accessgraphv1alpha

package
v0.0.0-...-5c79d48 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Feb 15, 2024 License: AGPL-3.0 Imports: 13 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	AccessGraphService_Query_FullMethodName           = "/accessgraph.v1alpha.AccessGraphService/Query"
	AccessGraphService_GetFile_FullMethodName         = "/accessgraph.v1alpha.AccessGraphService/GetFile"
	AccessGraphService_EventsStream_FullMethodName    = "/accessgraph.v1alpha.AccessGraphService/EventsStream"
	AccessGraphService_Register_FullMethodName        = "/accessgraph.v1alpha.AccessGraphService/Register"
	AccessGraphService_ReplaceCAs_FullMethodName      = "/accessgraph.v1alpha.AccessGraphService/ReplaceCAs"
	AccessGraphService_AWSEventsStream_FullMethodName = "/accessgraph.v1alpha.AccessGraphService/AWSEventsStream"
)

Variables

View Source 
var (
	UsersPermissionsBoundaryType_name = map[int32]string{
		0: "USERS_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED",
		1: "USERS_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY",
	}
	UsersPermissionsBoundaryType_value = map[string]int32{
		"USERS_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED":                 0,
		"USERS_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY": 1,
	}
)

Enum value maps for UsersPermissionsBoundaryType.

View Source 
var (
	RolePermissionsBoundaryType_name = map[int32]string{
		0: "ROLE_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED",
		1: "ROLE_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY",
	}
	RolePermissionsBoundaryType_value = map[string]int32{
		"ROLE_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED":                 0,
		"ROLE_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY": 1,
	}
)

Enum value maps for RolePermissionsBoundaryType.

View Source 
var AccessGraphService_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "accessgraph.v1alpha.AccessGraphService",
	HandlerType: (*AccessGraphServiceServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "Query",
			Handler:    _AccessGraphService_Query_Handler,
		},
		{
			MethodName: "GetFile",
			Handler:    _AccessGraphService_GetFile_Handler,
		},
		{
			MethodName: "Register",
			Handler:    _AccessGraphService_Register_Handler,
		},
		{
			MethodName: "ReplaceCAs",
			Handler:    _AccessGraphService_ReplaceCAs_Handler,
		},
	},
	Streams: []grpc.StreamDesc{
		{
			StreamName:    "EventsStream",
			Handler:       _AccessGraphService_EventsStream_Handler,
			ClientStreams: true,
		},
		{
			StreamName:    "AWSEventsStream",
			Handler:       _AccessGraphService_AWSEventsStream_Handler,
			ClientStreams: true,
		},
	},
	Metadata: "accessgraph/v1alpha/access_graph_service.proto",
}

AccessGraphService_ServiceDesc is the grpc.ServiceDesc for AccessGraphService service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

View Source 
var File_accessgraph_v1alpha_access_graph_service_proto protoreflect.FileDescriptor
View Source 
var File_accessgraph_v1alpha_aws_proto protoreflect.FileDescriptor
View Source 
var File_accessgraph_v1alpha_graph_proto protoreflect.FileDescriptor
View Source 
var File_accessgraph_v1alpha_resources_proto protoreflect.FileDescriptor

Functions

func RegisterAccessGraphServiceServer 

func RegisterAccessGraphServiceServer(s grpc.ServiceRegistrar, srv AccessGraphServiceServer)

Types

type AWSEventsStreamRequest 

type AWSEventsStreamRequest struct {

	// operation contains the desired operation
	//
	// Types that are assignable to Operation:
	//
	//	*AWSEventsStreamRequest_Sync
	//	*AWSEventsStreamRequest_Upsert
	//	*AWSEventsStreamRequest_Delete
	Operation isAWSEventsStreamRequest_Operation `protobuf_oneof:"operation"`
	// contains filtered or unexported fields
}

AWSEventsStreamRequest is a request to send commands to the AWS importer. This command is used to sync the access graph with the AWS database state.

func (*AWSEventsStreamRequest) Descriptor deprecated 

func (*AWSEventsStreamRequest) Descriptor() ([]byte, []int)

Deprecated: Use AWSEventsStreamRequest.ProtoReflect.Descriptor instead.

func (*AWSEventsStreamRequest) GetDelete 

func (x *AWSEventsStreamRequest) GetDelete() *AWSResourceList

func (*AWSEventsStreamRequest) GetOperation 

func (m *AWSEventsStreamRequest) GetOperation() isAWSEventsStreamRequest_Operation

func (*AWSEventsStreamRequest) GetSync 

func (x *AWSEventsStreamRequest) GetSync() *AWSSyncOperation

func (*AWSEventsStreamRequest) GetUpsert 

func (x *AWSEventsStreamRequest) GetUpsert() *AWSResourceList

func (*AWSEventsStreamRequest) ProtoMessage 

func (*AWSEventsStreamRequest) ProtoMessage()

func (*AWSEventsStreamRequest) ProtoReflect 

func (x *AWSEventsStreamRequest) ProtoReflect() protoreflect.Message

func (*AWSEventsStreamRequest) Reset 

func (x *AWSEventsStreamRequest) Reset()

func (*AWSEventsStreamRequest) String 

func (x *AWSEventsStreamRequest) String() string

type AWSEventsStreamRequest_Delete 

type AWSEventsStreamRequest_Delete struct {
	// delete is a command to delete a resource from the access graph when it's deleted from Teleport.
	Delete *AWSResourceList `protobuf:"bytes,3,opt,name=delete,proto3,oneof"`
}

type AWSEventsStreamRequest_Sync 

type AWSEventsStreamRequest_Sync struct {
	// sync is a command to sync the access graph with the Teleport database state.
	// it's issued once Teleport finishes syncing all resources with the database.
	Sync *AWSSyncOperation `protobuf:"bytes,1,opt,name=sync,proto3,oneof"`
}

type AWSEventsStreamRequest_Upsert 

type AWSEventsStreamRequest_Upsert struct {
	// upsert is a command to put a resource into the access graph or update it.
	Upsert *AWSResourceList `protobuf:"bytes,2,opt,name=upsert,proto3,oneof"`
}

type AWSEventsStreamResponse 

type AWSEventsStreamResponse struct {
	// contains filtered or unexported fields
}

AWSEventsStreamResponse is the response from AWSEventsStream.

func (*AWSEventsStreamResponse) Descriptor deprecated 

func (*AWSEventsStreamResponse) Descriptor() ([]byte, []int)

Deprecated: Use AWSEventsStreamResponse.ProtoReflect.Descriptor instead.

func (*AWSEventsStreamResponse) ProtoMessage 

func (*AWSEventsStreamResponse) ProtoMessage()

func (*AWSEventsStreamResponse) ProtoReflect 

func (x *AWSEventsStreamResponse) ProtoReflect() protoreflect.Message

func (*AWSEventsStreamResponse) Reset 

func (x *AWSEventsStreamResponse) Reset()

func (*AWSEventsStreamResponse) String 

func (x *AWSEventsStreamResponse) String() string

type AWSGroupAttachedPolicies 

type AWSGroupAttachedPolicies struct {

	// group is the AWS group.
	Group *AWSGroupV1 `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	// policies is the list of AWS policies that are attached to the group.
	Policies []*AttachedPolicyV1 `protobuf:"bytes,2,rep,name=policies,proto3" json:"policies,omitempty"`
	// account_id is the ID of the AWS account that the group belongs to.
	AccountId string `protobuf:"bytes,3,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

AWSGroupAttachedPolicies is a list of AWS policies that are attached to an AWS group.

func (*AWSGroupAttachedPolicies) Descriptor deprecated 

func (*AWSGroupAttachedPolicies) Descriptor() ([]byte, []int)

Deprecated: Use AWSGroupAttachedPolicies.ProtoReflect.Descriptor instead.

func (*AWSGroupAttachedPolicies) GetAccountId 

func (x *AWSGroupAttachedPolicies) GetAccountId() string

func (*AWSGroupAttachedPolicies) GetGroup 

func (x *AWSGroupAttachedPolicies) GetGroup() *AWSGroupV1

func (*AWSGroupAttachedPolicies) GetPolicies 

func (x *AWSGroupAttachedPolicies) GetPolicies() []*AttachedPolicyV1

func (*AWSGroupAttachedPolicies) ProtoMessage 

func (*AWSGroupAttachedPolicies) ProtoMessage()

func (*AWSGroupAttachedPolicies) ProtoReflect 

func (x *AWSGroupAttachedPolicies) ProtoReflect() protoreflect.Message

func (*AWSGroupAttachedPolicies) Reset 

func (x *AWSGroupAttachedPolicies) Reset()

func (*AWSGroupAttachedPolicies) String 

func (x *AWSGroupAttachedPolicies) String() string

type AWSGroupInlinePolicyV1 

type AWSGroupInlinePolicyV1 struct {

	// policy_name is the name of the policy.
	PolicyName string `protobuf:"bytes,1,opt,name=policy_name,json=policyName,proto3" json:"policy_name,omitempty"`
	// group is the AWS group.
	Group *AWSGroupV1 `protobuf:"bytes,2,opt,name=group,proto3" json:"group,omitempty"`
	// policy_document is the JSON document that defines the policy.
	PolicyDocument []byte `protobuf:"bytes,3,opt,name=policy_document,json=policyDocument,proto3" json:"policy_document,omitempty"`
	// account_id is the ID of the AWS account that the group belongs to.
	AccountId string `protobuf:"bytes,4,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

AWSGroupInlinePolicyV1 is a policy that is inlined to an AWS Group.

func (*AWSGroupInlinePolicyV1) Descriptor deprecated 

func (*AWSGroupInlinePolicyV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSGroupInlinePolicyV1.ProtoReflect.Descriptor instead.

func (*AWSGroupInlinePolicyV1) GetAccountId 

func (x *AWSGroupInlinePolicyV1) GetAccountId() string

func (*AWSGroupInlinePolicyV1) GetGroup 

func (x *AWSGroupInlinePolicyV1) GetGroup() *AWSGroupV1

func (*AWSGroupInlinePolicyV1) GetPolicyDocument 

func (x *AWSGroupInlinePolicyV1) GetPolicyDocument() []byte

func (*AWSGroupInlinePolicyV1) GetPolicyName 

func (x *AWSGroupInlinePolicyV1) GetPolicyName() string

func (*AWSGroupInlinePolicyV1) ProtoMessage 

func (*AWSGroupInlinePolicyV1) ProtoMessage()

func (*AWSGroupInlinePolicyV1) ProtoReflect 

func (x *AWSGroupInlinePolicyV1) ProtoReflect() protoreflect.Message

func (*AWSGroupInlinePolicyV1) Reset 

func (x *AWSGroupInlinePolicyV1) Reset()

func (*AWSGroupInlinePolicyV1) String 

func (x *AWSGroupInlinePolicyV1) String() string

type AWSGroupV1 

type AWSGroupV1 struct {

	// arn is the ARN of the AWS group.
	Arn string `protobuf:"bytes,1,opt,name=arn,proto3" json:"arn,omitempty"`
	// created_at is the time when the AWS group was created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// group_id is the ID of the AWS group.
	GroupId string `protobuf:"bytes,3,opt,name=group_id,json=groupId,proto3" json:"group_id,omitempty"`
	// name is the name of the AWS group.
	Name string `protobuf:"bytes,4,opt,name=name,proto3" json:"name,omitempty"`
	// path is the path of the AWS group.
	Path string `protobuf:"bytes,5,opt,name=path,proto3" json:"path,omitempty"`
	// account_id is the ID of the AWS account that the group belongs to.
	AccountId string `protobuf:"bytes,6,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

AWSGroupV1 is a group of AWS users.

func (*AWSGroupV1) Descriptor deprecated 

func (*AWSGroupV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSGroupV1.ProtoReflect.Descriptor instead.

func (*AWSGroupV1) GetAccountId 

func (x *AWSGroupV1) GetAccountId() string

func (*AWSGroupV1) GetArn 

func (x *AWSGroupV1) GetArn() string

func (*AWSGroupV1) GetCreatedAt 

func (x *AWSGroupV1) GetCreatedAt() *timestamppb.Timestamp

func (*AWSGroupV1) GetGroupId 

func (x *AWSGroupV1) GetGroupId() string

func (*AWSGroupV1) GetName 

func (x *AWSGroupV1) GetName() string

func (*AWSGroupV1) GetPath 

func (x *AWSGroupV1) GetPath() string

func (*AWSGroupV1) ProtoMessage 

func (*AWSGroupV1) ProtoMessage()

func (*AWSGroupV1) ProtoReflect 

func (x *AWSGroupV1) ProtoReflect() protoreflect.Message

func (*AWSGroupV1) Reset 

func (x *AWSGroupV1) Reset()

func (*AWSGroupV1) String 

func (x *AWSGroupV1) String() string

type AWSInstanceProfileV1 

type AWSInstanceProfileV1 struct {

	// arn is the ARN of the AWS instance profile.
	Arn string `protobuf:"bytes,1,opt,name=arn,proto3" json:"arn,omitempty"`
	// created_at is the time when the instance profile was created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// instance_profile_id is the ID of the instance profile.
	InstanceProfileId string `protobuf:"bytes,3,opt,name=instance_profile_id,json=instanceProfileId,proto3" json:"instance_profile_id,omitempty"`
	// instance_profile_name is the name of the instance profile.
	InstanceProfileName string `protobuf:"bytes,4,opt,name=instance_profile_name,json=instanceProfileName,proto3" json:"instance_profile_name,omitempty"`
	// path is the path of the instance profile.
	Path string `protobuf:"bytes,5,opt,name=path,proto3" json:"path,omitempty"`
	// roles is the list of roles that are associated with the instance profile.
	Roles []*AWSRoleV1 `protobuf:"bytes,6,rep,name=roles,proto3" json:"roles,omitempty"`
	// tags is the list of tags that are attached to the instance profile.
	Tags []*AWSTag `protobuf:"bytes,7,rep,name=tags,proto3" json:"tags,omitempty"`
	// account_id is the ID of the AWS account that the instance profile belongs
	// to.
	AccountId string `protobuf:"bytes,8,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

AWSInstanceProfileV1 is an AWS instance profile.

func (*AWSInstanceProfileV1) Descriptor deprecated 

func (*AWSInstanceProfileV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSInstanceProfileV1.ProtoReflect.Descriptor instead.

func (*AWSInstanceProfileV1) GetAccountId 

func (x *AWSInstanceProfileV1) GetAccountId() string

func (*AWSInstanceProfileV1) GetArn 

func (x *AWSInstanceProfileV1) GetArn() string

func (*AWSInstanceProfileV1) GetCreatedAt 

func (x *AWSInstanceProfileV1) GetCreatedAt() *timestamppb.Timestamp

func (*AWSInstanceProfileV1) GetInstanceProfileId 

func (x *AWSInstanceProfileV1) GetInstanceProfileId() string

func (*AWSInstanceProfileV1) GetInstanceProfileName 

func (x *AWSInstanceProfileV1) GetInstanceProfileName() string

func (*AWSInstanceProfileV1) GetPath 

func (x *AWSInstanceProfileV1) GetPath() string

func (*AWSInstanceProfileV1) GetRoles 

func (x *AWSInstanceProfileV1) GetRoles() []*AWSRoleV1

func (*AWSInstanceProfileV1) GetTags 

func (x *AWSInstanceProfileV1) GetTags() []*AWSTag

func (*AWSInstanceProfileV1) ProtoMessage 

func (*AWSInstanceProfileV1) ProtoMessage()

func (*AWSInstanceProfileV1) ProtoReflect 

func (x *AWSInstanceProfileV1) ProtoReflect() protoreflect.Message

func (*AWSInstanceProfileV1) Reset 

func (x *AWSInstanceProfileV1) Reset()

func (*AWSInstanceProfileV1) String 

func (x *AWSInstanceProfileV1) String() string

type AWSInstanceV1 

type AWSInstanceV1 struct {

	// instance_id is the ID of the AWS instance.
	InstanceId string `protobuf:"bytes,1,opt,name=instance_id,json=instanceId,proto3" json:"instance_id,omitempty"`
	// launch_time is the time when the instance was launched.
	LaunchTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=launch_time,json=launchTime,proto3" json:"launch_time,omitempty"`
	// region is the region of the AWS instance.
	Region string `protobuf:"bytes,3,opt,name=region,proto3" json:"region,omitempty"`
	// account_id is the ID of the AWS account that the instance belongs to.
	AccountId string `protobuf:"bytes,4,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// tags is the list of tags that are attached to the instance.
	Tags []*AWSTag `protobuf:"bytes,5,rep,name=tags,proto3" json:"tags,omitempty"`
	// public_dns_name is the public DNS name of the instance.
	PublicDnsName string `protobuf:"bytes,6,opt,name=public_dns_name,json=publicDnsName,proto3" json:"public_dns_name,omitempty"`
	// iam_instance_profile_arn is the ARN of the IAM instance profile that is
	// associated with the instance.
	IamInstanceProfileArn *wrapperspb.StringValue `` /* 128-byte string literal not displayed */
	// launch_key_name is the name of the key pair that is used to launch the
	// instance.
	LaunchKeyName *wrapperspb.StringValue `protobuf:"bytes,8,opt,name=launch_key_name,json=launchKeyName,proto3" json:"launch_key_name,omitempty"`
	// contains filtered or unexported fields
}

AWSInstanceV1 is an AWS instance.

func (*AWSInstanceV1) Descriptor deprecated 

func (*AWSInstanceV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSInstanceV1.ProtoReflect.Descriptor instead.

func (*AWSInstanceV1) GetAccountId 

func (x *AWSInstanceV1) GetAccountId() string

func (*AWSInstanceV1) GetIamInstanceProfileArn 

func (x *AWSInstanceV1) GetIamInstanceProfileArn() *wrapperspb.StringValue

func (*AWSInstanceV1) GetInstanceId 

func (x *AWSInstanceV1) GetInstanceId() string

func (*AWSInstanceV1) GetLaunchKeyName 

func (x *AWSInstanceV1) GetLaunchKeyName() *wrapperspb.StringValue

func (*AWSInstanceV1) GetLaunchTime 

func (x *AWSInstanceV1) GetLaunchTime() *timestamppb.Timestamp

func (*AWSInstanceV1) GetPublicDnsName 

func (x *AWSInstanceV1) GetPublicDnsName() string

func (*AWSInstanceV1) GetRegion 

func (x *AWSInstanceV1) GetRegion() string

func (*AWSInstanceV1) GetTags 

func (x *AWSInstanceV1) GetTags() []*AWSTag

func (*AWSInstanceV1) ProtoMessage 

func (*AWSInstanceV1) ProtoMessage()

func (*AWSInstanceV1) ProtoReflect 

func (x *AWSInstanceV1) ProtoReflect() protoreflect.Message

func (*AWSInstanceV1) Reset 

func (x *AWSInstanceV1) Reset()

func (*AWSInstanceV1) String 

func (x *AWSInstanceV1) String() string

type AWSPolicyV1 

type AWSPolicyV1 struct {

	// arn is the ARN of the AWS policy.
	Arn string `protobuf:"bytes,1,opt,name=arn,proto3" json:"arn,omitempty"`
	// created_at is the time when the AWS policy was created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// default_version_id is the ID of the default version of the policy.
	DefaultVersionId string `protobuf:"bytes,3,opt,name=default_version_id,json=defaultVersionId,proto3" json:"default_version_id,omitempty"`
	// description is the description of the policy.
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// is_attachable indicates whether the policy can be attached to an AWS
	// resource.
	IsAttachable bool `protobuf:"varint,5,opt,name=is_attachable,json=isAttachable,proto3" json:"is_attachable,omitempty"`
	// path is the path of the policy.
	Path string `protobuf:"bytes,6,opt,name=path,proto3" json:"path,omitempty"`
	// policy_id is the ID of the policy.
	PolicyId string `protobuf:"bytes,7,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	// tags is the list of tags that are attached to the policy.
	Tags []*AWSTag `protobuf:"bytes,8,rep,name=tags,proto3" json:"tags,omitempty"`
	// update_at is the time when the policy was last updated.
	UpdatedAt *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=updated_at,json=updatedAt,proto3" json:"updated_at,omitempty"`
	// account_id is the ID of the AWS account that the policy belongs to.
	AccountId string `protobuf:"bytes,10,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// policty_name is the name of the policy.
	PolicyName string `protobuf:"bytes,11,opt,name=policy_name,json=policyName,proto3" json:"policy_name,omitempty"`
	// policy_document is the JSON document that defines the policy.
	PolicyDocument []byte `protobuf:"bytes,12,opt,name=policy_document,json=policyDocument,proto3" json:"policy_document,omitempty"`
	// contains filtered or unexported fields
}

AWSPolicyV1 is an AWS policy.

func (*AWSPolicyV1) Descriptor deprecated 

func (*AWSPolicyV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSPolicyV1.ProtoReflect.Descriptor instead.

func (*AWSPolicyV1) GetAccountId 

func (x *AWSPolicyV1) GetAccountId() string

func (*AWSPolicyV1) GetArn 

func (x *AWSPolicyV1) GetArn() string

func (*AWSPolicyV1) GetCreatedAt 

func (x *AWSPolicyV1) GetCreatedAt() *timestamppb.Timestamp

func (*AWSPolicyV1) GetDefaultVersionId 

func (x *AWSPolicyV1) GetDefaultVersionId() string

func (*AWSPolicyV1) GetDescription 

func (x *AWSPolicyV1) GetDescription() string

func (*AWSPolicyV1) GetIsAttachable 

func (x *AWSPolicyV1) GetIsAttachable() bool

func (*AWSPolicyV1) GetPath 

func (x *AWSPolicyV1) GetPath() string

func (*AWSPolicyV1) GetPolicyDocument 

func (x *AWSPolicyV1) GetPolicyDocument() []byte

func (*AWSPolicyV1) GetPolicyId 

func (x *AWSPolicyV1) GetPolicyId() string

func (*AWSPolicyV1) GetPolicyName 

func (x *AWSPolicyV1) GetPolicyName() string

func (*AWSPolicyV1) GetTags 

func (x *AWSPolicyV1) GetTags() []*AWSTag

func (*AWSPolicyV1) GetUpdatedAt 

func (x *AWSPolicyV1) GetUpdatedAt() *timestamppb.Timestamp

func (*AWSPolicyV1) ProtoMessage 

func (*AWSPolicyV1) ProtoMessage()

func (*AWSPolicyV1) ProtoReflect 

func (x *AWSPolicyV1) ProtoReflect() protoreflect.Message

func (*AWSPolicyV1) Reset 

func (x *AWSPolicyV1) Reset()

func (*AWSPolicyV1) String 

func (x *AWSPolicyV1) String() string

type AWSResource 

type AWSResource struct {

	// Types that are assignable to Resource:
	//
	//	*AWSResource_User
	//	*AWSResource_Group
	//	*AWSResource_UserInlinePolicy
	//	*AWSResource_UserGroups
	//	*AWSResource_Instance
	//	*AWSResource_Policy
	//	*AWSResource_UserAttachedPolicies
	//	*AWSResource_GroupAttachedPolicies
	//	*AWSResource_GroupInlinePolicy
	//	*AWSResource_S3Bucket
	//	*AWSResource_Role
	//	*AWSResource_RoleInlinePolicy
	//	*AWSResource_RoleAttachedPolicies
	//	*AWSResource_InstanceProfile
	Resource isAWSResource_Resource `protobuf_oneof:"resource"`
	// contains filtered or unexported fields
}

AWSResource is a list of AWS resources supported by the access graph.

func (*AWSResource) Descriptor deprecated 

func (*AWSResource) Descriptor() ([]byte, []int)

Deprecated: Use AWSResource.ProtoReflect.Descriptor instead.

func (*AWSResource) GetGroup 

func (x *AWSResource) GetGroup() *AWSGroupV1

func (*AWSResource) GetGroupAttachedPolicies 

func (x *AWSResource) GetGroupAttachedPolicies() *AWSGroupAttachedPolicies

func (*AWSResource) GetGroupInlinePolicy 

func (x *AWSResource) GetGroupInlinePolicy() *AWSGroupInlinePolicyV1

func (*AWSResource) GetInstance 

func (x *AWSResource) GetInstance() *AWSInstanceV1

func (*AWSResource) GetInstanceProfile 

func (x *AWSResource) GetInstanceProfile() *AWSInstanceProfileV1

func (*AWSResource) GetPolicy 

func (x *AWSResource) GetPolicy() *AWSPolicyV1

func (*AWSResource) GetResource 

func (m *AWSResource) GetResource() isAWSResource_Resource

func (*AWSResource) GetRole 

func (x *AWSResource) GetRole() *AWSRoleV1

func (*AWSResource) GetRoleAttachedPolicies 

func (x *AWSResource) GetRoleAttachedPolicies() *AWSRoleAttachedPolicies

func (*AWSResource) GetRoleInlinePolicy 

func (x *AWSResource) GetRoleInlinePolicy() *AWSRoleInlinePolicyV1

func (*AWSResource) GetS3Bucket 

func (x *AWSResource) GetS3Bucket() *AWSS3BucketV1

func (*AWSResource) GetUser 

func (x *AWSResource) GetUser() *AWSUserV1

func (*AWSResource) GetUserAttachedPolicies 

func (x *AWSResource) GetUserAttachedPolicies() *AWSUserAttachedPolicies

func (*AWSResource) GetUserGroups 

func (x *AWSResource) GetUserGroups() *AWSUserGroupsV1

func (*AWSResource) GetUserInlinePolicy 

func (x *AWSResource) GetUserInlinePolicy() *AWSUserInlinePolicyV1

func (*AWSResource) ProtoMessage 

func (*AWSResource) ProtoMessage()

func (*AWSResource) ProtoReflect 

func (x *AWSResource) ProtoReflect() protoreflect.Message

func (*AWSResource) Reset 

func (x *AWSResource) Reset()

func (*AWSResource) String 

func (x *AWSResource) String() string

type AWSResourceList 

type AWSResourceList struct {
	Resources []*AWSResource `protobuf:"bytes,1,rep,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

AWSResourceList is a list of AWS resources supported by the access graph.

func (*AWSResourceList) Descriptor deprecated 

func (*AWSResourceList) Descriptor() ([]byte, []int)

Deprecated: Use AWSResourceList.ProtoReflect.Descriptor instead.

func (*AWSResourceList) GetResources 

func (x *AWSResourceList) GetResources() []*AWSResource

func (*AWSResourceList) ProtoMessage 

func (*AWSResourceList) ProtoMessage()

func (*AWSResourceList) ProtoReflect 

func (x *AWSResourceList) ProtoReflect() protoreflect.Message

func (*AWSResourceList) Reset 

func (x *AWSResourceList) Reset()

func (*AWSResourceList) String 

func (x *AWSResourceList) String() string

type AWSResource_Group 

type AWSResource_Group struct {
	// group is an AWS group.
	Group *AWSGroupV1 `protobuf:"bytes,2,opt,name=group,proto3,oneof"`
}

type AWSResource_GroupAttachedPolicies 

type AWSResource_GroupAttachedPolicies struct {
	// group_attached_policies is a list of AWS policies that are attached to an
	// AWS group.
	GroupAttachedPolicies *AWSGroupAttachedPolicies `protobuf:"bytes,8,opt,name=group_attached_policies,json=groupAttachedPolicies,proto3,oneof"`
}

type AWSResource_GroupInlinePolicy 

type AWSResource_GroupInlinePolicy struct {
	// group_inline_policy is a policy that is inlined to an AWS group.
	GroupInlinePolicy *AWSGroupInlinePolicyV1 `protobuf:"bytes,9,opt,name=group_inline_policy,json=groupInlinePolicy,proto3,oneof"`
}

type AWSResource_Instance 

type AWSResource_Instance struct {
	// instance is an AWS instance.
	Instance *AWSInstanceV1 `protobuf:"bytes,5,opt,name=instance,proto3,oneof"`
}

type AWSResource_InstanceProfile 

type AWSResource_InstanceProfile struct {
	// instance_profile is an AWS instance profile.
	InstanceProfile *AWSInstanceProfileV1 `protobuf:"bytes,14,opt,name=instance_profile,json=instanceProfile,proto3,oneof"`
}

type AWSResource_Policy 

type AWSResource_Policy struct {
	// policy is an AWS policy.
	Policy *AWSPolicyV1 `protobuf:"bytes,6,opt,name=policy,proto3,oneof"`
}

type AWSResource_Role 

type AWSResource_Role struct {
	// role is an AWS role.
	Role *AWSRoleV1 `protobuf:"bytes,11,opt,name=role,proto3,oneof"`
}

type AWSResource_RoleAttachedPolicies 

type AWSResource_RoleAttachedPolicies struct {
	// role_attached_policies is a list of AWS policies that are attached to an
	// AWS role.
	RoleAttachedPolicies *AWSRoleAttachedPolicies `protobuf:"bytes,13,opt,name=role_attached_policies,json=roleAttachedPolicies,proto3,oneof"`
}

type AWSResource_RoleInlinePolicy 

type AWSResource_RoleInlinePolicy struct {
	// role_inline_policy is a policy that is inlined to an AWS role.
	RoleInlinePolicy *AWSRoleInlinePolicyV1 `protobuf:"bytes,12,opt,name=role_inline_policy,json=roleInlinePolicy,proto3,oneof"`
}

type AWSResource_S3Bucket 

type AWSResource_S3Bucket struct {
	// s3_bucket is an AWS S3 bucket.
	S3Bucket *AWSS3BucketV1 `protobuf:"bytes,10,opt,name=s3_bucket,json=s3Bucket,proto3,oneof"`
}

type AWSResource_User 

type AWSResource_User struct {
	// user is an AWS user.
	User *AWSUserV1 `protobuf:"bytes,1,opt,name=user,proto3,oneof"`
}

type AWSResource_UserAttachedPolicies 

type AWSResource_UserAttachedPolicies struct {
	// user_attached_policies is a list of AWS policies that are attached to an
	// AWS user.
	UserAttachedPolicies *AWSUserAttachedPolicies `protobuf:"bytes,7,opt,name=user_attached_policies,json=userAttachedPolicies,proto3,oneof"`
}

type AWSResource_UserGroups 

type AWSResource_UserGroups struct {
	// user_groups is a list of AWS groups that an AWS user belongs to.
	UserGroups *AWSUserGroupsV1 `protobuf:"bytes,4,opt,name=user_groups,json=userGroups,proto3,oneof"`
}

type AWSResource_UserInlinePolicy 

type AWSResource_UserInlinePolicy struct {
	// user_inline_policy is a policy that is inlined to an AWS user.
	UserInlinePolicy *AWSUserInlinePolicyV1 `protobuf:"bytes,3,opt,name=user_inline_policy,json=userInlinePolicy,proto3,oneof"`
}

type AWSRoleAttachedPolicies 

type AWSRoleAttachedPolicies struct {

	// policies is the list of AWS policies that are attached to the role.
	Policies []*AttachedPolicyV1 `protobuf:"bytes,2,rep,name=policies,proto3" json:"policies,omitempty"`
	// account_id is the ID of the AWS account that the role belongs to.
	AccountId string `protobuf:"bytes,3,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// aws_role is the AWS role.
	AwsRole *AWSRoleV1 `protobuf:"bytes,4,opt,name=aws_role,json=awsRole,proto3" json:"aws_role,omitempty"`
	// contains filtered or unexported fields
}

AWSRoleAttachedPolicies is a list of AWS policies that are attached to an AWS role.

func (*AWSRoleAttachedPolicies) Descriptor deprecated 

func (*AWSRoleAttachedPolicies) Descriptor() ([]byte, []int)

Deprecated: Use AWSRoleAttachedPolicies.ProtoReflect.Descriptor instead.

func (*AWSRoleAttachedPolicies) GetAccountId 

func (x *AWSRoleAttachedPolicies) GetAccountId() string

func (*AWSRoleAttachedPolicies) GetAwsRole 

func (x *AWSRoleAttachedPolicies) GetAwsRole() *AWSRoleV1

func (*AWSRoleAttachedPolicies) GetPolicies 

func (x *AWSRoleAttachedPolicies) GetPolicies() []*AttachedPolicyV1

func (*AWSRoleAttachedPolicies) ProtoMessage 

func (*AWSRoleAttachedPolicies) ProtoMessage()

func (*AWSRoleAttachedPolicies) ProtoReflect 

func (x *AWSRoleAttachedPolicies) ProtoReflect() protoreflect.Message

func (*AWSRoleAttachedPolicies) Reset 

func (x *AWSRoleAttachedPolicies) Reset()

func (*AWSRoleAttachedPolicies) String 

func (x *AWSRoleAttachedPolicies) String() string

type AWSRoleInlinePolicyV1 

type AWSRoleInlinePolicyV1 struct {

	// policy_name is the name of the policy.
	PolicyName string `protobuf:"bytes,1,opt,name=policy_name,json=policyName,proto3" json:"policy_name,omitempty"`
	// policy_document is the JSON document that defines the policy.
	PolicyDocument []byte `protobuf:"bytes,3,opt,name=policy_document,json=policyDocument,proto3" json:"policy_document,omitempty"`
	// account_id is the ID of the AWS account that the role belongs to.
	AccountId string `protobuf:"bytes,4,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// aws_role is the role name of the AWS role that the policy is attached to.
	AwsRole *AWSRoleV1 `protobuf:"bytes,5,opt,name=aws_role,json=awsRole,proto3" json:"aws_role,omitempty"`
	// contains filtered or unexported fields
}

AWSRoleInlinePolicyV1 is a policy that is inlined to an AWS Role.

func (*AWSRoleInlinePolicyV1) Descriptor deprecated 

func (*AWSRoleInlinePolicyV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSRoleInlinePolicyV1.ProtoReflect.Descriptor instead.

func (*AWSRoleInlinePolicyV1) GetAccountId 

func (x *AWSRoleInlinePolicyV1) GetAccountId() string

func (*AWSRoleInlinePolicyV1) GetAwsRole 

func (x *AWSRoleInlinePolicyV1) GetAwsRole() *AWSRoleV1

func (*AWSRoleInlinePolicyV1) GetPolicyDocument 

func (x *AWSRoleInlinePolicyV1) GetPolicyDocument() []byte

func (*AWSRoleInlinePolicyV1) GetPolicyName 

func (x *AWSRoleInlinePolicyV1) GetPolicyName() string

func (*AWSRoleInlinePolicyV1) ProtoMessage 

func (*AWSRoleInlinePolicyV1) ProtoMessage()

func (*AWSRoleInlinePolicyV1) ProtoReflect 

func (x *AWSRoleInlinePolicyV1) ProtoReflect() protoreflect.Message

func (*AWSRoleInlinePolicyV1) Reset 

func (x *AWSRoleInlinePolicyV1) Reset()

func (*AWSRoleInlinePolicyV1) String 

func (x *AWSRoleInlinePolicyV1) String() string

type AWSRoleV1 

type AWSRoleV1 struct {

	// arn is the ARN of the AWS role.
	Arn string `protobuf:"bytes,1,opt,name=arn,proto3" json:"arn,omitempty"`
	// assume_role_policy_document is the JSON document that defines the trust
	// policy for the role.
	AssumeRolePolicyDocument []byte `` /* 137-byte string literal not displayed */
	// created_at is the time when the role was created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// description is the description of the role.
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// max_session_duration is the maximum session duration of the role.
	MaxSessionDuration *durationpb.Duration `protobuf:"bytes,5,opt,name=max_session_duration,json=maxSessionDuration,proto3" json:"max_session_duration,omitempty"`
	// path is the path of the role.
	Path string `protobuf:"bytes,6,opt,name=path,proto3" json:"path,omitempty"`
	// permissions_boundary is the permissions boundary of the role.
	PermissionsBoundary *RolePermissionsBoundaryV1 `protobuf:"bytes,7,opt,name=permissions_boundary,json=permissionsBoundary,proto3" json:"permissions_boundary,omitempty"`
	// role_id is the ID of the role.
	RoleId string `protobuf:"bytes,8,opt,name=role_id,json=roleId,proto3" json:"role_id,omitempty"`
	// name is the name of the role.
	Name string `protobuf:"bytes,9,opt,name=name,proto3" json:"name,omitempty"`
	// tags is the list of tags that are attached to the role.
	Tags []*AWSTag `protobuf:"bytes,10,rep,name=tags,proto3" json:"tags,omitempty"`
	// role_last_used is the last used information of the role.
	RoleLastUsed *RoleLastUsedV1 `protobuf:"bytes,11,opt,name=role_last_used,json=roleLastUsed,proto3" json:"role_last_used,omitempty"`
	// account_id is the ID of the AWS account that the role belongs to.
	AccountId string `protobuf:"bytes,12,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

AWSRoleV1 is an AWS role.

func (*AWSRoleV1) Descriptor deprecated 

func (*AWSRoleV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSRoleV1.ProtoReflect.Descriptor instead.

func (*AWSRoleV1) GetAccountId 

func (x *AWSRoleV1) GetAccountId() string

func (*AWSRoleV1) GetArn 

func (x *AWSRoleV1) GetArn() string

func (*AWSRoleV1) GetAssumeRolePolicyDocument 

func (x *AWSRoleV1) GetAssumeRolePolicyDocument() []byte

func (*AWSRoleV1) GetCreatedAt 

func (x *AWSRoleV1) GetCreatedAt() *timestamppb.Timestamp

func (*AWSRoleV1) GetDescription 

func (x *AWSRoleV1) GetDescription() string

func (*AWSRoleV1) GetMaxSessionDuration 

func (x *AWSRoleV1) GetMaxSessionDuration() *durationpb.Duration

func (*AWSRoleV1) GetName 

func (x *AWSRoleV1) GetName() string

func (*AWSRoleV1) GetPath 

func (x *AWSRoleV1) GetPath() string

func (*AWSRoleV1) GetPermissionsBoundary 

func (x *AWSRoleV1) GetPermissionsBoundary() *RolePermissionsBoundaryV1

func (*AWSRoleV1) GetRoleId 

func (x *AWSRoleV1) GetRoleId() string

func (*AWSRoleV1) GetRoleLastUsed 

func (x *AWSRoleV1) GetRoleLastUsed() *RoleLastUsedV1

func (*AWSRoleV1) GetTags 

func (x *AWSRoleV1) GetTags() []*AWSTag

func (*AWSRoleV1) ProtoMessage 

func (*AWSRoleV1) ProtoMessage()

func (*AWSRoleV1) ProtoReflect 

func (x *AWSRoleV1) ProtoReflect() protoreflect.Message

func (*AWSRoleV1) Reset 

func (x *AWSRoleV1) Reset()

func (*AWSRoleV1) String 

func (x *AWSRoleV1) String() string

type AWSS3BucketACL 

type AWSS3BucketACL struct {

	// grantee is the grantee of the ACL.
	Grantee *AWSS3BucketACLGrantee `protobuf:"bytes,1,opt,name=grantee,proto3" json:"grantee,omitempty"`
	// permission is the permission of the ACL.
	Permission string `protobuf:"bytes,2,opt,name=permission,proto3" json:"permission,omitempty"`
	// contains filtered or unexported fields
}

AWSS3BucketACL is the ACL of an AWS S3 bucket.

func (*AWSS3BucketACL) Descriptor deprecated 

func (*AWSS3BucketACL) Descriptor() ([]byte, []int)

Deprecated: Use AWSS3BucketACL.ProtoReflect.Descriptor instead.

func (*AWSS3BucketACL) GetGrantee 

func (x *AWSS3BucketACL) GetGrantee() *AWSS3BucketACLGrantee

func (*AWSS3BucketACL) GetPermission 

func (x *AWSS3BucketACL) GetPermission() string

func (*AWSS3BucketACL) ProtoMessage 

func (*AWSS3BucketACL) ProtoMessage()

func (*AWSS3BucketACL) ProtoReflect 

func (x *AWSS3BucketACL) ProtoReflect() protoreflect.Message

func (*AWSS3BucketACL) Reset 

func (x *AWSS3BucketACL) Reset()

func (*AWSS3BucketACL) String 

func (x *AWSS3BucketACL) String() string

type AWSS3BucketACLGrantee 

type AWSS3BucketACLGrantee struct {

	// display_name is the name of the grantee.
	DisplayName string `protobuf:"bytes,1,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// id is the ID of the grantee.
	Id string `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`
	// email_address is the email address of the grantee.
	EmailAddress string `protobuf:"bytes,3,opt,name=email_address,json=emailAddress,proto3" json:"email_address,omitempty"`
	// type is the type of the grantee.
	Type string `protobuf:"bytes,4,opt,name=type,proto3" json:"type,omitempty"`
	// uri is the URI of the grantee.
	Uri string `protobuf:"bytes,5,opt,name=uri,proto3" json:"uri,omitempty"`
	// contains filtered or unexported fields
}

AWSS3BucketACLGrantee is the grantee of an ACL.

func (*AWSS3BucketACLGrantee) Descriptor deprecated 

func (*AWSS3BucketACLGrantee) Descriptor() ([]byte, []int)

Deprecated: Use AWSS3BucketACLGrantee.ProtoReflect.Descriptor instead.

func (*AWSS3BucketACLGrantee) GetDisplayName 

func (x *AWSS3BucketACLGrantee) GetDisplayName() string

func (*AWSS3BucketACLGrantee) GetEmailAddress 

func (x *AWSS3BucketACLGrantee) GetEmailAddress() string

func (*AWSS3BucketACLGrantee) GetId 

func (x *AWSS3BucketACLGrantee) GetId() string

func (*AWSS3BucketACLGrantee) GetType 

func (x *AWSS3BucketACLGrantee) GetType() string

func (*AWSS3BucketACLGrantee) GetUri 

func (x *AWSS3BucketACLGrantee) GetUri() string

func (*AWSS3BucketACLGrantee) ProtoMessage 

func (*AWSS3BucketACLGrantee) ProtoMessage()

func (*AWSS3BucketACLGrantee) ProtoReflect 

func (x *AWSS3BucketACLGrantee) ProtoReflect() protoreflect.Message

func (*AWSS3BucketACLGrantee) Reset 

func (x *AWSS3BucketACLGrantee) Reset()

func (*AWSS3BucketACLGrantee) String 

func (x *AWSS3BucketACLGrantee) String() string

type AWSS3BucketV1 

type AWSS3BucketV1 struct {

	// name is the name of the AWS S3 bucket.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// account_id is the ID of the AWS account that the S3 bucket belongs to.
	AccountId string `protobuf:"bytes,2,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// policy_document is the JSON document that defines the policy.
	PolicyDocument []byte `protobuf:"bytes,3,opt,name=policy_document,json=policyDocument,proto3" json:"policy_document,omitempty"`
	// is_public indicates whether the S3 bucket is public.
	IsPublic bool `protobuf:"varint,4,opt,name=is_public,json=isPublic,proto3" json:"is_public,omitempty"`
	// acl is the ACL of the S3 bucket.
	Acls []*AWSS3BucketACL `protobuf:"bytes,5,rep,name=acls,proto3" json:"acls,omitempty"`
	// contains filtered or unexported fields
}

AWSS3BucketV1 is an AWS S3 bucket.

func (*AWSS3BucketV1) Descriptor deprecated 

func (*AWSS3BucketV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSS3BucketV1.ProtoReflect.Descriptor instead.

func (*AWSS3BucketV1) GetAccountId 

func (x *AWSS3BucketV1) GetAccountId() string

func (*AWSS3BucketV1) GetAcls 

func (x *AWSS3BucketV1) GetAcls() []*AWSS3BucketACL

func (*AWSS3BucketV1) GetIsPublic 

func (x *AWSS3BucketV1) GetIsPublic() bool

func (*AWSS3BucketV1) GetName 

func (x *AWSS3BucketV1) GetName() string

func (*AWSS3BucketV1) GetPolicyDocument 

func (x *AWSS3BucketV1) GetPolicyDocument() []byte

func (*AWSS3BucketV1) ProtoMessage 

func (*AWSS3BucketV1) ProtoMessage()

func (*AWSS3BucketV1) ProtoReflect 

func (x *AWSS3BucketV1) ProtoReflect() protoreflect.Message

func (*AWSS3BucketV1) Reset 

func (x *AWSS3BucketV1) Reset()

func (*AWSS3BucketV1) String 

func (x *AWSS3BucketV1) String() string

type AWSSyncOperation 

type AWSSyncOperation struct {
	// contains filtered or unexported fields
}

AWSSyncOperation is a command that Teleport sends to the access graph service at the end of the sync process.

func (*AWSSyncOperation) Descriptor deprecated 

func (*AWSSyncOperation) Descriptor() ([]byte, []int)

Deprecated: Use AWSSyncOperation.ProtoReflect.Descriptor instead.

func (*AWSSyncOperation) ProtoMessage 

func (*AWSSyncOperation) ProtoMessage()

func (*AWSSyncOperation) ProtoReflect 

func (x *AWSSyncOperation) ProtoReflect() protoreflect.Message

func (*AWSSyncOperation) Reset 

func (x *AWSSyncOperation) Reset()

func (*AWSSyncOperation) String 

func (x *AWSSyncOperation) String() string

type AWSTag 

type AWSTag struct {

	// key is the key of the tag.
	Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	// value is the value of the tag.
	Value *wrapperspb.StringValue `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

AWSTag is a tag that is attached to an AWS resource.

func (*AWSTag) Descriptor deprecated 

func (*AWSTag) Descriptor() ([]byte, []int)

Deprecated: Use AWSTag.ProtoReflect.Descriptor instead.

func (*AWSTag) GetKey 

func (x *AWSTag) GetKey() string

func (*AWSTag) GetValue 

func (x *AWSTag) GetValue() *wrapperspb.StringValue

func (*AWSTag) ProtoMessage 

func (*AWSTag) ProtoMessage()

func (*AWSTag) ProtoReflect 

func (x *AWSTag) ProtoReflect() protoreflect.Message

func (*AWSTag) Reset 

func (x *AWSTag) Reset()

func (*AWSTag) String 

func (x *AWSTag) String() string

type AWSUserAttachedPolicies 

type AWSUserAttachedPolicies struct {

	// user is the AWS user.
	User *AWSUserV1 `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	// policies is the list of AWS policies that are attached to the user.
	Policies []*AttachedPolicyV1 `protobuf:"bytes,2,rep,name=policies,proto3" json:"policies,omitempty"`
	// account_id is the ID of the AWS account that the user belongs to.
	AccountId string `protobuf:"bytes,3,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

AWSUserAttachedPolicies is a list of AWS policies that are attached to an AWS user.

func (*AWSUserAttachedPolicies) Descriptor deprecated 

func (*AWSUserAttachedPolicies) Descriptor() ([]byte, []int)

Deprecated: Use AWSUserAttachedPolicies.ProtoReflect.Descriptor instead.

func (*AWSUserAttachedPolicies) GetAccountId 

func (x *AWSUserAttachedPolicies) GetAccountId() string

func (*AWSUserAttachedPolicies) GetPolicies 

func (x *AWSUserAttachedPolicies) GetPolicies() []*AttachedPolicyV1

func (*AWSUserAttachedPolicies) GetUser 

func (x *AWSUserAttachedPolicies) GetUser() *AWSUserV1

func (*AWSUserAttachedPolicies) ProtoMessage 

func (*AWSUserAttachedPolicies) ProtoMessage()

func (*AWSUserAttachedPolicies) ProtoReflect 

func (x *AWSUserAttachedPolicies) ProtoReflect() protoreflect.Message

func (*AWSUserAttachedPolicies) Reset 

func (x *AWSUserAttachedPolicies) Reset()

func (*AWSUserAttachedPolicies) String 

func (x *AWSUserAttachedPolicies) String() string

type AWSUserGroupsV1 

type AWSUserGroupsV1 struct {

	// user is the AWS user.
	User *AWSUserV1 `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
	// groups is the list of AWS groups that the user belongs to.
	Groups []*AWSGroupV1 `protobuf:"bytes,2,rep,name=groups,proto3" json:"groups,omitempty"`
	// contains filtered or unexported fields
}

AWSUserGroupsV1 is a list of AWS groups that an AWS user belongs to.

func (*AWSUserGroupsV1) Descriptor deprecated 

func (*AWSUserGroupsV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSUserGroupsV1.ProtoReflect.Descriptor instead.

func (*AWSUserGroupsV1) GetGroups 

func (x *AWSUserGroupsV1) GetGroups() []*AWSGroupV1

func (*AWSUserGroupsV1) GetUser 

func (x *AWSUserGroupsV1) GetUser() *AWSUserV1

func (*AWSUserGroupsV1) ProtoMessage 

func (*AWSUserGroupsV1) ProtoMessage()

func (*AWSUserGroupsV1) ProtoReflect 

func (x *AWSUserGroupsV1) ProtoReflect() protoreflect.Message

func (*AWSUserGroupsV1) Reset 

func (x *AWSUserGroupsV1) Reset()

func (*AWSUserGroupsV1) String 

func (x *AWSUserGroupsV1) String() string

type AWSUserInlinePolicyV1 

type AWSUserInlinePolicyV1 struct {

	// policy_name is the name of the policy.
	PolicyName string `protobuf:"bytes,1,opt,name=policy_name,json=policyName,proto3" json:"policy_name,omitempty"`
	// policy_document is the JSON document that defines the policy.
	PolicyDocument []byte `protobuf:"bytes,3,opt,name=policy_document,json=policyDocument,proto3" json:"policy_document,omitempty"`
	// account_id is the ID of the AWS account that the user belongs to.
	AccountId string `protobuf:"bytes,4,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// user is the user who the policy is attached to.
	User *AWSUserV1 `protobuf:"bytes,5,opt,name=user,proto3" json:"user,omitempty"`
	// contains filtered or unexported fields
}

AWSUserInlinePolicyV1 is a policy that is inlined to an AWS user.

func (*AWSUserInlinePolicyV1) Descriptor deprecated 

func (*AWSUserInlinePolicyV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSUserInlinePolicyV1.ProtoReflect.Descriptor instead.

func (*AWSUserInlinePolicyV1) GetAccountId 

func (x *AWSUserInlinePolicyV1) GetAccountId() string

func (*AWSUserInlinePolicyV1) GetPolicyDocument 

func (x *AWSUserInlinePolicyV1) GetPolicyDocument() []byte

func (*AWSUserInlinePolicyV1) GetPolicyName 

func (x *AWSUserInlinePolicyV1) GetPolicyName() string

func (*AWSUserInlinePolicyV1) GetUser 

func (x *AWSUserInlinePolicyV1) GetUser() *AWSUserV1

func (*AWSUserInlinePolicyV1) ProtoMessage 

func (*AWSUserInlinePolicyV1) ProtoMessage()

func (*AWSUserInlinePolicyV1) ProtoReflect 

func (x *AWSUserInlinePolicyV1) ProtoReflect() protoreflect.Message

func (*AWSUserInlinePolicyV1) Reset 

func (x *AWSUserInlinePolicyV1) Reset()

func (*AWSUserInlinePolicyV1) String 

func (x *AWSUserInlinePolicyV1) String() string

type AWSUserV1 

type AWSUserV1 struct {

	// arn is the ARN of the AWS user.
	Arn string `protobuf:"bytes,1,opt,name=arn,proto3" json:"arn,omitempty"`
	// created_at is the time when the AWS user was created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// path is the path of the AWS user.
	Path string `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`
	// user_id is the ID of the AWS user.
	UserId string `protobuf:"bytes,4,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
	// user_name is the name of the AWS user.
	UserName string `protobuf:"bytes,5,opt,name=user_name,json=userName,proto3" json:"user_name,omitempty"`
	// password_last_used is the time when the user last used their password.
	PasswordLastUsed *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=password_last_used,json=passwordLastUsed,proto3" json:"password_last_used,omitempty"`
	// permissions_boundary is the permissions boundary of the user.
	PermissionsBoundary *UsersPermissionsBoundaryV1 `protobuf:"bytes,7,opt,name=permissions_boundary,json=permissionsBoundary,proto3" json:"permissions_boundary,omitempty"`
	// tags is the list of tags that are attached to the user.
	Tags []*AWSTag `protobuf:"bytes,8,rep,name=tags,proto3" json:"tags,omitempty"`
	// account_id is the ID of the AWS account that the user belongs to.
	AccountId string `protobuf:"bytes,9,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
	// contains filtered or unexported fields
}

AWSUserV1 is an AWS user.

func (*AWSUserV1) Descriptor deprecated 

func (*AWSUserV1) Descriptor() ([]byte, []int)

Deprecated: Use AWSUserV1.ProtoReflect.Descriptor instead.

func (*AWSUserV1) GetAccountId 

func (x *AWSUserV1) GetAccountId() string

func (*AWSUserV1) GetArn 

func (x *AWSUserV1) GetArn() string

func (*AWSUserV1) GetCreatedAt 

func (x *AWSUserV1) GetCreatedAt() *timestamppb.Timestamp

func (*AWSUserV1) GetPasswordLastUsed 

func (x *AWSUserV1) GetPasswordLastUsed() *timestamppb.Timestamp

func (*AWSUserV1) GetPath 

func (x *AWSUserV1) GetPath() string

func (*AWSUserV1) GetPermissionsBoundary 

func (x *AWSUserV1) GetPermissionsBoundary() *UsersPermissionsBoundaryV1

func (*AWSUserV1) GetTags 

func (x *AWSUserV1) GetTags() []*AWSTag

func (*AWSUserV1) GetUserId 

func (x *AWSUserV1) GetUserId() string

func (*AWSUserV1) GetUserName 

func (x *AWSUserV1) GetUserName() string

func (*AWSUserV1) ProtoMessage 

func (*AWSUserV1) ProtoMessage()

func (*AWSUserV1) ProtoReflect 

func (x *AWSUserV1) ProtoReflect() protoreflect.Message

func (*AWSUserV1) Reset 

func (x *AWSUserV1) Reset()

func (*AWSUserV1) String 

func (x *AWSUserV1) String() string

type AccessGraphServiceClient 

type AccessGraphServiceClient interface {
	// Query queries the access graph.
	// Currently only used by WebUI.
	Query(ctx context.Context, in *QueryRequest, opts ...grpc.CallOption) (*QueryResponse, error)
	// GetFile gets a static UI file from the access graph container.
	GetFile(ctx context.Context, in *GetFileRequest, opts ...grpc.CallOption) (*GetFileResponse, error)
	// EventsStream is a stream of commands to the access graph service.
	// Teleport Auth server creates a stream to the access graph service
	// and pushes all resources and following events to it.
	// This stream is used to sync the access graph with the Teleport database state.
	// Once Teleport finishes syncing the current state, it sends a sync command
	// to the access graph service and resumes sending events.
	EventsStream(ctx context.Context, opts ...grpc.CallOption) (AccessGraphService_EventsStreamClient, error)
	// Register submits a new tenant representing this Teleport cluster to the TAG service,
	// identified by its HostCA certificate.
	// The method is idempotent: it succeeds if the tenant has already registered and has the specific CA associated.
	//
	// This method, unlike all others, expects the client to authenticate using a TLS certificate signed by the registration CA,
	// rather than the Teleport cluster's Host CA.
	Register(ctx context.Context, in *RegisterRequest, opts ...grpc.CallOption) (*RegisterResponse, error)
	// ReplaceCAs is a request to completely replace the set of Host CAs that authenticate this tenant with the given set.
	// This accomodates Teleport Host CA rotation. In a transition from certificate authority A to authority B,
	// the client is expected to call the RPC as follows:
	// 1. Authenticate via existing authority A and call ReplaceCAs([A, B]) -- introduce the incoming CA
	// 2.a. If rotation succeeds, authenticate via the new authority B and call ReplaceCAs([B]) -- delete the previous CA
	// 2.b. If rotation is rolled back, authenticate via the old authority A and call ReplaceCAs([A]) -- delete the candidate CA
	ReplaceCAs(ctx context.Context, in *ReplaceCAsRequest, opts ...grpc.CallOption) (*ReplaceCAsResponse, error)
	// AWSEventsStream is a stream of commands to the AWS importer.
	// Teleport Discovery Service creates a stream to the access graph service
	// and pushes all AWS resources and following events to it.
	// This stream is used to sync the access graph with the AWS database state.
	AWSEventsStream(ctx context.Context, opts ...grpc.CallOption) (AccessGraphService_AWSEventsStreamClient, error)
}

AccessGraphServiceClient is the client API for AccessGraphService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

func NewAccessGraphServiceClient 

func NewAccessGraphServiceClient(cc grpc.ClientConnInterface) AccessGraphServiceClient

type AccessGraphServiceServer 

type AccessGraphServiceServer interface {
	// Query queries the access graph.
	// Currently only used by WebUI.
	Query(context.Context, *QueryRequest) (*QueryResponse, error)
	// GetFile gets a static UI file from the access graph container.
	GetFile(context.Context, *GetFileRequest) (*GetFileResponse, error)
	// EventsStream is a stream of commands to the access graph service.
	// Teleport Auth server creates a stream to the access graph service
	// and pushes all resources and following events to it.
	// This stream is used to sync the access graph with the Teleport database state.
	// Once Teleport finishes syncing the current state, it sends a sync command
	// to the access graph service and resumes sending events.
	EventsStream(AccessGraphService_EventsStreamServer) error
	// Register submits a new tenant representing this Teleport cluster to the TAG service,
	// identified by its HostCA certificate.
	// The method is idempotent: it succeeds if the tenant has already registered and has the specific CA associated.
	//
	// This method, unlike all others, expects the client to authenticate using a TLS certificate signed by the registration CA,
	// rather than the Teleport cluster's Host CA.
	Register(context.Context, *RegisterRequest) (*RegisterResponse, error)
	// ReplaceCAs is a request to completely replace the set of Host CAs that authenticate this tenant with the given set.
	// This accomodates Teleport Host CA rotation. In a transition from certificate authority A to authority B,
	// the client is expected to call the RPC as follows:
	// 1. Authenticate via existing authority A and call ReplaceCAs([A, B]) -- introduce the incoming CA
	// 2.a. If rotation succeeds, authenticate via the new authority B and call ReplaceCAs([B]) -- delete the previous CA
	// 2.b. If rotation is rolled back, authenticate via the old authority A and call ReplaceCAs([A]) -- delete the candidate CA
	ReplaceCAs(context.Context, *ReplaceCAsRequest) (*ReplaceCAsResponse, error)
	// AWSEventsStream is a stream of commands to the AWS importer.
	// Teleport Discovery Service creates a stream to the access graph service
	// and pushes all AWS resources and following events to it.
	// This stream is used to sync the access graph with the AWS database state.
	AWSEventsStream(AccessGraphService_AWSEventsStreamServer) error
	// contains filtered or unexported methods
}

AccessGraphServiceServer is the server API for AccessGraphService service. All implementations must embed UnimplementedAccessGraphServiceServer for forward compatibility

type AccessGraphService_AWSEventsStreamClient 

type AccessGraphService_AWSEventsStreamClient interface {
	Send(*AWSEventsStreamRequest) error
	CloseAndRecv() (*AWSEventsStreamResponse, error)
	grpc.ClientStream
}

type AccessGraphService_AWSEventsStreamServer 

type AccessGraphService_AWSEventsStreamServer interface {
	SendAndClose(*AWSEventsStreamResponse) error
	Recv() (*AWSEventsStreamRequest, error)
	grpc.ServerStream
}

type AccessGraphService_EventsStreamClient 

type AccessGraphService_EventsStreamClient interface {
	Send(*EventsStreamRequest) error
	CloseAndRecv() (*EventsStreamResponse, error)
	grpc.ClientStream
}

type AccessGraphService_EventsStreamServer 

type AccessGraphService_EventsStreamServer interface {
	SendAndClose(*EventsStreamResponse) error
	Recv() (*EventsStreamRequest, error)
	grpc.ServerStream
}

type AccessListsMembers 

type AccessListsMembers struct {

	// members is the list of members to add to access lists.
	Members []*v1.Member `protobuf:"bytes,1,rep,name=members,proto3" json:"members,omitempty"`
	// contains filtered or unexported fields
}

AccessListsMembers is the request to declare users as members of access lists.

func (*AccessListsMembers) Descriptor deprecated 

func (*AccessListsMembers) Descriptor() ([]byte, []int)

Deprecated: Use AccessListsMembers.ProtoReflect.Descriptor instead.

func (*AccessListsMembers) GetMembers 

func (x *AccessListsMembers) GetMembers() []*v1.Member

func (*AccessListsMembers) ProtoMessage 

func (*AccessListsMembers) ProtoMessage()

func (*AccessListsMembers) ProtoReflect 

func (x *AccessListsMembers) ProtoReflect() protoreflect.Message

func (*AccessListsMembers) Reset 

func (x *AccessListsMembers) Reset()

func (*AccessListsMembers) String 

func (x *AccessListsMembers) String() string

type AttachedPolicyV1 

type AttachedPolicyV1 struct {

	// policy_name is the name of the policy.
	PolicyName string `protobuf:"bytes,1,opt,name=policy_name,json=policyName,proto3" json:"policy_name,omitempty"`
	// arn is the ARN of the policy.
	Arn string `protobuf:"bytes,2,opt,name=arn,proto3" json:"arn,omitempty"`
	// contains filtered or unexported fields
}

AttachedPolicyV1 is a AWS policy identifier.

func (*AttachedPolicyV1) Descriptor deprecated 

func (*AttachedPolicyV1) Descriptor() ([]byte, []int)

Deprecated: Use AttachedPolicyV1.ProtoReflect.Descriptor instead.

func (*AttachedPolicyV1) GetArn 

func (x *AttachedPolicyV1) GetArn() string

func (*AttachedPolicyV1) GetPolicyName 

func (x *AttachedPolicyV1) GetPolicyName() string

func (*AttachedPolicyV1) ProtoMessage 

func (*AttachedPolicyV1) ProtoMessage()

func (*AttachedPolicyV1) ProtoReflect 

func (x *AttachedPolicyV1) ProtoReflect() protoreflect.Message

func (*AttachedPolicyV1) Reset 

func (x *AttachedPolicyV1) Reset()

func (*AttachedPolicyV1) String 

func (x *AttachedPolicyV1) String() string

type Edge 

type Edge struct {

	// from is the ID of the node the edge is from.
	From string `protobuf:"bytes,1,opt,name=from,proto3" json:"from,omitempty"`
	// to is the ID of the node the edge is to.
	To string `protobuf:"bytes,2,opt,name=to,proto3" json:"to,omitempty"`
	// edge_type is the type of the edge, e.g. "member_of", "belongs_to", etc.
	EdgeType string `protobuf:"bytes,3,opt,name=edge_type,json=edgeType,proto3" json:"edge_type,omitempty"`
	// contains filtered or unexported fields
}

Edge is an edge in the access graph.

func (*Edge) Descriptor deprecated 

func (*Edge) Descriptor() ([]byte, []int)

Deprecated: Use Edge.ProtoReflect.Descriptor instead.

func (*Edge) GetEdgeType 

func (x *Edge) GetEdgeType() string

func (*Edge) GetFrom 

func (x *Edge) GetFrom() string

func (*Edge) GetTo 

func (x *Edge) GetTo() string

func (*Edge) ProtoMessage 

func (*Edge) ProtoMessage()

func (*Edge) ProtoReflect 

func (x *Edge) ProtoReflect() protoreflect.Message

func (*Edge) Reset 

func (x *Edge) Reset()

func (*Edge) String 

func (x *Edge) String() string

type EventsStreamRequest 

type EventsStreamRequest struct {

	// operation contains the desired operation
	//
	// Types that are assignable to Operation:
	//
	//	*EventsStreamRequest_Sync
	//	*EventsStreamRequest_Upsert
	//	*EventsStreamRequest_Delete
	//	*EventsStreamRequest_AccessListsMembers
	//	*EventsStreamRequest_ExcludeAccessListMembers
	Operation isEventsStreamRequest_Operation `protobuf_oneof:"operation"`
	// contains filtered or unexported fields
}

EventsStreamRequest is a request to send commands to the access graph. This command is used to sync the access graph with the Teleport database state.

func (*EventsStreamRequest) Descriptor deprecated 

func (*EventsStreamRequest) Descriptor() ([]byte, []int)

Deprecated: Use EventsStreamRequest.ProtoReflect.Descriptor instead.

func (*EventsStreamRequest) GetAccessListsMembers 

func (x *EventsStreamRequest) GetAccessListsMembers() *AccessListsMembers

func (*EventsStreamRequest) GetDelete 

func (x *EventsStreamRequest) GetDelete() *ResourceHeaderList

func (*EventsStreamRequest) GetExcludeAccessListMembers 

func (x *EventsStreamRequest) GetExcludeAccessListMembers() *ExcludeAccessListsMembers

func (*EventsStreamRequest) GetOperation 

func (m *EventsStreamRequest) GetOperation() isEventsStreamRequest_Operation

func (*EventsStreamRequest) GetSync 

func (x *EventsStreamRequest) GetSync() *SyncOperation

func (*EventsStreamRequest) GetUpsert 

func (x *EventsStreamRequest) GetUpsert() *ResourceList

func (*EventsStreamRequest) ProtoMessage 

func (*EventsStreamRequest) ProtoMessage()

func (*EventsStreamRequest) ProtoReflect 

func (x *EventsStreamRequest) ProtoReflect() protoreflect.Message

func (*EventsStreamRequest) Reset 

func (x *EventsStreamRequest) Reset()

func (*EventsStreamRequest) String 

func (x *EventsStreamRequest) String() string

type EventsStreamRequest_AccessListsMembers 

type EventsStreamRequest_AccessListsMembers struct {
	// access_lists_members is a command to upsert access lists members.
	// It's issued when a user is added to an access list or when their membership is updated.
	// It's also issued when a user membership expires but the user remains in the access list.
	// In that case, the state of the user reflects the expiration reason.
	AccessListsMembers *AccessListsMembers `protobuf:"bytes,4,opt,name=access_lists_members,json=accessListsMembers,proto3,oneof"`
}

type EventsStreamRequest_Delete 

type EventsStreamRequest_Delete struct {
	// delete is a command to delete a resource from the access graph when it's deleted from Teleport.
	Delete *ResourceHeaderList `protobuf:"bytes,3,opt,name=delete,proto3,oneof"`
}

type EventsStreamRequest_ExcludeAccessListMembers 

type EventsStreamRequest_ExcludeAccessListMembers struct {
	// exclude_access_list_members is a command to exclude access lists members
	// when they are manually removed from the access list.
	// If their membership remains but it's expired, they are not excluded
	// from the access list but they don't receive any access - in that case,
	// the request is [access_lists_members].
	ExcludeAccessListMembers *ExcludeAccessListsMembers `protobuf:"bytes,5,opt,name=exclude_access_list_members,json=excludeAccessListMembers,proto3,oneof"`
}

type EventsStreamRequest_Sync 

type EventsStreamRequest_Sync struct {
	// sync is a command to sync the access graph with the Teleport database state.
	// it's issued once Teleport finishes syncing all resources with the database.
	Sync *SyncOperation `protobuf:"bytes,1,opt,name=sync,proto3,oneof"`
}

type EventsStreamRequest_Upsert 

type EventsStreamRequest_Upsert struct {
	// upsert is a command to put a resource into the access graph or update it.
	Upsert *ResourceList `protobuf:"bytes,2,opt,name=upsert,proto3,oneof"`
}

type EventsStreamResponse 

type EventsStreamResponse struct {
	// contains filtered or unexported fields
}

EventsStreamResponse is the response from EventsStream.

func (*EventsStreamResponse) Descriptor deprecated 

func (*EventsStreamResponse) Descriptor() ([]byte, []int)

Deprecated: Use EventsStreamResponse.ProtoReflect.Descriptor instead.

func (*EventsStreamResponse) ProtoMessage 

func (*EventsStreamResponse) ProtoMessage()

func (*EventsStreamResponse) ProtoReflect 

func (x *EventsStreamResponse) ProtoReflect() protoreflect.Message

func (*EventsStreamResponse) Reset 

func (x *EventsStreamResponse) Reset()

func (*EventsStreamResponse) String 

func (x *EventsStreamResponse) String() string

type ExcludeAccessListMember 

type ExcludeAccessListMember struct {
	AccessList string `protobuf:"bytes,1,opt,name=access_list,json=accessList,proto3" json:"access_list,omitempty"`
	Username   string `protobuf:"bytes,2,opt,name=username,proto3" json:"username,omitempty"`
	// contains filtered or unexported fields
}

ExcludeAccessListMember is the request to exclude a user from an access list.

func (*ExcludeAccessListMember) Descriptor deprecated 

func (*ExcludeAccessListMember) Descriptor() ([]byte, []int)

Deprecated: Use ExcludeAccessListMember.ProtoReflect.Descriptor instead.

func (*ExcludeAccessListMember) GetAccessList 

func (x *ExcludeAccessListMember) GetAccessList() string

func (*ExcludeAccessListMember) GetUsername 

func (x *ExcludeAccessListMember) GetUsername() string

func (*ExcludeAccessListMember) ProtoMessage 

func (*ExcludeAccessListMember) ProtoMessage()

func (*ExcludeAccessListMember) ProtoReflect 

func (x *ExcludeAccessListMember) ProtoReflect() protoreflect.Message

func (*ExcludeAccessListMember) Reset 

func (x *ExcludeAccessListMember) Reset()

func (*ExcludeAccessListMember) String 

func (x *ExcludeAccessListMember) String() string

type ExcludeAccessListsMembers 

type ExcludeAccessListsMembers struct {
	Members []*ExcludeAccessListMember `protobuf:"bytes,1,rep,name=members,proto3" json:"members,omitempty"`
	// contains filtered or unexported fields
}

ExcludeAccessListsMembers is the request to exclude users from access lists.

func (*ExcludeAccessListsMembers) Descriptor deprecated 

func (*ExcludeAccessListsMembers) Descriptor() ([]byte, []int)

Deprecated: Use ExcludeAccessListsMembers.ProtoReflect.Descriptor instead.

func (*ExcludeAccessListsMembers) GetMembers 

func (x *ExcludeAccessListsMembers) GetMembers() []*ExcludeAccessListMember

func (*ExcludeAccessListsMembers) ProtoMessage 

func (*ExcludeAccessListsMembers) ProtoMessage()

func (*ExcludeAccessListsMembers) ProtoReflect 

func (x *ExcludeAccessListsMembers) ProtoReflect() protoreflect.Message

func (*ExcludeAccessListsMembers) Reset 

func (x *ExcludeAccessListsMembers) Reset()

func (*ExcludeAccessListsMembers) String 

func (x *ExcludeAccessListsMembers) String() string

type GetFileRequest 

type GetFileRequest struct {

	// filepath is a path to the file.
	Filepath string `protobuf:"bytes,1,opt,name=filepath,proto3" json:"filepath,omitempty"`
	// contains filtered or unexported fields
}

GetFileRequest is a request to get a file.

func (*GetFileRequest) Descriptor deprecated 

func (*GetFileRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetFileRequest.ProtoReflect.Descriptor instead.

func (*GetFileRequest) GetFilepath 

func (x *GetFileRequest) GetFilepath() string

func (*GetFileRequest) ProtoMessage 

func (*GetFileRequest) ProtoMessage()

func (*GetFileRequest) ProtoReflect 

func (x *GetFileRequest) ProtoReflect() protoreflect.Message

func (*GetFileRequest) Reset 

func (x *GetFileRequest) Reset()

func (*GetFileRequest) String 

func (x *GetFileRequest) String() string

type GetFileResponse 

type GetFileResponse struct {

	// data is a raw file content.
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

GetFileResponse is a response to a file request.

func (*GetFileResponse) Descriptor deprecated 

func (*GetFileResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetFileResponse.ProtoReflect.Descriptor instead.

func (*GetFileResponse) GetData 

func (x *GetFileResponse) GetData() []byte

func (*GetFileResponse) ProtoMessage 

func (*GetFileResponse) ProtoMessage()

func (*GetFileResponse) ProtoReflect 

func (x *GetFileResponse) ProtoReflect() protoreflect.Message

func (*GetFileResponse) Reset 

func (x *GetFileResponse) Reset()

func (*GetFileResponse) String 

func (x *GetFileResponse) String() string

type Node 

type Node struct {

	// ID is the unique ID of the node.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Kind is the kind of the node, ex: "user", "user_group", "resource", etc.
	Kind string `protobuf:"bytes,2,opt,name=kind,proto3" json:"kind,omitempty"`
	// SubKind is the subkind of the node, ex: "ssh", "db", "k8s", etc.
	SubKind string `protobuf:"bytes,3,opt,name=sub_kind,json=subKind,proto3" json:"sub_kind,omitempty"`
	// Name is the name of the node.
	Name string `protobuf:"bytes,4,opt,name=name,proto3" json:"name,omitempty"`
	// Labels is a set of labels for the resource.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// Hostname is the hostname of the node.
	Hostname string `protobuf:"bytes,6,opt,name=hostname,proto3" json:"hostname,omitempty"`
	// Properties is a set of properties for the resource.
	Properties map[string]string `` /* 161-byte string literal not displayed */
	// contains filtered or unexported fields
}

Node is a node in the access graph.

func (*Node) Descriptor deprecated 

func (*Node) Descriptor() ([]byte, []int)

Deprecated: Use Node.ProtoReflect.Descriptor instead.

func (*Node) GetHostname 

func (x *Node) GetHostname() string

func (*Node) GetId 

func (x *Node) GetId() string

func (*Node) GetKind 

func (x *Node) GetKind() string

func (*Node) GetLabels 

func (x *Node) GetLabels() map[string]string

func (*Node) GetName 

func (x *Node) GetName() string

func (*Node) GetProperties 

func (x *Node) GetProperties() map[string]string

func (*Node) GetSubKind 

func (x *Node) GetSubKind() string

func (*Node) ProtoMessage 

func (*Node) ProtoMessage()

func (*Node) ProtoReflect 

func (x *Node) ProtoReflect() protoreflect.Message

func (*Node) Reset 

func (x *Node) Reset()

func (*Node) String 

func (x *Node) String() string

type QueryRequest 

type QueryRequest struct {

	// query is a SQL query.
	Query string `protobuf:"bytes,1,opt,name=query,proto3" json:"query,omitempty"`
	// contains filtered or unexported fields
}

QueryRequest is a request to query the access graph.

func (*QueryRequest) Descriptor deprecated 

func (*QueryRequest) Descriptor() ([]byte, []int)

Deprecated: Use QueryRequest.ProtoReflect.Descriptor instead.

func (*QueryRequest) GetQuery 

func (x *QueryRequest) GetQuery() string

func (*QueryRequest) ProtoMessage 

func (*QueryRequest) ProtoMessage()

func (*QueryRequest) ProtoReflect 

func (x *QueryRequest) ProtoReflect() protoreflect.Message

func (*QueryRequest) Reset 

func (x *QueryRequest) Reset()

func (*QueryRequest) String 

func (x *QueryRequest) String() string

type QueryResponse 

type QueryResponse struct {

	// nodes is a list of nodes returned by the query. The response may contain only nodes.
	Nodes []*Node `protobuf:"bytes,1,rep,name=nodes,proto3" json:"nodes,omitempty"`
	// edges is a list of edges returned by the query.
	Edges []*Edge `protobuf:"bytes,2,rep,name=edges,proto3" json:"edges,omitempty"`
	// contains filtered or unexported fields
}

QueryResponse is a response to a query.

func (*QueryResponse) Descriptor deprecated 

func (*QueryResponse) Descriptor() ([]byte, []int)

Deprecated: Use QueryResponse.ProtoReflect.Descriptor instead.

func (*QueryResponse) GetEdges 

func (x *QueryResponse) GetEdges() []*Edge

func (*QueryResponse) GetNodes 

func (x *QueryResponse) GetNodes() []*Node

func (*QueryResponse) ProtoMessage 

func (*QueryResponse) ProtoMessage()

func (*QueryResponse) ProtoReflect 

func (x *QueryResponse) ProtoReflect() protoreflect.Message

func (*QueryResponse) Reset 

func (x *QueryResponse) Reset()

func (*QueryResponse) String 

func (x *QueryResponse) String() string

type RegisterRequest 

type RegisterRequest struct {
	HostCaPem []byte `protobuf:"bytes,1,opt,name=host_ca_pem,json=hostCaPem,proto3" json:"host_ca_pem,omitempty"`
	// ClusterName is the self-submitted name of the Teleport cluster (usually a FQDN).
	// This may not uniquely identify the cluster, and is only used to make identification easier for debugging purposes.
	ClusterName string `protobuf:"bytes,2,opt,name=cluster_name,json=clusterName,proto3" json:"cluster_name,omitempty"`
	// contains filtered or unexported fields
}

RegisterRequest is the request for Register.

func (*RegisterRequest) Descriptor deprecated 

func (*RegisterRequest) Descriptor() ([]byte, []int)

Deprecated: Use RegisterRequest.ProtoReflect.Descriptor instead.

func (*RegisterRequest) GetClusterName 

func (x *RegisterRequest) GetClusterName() string

func (*RegisterRequest) GetHostCaPem 

func (x *RegisterRequest) GetHostCaPem() []byte

func (*RegisterRequest) ProtoMessage 

func (*RegisterRequest) ProtoMessage()

func (*RegisterRequest) ProtoReflect 

func (x *RegisterRequest) ProtoReflect() protoreflect.Message

func (*RegisterRequest) Reset 

func (x *RegisterRequest) Reset()

func (*RegisterRequest) String 

func (x *RegisterRequest) String() string

type RegisterResponse 

type RegisterResponse struct {
	// contains filtered or unexported fields
}

RegisterResponse is the response for Register.

func (*RegisterResponse) Descriptor deprecated 

func (*RegisterResponse) Descriptor() ([]byte, []int)

Deprecated: Use RegisterResponse.ProtoReflect.Descriptor instead.

func (*RegisterResponse) ProtoMessage 

func (*RegisterResponse) ProtoMessage()

func (*RegisterResponse) ProtoReflect 

func (x *RegisterResponse) ProtoReflect() protoreflect.Message

func (*RegisterResponse) Reset 

func (x *RegisterResponse) Reset()

func (*RegisterResponse) String 

func (x *RegisterResponse) String() string

type ReplaceCAsRequest 

type ReplaceCAsRequest struct {
	HostCaPem [][]byte `protobuf:"bytes,1,rep,name=host_ca_pem,json=hostCaPem,proto3" json:"host_ca_pem,omitempty"`
	// contains filtered or unexported fields
}

ReplaceCAsRequest is the request for ReplaceCAs.

func (*ReplaceCAsRequest) Descriptor deprecated 

func (*ReplaceCAsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ReplaceCAsRequest.ProtoReflect.Descriptor instead.

func (*ReplaceCAsRequest) GetHostCaPem 

func (x *ReplaceCAsRequest) GetHostCaPem() [][]byte

func (*ReplaceCAsRequest) ProtoMessage 

func (*ReplaceCAsRequest) ProtoMessage()

func (*ReplaceCAsRequest) ProtoReflect 

func (x *ReplaceCAsRequest) ProtoReflect() protoreflect.Message

func (*ReplaceCAsRequest) Reset 

func (x *ReplaceCAsRequest) Reset()

func (*ReplaceCAsRequest) String 

func (x *ReplaceCAsRequest) String() string

type ReplaceCAsResponse 

type ReplaceCAsResponse struct {
	// contains filtered or unexported fields
}

ReplaceCAsResponse is the response for ReplaceCAs.

func (*ReplaceCAsResponse) Descriptor deprecated 

func (*ReplaceCAsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ReplaceCAsResponse.ProtoReflect.Descriptor instead.

func (*ReplaceCAsResponse) ProtoMessage 

func (*ReplaceCAsResponse) ProtoMessage()

func (*ReplaceCAsResponse) ProtoReflect 

func (x *ReplaceCAsResponse) ProtoReflect() protoreflect.Message

func (*ReplaceCAsResponse) Reset 

func (x *ReplaceCAsResponse) Reset()

func (*ReplaceCAsResponse) String 

func (x *ReplaceCAsResponse) String() string

type ResourceEntry 

type ResourceEntry struct {

	// Types that are assignable to Resource:
	//
	//	*ResourceEntry_User
	//	*ResourceEntry_Role
	//	*ResourceEntry_Server
	//	*ResourceEntry_AccessRequest
	//	*ResourceEntry_KubernetesServer
	//	*ResourceEntry_AppServer
	//	*ResourceEntry_DatabaseServer
	//	*ResourceEntry_WindowsDesktop
	//	*ResourceEntry_AccessList
	Resource isResourceEntry_Resource `protobuf_oneof:"resource"`
	// contains filtered or unexported fields
}

ResourceEntry is a wrapper for the supported resource types.

func (*ResourceEntry) Descriptor deprecated 

func (*ResourceEntry) Descriptor() ([]byte, []int)

Deprecated: Use ResourceEntry.ProtoReflect.Descriptor instead.

func (*ResourceEntry) GetAccessList 

func (x *ResourceEntry) GetAccessList() *v1.AccessList

func (*ResourceEntry) GetAccessRequest 

func (x *ResourceEntry) GetAccessRequest() *types.AccessRequestV3

func (*ResourceEntry) GetAppServer 

func (x *ResourceEntry) GetAppServer() *types.AppServerV3

func (*ResourceEntry) GetDatabaseServer 

func (x *ResourceEntry) GetDatabaseServer() *types.DatabaseServerV3

func (*ResourceEntry) GetKubernetesServer 

func (x *ResourceEntry) GetKubernetesServer() *types.KubernetesServerV3

func (*ResourceEntry) GetResource 

func (m *ResourceEntry) GetResource() isResourceEntry_Resource

func (*ResourceEntry) GetRole 

func (x *ResourceEntry) GetRole() *types.RoleV6

func (*ResourceEntry) GetServer 

func (x *ResourceEntry) GetServer() *types.ServerV2

func (*ResourceEntry) GetUser 

func (x *ResourceEntry) GetUser() *types.UserV2

func (*ResourceEntry) GetWindowsDesktop 

func (x *ResourceEntry) GetWindowsDesktop() *types.WindowsDesktopV3

func (*ResourceEntry) ProtoMessage 

func (*ResourceEntry) ProtoMessage()

func (*ResourceEntry) ProtoReflect 

func (x *ResourceEntry) ProtoReflect() protoreflect.Message

func (*ResourceEntry) Reset 

func (x *ResourceEntry) Reset()

func (*ResourceEntry) String 

func (x *ResourceEntry) String() string

type ResourceEntry_AccessList 

type ResourceEntry_AccessList struct {
	// access_list is a resource for access lists.
	AccessList *v1.AccessList `protobuf:"bytes,9,opt,name=access_list,json=accessList,proto3,oneof"`
}

type ResourceEntry_AccessRequest 

type ResourceEntry_AccessRequest struct {
	// access_request is a resource for access requests
	AccessRequest *types.AccessRequestV3 `protobuf:"bytes,4,opt,name=access_request,json=accessRequest,proto3,oneof"`
}

type ResourceEntry_AppServer 

type ResourceEntry_AppServer struct {
	// app_server is an application server resource
	AppServer *types.AppServerV3 `protobuf:"bytes,6,opt,name=app_server,json=appServer,proto3,oneof"`
}

type ResourceEntry_DatabaseServer 

type ResourceEntry_DatabaseServer struct {
	// database_server is a database server resource
	DatabaseServer *types.DatabaseServerV3 `protobuf:"bytes,7,opt,name=database_server,json=databaseServer,proto3,oneof"`
}

type ResourceEntry_KubernetesServer 

type ResourceEntry_KubernetesServer struct {
	// kubernetes_server is a kubernetes server resource
	KubernetesServer *types.KubernetesServerV3 `protobuf:"bytes,5,opt,name=kubernetes_server,json=kubernetesServer,proto3,oneof"`
}

type ResourceEntry_Role 

type ResourceEntry_Role struct {
	// role is a role resource
	Role *types.RoleV6 `protobuf:"bytes,2,opt,name=role,proto3,oneof"`
}

type ResourceEntry_Server 

type ResourceEntry_Server struct {
	// server is a node/server resource
	Server *types.ServerV2 `protobuf:"bytes,3,opt,name=server,proto3,oneof"`
}

type ResourceEntry_User 

type ResourceEntry_User struct {
	// user is a user resource
	User *types.UserV2 `protobuf:"bytes,1,opt,name=user,proto3,oneof"`
}

type ResourceEntry_WindowsDesktop 

type ResourceEntry_WindowsDesktop struct {
	// windows_desktop is a resource for Windows desktop host.
	WindowsDesktop *types.WindowsDesktopV3 `protobuf:"bytes,8,opt,name=windows_desktop,json=windowsDesktop,proto3,oneof"`
}

type ResourceHeaderList 

type ResourceHeaderList struct {
	Resources []*types.ResourceHeader `protobuf:"bytes,1,rep,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

ResourceHeaderList is a list of resource headers to send to the access graph.

func (*ResourceHeaderList) Descriptor deprecated 

func (*ResourceHeaderList) Descriptor() ([]byte, []int)

Deprecated: Use ResourceHeaderList.ProtoReflect.Descriptor instead.

func (*ResourceHeaderList) GetResources 

func (x *ResourceHeaderList) GetResources() []*types.ResourceHeader

func (*ResourceHeaderList) ProtoMessage 

func (*ResourceHeaderList) ProtoMessage()

func (*ResourceHeaderList) ProtoReflect 

func (x *ResourceHeaderList) ProtoReflect() protoreflect.Message

func (*ResourceHeaderList) Reset 

func (x *ResourceHeaderList) Reset()

func (*ResourceHeaderList) String 

func (x *ResourceHeaderList) String() string

type ResourceList 

type ResourceList struct {
	Resources []*ResourceEntry `protobuf:"bytes,1,rep,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

ResourceList is a list of resources to send to the access graph.

func (*ResourceList) Descriptor deprecated 

func (*ResourceList) Descriptor() ([]byte, []int)

Deprecated: Use ResourceList.ProtoReflect.Descriptor instead.

func (*ResourceList) GetResources 

func (x *ResourceList) GetResources() []*ResourceEntry

func (*ResourceList) ProtoMessage 

func (*ResourceList) ProtoMessage()

func (*ResourceList) ProtoReflect 

func (x *ResourceList) ProtoReflect() protoreflect.Message

func (*ResourceList) Reset 

func (x *ResourceList) Reset()

func (*ResourceList) String 

func (x *ResourceList) String() string

type RoleLastUsedV1 

type RoleLastUsedV1 struct {

	// last_used_date is the date when the role was last used.
	LastUsedDate *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=last_used_date,json=lastUsedDate,proto3" json:"last_used_date,omitempty"`
	// region is the region where the role was last used.
	Region string `protobuf:"bytes,2,opt,name=region,proto3" json:"region,omitempty"`
	// contains filtered or unexported fields
}

RoleLastUsedV1 is the last used information of a role.

func (*RoleLastUsedV1) Descriptor deprecated 

func (*RoleLastUsedV1) Descriptor() ([]byte, []int)

Deprecated: Use RoleLastUsedV1.ProtoReflect.Descriptor instead.

func (*RoleLastUsedV1) GetLastUsedDate 

func (x *RoleLastUsedV1) GetLastUsedDate() *timestamppb.Timestamp

func (*RoleLastUsedV1) GetRegion 

func (x *RoleLastUsedV1) GetRegion() string

func (*RoleLastUsedV1) ProtoMessage 

func (*RoleLastUsedV1) ProtoMessage()

func (*RoleLastUsedV1) ProtoReflect 

func (x *RoleLastUsedV1) ProtoReflect() protoreflect.Message

func (*RoleLastUsedV1) Reset 

func (x *RoleLastUsedV1) Reset()

func (*RoleLastUsedV1) String 

func (x *RoleLastUsedV1) String() string

type RolePermissionsBoundaryType 

type RolePermissionsBoundaryType int32

RolePermissionsBoundaryType is the type of the permissions boundary. 

const (
	// ROLE_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED is an unspecified permissions
	// boundary type.
	RolePermissionsBoundaryType_ROLE_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED RolePermissionsBoundaryType = 0
	// ROLE_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY is a
	// permissions boundary policy.
	RolePermissionsBoundaryType_ROLE_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY RolePermissionsBoundaryType = 1
)

func (RolePermissionsBoundaryType) Descriptor 

func (RolePermissionsBoundaryType) Descriptor() protoreflect.EnumDescriptor

func (RolePermissionsBoundaryType) Enum 

func (x RolePermissionsBoundaryType) Enum() *RolePermissionsBoundaryType

func (RolePermissionsBoundaryType) EnumDescriptor deprecated 

func (RolePermissionsBoundaryType) EnumDescriptor() ([]byte, []int)

Deprecated: Use RolePermissionsBoundaryType.Descriptor instead.

func (RolePermissionsBoundaryType) Number 

func (x RolePermissionsBoundaryType) Number() protoreflect.EnumNumber

func (RolePermissionsBoundaryType) String 

func (x RolePermissionsBoundaryType) String() string

func (RolePermissionsBoundaryType) Type 

func (RolePermissionsBoundaryType) Type() protoreflect.EnumType

type RolePermissionsBoundaryV1 

type RolePermissionsBoundaryV1 struct {

	// permissions_boundary_arn is the ARN of the permissions boundary.
	PermissionsBoundaryArn string `` /* 129-byte string literal not displayed */
	// permissions_boundary_type is the ARN of the permissions boundary.
	PermissionsBoundaryType RolePermissionsBoundaryType `` /* 186-byte string literal not displayed */
	// contains filtered or unexported fields
}

RolePermissionsBoundaryV1 is the permissions boundary of a role.

func (*RolePermissionsBoundaryV1) Descriptor deprecated 

func (*RolePermissionsBoundaryV1) Descriptor() ([]byte, []int)

Deprecated: Use RolePermissionsBoundaryV1.ProtoReflect.Descriptor instead.

func (*RolePermissionsBoundaryV1) GetPermissionsBoundaryArn 

func (x *RolePermissionsBoundaryV1) GetPermissionsBoundaryArn() string

func (*RolePermissionsBoundaryV1) GetPermissionsBoundaryType 

func (x *RolePermissionsBoundaryV1) GetPermissionsBoundaryType() RolePermissionsBoundaryType

func (*RolePermissionsBoundaryV1) ProtoMessage 

func (*RolePermissionsBoundaryV1) ProtoMessage()

func (*RolePermissionsBoundaryV1) ProtoReflect 

func (x *RolePermissionsBoundaryV1) ProtoReflect() protoreflect.Message

func (*RolePermissionsBoundaryV1) Reset 

func (x *RolePermissionsBoundaryV1) Reset()

func (*RolePermissionsBoundaryV1) String 

func (x *RolePermissionsBoundaryV1) String() string

type SyncOperation 

type SyncOperation struct {
	// contains filtered or unexported fields
}

SyncOperation is a command that Teleport sends to the access graph service at the end of the sync process.

func (*SyncOperation) Descriptor deprecated 

func (*SyncOperation) Descriptor() ([]byte, []int)

Deprecated: Use SyncOperation.ProtoReflect.Descriptor instead.

func (*SyncOperation) ProtoMessage 

func (*SyncOperation) ProtoMessage()

func (*SyncOperation) ProtoReflect 

func (x *SyncOperation) ProtoReflect() protoreflect.Message

func (*SyncOperation) Reset 

func (x *SyncOperation) Reset()

func (*SyncOperation) String 

func (x *SyncOperation) String() string

type UnimplementedAccessGraphServiceServer 

type UnimplementedAccessGraphServiceServer struct {
}

UnimplementedAccessGraphServiceServer must be embedded to have forward compatible implementations.

func (UnimplementedAccessGraphServiceServer) AWSEventsStream 

func (UnimplementedAccessGraphServiceServer) AWSEventsStream(AccessGraphService_AWSEventsStreamServer) error

func (UnimplementedAccessGraphServiceServer) EventsStream 

func (UnimplementedAccessGraphServiceServer) EventsStream(AccessGraphService_EventsStreamServer) error

func (UnimplementedAccessGraphServiceServer) GetFile 

func (UnimplementedAccessGraphServiceServer) GetFile(context.Context, *GetFileRequest) (*GetFileResponse, error)

func (UnimplementedAccessGraphServiceServer) Query 

func (UnimplementedAccessGraphServiceServer) Query(context.Context, *QueryRequest) (*QueryResponse, error)

func (UnimplementedAccessGraphServiceServer) Register 

func (UnimplementedAccessGraphServiceServer) Register(context.Context, *RegisterRequest) (*RegisterResponse, error)

func (UnimplementedAccessGraphServiceServer) ReplaceCAs 

func (UnimplementedAccessGraphServiceServer) ReplaceCAs(context.Context, *ReplaceCAsRequest) (*ReplaceCAsResponse, error)

type UnsafeAccessGraphServiceServer 

type UnsafeAccessGraphServiceServer interface {
	// contains filtered or unexported methods
}

UnsafeAccessGraphServiceServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to AccessGraphServiceServer will result in compilation errors.

type UsersPermissionsBoundaryType 

type UsersPermissionsBoundaryType int32

UsersPermissionsBoundaryType is the type of the permissions boundary. 

const (
	// USERS_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED is an unspecified permissions
	// boundary type.
	UsersPermissionsBoundaryType_USERS_PERMISSIONS_BOUNDARY_TYPE_UNSPECIFIED UsersPermissionsBoundaryType = 0
	// USERS_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY is a
	// permissions boundary policy.
	UsersPermissionsBoundaryType_USERS_PERMISSIONS_BOUNDARY_TYPE_PERMISSIONS_BOUNDARY_POLICY UsersPermissionsBoundaryType = 1
)

func (UsersPermissionsBoundaryType) Descriptor 

func (UsersPermissionsBoundaryType) Descriptor() protoreflect.EnumDescriptor

func (UsersPermissionsBoundaryType) Enum 

func (x UsersPermissionsBoundaryType) Enum() *UsersPermissionsBoundaryType

func (UsersPermissionsBoundaryType) EnumDescriptor deprecated 

func (UsersPermissionsBoundaryType) EnumDescriptor() ([]byte, []int)

Deprecated: Use UsersPermissionsBoundaryType.Descriptor instead.

func (UsersPermissionsBoundaryType) Number 

func (x UsersPermissionsBoundaryType) Number() protoreflect.EnumNumber

func (UsersPermissionsBoundaryType) String 

func (x UsersPermissionsBoundaryType) String() string

func (UsersPermissionsBoundaryType) Type 

func (UsersPermissionsBoundaryType) Type() protoreflect.EnumType

type UsersPermissionsBoundaryV1 

type UsersPermissionsBoundaryV1 struct {

	// permissions_boundary_arn is the ARN of the permissions boundary.
	PermissionsBoundaryArn string `` /* 129-byte string literal not displayed */
	// permissions_boundary_type is the ARN of the permissions boundary.
	PermissionsBoundaryType UsersPermissionsBoundaryType `` /* 187-byte string literal not displayed */
	// contains filtered or unexported fields
}

UsersPermissionsBoundaryV1 is the permissions boundary of a user.

func (*UsersPermissionsBoundaryV1) Descriptor deprecated 

func (*UsersPermissionsBoundaryV1) Descriptor() ([]byte, []int)

Deprecated: Use UsersPermissionsBoundaryV1.ProtoReflect.Descriptor instead.

func (*UsersPermissionsBoundaryV1) GetPermissionsBoundaryArn 

func (x *UsersPermissionsBoundaryV1) GetPermissionsBoundaryArn() string

func (*UsersPermissionsBoundaryV1) GetPermissionsBoundaryType 

func (x *UsersPermissionsBoundaryV1) GetPermissionsBoundaryType() UsersPermissionsBoundaryType

func (*UsersPermissionsBoundaryV1) ProtoMessage 

func (*UsersPermissionsBoundaryV1) ProtoMessage()

func (*UsersPermissionsBoundaryV1) ProtoReflect 

func (x *UsersPermissionsBoundaryV1) ProtoReflect() protoreflect.Message

func (*UsersPermissionsBoundaryV1) Reset 

func (x *UsersPermissionsBoundaryV1) Reset()

func (*UsersPermissionsBoundaryV1) String 

func (x *UsersPermissionsBoundaryV1) String() string

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.