Classes
AnalyzeIamPolicyLongrunningRequest
A request message for [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning].
AnalyzeIamPolicyLongrunningResponse
A response message for [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning].
AnalyzeIamPolicyRequest
A request message for [AssetService.AnalyzeIamPolicy][google.cloud.asset.v1.AssetService.AnalyzeIamPolicy].
AnalyzeIamPolicyResponse
A response message for [AssetService.AnalyzeIamPolicy][google.cloud.asset.v1.AssetService.AnalyzeIamPolicy].
AnalyzeIamPolicyResponse.Types
Container for nested types declared in the AnalyzeIamPolicyResponse message type.
AnalyzeIamPolicyResponse.Types.IamPolicyAnalysis
An analysis message to group the query and results.
Asset
An asset in Google Cloud. An asset can be any resource in the Google Cloud resource hierarchy, a resource outside the Google Cloud resource hierarchy (such as Google Kubernetes Engine clusters and objects), or a policy (e.g. Cloud IAM policy), or a relationship (e.g. an INSTANCE_TO_INSTANCEGROUP relationship). See Supported asset types for more information.
AssetService
Asset service definition.
AssetService.AssetServiceBase
Base class for server-side implementations of AssetService
AssetService.AssetServiceClient
Client for AssetService
AssetServiceClient
AssetService client wrapper, for convenient use.
AssetServiceClientBuilder
Builder class for AssetServiceClient to provide simple configuration of credentials, endpoint etc.
AssetServiceClientImpl
AssetService client wrapper implementation, for convenient use.
AssetServiceSettings
Settings for AssetServiceClient instances.
BatchGetAssetsHistoryRequest
Batch get assets history request.
BatchGetAssetsHistoryResponse
Batch get assets history response.
BigQueryDestination
A BigQuery destination for exporting assets to.
ConditionEvaluation
The Condition evaluation.
ConditionEvaluation.Types
Container for nested types declared in the ConditionEvaluation message type.
CreateFeedRequest
Create asset feed request.
DeleteFeedRequest
ExportAssetsRequest
Export asset request.
ExportAssetsResponse
The export asset response. This message is returned by the [google.longrunning.Operations.GetOperation][google.longrunning.Operations.GetOperation] method in the returned [google.longrunning.Operation.response][google.longrunning.Operation.response] field.
Feed
An asset feed used to export asset updates to a destinations. An asset feed filter controls what updates are exported. The asset feed must be created within a project, organization, or folder. Supported destinations are: Pub/Sub topics.
FeedName
Resource name for the Feed resource.
FeedOutputConfig
Output configuration for asset feed destination.
GcsDestination
A Cloud Storage location.
GcsOutputResult
A Cloud Storage output result.
GetFeedRequest
Get asset feed request.
IamPolicyAnalysisOutputConfig
Output configuration for export IAM policy analysis destination.
IamPolicyAnalysisOutputConfig.Types
Container for nested types declared in the IamPolicyAnalysisOutputConfig message type.
IamPolicyAnalysisOutputConfig.Types.BigQueryDestination
A BigQuery destination.
IamPolicyAnalysisOutputConfig.Types.BigQueryDestination.Types
Container for nested types declared in the BigQueryDestination message type.
IamPolicyAnalysisOutputConfig.Types.GcsDestination
A Cloud Storage location.
IamPolicyAnalysisQuery
IAM policy analysis query message.
IamPolicyAnalysisQuery.Types
Container for nested types declared in the IamPolicyAnalysisQuery message type.
IamPolicyAnalysisQuery.Types.AccessSelector
Specifies roles and/or permissions to analyze, to determine both the identities possessing them and the resources they control. If multiple values are specified, results will include roles or permissions matching any of them. The total number of roles and permissions should be equal or less than 10.
IamPolicyAnalysisQuery.Types.ConditionContext
The IAM conditions context.
IamPolicyAnalysisQuery.Types.IdentitySelector
Specifies an identity for which to determine resource access, based on roles assigned either directly to them or to the groups they belong to, directly or indirectly.
IamPolicyAnalysisQuery.Types.Options
Contains query options.
IamPolicyAnalysisQuery.Types.ResourceSelector
Specifies the resource to analyze for access policies, which may be set directly on the resource, or on ancestors such as organizations, folders or projects.
IamPolicyAnalysisResult
IAM Policy analysis result, consisting of one IAM policy binding and derived access control lists.
IamPolicyAnalysisResult.Types
Container for nested types declared in the IamPolicyAnalysisResult message type.
IamPolicyAnalysisResult.Types.Access
An IAM role or permission under analysis.
IamPolicyAnalysisResult.Types.AccessControlList
An access control list, derived from the above IAM policy binding, which contains a set of resources and accesses. May include one item from each set to compose an access control entry.
NOTICE that there could be multiple access control lists for one IAM policy binding. The access control lists are created based on resource and access combinations.
For example, assume we have the following cases in one IAM policy binding:
- Permission P1 and P2 apply to resource R1 and R2;
- Permission P3 applies to resource R2 and R3;
This will result in the following access control lists:
- AccessControlList 1: [R1, R2], [P1, P2]
- AccessControlList 2: [R2, R3], [P3]
IamPolicyAnalysisResult.Types.Edge
A directional edge.
IamPolicyAnalysisResult.Types.Identity
An identity under analysis.
IamPolicyAnalysisResult.Types.IdentityList
The identities and group edges.
IamPolicyAnalysisResult.Types.Resource
A Google Cloud resource under analysis.
IamPolicyAnalysisState
Represents the detailed state of an entity under analysis, such as a resource, an identity or an access.
IamPolicySearchResult
A result of IAM Policy search, containing information of an IAM policy.
IamPolicySearchResult.Types
Container for nested types declared in the IamPolicySearchResult message type.
IamPolicySearchResult.Types.Explanation
Explanation about the IAM policy search result.
IamPolicySearchResult.Types.Explanation.Types
Container for nested types declared in the Explanation message type.
IamPolicySearchResult.Types.Explanation.Types.Permissions
IAM permissions
ListAssetsRequest
ListAssets request.
ListAssetsResponse
ListAssets response.
ListFeedsRequest
List asset feeds request.
ListFeedsResponse
OutputConfig
Output configuration for export assets destination.
OutputResult
Output result of export assets.
PartitionSpec
Specifications of BigQuery partitioned table as export destination.
PartitionSpec.Types
Container for nested types declared in the PartitionSpec message type.
PubsubDestination
A Pub/Sub destination.
Resource
A representation of a Google Cloud resource.
ResourceSearchResult
A result of Resource Search, containing information of a cloud resource.
SearchAllIamPoliciesRequest
Search all IAM policies request.
SearchAllIamPoliciesResponse
Search all IAM policies response.
SearchAllResourcesRequest
Search all resources request.
SearchAllResourcesResponse
Search all resources response.
TemporalAsset
An asset in Google Cloud and its temporal metadata, including the time window when it was observed and its status during that window.
TemporalAsset.Types
Container for nested types declared in the TemporalAsset message type.
TimeWindow
A time window specified by its start_time and end_time.
UpdateFeedRequest
Update asset feed request.
Enums
Asset.AccessContextPolicyOneofCase
Enum of possible cases for the "access_context_policy" oneof.
ConditionEvaluation.Types.EvaluationValue
Value of this expression.
ContentType
Asset content type.
FeedName.ResourceNameType
The possible contents of FeedName.
FeedOutputConfig.DestinationOneofCase
Enum of possible cases for the "destination" oneof.
GcsDestination.ObjectUriOneofCase
Enum of possible cases for the "object_uri" oneof.
IamPolicyAnalysisOutputConfig.DestinationOneofCase
Enum of possible cases for the "destination" oneof.
IamPolicyAnalysisOutputConfig.Types.BigQueryDestination.Types.PartitionKey
This enum determines the partition key column for the bigquery tables. Partitioning can improve query performance and reduce query cost by filtering partitions. Refer to https://cloud.google.com/bigquery/docs/partitioned-tables for details.
IamPolicyAnalysisQuery.Types.ConditionContext.TimeContextOneofCase
Enum of possible cases for the "TimeContext" oneof.
IamPolicyAnalysisResult.Types.Access.OneofAccessOneofCase
Enum of possible cases for the "oneof_access" oneof.
OutputConfig.DestinationOneofCase
Enum of possible cases for the "destination" oneof.
OutputResult.ResultOneofCase
Enum of possible cases for the "result" oneof.
PartitionSpec.Types.PartitionKey
This enum is used to determine the partition key column when exporting assets to BigQuery partitioned table(s). Note that, if the partition key is a timestamp column, the actual partition is based on its date value (expressed in UTC. see details in https://cloud.google.com/bigquery/docs/partitioned-tables#date_timestamp_partitioned_tables).
TemporalAsset.Types.PriorAssetState
State of prior asset.