pick an appropriate
	// default. Returned results may be fewer than requested. When this happens,
	// there could be more results as long as `next_page_token` is returned.
	PageSize int32 `protobuf:"varint,4,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. If present, then retrieve the next batch of results from the preceding call
	// to this method. `page_token` must be the value of `next_page_token` from
	// the previous response. The values of all other method parameters, must be
	// identical to those in the previous call.
	PageToken string `protobuf:"bytes,5,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. A comma-separated list of fields specifying the sorting order of the
	// results. The default order is ascending. Add " DESC" after the field name
	// to indicate descending order. Redundant space characters are ignored.
	// Example: "location DESC, name".
	// Only singular primitive fields in the response are sortable:
	//   * name
	//   * assetType
	//   * project
	//   * displayName
	//   * description
	//   * location
	//   * kmsKey
	//   * createTime
	//   * updateTime
	//   * state
	//   * parentFullResourceName
	//   * parentAssetType
	// All the other fields such as repeated fields (e.g., `networkTags`), map
	// fields (e.g., `labels`) and struct fields (e.g., `additionalAttributes`)
	// are not supported.
	OrderBy string `protobuf:"bytes,6,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

Search all resources request.

func (*SearchAllResourcesRequest) Descriptor deprecated 

func (*SearchAllResourcesRequest) Descriptor() ([]byte, []int)

Deprecated: Use SearchAllResourcesRequest.ProtoReflect.Descriptor instead.

func (*SearchAllResourcesRequest) GetAssetTypes 

func (x *SearchAllResourcesRequest) GetAssetTypes() []string

func (*SearchAllResourcesRequest) GetOrderBy 

func (x *SearchAllResourcesRequest) GetOrderBy() string

func (*SearchAllResourcesRequest) GetPageSize 

func (x *SearchAllResourcesRequest) GetPageSize() int32

func (*SearchAllResourcesRequest) GetPageToken 

func (x *SearchAllResourcesRequest) GetPageToken() string

func (*SearchAllResourcesRequest) GetQuery 

func (x *SearchAllResourcesRequest) GetQuery() string

func (*SearchAllResourcesRequest) GetScope 

func (x *SearchAllResourcesRequest) GetScope() string

func (*SearchAllResourcesRequest) ProtoMessage 

func (*SearchAllResourcesRequest) ProtoMessage()

func (*SearchAllResourcesRequest) ProtoReflect 

func (x *SearchAllResourcesRequest) ProtoReflect() protoreflect.Message

func (*SearchAllResourcesRequest) Reset 

func (x *SearchAllResourcesRequest) Reset()

func (*SearchAllResourcesRequest) String 

func (x *SearchAllResourcesRequest) String() string

type SearchAllResourcesResponse 

type SearchAllResourcesResponse struct {

	// A list of Resources that match the search query. It contains the resource
	// standard metadata information.
	Results []*ResourceSearchResult `protobuf:"bytes,1,rep,name=results,proto3" json:"results,omitempty"`
	// If there are more results than those appearing in this response, then
	// `next_page_token` is included. To get the next set of results, call this
	// method again using the value of `next_page_token` as `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Search all resources response.

func (*SearchAllResourcesResponse) Descriptor deprecated 

func (*SearchAllResourcesResponse) Descriptor() ([]byte, []int)

Deprecated: Use SearchAllResourcesResponse.ProtoReflect.Descriptor instead.

func (*SearchAllResourcesResponse) GetNextPageToken 

func (x *SearchAllResourcesResponse) GetNextPageToken() string

func (*SearchAllResourcesResponse) GetResults 

func (x *SearchAllResourcesResponse) GetResults() []*ResourceSearchResult

func (*SearchAllResourcesResponse) ProtoMessage 

func (*SearchAllResourcesResponse) ProtoMessage()

func (*SearchAllResourcesResponse) ProtoReflect 

func (x *SearchAllResourcesResponse) ProtoReflect() protoreflect.Message

func (*SearchAllResourcesResponse) Reset 

func (x *SearchAllResourcesResponse) Reset()

func (*SearchAllResourcesResponse) String 

func (x *SearchAllResourcesResponse) String() string

type TemporalAsset 

type TemporalAsset struct {

	// The time window when the asset data and state was observed.
	Window *TimeWindow `protobuf:"bytes,1,opt,name=window,proto3" json:"window,omitempty"`
	// Whether the asset has been deleted or not.
	Deleted bool `protobuf:"varint,2,opt,name=deleted,proto3" json:"deleted,omitempty"`
	// An asset in Google Cloud.
	Asset *Asset `protobuf:"bytes,3,opt,name=asset,proto3" json:"asset,omitempty"`
	// State of prior_asset.
	PriorAssetState TemporalAsset_PriorAssetState `` /* 166-byte string literal not displayed */
	// Prior copy of the asset. Populated if prior_asset_state is PRESENT.
	// Currently this is only set for responses in Real-Time Feed.
	PriorAsset *Asset `protobuf:"bytes,5,opt,name=prior_asset,json=priorAsset,proto3" json:"prior_asset,omitempty"`
	// contains filtered or unexported fields
}

An asset in Google Cloud and its temporal metadata, including the time window when it was observed and its status during that window.

func (*TemporalAsset) Descriptor deprecated 

func (*TemporalAsset) Descriptor() ([]byte, []int)

Deprecated: Use TemporalAsset.ProtoReflect.Descriptor instead.

func (*TemporalAsset) GetAsset 

func (x *TemporalAsset) GetAsset() *Asset

func (*TemporalAsset) GetDeleted 

func (x *TemporalAsset) GetDeleted() bool

func (*TemporalAsset) GetPriorAsset 

func (x *TemporalAsset) GetPriorAsset() *Asset

func (*TemporalAsset) GetPriorAssetState 

func (x *TemporalAsset) GetPriorAssetState() TemporalAsset_PriorAssetState

func (*TemporalAsset) GetWindow 

func (x *TemporalAsset) GetWindow() *TimeWindow

func (*TemporalAsset) ProtoMessage 

func (*TemporalAsset) ProtoMessage()

func (*TemporalAsset) ProtoReflect 

func (x *TemporalAsset) ProtoReflect() protoreflect.Message

func (*TemporalAsset) Reset 

func (x *TemporalAsset) Reset()

func (*TemporalAsset) String 

func (x *TemporalAsset) String() string

type TemporalAsset_PriorAssetState 

type TemporalAsset_PriorAssetState int32

State of prior asset. 

const (
	// prior_asset is not applicable for the current asset.
	TemporalAsset_PRIOR_ASSET_STATE_UNSPECIFIED TemporalAsset_PriorAssetState = 0
	// prior_asset is populated correctly.
	TemporalAsset_PRESENT TemporalAsset_PriorAssetState = 1
	// Failed to set prior_asset.
	TemporalAsset_INVALID TemporalAsset_PriorAssetState = 2
	// Current asset is the first known state.
	TemporalAsset_DOES_NOT_EXIST TemporalAsset_PriorAssetState = 3
	// prior_asset is a deletion.
	TemporalAsset_DELETED TemporalAsset_PriorAssetState = 4
)

func (TemporalAsset_PriorAssetState) Descriptor 

func (TemporalAsset_PriorAssetState) Descriptor() protoreflect.EnumDescriptor

func (TemporalAsset_PriorAssetState) Enum 

func (x TemporalAsset_PriorAssetState) Enum() *TemporalAsset_PriorAssetState

func (TemporalAsset_PriorAssetState) EnumDescriptor deprecated 

func (TemporalAsset_PriorAssetState) EnumDescriptor() ([]byte, []int)

Deprecated: Use TemporalAsset_PriorAssetState.Descriptor instead.

func (TemporalAsset_PriorAssetState) Number 

func (x TemporalAsset_PriorAssetState) Number() protoreflect.EnumNumber

func (TemporalAsset_PriorAssetState) String 

func (x TemporalAsset_PriorAssetState) String() string

func (TemporalAsset_PriorAssetState) Type 

func (TemporalAsset_PriorAssetState) Type() protoreflect.EnumType

type TimeWindow 

type TimeWindow struct {

	// Start time of the time window (exclusive).
	StartTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=start_time,json=startTime,proto3" json:"start_time,omitempty"`
	// End time of the time window (inclusive). If not specified, the current
	// timestamp is used instead.
	EndTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// contains filtered or unexported fields
}

A time window specified by its `start_time` and `end_time`.

func (*TimeWindow) Descriptor deprecated 

func (*TimeWindow) Descriptor() ([]byte, []int)

Deprecated: Use TimeWindow.ProtoReflect.Descriptor instead.

func (*TimeWindow) GetEndTime 

func (x *TimeWindow) GetEndTime() *timestamppb.Timestamp

func (*TimeWindow) GetStartTime 

func (x *TimeWindow) GetStartTime() *timestamppb.Timestamp

func (*TimeWindow) ProtoMessage 

func (*TimeWindow) ProtoMessage()

func (*TimeWindow) ProtoReflect 

func (x *TimeWindow) ProtoReflect() protoreflect.Message

func (*TimeWindow) Reset 

func (x *TimeWindow) Reset()

func (*TimeWindow) String 

func (x *TimeWindow) String() string

type UnimplementedAssetServiceServer 

type UnimplementedAssetServiceServer struct {
}

UnimplementedAssetServiceServer can be embedded to have forward compatible implementations.

func (*UnimplementedAssetServiceServer) AnalyzeIamPolicy 

func (*UnimplementedAssetServiceServer) AnalyzeIamPolicy(context.Context, *AnalyzeIamPolicyRequest) (*AnalyzeIamPolicyResponse, error)

func (*UnimplementedAssetServiceServer) AnalyzeIamPolicyLongrunning 

func (*UnimplementedAssetServiceServer) AnalyzeIamPolicyLongrunning(context.Context, *AnalyzeIamPolicyLongrunningRequest) (*longrunning.Operation, error)

func (*UnimplementedAssetServiceServer) BatchGetAssetsHistory 

func (*UnimplementedAssetServiceServer) BatchGetAssetsHistory(context.Context, *BatchGetAssetsHistoryRequest) (*BatchGetAssetsHistoryResponse, error)

func (*UnimplementedAssetServiceServer) CreateFeed 

func (*UnimplementedAssetServiceServer) CreateFeed(context.Context, *CreateFeedRequest) (*Feed, error)

func (*UnimplementedAssetServiceServer) DeleteFeed 

func (*UnimplementedAssetServiceServer) DeleteFeed(context.Context, *DeleteFeedRequest) (*emptypb.Empty, error)

func (*UnimplementedAssetServiceServer) ExportAssets 

func (*UnimplementedAssetServiceServer) ExportAssets(context.Context, *ExportAssetsRequest) (*longrunning.Operation, error)

func (*UnimplementedAssetServiceServer) GetFeed 

func (*UnimplementedAssetServiceServer) GetFeed(context.Context, *GetFeedRequest) (*Feed, error)

func (*UnimplementedAssetServiceServer) ListAssets 

func (*UnimplementedAssetServiceServer) ListAssets(context.Context, *ListAssetsRequest) (*ListAssetsResponse, error)

func (*UnimplementedAssetServiceServer) ListFeeds 

func (*UnimplementedAssetServiceServer) ListFeeds(context.Context, *ListFeedsRequest) (*ListFeedsResponse, error)

func (*UnimplementedAssetServiceServer) SearchAllIamPolicies 

func (*UnimplementedAssetServiceServer) SearchAllIamPolicies(context.Context, *SearchAllIamPoliciesRequest) (*SearchAllIamPoliciesResponse, error)

func (*UnimplementedAssetServiceServer) SearchAllResources 

func (*UnimplementedAssetServiceServer) SearchAllResources(context.Context, *SearchAllResourcesRequest) (*SearchAllResourcesResponse, error)

func (*UnimplementedAssetServiceServer) UpdateFeed 

func (*UnimplementedAssetServiceServer) UpdateFeed(context.Context, *UpdateFeedRequest) (*Feed, error)

type UpdateFeedRequest 

type UpdateFeedRequest struct {

	// Required. The new values of feed details. It must match an existing feed and the
	// field `name` must be in the format of:
	// projects/project_number/feeds/feed_id or
	// folders/folder_number/feeds/feed_id or
	// organizations/organization_number/feeds/feed_id.
	Feed *Feed `protobuf:"bytes,1,opt,name=feed,proto3" json:"feed,omitempty"`
	// Required. Only updates the `feed` fields indicated by this mask.
	// The field mask must not be empty, and it must not contain fields that
	// are immutable or only set by the server.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

Update asset feed request.

func (*UpdateFeedRequest) Descriptor deprecated 

func (*UpdateFeedRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateFeedRequest.ProtoReflect.Descriptor instead.

func (*UpdateFeedRequest) GetFeed 

func (x *UpdateFeedRequest) GetFeed() *Feed

func (*UpdateFeedRequest) GetUpdateMask 

func (x *UpdateFeedRequest) GetUpdateMask() *fieldmaskpb.FieldMask

func (*UpdateFeedRequest) ProtoMessage 

func (*UpdateFeedRequest) ProtoMessage()

func (*UpdateFeedRequest) ProtoReflect 

func (x *UpdateFeedRequest) ProtoReflect() protoreflect.Message

func (*UpdateFeedRequest) Reset 

func (x *UpdateFeedRequest) Reset()

func (*UpdateFeedRequest) String 

func (x *UpdateFeedRequest) String() string

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.