Access Context Manager API

An API for setting attribute based access control to requests to GCP services.

Service: accesscontextmanager.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://accesscontextmanager.googleapis.com

REST Resource: v1beta.accessPolicies

Methods
create POST /v1beta/accessPolicies
Create an AccessPolicy.
delete DELETE /v1beta/{name=accessPolicies/*}
Delete an AccessPolicy by resource name.
get GET /v1beta/{name=accessPolicies/*}
Get an AccessPolicy by name.
list GET /v1beta/accessPolicies
List all AccessPolicies under a container.
patch PATCH /v1beta/{policy.name=accessPolicies/*}
Update an AccessPolicy.

REST Resource: v1beta.accessPolicies.accessLevels

Methods
create POST /v1beta/{parent=accessPolicies/*}/accessLevels
Create an Access Level.
delete DELETE /v1beta/{name=accessPolicies/*/accessLevels/*}
Delete an Access Level by resource name.
get GET /v1beta/{name=accessPolicies/*/accessLevels/*}
Get an Access Level by resource name.
list GET /v1beta/{parent=accessPolicies/*}/accessLevels
List all Access Levels for an access policy.
patch PATCH /v1beta/{accessLevel.name=accessPolicies/*/accessLevels/*}
Update an Access Level.

REST Resource: v1beta.accessPolicies.servicePerimeters

Methods
create POST /v1beta/{parent=accessPolicies/*}/servicePerimeters
Create a Service Perimeter.
delete DELETE /v1beta/{name=accessPolicies/*/servicePerimeters/*}
Delete a Service Perimeter by resource name.
get GET /v1beta/{name=accessPolicies/*/servicePerimeters/*}
Get a Service Perimeter by resource name.
list GET /v1beta/{parent=accessPolicies/*}/servicePerimeters
List all Service Perimeters for an access policy.
patch PATCH /v1beta/{servicePerimeter.name=accessPolicies/*/servicePerimeters/*}
Update a Service Perimeter.

REST Resource: v1beta.operations

Methods
get GET /v1beta/{name=operations/**}
Gets the latest state of a long-running operation.

REST Resource: v1alpha.accessPolicies

Methods
create POST /v1alpha/accessPolicies
Create an AccessPolicy.
delete DELETE /v1alpha/{name=accessPolicies/*}
Delete an AccessPolicy by resource name.
get GET /v1alpha/{name=accessPolicies/*}
Get an AccessPolicy by name.
list GET /v1alpha/accessPolicies
List all AccessPolicies under a container.
patch PATCH /v1alpha/{policy.name=accessPolicies/*}
Update an AccessPolicy.

REST Resource: v1alpha.accessPolicies.accessLevels

Methods
create POST /v1alpha/{parent=accessPolicies/*}/accessLevels
Create an Access Level.
delete DELETE /v1alpha/{name=accessPolicies/*/accessLevels/*}
Delete an Access Level by resource name.
get GET /v1alpha/{name=accessPolicies/*/accessLevels/*}
Get an Access Level by resource name.
list GET /v1alpha/{parent=accessPolicies/*}/accessLevels
List all Access Levels for an access policy.
patch PATCH /v1alpha/{accessLevel.name=accessPolicies/*/accessLevels/*}
Update an Access Level.
replaceAll POST /v1alpha/{parent=accessPolicies/*}/accessLevels:replaceAll
Replace all existing Access Levels in an Access Policy with the Access Levels provided.

REST Resource: v1alpha.accessPolicies.servicePerimeters

Methods
commit POST /v1alpha/{parent=accessPolicies/*}/servicePerimeters:commit
Commit the dry-run spec for all the Service Perimeters in an Access Policy.
create POST /v1alpha/{parent=accessPolicies/*}/servicePerimeters
Create a Service Perimeter.
delete DELETE /v1alpha/{name=accessPolicies/*/servicePerimeters/*}
Delete a Service Perimeter by resource name.
get GET /v1alpha/{name=accessPolicies/*/servicePerimeters/*}
Get a Service Perimeter by resource name.
list GET /v1alpha/{parent=accessPolicies/*}/servicePerimeters
List all Service Perimeters for an access policy.
patch PATCH /v1alpha/{servicePerimeter.name=accessPolicies/*/servicePerimeters/*}
Update a Service Perimeter.
replaceAll POST /v1alpha/{parent=accessPolicies/*}/servicePerimeters:replaceAll
Replace all existing Service Perimeters in an Access Policy with the Service Perimeters provided.

REST Resource: v1alpha.operations

Methods
get GET /v1alpha/{name=operations/**}
Gets the latest state of a long-running operation.

REST Resource: v1alpha.organizations.gcpUserAccessBindings

Methods
create POST /v1alpha/{parent=organizations/*}/gcpUserAccessBindings
Creates a GcpUserAccessBinding.
delete DELETE /v1alpha/{name=organizations/*/gcpUserAccessBindings/*}
Deletes a GcpUserAccessBinding.
get GET /v1alpha/{name=organizations/*/gcpUserAccessBindings/*}
Gets the GcpUserAccessBinding with the given name.
list GET /v1alpha/{parent=organizations/*}/gcpUserAccessBindings
Lists all GcpUserAccessBindings for a Google Cloud organization.
patch PATCH /v1alpha/{gcpUserAccessBinding.name=organizations/*/gcpUserAccessBindings/*}
Updates a GcpUserAccessBinding.

REST Resource: v1.accessPolicies

Methods
create POST /v1/accessPolicies
Create an AccessPolicy.
delete DELETE /v1/{name=accessPolicies/*}
Delete an AccessPolicy by resource name.
get GET /v1/{name=accessPolicies/*}
Get an AccessPolicy by name.
list GET /v1/accessPolicies
List all AccessPolicies under a container.
patch PATCH /v1/{policy.name=accessPolicies/*}
Update an AccessPolicy.

REST Resource: v1.accessPolicies.accessLevels

Methods
create POST /v1/{parent=accessPolicies/*}/accessLevels
Create an Access Level.
delete DELETE /v1/{name=accessPolicies/*/accessLevels/*}
Delete an Access Level by resource name.
get GET /v1/{name=accessPolicies/*/accessLevels/*}
Get an Access Level by resource name.
list GET /v1/{parent=accessPolicies/*}/accessLevels
List all Access Levels for an access policy.
patch PATCH /v1/{accessLevel.name=accessPolicies/*/accessLevels/*}
Update an Access Level.
replaceAll POST /v1/{parent=accessPolicies/*}/accessLevels:replaceAll
Replace all existing Access Levels in an Access Policy with the Access Levels provided.

REST Resource: v1.accessPolicies.servicePerimeters

Methods
commit POST /v1/{parent=accessPolicies/*}/servicePerimeters:commit
Commit the dry-run spec for all the Service Perimeters in an Access Policy.
create POST /v1/{parent=accessPolicies/*}/servicePerimeters
Create a Service Perimeter.
delete DELETE /v1/{name=accessPolicies/*/servicePerimeters/*}
Delete a Service Perimeter by resource name.
get GET /v1/{name=accessPolicies/*/servicePerimeters/*}
Get a Service Perimeter by resource name.
list GET /v1/{parent=accessPolicies/*}/servicePerimeters
List all Service Perimeters for an access policy.
patch PATCH /v1/{servicePerimeter.name=accessPolicies/*/servicePerimeters/*}
Update a Service Perimeter.
replaceAll POST /v1/{parent=accessPolicies/*}/servicePerimeters:replaceAll
Replace all existing Service Perimeters in an Access Policy with the Service Perimeters provided.

REST Resource: v1.operations

Methods
cancel POST /v1/{name=operations/**}:cancel
Starts asynchronous cancellation on a long-running operation.
delete DELETE /v1/{name=operations/**}
Deletes a long-running operation.
get GET /v1/{name=operations/**}
Gets the latest state of a long-running operation.
list GET /v1/{name}
Lists operations that match the specified filter in the request.

REST Resource: v1.organizations.gcpUserAccessBindings

Methods
create POST /v1/{parent=organizations/*}/gcpUserAccessBindings
Creates a GcpUserAccessBinding.
delete DELETE /v1/{name=organizations/*/gcpUserAccessBindings/*}
Deletes a GcpUserAccessBinding.
get GET /v1/{name=organizations/*/gcpUserAccessBindings/*}
Gets the GcpUserAccessBinding with the given name.
list GET /v1/{parent=organizations/*}/gcpUserAccessBindings
Lists all GcpUserAccessBindings for a Google Cloud organization.
patch PATCH /v1/{gcpUserAccessBinding.name=organizations/*/gcpUserAccessBindings/*}
Updates a GcpUserAccessBinding.