This is the Java data model class that specifies how to parse/serialize into the JSON that is + * transmitted over HTTP when working with the Service Control API. For a detailed explanation see: + * https://developers.google.com/api-client-library/java/google-http-java-client/json + *
+ * + * @author Google, Inc. + */ +@SuppressWarnings("javadoc") +public final class AuditPamBindingId extends com.google.api.client.json.GenericJson { + + /** + * Output only. GCP Project/Folder/Organization identifier to which the PAM entitlement/grant is + * bound to. Container will be in the following form: projects/$project_num or folders/$folder_num + * or organizations/$org + * The value may be {@code null}. + */ + @com.google.api.client.util.Key + private java.lang.String container; + + /** + * Output only. Represents the unique identifier for the PAM grant. Full_resource_name_pattern for + * PAM Grant is: //privilegedaccessmanager.googleapis.com/ + * (projects|folders|organizations)/$0/locations/$1/entitlements/$2/ grants/$3 where $3 is the + * grant_uuid. + * The value may be {@code null}. + */ + @com.google.api.client.util.Key + private java.lang.String grantUuid; + + /** + * Output only. GCP Project/Folder/Organization identifier to which the PAM entitlement/grant is + * bound to. Container will be in the following form: projects/$project_num or folders/$folder_num + * or organizations/$org + * @return value or {@code null} for none + */ + public java.lang.String getContainer() { + return container; + } + + /** + * Output only. GCP Project/Folder/Organization identifier to which the PAM entitlement/grant is + * bound to. Container will be in the following form: projects/$project_num or folders/$folder_num + * or organizations/$org + * @param container container or {@code null} for none + */ + public AuditPamBindingId setContainer(java.lang.String container) { + this.container = container; + return this; + } + + /** + * Output only. Represents the unique identifier for the PAM grant. Full_resource_name_pattern for + * PAM Grant is: //privilegedaccessmanager.googleapis.com/ + * (projects|folders|organizations)/$0/locations/$1/entitlements/$2/ grants/$3 where $3 is the + * grant_uuid. + * @return value or {@code null} for none + */ + public java.lang.String getGrantUuid() { + return grantUuid; + } + + /** + * Output only. Represents the unique identifier for the PAM grant. Full_resource_name_pattern for + * PAM Grant is: //privilegedaccessmanager.googleapis.com/ + * (projects|folders|organizations)/$0/locations/$1/entitlements/$2/ grants/$3 where $3 is the + * grant_uuid. + * @param grantUuid grantUuid or {@code null} for none + */ + public AuditPamBindingId setGrantUuid(java.lang.String grantUuid) { + this.grantUuid = grantUuid; + return this; + } + + @Override + public AuditPamBindingId set(String fieldName, Object value) { + return (AuditPamBindingId) super.set(fieldName, value); + } + + @Override + public AuditPamBindingId clone() { + return (AuditPamBindingId) super.clone(); + } + +} diff --git a/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/AuthorizationInfo.java b/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/AuthorizationInfo.java index 062e7d73b7c..07ec67937cf 100644 --- a/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/AuthorizationInfo.java +++ b/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/AuthorizationInfo.java @@ -52,6 +52,15 @@ public final class AuthorizationInfo extends com.google.api.client.json.GenericJ @com.google.api.client.util.Key private java.lang.String permissionType; + /** + * Output only. Metadata about the Privileged Access Manager (PAM) backed authorization decisions. + * This field is populated if the access is granted via an IAM policy with a binding which is + * managed by Privileged Access Manager. + * The value may be {@code null}. + */ + @com.google.api.client.util.Key + private PrivilegedAccessManagerMetadata privilegedAccessManagerMetadata; + /** * The resource being accessed, as a REST-style or cloud resource string. For example: * bigquery.googleapis.com/projects/PROJECTID/datasets/DATASETID or @@ -126,6 +135,27 @@ public AuthorizationInfo setPermissionType(java.lang.String permissionType) { return this; } + /** + * Output only. Metadata about the Privileged Access Manager (PAM) backed authorization decisions. + * This field is populated if the access is granted via an IAM policy with a binding which is + * managed by Privileged Access Manager. + * @return value or {@code null} for none + */ + public PrivilegedAccessManagerMetadata getPrivilegedAccessManagerMetadata() { + return privilegedAccessManagerMetadata; + } + + /** + * Output only. Metadata about the Privileged Access Manager (PAM) backed authorization decisions. + * This field is populated if the access is granted via an IAM policy with a binding which is + * managed by Privileged Access Manager. + * @param privilegedAccessManagerMetadata privilegedAccessManagerMetadata or {@code null} for none + */ + public AuthorizationInfo setPrivilegedAccessManagerMetadata(PrivilegedAccessManagerMetadata privilegedAccessManagerMetadata) { + this.privilegedAccessManagerMetadata = privilegedAccessManagerMetadata; + return this; + } + /** * The resource being accessed, as a REST-style or cloud resource string. For example: * bigquery.googleapis.com/projects/PROJECTID/datasets/DATASETID or diff --git a/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/PolicyViolationInfo.java b/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/PolicyViolationInfo.java index 14336a9ee3e..66d338d406f 100644 --- a/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/PolicyViolationInfo.java +++ b/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/PolicyViolationInfo.java @@ -36,6 +36,13 @@ public final class PolicyViolationInfo extends com.google.api.client.json.Generi @com.google.api.client.util.Key private OrgPolicyViolationInfo orgPolicyViolationInfo; + /** + * Indicates the regional access boundary policy violations for this resource. + * The value may be {@code null}. + */ + @com.google.api.client.util.Key + private RabPolicyViolationInfo rabPolicyViolationInfo; + /** * Indicates the orgpolicy violations for this resource. * @return value or {@code null} for none @@ -53,6 +60,23 @@ public PolicyViolationInfo setOrgPolicyViolationInfo(OrgPolicyViolationInfo orgP return this; } + /** + * Indicates the regional access boundary policy violations for this resource. + * @return value or {@code null} for none + */ + public RabPolicyViolationInfo getRabPolicyViolationInfo() { + return rabPolicyViolationInfo; + } + + /** + * Indicates the regional access boundary policy violations for this resource. + * @param rabPolicyViolationInfo rabPolicyViolationInfo or {@code null} for none + */ + public PolicyViolationInfo setRabPolicyViolationInfo(RabPolicyViolationInfo rabPolicyViolationInfo) { + this.rabPolicyViolationInfo = rabPolicyViolationInfo; + return this; + } + @Override public PolicyViolationInfo set(String fieldName, Object value) { return (PolicyViolationInfo) super.set(fieldName, value); diff --git a/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/PrivilegedAccessManagerMetadata.java b/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/PrivilegedAccessManagerMetadata.java new file mode 100644 index 00000000000..4ba776e24d0 --- /dev/null +++ b/clients/google-api-services-servicecontrol/v2/2.0.0/com/google/api/services/servicecontrol/v2/model/PrivilegedAccessManagerMetadata.java @@ -0,0 +1,81 @@ +/* + * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except + * in compliance with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software distributed under the License + * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express + * or implied. See the License for the specific language governing permissions and limitations under + * the License. + */ +/* + * This code was generated by https://github.com/googleapis/google-api-java-client-services/ + * Modify at your own risk. + */ + +package com.google.api.services.servicecontrol.v2.model; + +/** + * Metadata about the Privileged Access Manager (PAM) backed authorization decisions. + * + *This is the Java data model class that specifies how to parse/serialize into the JSON that is + * transmitted over HTTP when working with the Service Control API. For a detailed explanation see: + * https://developers.google.com/api-client-library/java/google-http-java-client/json + *
+ * + * @author Google, Inc. + */ +@SuppressWarnings("javadoc") +public final class PrivilegedAccessManagerMetadata extends com.google.api.client.json.GenericJson { + + /** + * Output only. If PAM is managing the elevated access, AuditPamBindingId is written to an + * Identity and Access Management (IAM) policy, which specifies access controls for resources. If + * the access is granted via an IAM policy with a binding which is managed by Privileged Access + * Manager, PrivilegedAccessManagerMetadata will contain the AuditPamBindingId. + * The value may be {@code null}. + */ + @com.google.api.client.util.Key + private java.util.ListThis is the Java data model class that specifies how to parse/serialize into the JSON that is + * transmitted over HTTP when working with the Service Control API. For a detailed explanation see: + * https://developers.google.com/api-client-library/java/google-http-java-client/json + *
+ * + * @author Google, Inc. + */ +@SuppressWarnings("javadoc") +public final class RabPolicyViolationInfo extends com.google.api.client.json.GenericJson { + + /** + * Optional. Error message detailing what triggered the violation. The error message content + * originates from the authz library e.g., + * google3/cloud/security/iam/cap/deny_explanation/internal/make_error_msg.cc. This will be the + * same (canonical) error message provided by the http error code. + * The value may be {@code null}. + */ + @com.google.api.client.util.Key + private java.lang.String errorMessage; + + /** + * Optional. The list of target locations of the resource. + * The value may be {@code null}. + */ + @com.google.api.client.util.Key + private java.util.List