Classes
AccessApproval
This API allows a customer to manage accesses to cloud resources by Google personnel. It defines the following resource model:
- The API has a collection of
[ApprovalRequest][google.cloud.accessapproval.v1.ApprovalRequest]
resources, named
approvalRequests/{approval_request} - The API has top-level settings per Project/Folder/Organization, named
accessApprovalSettings
The service also periodically emails a list of recipients, defined at the Project/Folder/Organization level in the accessApprovalSettings, when there is a pending ApprovalRequest for them to act on. The ApprovalRequests can also optionally be published to a Pub/Sub topic owned by the customer (contact support if you would like to enable Pub/Sub notifications).
ApprovalRequests can be approved or dismissed. Google personnel can only access the indicated resource or resources if the request is approved (subject to some exclusions: https://cloud.google.com/access-approval/docs/overview#exclusions).
Note: Using Access Approval functionality will mean that Google may not be able to meet the SLAs for your chosen products, as any support response times may be dramatically increased. As such the SLAs do not apply to any service disruption to the extent impacted by Customer's use of Access Approval. Do not enable Access Approval for projects where you may require high service availability and rapid response by Google Cloud Support.
After a request is approved or dismissed, no further action may be taken on it. Requests with the requested_expiration in the past or with no activity for 14 days are considered dismissed. When an approval expires, the request is considered dismissed.
If a request is not approved or dismissed, we call it pending.
AccessApproval.AccessApprovalBase
Base class for server-side implementations of AccessApproval
AccessApproval.AccessApprovalClient
Client for AccessApproval
AccessApprovalServiceAccount
Access Approval service account related to a project/folder/organization.
AccessApprovalServiceAccountName
Resource name for the AccessApprovalServiceAccount resource.
AccessApprovalServiceClient
AccessApprovalService client wrapper, for convenient use.
AccessApprovalServiceClientBuilder
Builder class for AccessApprovalServiceClient to provide simple configuration of credentials, endpoint etc.
AccessApprovalServiceClientImpl
AccessApprovalService client wrapper implementation, for convenient use.
AccessApprovalServiceSettings
Settings for AccessApprovalServiceClient instances.
AccessApprovalSettings
Settings on a Project/Folder/Organization related to Access Approval.
AccessApprovalSettingsName
Resource name for the AccessApprovalSettings resource.
AccessLocations
Home office and physical location of the principal.
AccessReason
AccessReason.Types
Container for nested types declared in the AccessReason message type.
ApprovalRequest
A request for the customer to approve access to a resource.
ApprovalRequestName
Resource name for the ApprovalRequest resource.
ApproveApprovalRequestMessage
Request to approve an ApprovalRequest.
ApproveDecision
A decision that has been made to approve access to a resource.
DeleteAccessApprovalSettingsMessage
Request to delete access approval settings.
DismissApprovalRequestMessage
Request to dismiss an approval request.
DismissDecision
A decision that has been made to dismiss an approval request.
EnrolledService
Represents the enrollment of a cloud resource into a specific service.
GetAccessApprovalServiceAccountMessage
Request to get an Access Approval service account.
GetAccessApprovalSettingsMessage
Request to get access approval settings.
GetApprovalRequestMessage
Request to get an approval request.
InvalidateApprovalRequestMessage
Request to invalidate an existing approval.
ListApprovalRequestsMessage
Request to list approval requests.
ListApprovalRequestsResponse
Response to listing of ApprovalRequest objects.
ResourceProperties
The properties associated with the resource of the request.
SignatureInfo
Information about the digital signature of the resource.
UpdateAccessApprovalSettingsMessage
Request to update access approval settings.
Enums
AccessApprovalServiceAccountName.ResourceNameType
The possible contents of AccessApprovalServiceAccountName.
AccessApprovalSettingsName.ResourceNameType
The possible contents of AccessApprovalSettingsName.
AccessReason.Types.Type
Type of access justification.
ApprovalRequest.DecisionOneofCase
Enum of possible cases for the "decision" oneof.
ApprovalRequestName.ResourceNameType
The possible contents of ApprovalRequestName.
EnrollmentLevel
Represents the type of enrollment for a given service to Access Approval.
SignatureInfo.VerificationInfoOneofCase
Enum of possible cases for the "verification_info" oneof.