Package-level declarations

Types

Link copied to clipboard
data class AccessSelectorResponse(val permissions: List<String>, val roles: List<String>)

Specifies roles and/or permissions to analyze, to determine both the identities possessing them and the resources they control. If multiple values are specified, results will include roles or permissions matching any of them. The total number of roles and permissions should be equal or less than 10.

Link copied to clipboard
data class ConditionContextResponse(val accessTime: String)

The IAM conditions context.

Link copied to clipboard
data class ExprResponse(val description: String, val expression: String, val location: String, val title: String)

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

Link copied to clipboard
data class FeedOutputConfigResponse(val pubsubDestination: PubsubDestinationResponse)

Output configuration for asset feed destination.

Link copied to clipboard
data class GetFeedResult(val assetNames: List<String>, val assetTypes: List<String>, val condition: ExprResponse, val contentType: String, val feedOutputConfig: FeedOutputConfigResponse, val name: String, val relationshipTypes: List<String>)
Link copied to clipboard
data class GetSavedQueryResult(val content: QueryContentResponse, val createTime: String, val creator: String, val description: String, val labels: Map<String, String>, val lastUpdateTime: String, val lastUpdater: String, val name: String)
Link copied to clipboard
data class IamPolicyAnalysisQueryResponse(val accessSelector: AccessSelectorResponse, val conditionContext: ConditionContextResponse, val identitySelector: IdentitySelectorResponse, val options: OptionsResponse, val resourceSelector: ResourceSelectorResponse, val scope: String)

IAM policy analysis query message.

Link copied to clipboard
data class IdentitySelectorResponse(val identity: String)

Specifies an identity for which to determine resource access, based on roles assigned either directly to them or to the groups they belong to, directly or indirectly.

Link copied to clipboard
data class OptionsResponse(val analyzeServiceAccountImpersonation: Boolean, val expandGroups: Boolean, val expandResources: Boolean, val expandRoles: Boolean, val includeDenyPolicyAnalysis: Boolean, val outputGroupEdges: Boolean, val outputResourceEdges: Boolean)

Contains query options.

Link copied to clipboard
data class PubsubDestinationResponse(val topic: String)

A Pub/Sub destination.

Link copied to clipboard
data class QueryContentResponse(val iamPolicyAnalysisQuery: IamPolicyAnalysisQueryResponse)

The query content.

Link copied to clipboard
data class ResourceSelectorResponse(val fullResourceName: String)

Specifies the resource to analyze for access policies, which may be set directly on the resource, or on ancestors such as organizations, folders or projects.