OrgPolicyAsyncClient(*, credentials: typing.Optional[google.auth.credentials.Credentials] = None, transport: typing.Union[str, google.cloud.orgpolicy_v2.services.org_policy.transports.base.OrgPolicyTransport] = 'grpc_asyncio', client_options: typing.Optional[google.api_core.client_options.ClientOptions] = None, client_info: google.api_core.gapic_v1.client_info.ClientInfo = <google.api_core.gapic_v1.client_info.ClientInfo object>)
An interface for managing organization policies.
The Organization Policy Service provides a simple mechanism for organizations to restrict the allowed configurations across their entire resource hierarchy.
You can use a policy to configure restrictions on resources. For example, you can enforce a policy that restricts which Google Cloud APIs can be activated in a certain part of your resource hierarchy, or prevents serial port access to VM instances in a particular folder.
Policies are inherited down through the resource hierarchy. A policy applied to a parent resource automatically applies to all its child resources unless overridden with a policy lower in the hierarchy.
A constraint defines an aspect of a resource's configuration that can be controlled by an organization's policy administrator. Policies are a collection of constraints that defines their allowable configuration on a particular resource and its child resources.
Properties
transport
Returns the transport used by the client instance.
Returns | |
---|---|
Type | Description |
OrgPolicyTransport | The transport used by the client instance. |
Methods
OrgPolicyAsyncClient
OrgPolicyAsyncClient(*, credentials: typing.Optional[google.auth.credentials.Credentials] = None, transport: typing.Union[str, google.cloud.orgpolicy_v2.services.org_policy.transports.base.OrgPolicyTransport] = 'grpc_asyncio', client_options: typing.Optional[google.api_core.client_options.ClientOptions] = None, client_info: google.api_core.gapic_v1.client_info.ClientInfo = <google.api_core.gapic_v1.client_info.ClientInfo object>)
Instantiates the org policy client.
Parameters | |
---|---|
Name | Description |
credentials |
Optional[google.auth.credentials.Credentials]
The authorization credentials to attach to requests. These credentials identify the application to the service; if none are specified, the client will attempt to ascertain the credentials from the environment. |
transport |
Union[str,
The transport to use. If set to None, a transport is chosen automatically. |
client_options |
ClientOptions
Custom options for the client. It won't take effect if a |
Exceptions | |
---|---|
Type | Description |
google.auth.exceptions.MutualTlsChannelError | If mutual TLS transport creation failed for any reason. |
common_billing_account_path
common_billing_account_path(billing_account: str) -> str
Returns a fully-qualified billing_account string.
common_folder_path
common_folder_path(folder: str) -> str
Returns a fully-qualified folder string.
common_location_path
common_location_path(project: str, location: str) -> str
Returns a fully-qualified location string.
common_organization_path
common_organization_path(organization: str) -> str
Returns a fully-qualified organization string.
common_project_path
common_project_path(project: str) -> str
Returns a fully-qualified project string.
constraint_path
constraint_path(project: str, constraint: str) -> str
Returns a fully-qualified constraint string.
create_custom_constraint
create_custom_constraint(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.CreateCustomConstraintRequest,
dict,
]
] = None,
*,
parent: typing.Optional[str] = None,
custom_constraint: typing.Optional[
google.cloud.orgpolicy_v2.types.constraint.CustomConstraint
] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.types.constraint.CustomConstraint
Creates a custom constraint.
Returns a google.rpc.Status
with
google.rpc.Code.NOT_FOUND
if the organization does not
exist. Returns a google.rpc.Status
with
google.rpc.Code.ALREADY_EXISTS
if the constraint already
exists on the given organization.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_create_custom_constraint():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.CreateCustomConstraintRequest(
parent="parent_value",
)
# Make the request
response = await client.create_custom_constraint(request=request)
# Handle the response
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.CreateCustomConstraintRequest, dict]]
The request object. The request sent to the [CreateCustomConstraintRequest] [google.cloud.orgpolicy.v2.OrgPolicy.CreateCustomConstraint] method. |
parent |
Required. Must be in the following form: - |
custom_constraint |
CustomConstraint
Required. Custom constraint to create. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.types.CustomConstraint | A custom constraint defined by customers which can *only* be applied to the given resource types and organization. By creating a custom constraint, customers can apply policies of this custom constraint. *Creating a custom constraint itself does NOT apply any policy enforcement*. |
create_policy
create_policy(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.CreatePolicyRequest, dict
]
] = None,
*,
parent: typing.Optional[str] = None,
policy: typing.Optional[google.cloud.orgpolicy_v2.types.orgpolicy.Policy] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.types.orgpolicy.Policy
Creates a policy.
Returns a google.rpc.Status
with
google.rpc.Code.NOT_FOUND
if the constraint does not exist.
Returns a google.rpc.Status
with
google.rpc.Code.ALREADY_EXISTS
if the policy already exists
on the given Google Cloud resource.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_create_policy():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.CreatePolicyRequest(
parent="parent_value",
)
# Make the request
response = await client.create_policy(request=request)
# Handle the response
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.CreatePolicyRequest, dict]]
The request object. The request sent to the [CreatePolicyRequest] [google.cloud.orgpolicy.v2.OrgPolicy.CreatePolicy] method. |
parent |
Required. The Google Cloud resource that will parent the new policy. Must be in one of the following forms: - |
policy |
Policy
Required. Policy to create. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.types.Policy | Defines an organization policy which is used to specify constraints for configurations of Google Cloud resources. |
custom_constraint_path
custom_constraint_path(organization: str, custom_constraint: str) -> str
Returns a fully-qualified custom_constraint string.
delete_custom_constraint
delete_custom_constraint(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.DeleteCustomConstraintRequest,
dict,
]
] = None,
*,
name: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> None
Deletes a custom constraint.
Returns a google.rpc.Status
with
google.rpc.Code.NOT_FOUND
if the constraint does not exist.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_delete_custom_constraint():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.DeleteCustomConstraintRequest(
name="name_value",
)
# Make the request
await client.delete_custom_constraint(request=request)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.DeleteCustomConstraintRequest, dict]]
The request object. The request sent to the [DeleteCustomConstraint] [google.cloud.orgpolicy.v2.OrgPolicy.DeleteCustomConstraint] method. |
name |
Required. Name of the custom constraint to delete. See the custom constraint entry for naming rules. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
delete_policy
delete_policy(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.DeletePolicyRequest, dict
]
] = None,
*,
name: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> None
Deletes a policy.
Returns a google.rpc.Status
with
google.rpc.Code.NOT_FOUND
if the constraint or organization
policy does not exist.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_delete_policy():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.DeletePolicyRequest(
name="name_value",
)
# Make the request
await client.delete_policy(request=request)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.DeletePolicyRequest, dict]]
The request object. The request sent to the [DeletePolicy] [google.cloud.orgpolicy.v2.OrgPolicy.DeletePolicy] method. |
name |
Required. Name of the policy to delete. See the policy entry for naming rules. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
from_service_account_file
from_service_account_file(filename: str, *args, **kwargs)
Creates an instance of this client using the provided credentials file.
Parameter | |
---|---|
Name | Description |
filename |
str
The path to the service account private key json file. |
Returns | |
---|---|
Type | Description |
OrgPolicyAsyncClient | The constructed client. |
from_service_account_info
from_service_account_info(info: dict, *args, **kwargs)
Creates an instance of this client using the provided credentials info.
Parameter | |
---|---|
Name | Description |
info |
dict
The service account private key info. |
Returns | |
---|---|
Type | Description |
OrgPolicyAsyncClient | The constructed client. |
from_service_account_json
from_service_account_json(filename: str, *args, **kwargs)
Creates an instance of this client using the provided credentials file.
Parameter | |
---|---|
Name | Description |
filename |
str
The path to the service account private key json file. |
Returns | |
---|---|
Type | Description |
OrgPolicyAsyncClient | The constructed client. |
get_custom_constraint
get_custom_constraint(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.GetCustomConstraintRequest, dict
]
] = None,
*,
name: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.types.constraint.CustomConstraint
Gets a custom constraint.
Returns a google.rpc.Status
with
google.rpc.Code.NOT_FOUND
if the custom constraint does not
exist.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_get_custom_constraint():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.GetCustomConstraintRequest(
name="name_value",
)
# Make the request
response = await client.get_custom_constraint(request=request)
# Handle the response
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.GetCustomConstraintRequest, dict]]
The request object. The request sent to the [GetCustomConstraint] [google.cloud.orgpolicy.v2.OrgPolicy.GetCustomConstraint] method. |
name |
Required. Resource name of the custom constraint. See the custom constraint entry for naming requirements. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.types.CustomConstraint | A custom constraint defined by customers which can *only* be applied to the given resource types and organization. By creating a custom constraint, customers can apply policies of this custom constraint. *Creating a custom constraint itself does NOT apply any policy enforcement*. |
get_effective_policy
get_effective_policy(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.GetEffectivePolicyRequest, dict
]
] = None,
*,
name: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.types.orgpolicy.Policy
Gets the effective policy on a resource. This is the result of
merging policies in the resource hierarchy and evaluating
conditions. The returned policy will not have an etag
or
condition
set because it is an evaluated policy across
multiple resources. Subtrees of Resource Manager resource
hierarchy with 'under:' prefix will not be expanded.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_get_effective_policy():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.GetEffectivePolicyRequest(
name="name_value",
)
# Make the request
response = await client.get_effective_policy(request=request)
# Handle the response
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.GetEffectivePolicyRequest, dict]]
The request object. The request sent to the [GetEffectivePolicy] [google.cloud.orgpolicy.v2.OrgPolicy.GetEffectivePolicy] method. |
name |
Required. The effective policy to compute. See Policy for naming requirements. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.types.Policy | Defines an organization policy which is used to specify constraints for configurations of Google Cloud resources. |
get_mtls_endpoint_and_cert_source
get_mtls_endpoint_and_cert_source(
client_options: typing.Optional[
google.api_core.client_options.ClientOptions
] = None,
)
Return the API endpoint and client cert source for mutual TLS.
The client cert source is determined in the following order:
(1) if GOOGLE_API_USE_CLIENT_CERTIFICATE
environment variable is not "true", the
client cert source is None.
(2) if client_options.client_cert_source
is provided, use the provided one; if the
default client cert source exists, use the default one; otherwise the client cert
source is None.
The API endpoint is determined in the following order:
(1) if client_options.api_endpoint
if provided, use the provided one.
(2) if GOOGLE_API_USE_CLIENT_CERTIFICATE
environment variable is "always", use the
default mTLS endpoint; if the environment variable is "never", use the default API
endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise
use the default API endpoint.
More details can be found at https://google.aip.dev/auth/4114.
Parameter | |
---|---|
Name | Description |
client_options |
google.api_core.client_options.ClientOptions
Custom options for the client. Only the |
Exceptions | |
---|---|
Type | Description |
google.auth.exceptions.MutualTLSChannelError | If any errors happen. |
Returns | |
---|---|
Type | Description |
Tuple[str, Callable[[], Tuple[bytes, bytes]]] | returns the API endpoint and the client cert source to use. |
get_policy
get_policy(
request: typing.Optional[
typing.Union[google.cloud.orgpolicy_v2.types.orgpolicy.GetPolicyRequest, dict]
] = None,
*,
name: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.types.orgpolicy.Policy
Gets a policy on a resource.
If no policy is set on the resource, NOT_FOUND
is returned.
The etag
value can be used with UpdatePolicy()
to update
a policy during read-modify-write.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_get_policy():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.GetPolicyRequest(
name="name_value",
)
# Make the request
response = await client.get_policy(request=request)
# Handle the response
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.GetPolicyRequest, dict]]
The request object. The request sent to the [GetPolicy] [google.cloud.orgpolicy.v2.OrgPolicy.GetPolicy] method. |
name |
Required. Resource name of the policy. See Policy for naming requirements. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.types.Policy | Defines an organization policy which is used to specify constraints for configurations of Google Cloud resources. |
get_transport_class
get_transport_class() -> (
typing.Type[
google.cloud.orgpolicy_v2.services.org_policy.transports.base.OrgPolicyTransport
]
)
Returns an appropriate transport class.
Parameter | |
---|---|
Name | Description |
label |
typing.Optional[str]
The name of the desired transport. If none is provided, then the first transport in the registry is used. |
list_constraints
list_constraints(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.ListConstraintsRequest, dict
]
] = None,
*,
parent: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.services.org_policy.pagers.ListConstraintsAsyncPager
Lists constraints that could be applied on the specified resource.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_list_constraints():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.ListConstraintsRequest(
parent="parent_value",
)
# Make the request
page_result = client.list_constraints(request=request)
# Handle the response
async for response in page_result:
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.ListConstraintsRequest, dict]]
The request object. The request sent to the [ListConstraints] [google.cloud.orgpolicy.v2.OrgPolicy.ListConstraints] method. |
parent |
Required. The Google Cloud resource that parents the constraint. Must be in one of the following forms: - |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.services.org_policy.pagers.ListConstraintsAsyncPager | The response returned from the [ListConstraints] [google.cloud.orgpolicy.v2.OrgPolicy.ListConstraints] method. Iterating over this object will yield results and resolve additional pages automatically. |
list_custom_constraints
list_custom_constraints(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.ListCustomConstraintsRequest, dict
]
] = None,
*,
parent: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> (
google.cloud.orgpolicy_v2.services.org_policy.pagers.ListCustomConstraintsAsyncPager
)
Retrieves all of the custom constraints that exist on a particular organization resource.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_list_custom_constraints():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.ListCustomConstraintsRequest(
parent="parent_value",
)
# Make the request
page_result = client.list_custom_constraints(request=request)
# Handle the response
async for response in page_result:
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.ListCustomConstraintsRequest, dict]]
The request object. The request sent to the [ListCustomConstraints] [google.cloud.orgpolicy.v2.OrgPolicy.ListCustomConstraints] method. |
parent |
Required. The target Google Cloud resource that parents the set of custom constraints that will be returned from this call. Must be in one of the following forms: - |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.services.org_policy.pagers.ListCustomConstraintsAsyncPager | The response returned from the [ListCustomConstraints] [google.cloud.orgpolicy.v2.OrgPolicy.ListCustomConstraints] method. It will be empty if no custom constraints are set on the organization resource. Iterating over this object will yield results and resolve additional pages automatically. |
list_policies
list_policies(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.ListPoliciesRequest, dict
]
] = None,
*,
parent: typing.Optional[str] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.services.org_policy.pagers.ListPoliciesAsyncPager
Retrieves all of the policies that exist on a particular resource.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_list_policies():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.ListPoliciesRequest(
parent="parent_value",
)
# Make the request
page_result = client.list_policies(request=request)
# Handle the response
async for response in page_result:
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.ListPoliciesRequest, dict]]
The request object. The request sent to the [ListPolicies] [google.cloud.orgpolicy.v2.OrgPolicy.ListPolicies] method. |
parent |
Required. The target Google Cloud resource that parents the set of constraints and policies that will be returned from this call. Must be in one of the following forms: - |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.services.org_policy.pagers.ListPoliciesAsyncPager | The response returned from the [ListPolicies] [google.cloud.orgpolicy.v2.OrgPolicy.ListPolicies] method. It will be empty if no policies are set on the resource. Iterating over this object will yield results and resolve additional pages automatically. |
parse_common_billing_account_path
parse_common_billing_account_path(path: str) -> typing.Dict[str, str]
Parse a billing_account path into its component segments.
parse_common_folder_path
parse_common_folder_path(path: str) -> typing.Dict[str, str]
Parse a folder path into its component segments.
parse_common_location_path
parse_common_location_path(path: str) -> typing.Dict[str, str]
Parse a location path into its component segments.
parse_common_organization_path
parse_common_organization_path(path: str) -> typing.Dict[str, str]
Parse a organization path into its component segments.
parse_common_project_path
parse_common_project_path(path: str) -> typing.Dict[str, str]
Parse a project path into its component segments.
parse_constraint_path
parse_constraint_path(path: str) -> typing.Dict[str, str]
Parses a constraint path into its component segments.
parse_custom_constraint_path
parse_custom_constraint_path(path: str) -> typing.Dict[str, str]
Parses a custom_constraint path into its component segments.
parse_policy_path
parse_policy_path(path: str) -> typing.Dict[str, str]
Parses a policy path into its component segments.
policy_path
policy_path(project: str, policy: str) -> str
Returns a fully-qualified policy string.
update_custom_constraint
update_custom_constraint(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.UpdateCustomConstraintRequest,
dict,
]
] = None,
*,
custom_constraint: typing.Optional[
google.cloud.orgpolicy_v2.types.constraint.CustomConstraint
] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.types.constraint.CustomConstraint
Updates a custom constraint.
Returns a google.rpc.Status
with
google.rpc.Code.NOT_FOUND
if the constraint does not exist.
Note: the supplied policy will perform a full overwrite of all fields.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_update_custom_constraint():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.UpdateCustomConstraintRequest(
)
# Make the request
response = await client.update_custom_constraint(request=request)
# Handle the response
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.UpdateCustomConstraintRequest, dict]]
The request object. The request sent to the [UpdateCustomConstraintRequest] [google.cloud.orgpolicy.v2.OrgPolicy.UpdateCustomConstraint] method. |
custom_constraint |
CustomConstraint
Required. |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.types.CustomConstraint | A custom constraint defined by customers which can *only* be applied to the given resource types and organization. By creating a custom constraint, customers can apply policies of this custom constraint. *Creating a custom constraint itself does NOT apply any policy enforcement*. |
update_policy
update_policy(
request: typing.Optional[
typing.Union[
google.cloud.orgpolicy_v2.types.orgpolicy.UpdatePolicyRequest, dict
]
] = None,
*,
policy: typing.Optional[google.cloud.orgpolicy_v2.types.orgpolicy.Policy] = None,
retry: typing.Union[
google.api_core.retry_async.AsyncRetry,
google.api_core.gapic_v1.method._MethodDefault,
] = _MethodDefault._DEFAULT_VALUE,
timeout: typing.Union[float, object] = _MethodDefault._DEFAULT_VALUE,
metadata: typing.Sequence[typing.Tuple[str, str]] = ()
) -> google.cloud.orgpolicy_v2.types.orgpolicy.Policy
Updates a policy.
Returns a google.rpc.Status
with
google.rpc.Code.NOT_FOUND
if the constraint or the policy do
not exist. Returns a google.rpc.Status
with
google.rpc.Code.ABORTED
if the etag supplied in the request
does not match the persisted etag of the policy
Note: the supplied policy will perform a full overwrite of all fields.
# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
# client as shown in:
# https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import orgpolicy_v2
async def sample_update_policy():
# Create a client
client = orgpolicy_v2.OrgPolicyAsyncClient()
# Initialize request argument(s)
request = orgpolicy_v2.UpdatePolicyRequest(
)
# Make the request
response = await client.update_policy(request=request)
# Handle the response
print(response)
Parameters | |
---|---|
Name | Description |
request |
Optional[Union[google.cloud.orgpolicy_v2.types.UpdatePolicyRequest, dict]]
The request object. The request sent to the [UpdatePolicyRequest] [google.cloud.orgpolicy.v2.OrgPolicy.UpdatePolicy] method. |
policy |
Policy
Required. Policy to update. This corresponds to the |
retry |
google.api_core.retry_async.AsyncRetry
Designation of what errors, if any, should be retried. |
timeout |
float
The timeout for this request. |
metadata |
Sequence[Tuple[str, str]]
Strings which should be sent along with the request as metadata. |
Returns | |
---|---|
Type | Description |
google.cloud.orgpolicy_v2.types.Policy | Defines an organization policy which is used to specify constraints for configurations of Google Cloud resources. |