Class AssetServiceGrpc.AssetServiceBlockingStub (3.45.0)

public static final class AssetServiceGrpc.AssetServiceBlockingStub extends AbstractBlockingStub<AssetServiceGrpc.AssetServiceBlockingStub>

A stub to allow clients to do synchronous rpc calls to service AssetService.

Asset service definition.

Inheritance

java.lang.Object > io.grpc.stub.AbstractStub > io.grpc.stub.AbstractBlockingStub > AssetServiceGrpc.AssetServiceBlockingStub

Methods

analyzeIamPolicy(AnalyzeIamPolicyRequest request)

public AnalyzeIamPolicyResponse analyzeIamPolicy(AnalyzeIamPolicyRequest request)

Analyzes IAM policies to answer which identities have what accesses on which resources.

Parameter
NameDescription
requestAnalyzeIamPolicyRequest
Returns
TypeDescription
AnalyzeIamPolicyResponse

analyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest request)

public Operation analyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest request)

Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Google Cloud Storage or a BigQuery destination. For Cloud Storage destination, the output format is the JSON format that represents a AnalyzeIamPolicyResponse. This method implements the google.longrunning.Operation, which allows you to track the operation status. We recommend intervals of at least 2 seconds with exponential backoff retry to poll the operation result. The metadata contains the metadata for the long-running operation.

Parameter
NameDescription
requestAnalyzeIamPolicyLongrunningRequest
Returns
TypeDescription
Operation

analyzeMove(AnalyzeMoveRequest request)

public AnalyzeMoveResponse analyzeMove(AnalyzeMoveRequest request)

Analyze moving a resource to a specified destination without kicking off the actual move. The analysis is best effort depending on the user's permissions of viewing different hierarchical policies and configurations. The policies and configuration are subject to change before the actual resource migration takes place.

Parameter
NameDescription
requestAnalyzeMoveRequest
Returns
TypeDescription
AnalyzeMoveResponse

analyzeOrgPolicies(AnalyzeOrgPoliciesRequest request)

public AnalyzeOrgPoliciesResponse analyzeOrgPolicies(AnalyzeOrgPoliciesRequest request)

Analyzes organization policies under a scope.

Parameter
NameDescription
requestAnalyzeOrgPoliciesRequest
Returns
TypeDescription
AnalyzeOrgPoliciesResponse

analyzeOrgPolicyGovernedAssets(AnalyzeOrgPolicyGovernedAssetsRequest request)

public AnalyzeOrgPolicyGovernedAssetsResponse analyzeOrgPolicyGovernedAssets(AnalyzeOrgPolicyGovernedAssetsRequest request)

Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. This RPC supports custom constraints and the following canned constraints:

  • constraints/ainotebooks.accessMode
  • constraints/ainotebooks.disableFileDownloads
  • constraints/ainotebooks.disableRootAccess
  • constraints/ainotebooks.disableTerminal
  • constraints/ainotebooks.environmentOptions
  • constraints/ainotebooks.requireAutoUpgradeSchedule
  • constraints/ainotebooks.restrictVpcNetworks
  • constraints/compute.disableGuestAttributesAccess
  • constraints/compute.disableInstanceDataAccessApis
  • constraints/compute.disableNestedVirtualization
  • constraints/compute.disableSerialPortAccess
  • constraints/compute.disableSerialPortLogging
  • constraints/compute.disableVpcExternalIpv6
  • constraints/compute.requireOsLogin
  • constraints/compute.requireShieldedVm
  • constraints/compute.restrictLoadBalancerCreationForTypes
  • constraints/compute.restrictProtocolForwardingCreationForTypes
  • constraints/compute.restrictXpnProjectLienRemoval
  • constraints/compute.setNewProjectDefaultToZonalDNSOnly
  • constraints/compute.skipDefaultNetworkCreation
  • constraints/compute.trustedImageProjects
  • constraints/compute.vmCanIpForward
  • constraints/compute.vmExternalIpAccess
  • constraints/gcp.detailedAuditLoggingMode
  • constraints/gcp.resourceLocations
  • constraints/iam.allowedPolicyMemberDomains
  • constraints/iam.automaticIamGrantsForDefaultServiceAccounts
  • constraints/iam.disableServiceAccountCreation
  • constraints/iam.disableServiceAccountKeyCreation
  • constraints/iam.disableServiceAccountKeyUpload
  • constraints/iam.restrictCrossProjectServiceAccountLienRemoval
  • constraints/iam.serviceAccountKeyExpiryHours
  • constraints/resourcemanager.accessBoundaries
  • constraints/resourcemanager.allowedExportDestinations
  • constraints/sql.restrictAuthorizedNetworks
  • constraints/sql.restrictNoncompliantDiagnosticDataAccess
  • constraints/sql.restrictNoncompliantResourceCreation
  • constraints/sql.restrictPublicIp
  • constraints/storage.publicAccessPrevention
  • constraints/storage.restrictAuthTypes
  • constraints/storage.uniformBucketLevelAccess This RPC only returns either resources of types supported by search APIs or IAM policies.
Parameter
NameDescription
requestAnalyzeOrgPolicyGovernedAssetsRequest
Returns
TypeDescription
AnalyzeOrgPolicyGovernedAssetsResponse

analyzeOrgPolicyGovernedContainers(AnalyzeOrgPolicyGovernedContainersRequest request)

public AnalyzeOrgPolicyGovernedContainersResponse analyzeOrgPolicyGovernedContainers(AnalyzeOrgPolicyGovernedContainersRequest request)

Analyzes organization policies governed containers (projects, folders or organization) under a scope.

Parameter
NameDescription
requestAnalyzeOrgPolicyGovernedContainersRequest
Returns
TypeDescription
AnalyzeOrgPolicyGovernedContainersResponse

batchGetAssetsHistory(BatchGetAssetsHistoryRequest request)

public BatchGetAssetsHistoryResponse batchGetAssetsHistory(BatchGetAssetsHistoryRequest request)

Batch gets the update history of assets that overlap a time window. For IAM_POLICY content, this API outputs history when the asset and its attached IAM POLICY both exist. This can create gaps in the output history. Otherwise, this API outputs history with asset in both non-delete or deleted status. If a specified asset does not exist, this API returns an INVALID_ARGUMENT error.

Parameter
NameDescription
requestBatchGetAssetsHistoryRequest
Returns
TypeDescription
BatchGetAssetsHistoryResponse

batchGetEffectiveIamPolicies(BatchGetEffectiveIamPoliciesRequest request)

public BatchGetEffectiveIamPoliciesResponse batchGetEffectiveIamPolicies(BatchGetEffectiveIamPoliciesRequest request)

Gets effective IAM policies for a batch of resources.

Parameter
NameDescription
requestBatchGetEffectiveIamPoliciesRequest
Returns
TypeDescription
BatchGetEffectiveIamPoliciesResponse

build(Channel channel, CallOptions callOptions)

protected AssetServiceGrpc.AssetServiceBlockingStub build(Channel channel, CallOptions callOptions)
Parameters
NameDescription
channelio.grpc.Channel
callOptionsio.grpc.CallOptions
Returns
TypeDescription
AssetServiceGrpc.AssetServiceBlockingStub
Overrides
io.grpc.stub.AbstractStub.build(io.grpc.Channel,io.grpc.CallOptions)

createFeed(CreateFeedRequest request)

public Feed createFeed(CreateFeedRequest request)

Creates a feed in a parent project/folder/organization to listen to its asset updates.

Parameter
NameDescription
requestCreateFeedRequest
Returns
TypeDescription
Feed

createSavedQuery(CreateSavedQueryRequest request)

public SavedQuery createSavedQuery(CreateSavedQueryRequest request)

Creates a saved query in a parent project/folder/organization.

Parameter
NameDescription
requestCreateSavedQueryRequest
Returns
TypeDescription
SavedQuery

deleteFeed(DeleteFeedRequest request)

public Empty deleteFeed(DeleteFeedRequest request)

Deletes an asset feed.

Parameter
NameDescription
requestDeleteFeedRequest
Returns
TypeDescription
Empty

deleteSavedQuery(DeleteSavedQueryRequest request)

public Empty deleteSavedQuery(DeleteSavedQueryRequest request)

Deletes a saved query.

Parameter
NameDescription
requestDeleteSavedQueryRequest
Returns
TypeDescription
Empty

exportAssets(ExportAssetsRequest request)

public Operation exportAssets(ExportAssetsRequest request)

Exports assets with time and resource types to a given Cloud Storage location/BigQuery table. For Cloud Storage location destinations, the output format is newline-delimited JSON. Each line represents a google.cloud.asset.v1.Asset in the JSON format; for BigQuery table destinations, the output table stores the fields in asset Protobuf as columns. This API implements the google.longrunning.Operation API, which allows you to keep track of the export. We recommend intervals of at least 2 seconds with exponential retry to poll the export operation result. For regular-size resource parent, the export operation usually finishes within 5 minutes.

Parameter
NameDescription
requestExportAssetsRequest
Returns
TypeDescription
Operation

getFeed(GetFeedRequest request)

public Feed getFeed(GetFeedRequest request)

Gets details about an asset feed.

Parameter
NameDescription
requestGetFeedRequest
Returns
TypeDescription
Feed

getSavedQuery(GetSavedQueryRequest request)

public SavedQuery getSavedQuery(GetSavedQueryRequest request)

Gets details about a saved query.

Parameter
NameDescription
requestGetSavedQueryRequest
Returns
TypeDescription
SavedQuery

listAssets(ListAssetsRequest request)

public ListAssetsResponse listAssets(ListAssetsRequest request)

Lists assets with time and resource types and returns paged results in response.

Parameter
NameDescription
requestListAssetsRequest
Returns
TypeDescription
ListAssetsResponse

listFeeds(ListFeedsRequest request)

public ListFeedsResponse listFeeds(ListFeedsRequest request)

Lists all asset feeds in a parent project/folder/organization.

Parameter
NameDescription
requestListFeedsRequest
Returns
TypeDescription
ListFeedsResponse

listSavedQueries(ListSavedQueriesRequest request)

public ListSavedQueriesResponse listSavedQueries(ListSavedQueriesRequest request)

Lists all saved queries in a parent project/folder/organization.

Parameter
NameDescription
requestListSavedQueriesRequest
Returns
TypeDescription
ListSavedQueriesResponse

queryAssets(QueryAssetsRequest request)

public QueryAssetsResponse queryAssets(QueryAssetsRequest request)

Issue a job that queries assets using a SQL statement compatible with BigQuery SQL. If the query execution finishes within timeout and there's no pagination, the full query results will be returned in the QueryAssetsResponse. Otherwise, full query results can be obtained by issuing extra requests with the job_reference from the a previous QueryAssets call. Note, the query result has approximately 10 GB limitation enforced by BigQuery. Queries return larger results will result in errors.

Parameter
NameDescription
requestQueryAssetsRequest
Returns
TypeDescription
QueryAssetsResponse

searchAllIamPolicies(SearchAllIamPoliciesRequest request)

public SearchAllIamPoliciesResponse searchAllIamPolicies(SearchAllIamPoliciesRequest request)

Searches all IAM policies within the specified scope, such as a project, folder, or organization. The caller must be granted the cloudasset.assets.searchAllIamPolicies permission on the desired scope, otherwise the request will be rejected.

Parameter
NameDescription
requestSearchAllIamPoliciesRequest
Returns
TypeDescription
SearchAllIamPoliciesResponse

searchAllResources(SearchAllResourcesRequest request)

public SearchAllResourcesResponse searchAllResources(SearchAllResourcesRequest request)

Searches all Google Cloud resources within the specified scope, such as a project, folder, or organization. The caller must be granted the cloudasset.assets.searchAllResources permission on the desired scope, otherwise the request will be rejected.

Parameter
NameDescription
requestSearchAllResourcesRequest
Returns
TypeDescription
SearchAllResourcesResponse

updateFeed(UpdateFeedRequest request)

public Feed updateFeed(UpdateFeedRequest request)

Updates an asset feed configuration.

Parameter
NameDescription
requestUpdateFeedRequest
Returns
TypeDescription
Feed

updateSavedQuery(UpdateSavedQueryRequest request)

public SavedQuery updateSavedQuery(UpdateSavedQueryRequest request)

Updates a saved query.

Parameter
NameDescription
requestUpdateSavedQueryRequest
Returns
TypeDescription
SavedQuery