]cloudPlatformScope _requesterfolders operations organizationsprojects locationsaccessPolicySimulationsorgPolicyViolationsPreviewsreplaysgetresultscreatelistorgPolicyViolationslaunchspectoJson alternate dryRunSpecetagnameinheritFromParentresetrules updateTimeallowAll conditiondenyAllenforce parametersvalues accessChangebaseline simulatedaccess memberships relevancerolerolePermissionrolePermissionRelevance membership accessStateerrorspoliciesbindingExplanationsfullResourceNamepolicy nextPageToken replayResultscustomConstraintscustomConstraintcustomConstraintParent policyParenterrorresource createTimeoverlayresourceCountsstateviolationsCount compliant noncompliantscanned unenforcedconfigresultsSummary logSource policyOverlay accessDiff accessTuplediff lastSeenDateparentdifferenceCount errorCountlogCount newestDate oldestDateunchangedCount ancestors assetTypeauditLogConfigsservicemembers auditConfigsbindings etagAsBytesversion unreachabledonemetadataresponseBPolicySimulatorApiFoldersResourceFoldersLocationsResource/FoldersLocationsAccessPolicySimulationsResource9FoldersLocationsAccessPolicySimulationsOperationsResource3FoldersLocationsOrgPolicyViolationsPreviewsResource=FoldersLocationsOrgPolicyViolationsPreviewsOperationsResourceFoldersLocationsReplaysResource)FoldersLocationsReplaysOperationsResource&FoldersLocationsReplaysResultsResourceOperationsResourceOrganizationsResourceOrganizationsLocationsResource5OrganizationsLocationsAccessPolicySimulationsResource?OrganizationsLocationsAccessPolicySimulationsOperationsResource9OrganizationsLocationsOrgPolicyViolationsPreviewsResourceCOrganizationsLocationsOrgPolicyViolationsPreviewsOperationsResourceLOrganizationsLocationsOrgPolicyViolationsPreviewsOrgPolicyViolationsResource%OrganizationsLocationsReplaysResource/OrganizationsLocationsReplaysOperationsResource,OrganizationsLocationsReplaysResultsResourceProjectsResourceProjectsLocationsResource0ProjectsLocationsAccessPolicySimulationsResource:ProjectsLocationsAccessPolicySimulationsOperationsResource4ProjectsLocationsOrgPolicyViolationsPreviewsResource>ProjectsLocationsOrgPolicyViolationsPreviewsOperationsResource ProjectsLocationsReplaysResource*ProjectsLocationsReplaysOperationsResource'ProjectsLocationsReplaysResultsResource)GoogleCloudOrgpolicyV2AlternatePolicySpec&GoogleCloudOrgpolicyV2CustomConstraintGoogleCloudOrgpolicyV2Policy GoogleCloudOrgpolicyV2PolicySpec*GoogleCloudOrgpolicyV2PolicySpecPolicyRule6GoogleCloudOrgpolicyV2PolicySpecPolicyRuleStringValues+GoogleCloudPolicysimulatorV1AccessStateDiff'GoogleCloudPolicysimulatorV1AccessTuple.GoogleCloudPolicysimulatorV1BindingExplanationAGoogleCloudPolicysimulatorV1BindingExplanationAnnotatedMembership+GoogleCloudPolicysimulatorV1ExplainedAccess+GoogleCloudPolicysimulatorV1ExplainedPolicyCGoogleCloudPolicysimulatorV1ListOrgPolicyViolationsPreviewsResponse;GoogleCloudPolicysimulatorV1ListOrgPolicyViolationsResponse5GoogleCloudPolicysimulatorV1ListReplayResultsResponse,GoogleCloudPolicysimulatorV1OrgPolicyOverlayCGoogleCloudPolicysimulatorV1OrgPolicyOverlayCustomConstraintOverlay9GoogleCloudPolicysimulatorV1OrgPolicyOverlayPolicyOverlay.GoogleCloudPolicysimulatorV1OrgPolicyViolation6GoogleCloudPolicysimulatorV1OrgPolicyViolationsPreviewDGoogleCloudPolicysimulatorV1OrgPolicyViolationsPreviewResourceCounts"GoogleCloudPolicysimulatorV1Replay(GoogleCloudPolicysimulatorV1ReplayConfig&GoogleCloudPolicysimulatorV1ReplayDiff(GoogleCloudPolicysimulatorV1ReplayResult0GoogleCloudPolicysimulatorV1ReplayResultsSummary+GoogleCloudPolicysimulatorV1ResourceContextGoogleIamV1AuditConfigGoogleIamV1AuditLogConfigGoogleIamV1BindingGoogleIamV1Policy'GoogleLongrunningListOperationsResponseGoogleLongrunningOperationGoogleRpcStatusGoogleTypeDateGoogleTypeExpr~ApiRequestErrorDetailedApiRequestError ApiRequesterClientStringrootUrl servicePathrequestHeaders$fieldsFutureListUri encodeFullrequest queryParamsfromJsonMapdynamicjsonencodebodyfilterpageSize pageTokenreturnPartialSuccessintboolorgPolicyViolationsPreviewIdlaunchspec containsKey'$GoogleCloudOrgpolicyV2CustomConstraint Deprecated alternate dryRunSpecetagnameinheritFromParentresetrulesmapvaluetoList updateTimeObjectallowAll conditiondenyAllenforce parametersvalues $StringValues accessChangebaseline simulated$V1AccessTupleaccess membershipsMapEntrykey relevancerolerolePermissionrolePermissionRelevance membership accessStateerrorspoliciesbindingExplanationsfullResourceNamepolicy nextPageTokenorgPolicyViolationsPreviewsorgPolicyViolations replayResultscustomConstraintscustomConstraintcustomConstraintParent policyParenterrorresource createTimeoverlayresourceCountsstateviolationsCount compliant noncompliantscanned unenforcedconfigresultsSummary logSource policyOverlay accessDiff accessTuplediff lastSeenDateparentdifferenceCount errorCountlogCount newestDate oldestDateunchangedCount ancestors assetTypeauditLogConfigsservice$AuditLogConfigmembersbase64decode replaceAll auditConfigsbindingsversion operations unreachabledonemetadataresponse $Status00$Date$Expr1wBfOv 1 tApiRequestErrorDetailedApiRequestError:package:_discoveryapis_commons/_discoveryapis_commons.dartasync dart:asyncconvert dart:convertڋcore dart:core(+commons+:package:_discoveryapis_commons/_discoveryapis_commons.dart5TWhttpWpackage:http/http.dart_../shared.dartx../src/user_agent.dart34QGHmЀ)[ʂ*`aЃj Wvz҄օ $<_#oӇ#Aj@U͊ SG}Nj4]^wݍ^txÎ_ 'w$%c;gh̲ͳ [ڳCIߴ6CIϵ1>~#/<]d̷ӷ׷ظ%rxԸ:@kqٹߺ0λdIY_ \Ͻ4Ys1m@@@ @W@X@@@@@AA>AEAIAKALA{AAABBB4B:BTBZBBCC$C~CCCD(DyDDDEEgEEEFF(F.F~FFFFG9GnGGGHH"H/HoHHII%I&IlImIIIIIJ)JaJhJlJnJoJJJJJK7K=KKKKKL L<LBLLLLLM/M<MBMMMNN*N7NwNNNNNOO(O5OVO]OOOOOPPPkPqPPPPQQ,Q2QbQhQQQRBRRS%SpSST TT TbThTTTUURUUUUUVV4VAVVVW.WjW{WWWWXXXIXUXbXXXXYY Y Y Y+YTYUYYYZZZ Z0ZYZZZZZ[8[][[\\\Y\t\v\w\\\]!]5]|]]]]]^^^^Z^^^^___=_C_____``/`````a,a2aaaabbLbdb~bbcccc?c@cpc|ccccdd d$d&d'didddde8eLeUeeff)f2f3fpffffg)g\gbgggh'h-hGhMhhhiFiLiiijjLj\jbjjjjkkRkkkllGlalnllm*m;mgmmmmnnn7nCnQndnnnnnnoo7oYo_oooopp7pppppqFqLqqqrr6rrrrss6s=s>susvssssst3tktrtvtwtttu+u1uKuQuuvvavgvwwWw]wwx:x@xxxxyy y\yiyoyyzzMzQzYzszzzz{{L{{{{{|'|(|X|d|q|||}*}1}5}7}8}}}}~~1~2~k~q~~~ ?]#)^dN~29:qrKRVXY(IdeAiOUETZ7=Q^d6>Xp1m5ANov ;de*jk AGagG.4Q2gno4;k ,29`#)t+1!.n,MT 34-SYsy!l|!r V5<lJPjpIO_B'7=:o7Q^K56fr#')*_$>Dhi}Wnt)^_\]QX\^_xDFGi+b56;;den gm Zgm#;UbGS`;deVwHi9?Y_aqw¬²gÜ KĀćĈĿ *1ařŠŤŦŧ9wư,GHLjǎǽ,{ Zjpɥɫ `ʕ,9i˩,-]iẘ̫̲!%&GM͉̓ͣͩbΰ9Wϕϛ9?АНУ)ayѓѠTU҅ґҞҿ6=ACDwӠӡ@FԕԻ2~Մ q~ք :Rly׹-.^jwؘ؟Z`٭ٳ-v|ڧڭl۽ Qܠ4:݅ݕݛ4AGޘ #<Tpߕ߯߼/mT[\Bz)DErxSbg ] Wgm!'x+Gan(]deh4fb&W"+,]}JN1^_$jn P;_ \:[ar 4CRagh k{HXl'm}6Rn{Q"(y]<%Vvw p.y!r:Z`sWc0C>GHy  / < Q          8 v |    # 1 7    `   D  +i>(lRop  ;AEK/MSci-.dj2FXjNuFzRCe3No(ycNhi  C  !!T!!""W""##b#y#$$*$s$%%V%%&3&&''1'2''''(((o((()))?)V)i)}))))**D****+(+l+++++,,B,f,,,,,-----P----.-.}..//V///00%0o00141d11222d2223333l3344I4453556!6[666674797H7I77788i889?9Y9Z999::S:h:i:::;:;;;<2<^<}<~<==*={=>>`>>>>? ?!?7?K?Z?s?????@#@U@|@@@AAQA~AAB/BBBSBbBBCC(CfCoCpCCCDD7DSDDDDE E-ELEaEEEEEEFF[FFGGIGGH/HuHII<IIIIJ7JJJlJK KRKKKKLCLXLlLrLsLLLMMQMZM[MMMNNN!N"NrNNO-OjOOP PPPPQQfQQQQRRTRzR{RRRS9S}S~SSSSSST6TBT}TTTU1UBUPUgUUUV;VLVZVqVzV{VVVWW'WJWcWWWWWWXX^XXXY6Y}YYZ8ZnZZ[-[{[[[\+\p\v\\]]4]5]p]v]]^6^^^_ _ _9_?____` `1`7```aacaab9bSbTbbbbbbbbcAcMc~cccd?ddddee,eVeeeefff4fTfffggg.gaggggggghhchhhi9iWiXiiiij2jJjpjvjwjjjk&kKkkkll]lvlllllm mVmcmmmmmmnnYnnno'oEoFoloooppp7p=p>ppppq/qBq[qqqr r"r+r,r]rrrrs,s3s7s9s:spsstt tKtitjtttuu*uBuHuIuuuv#v6vvvvvvww1w_wwwwwx x?xxxy)ykyzzNzTzdzqzzzz{ {{]{{{{|5|A|B|s||||||}C}V}o}~~&~4~K~~~CXf}_cef$`a@[|3rMVW 6ovz|}?@tz 5;<K[o3rvxy!M   ?Zjy)hD P-Kgd6+1D_`b*z' 23pv'-@ KRf*0fl *CSmstV@F)23d0N 6Mx6nt  KQd~%&w!5F]o0^9_!:_z 8>N)w #89rx4w#_uv+7c=y"6eno *7Pe <^Bz\4]sS_B[Io:(s(5pq1u Hptvw%n3|Œ’)Brsðö/0nĎďOŝŹſ=RSƋƢƣ+<BCLJǓ VfzȢ'7Kuɝ@gʵ7@Ar˜˸>Kñ̿̚2kͻ/GHxΎΏ./πϚ϶Ϸ.CXqwxFxѬ/CwҞLUVӇӹ-UԅԒԽ=fmqstշջ >r֪PVף0uؚ؛rَ٨٩<Fڥ 3FLM۔۠  W܌ܕܖ7Dc݂ݟݦݪݬݭ3ރ n߼ W2Po+1yFR"3AXaegh7-H%tx1jQ $8k 6MUh:O G7\_S34uv Tdx!*+\ \nS>a*xM*lD3x   M S   6   ! p     S Y   A  (u%lm ;A1~ fN/Q#)*Wc*;I`,:Q~9Uw<l67MS'Bij#/n5FTk*X")-/0~   Z k ~    !%!+!x!""""("s"""#8#Z#`####$*$0$$%%j%&& &U&&&&&' ''-'@'F'G'}'''((M(](q((()))Y)))))* *)*M*i******+++ +"+#+l++,,T,,---T-X--.:..//f/////00N00111y122T223:334 414Q/// Policy Simulator API - v1 /// /// Policy Simulator is a collection of endpoints for creating, running, and /// viewing a Replay. A `Replay` is a type of simulation that lets you see how /// your members' access to resources might change if you changed your IAM /// policy. During a `Replay`, Policy Simulator re-evaluates, or replays, past /// access attempts under both the current policy and your proposed policy, and /// compares those results to determine how your members' access might change /// under the proposed policy. /// /// For more information, see /// /// /// Create an instance of [PolicySimulatorApi] to access these resources: /// /// - [FoldersResource] /// - [FoldersLocationsResource] /// - [FoldersLocationsAccessPolicySimulationsResource] /// - [FoldersLocationsAccessPolicySimulationsOperationsResource] /// - [FoldersLocationsOrgPolicyViolationsPreviewsResource] /// - [FoldersLocationsOrgPolicyViolationsPreviewsOperationsResource] /// - [FoldersLocationsReplaysResource] /// - [FoldersLocationsReplaysOperationsResource] /// - [FoldersLocationsReplaysResultsResource] /// - [OperationsResource] /// - [OrganizationsResource] /// - [OrganizationsLocationsResource] /// - [OrganizationsLocationsAccessPolicySimulationsResource] /// - [OrganizationsLocationsAccessPolicySimulationsOperationsResource] /// - [OrganizationsLocationsOrgPolicyViolationsPreviewsResource] /// - [OrganizationsLocationsOrgPolicyViolationsPreviewsOperationsResource] /// - /// [OrganizationsLocationsOrgPolicyViolationsPreviewsOrgPolicyViolationsResource] /// - [OrganizationsLocationsReplaysResource] /// - [OrganizationsLocationsReplaysOperationsResource] /// - [OrganizationsLocationsReplaysResultsResource] /// - [ProjectsResource] /// - [ProjectsLocationsResource] /// - [ProjectsLocationsAccessPolicySimulationsResource] /// - [ProjectsLocationsAccessPolicySimulationsOperationsResource] /// - [ProjectsLocationsOrgPolicyViolationsPreviewsResource] /// - [ProjectsLocationsOrgPolicyViolationsPreviewsOperationsResource] /// - [ProjectsLocationsReplaysResource] /// - [ProjectsLocationsReplaysOperationsResource] /// - [ProjectsLocationsReplaysResultsResource]+4W^w;>PVVbpp?| ϑڑV)?>>ȏ)r/// See, edit, configure, and delete your Google Cloud data and see the email /// address for your Google Account.%'';;eeD|M>I/// Policy Simulator is a collection of endpoints for creating, running, and /// viewing a Replay. /// /// A `Replay` is a type of simulation that lets you see how your members' /// access to resources might change if you changed your IAM policy. During a /// `Replay`, Policy Simulator re-evaluates, or replays, past access attempts /// under both the current policy and your proposed policy, and compares those /// results to determine how your members' access might change under the /// proposed policy. 3(5Cv%U\\b(@AAVk`m((L~c%~!![Ôa@@6Fx֖˖ؖxxg͕%ܕ܀xxi~QQQvB'%B''4˗˅/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^folders/\[^/\]+/locations/\[^/\]+/accessPolicySimulations/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.'--B[P]p?$%?NN恀2K@Mڞz˞%XX/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^folders/\[^/\]+/locations/\[^/\]+/orgPolicyViolationsPreviews/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.hh n٥ W%ˤxFFoq*ũߩ!/// Creates and starts a Replay using the given ReplayConfig. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource where this Replay will be /// created. This resource must be a project, folder, or organization with a /// location. Example: `projects/my-example-project/locations/global` /// Value must have pattern `^folders/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.--9EER$/// Gets the specified Replay. /// /// Each `Replay` is available for at least 7 days. /// /// Request parameters: /// /// [name] - Required. The name of the Replay to retrieve, in the following /// format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, /// where `{resource-id}` is the ID of the project, folder, or organization /// that owns the `Replay`. Example: /// `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36` /// Value must have pattern /// `^folders/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleCloudPolicysimulatorV1Replay]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ww}j²IJjja[@%[(ϲυ/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^folders/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ӽ)88C]]jڷډnɅt/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern /// `^folders/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+/operations$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. >AAAAAAAAAA^AA}%AGGGGGGGGGH H HB B bG&/// Lists the results of running a Replay. /// /// Request parameters: /// /// [parent] - Required. The Replay whose results are listed, in the following /// format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}` /// Example: /// `projects/my-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36` /// Value must have pattern /// `^folders/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+$`. /// /// [pageSize] - The maximum number of ReplayResult objects to return. /// Defaults to 5000. The maximum value is 5000; values above 5000 are rounded /// down to 5000. /// /// [pageToken] - A page token, received from a previous /// Simulator.ListReplayResults call. Provide this token to retrieve the next /// page of results. When paginating, all other parameters provided to /// \[Simulator.ListReplayResults\[\] must match the call that provided the /// page token. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleCloudPolicysimulatorV1ListReplayResultsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ALAL!ARJJJJJJJJJJFJJ%JMMNNNN!KKM/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern `^operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.UUUUUUUUUUUUUUVVVV+OOӉ6U>/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern `^operations$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.JoJoJuYYYYYYYYYYIYHY-%YHYWYWaYzY Y Y\\;\<\<\Q\j\_\l\\VZMZ2%ZMZ\Z\ZZZ[>[[m[Z Z lZ]]]]]^]^]]r\\%\\\့]'\w\w\}^^^^^^^^^^|^w^\%^wbPbPb\bhbhbu__bG/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/accessPolicySimulations/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.^^^f5fnftftfffff5f5vddk%ddddeWeWekk>klllll)l)lKlKlXffOk/// CreateOrgPolicyViolationsPreview creates an OrgPolicyViolationsPreview for /// the proposed changes in the provided /// OrgPolicyViolationsPreview.OrgPolicyOverlay. /// /// The changes to OrgPolicy are specified by this `OrgPolicyOverlay`. The /// resources to scan are inferred from these specified changes. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The organization under which this /// OrgPolicyViolationsPreview will be created. Example: /// `organizations/my-example-org/locations/global` /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [orgPolicyViolationsPreviewId] - Optional. An optional user-specified ID /// for the OrgPolicyViolationsPreview. If not provided, a random ID will be /// generated. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.rrrrrroosr} /// GetOrgPolicyViolationsPreview gets the specified /// OrgPolicyViolationsPreview. /// /// Each OrgPolicyViolationsPreview is available for at least 7 days. /// /// Request parameters: /// /// [name] - Required. The name of the OrgPolicyViolationsPreview to get. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/orgPolicyViolationsPreviews/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleCloudPolicysimulatorV1OrgPolicyViolationsPreview]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.z]z]zizwzwzzzzzzztytyzS?/// ListOrgPolicyViolationsPreviews lists each OrgPolicyViolationsPreview in /// an organization. /// /// Each OrgPolicyViolationsPreview is available for at least 7 days. /// /// Request parameters: /// /// [parent] - Required. The parent the violations are scoped to. Format: /// `organizations/{organization}/locations/{location}` Example: /// `organizations/my-example-org/locations/global` /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Optional. The maximum number of items to return. The service /// may return fewer than this value. If unspecified, at most 5 items will be /// returned. The maximum value is 10; values above 10 will be coerced to 10. /// /// [pageToken] - Optional. A page token, received from a previous call. /// Provide this to retrieve the subsequent page. When paginating, all other /// parameters must match the call that provided the page token. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a /// [GoogleCloudPolicysimulatorV1ListOrgPolicyViolationsPreviewsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.d'd'd-}}}}~~'~~)}}}}%}~4~4!y/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/orgPolicyViolationsPreviews/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.}8}8}>&,,AZO\ڀ%BBN\\fttgg8F/// ListOrgPolicyViolations lists the OrgPolicyViolations that are present in /// an OrgPolicyViolationsPreview. /// /// Request parameters: /// /// [parent] - Required. The OrgPolicyViolationsPreview to get /// OrgPolicyViolations from. Format: /// organizations/{organization}/locations/{location}/orgPolicyViolationsPreviews/{orgPolicyViolationsPreview} /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/orgPolicyViolationsPreviews/\[^/\]+$`. /// /// [pageSize] - Optional. The maximum number of items to return. The service /// may return fewer than this value. If unspecified, at most 1000 items will /// be returned. The maximum value is 1000; values above 1000 will be coerced /// to 1000. /// /// [pageToken] - Optional. A page token, received from a previous call. /// Provide this to retrieve the subsequent page. When paginating, all other /// parameters must match the call that provided the page token. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a /// [GoogleCloudPolicysimulatorV1ListOrgPolicyViolationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.YY_mmm]X=%Xgg{UU*x΅I'/// Creates and starts a Replay using the given ReplayConfig. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource where this Replay will be /// created. This resource must be a project, folder, or organization with a /// location. Example: `projects/my-example-project/locations/global` /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. /// Gets the specified Replay. /// /// Each `Replay` is available for at least 7 days. /// /// Request parameters: /// /// [name] - Required. The name of the Replay to retrieve, in the following /// format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, /// where `{resource-id}` is the ID of the project, folder, or organization /// that owns the `Replay`. Example: /// `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36` /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleCloudPolicysimulatorV1Replay]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. 6eff{66g' %' ҂/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.!;;Htz/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+/operations$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ҏVd|a%| h,/// Lists the results of running a Replay. /// /// Request parameters: /// /// [parent] - Required. The Replay whose results are listed, in the following /// format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}` /// Example: /// `projects/my-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36` /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+$`. /// /// [pageSize] - The maximum number of ReplayResult objects to return. /// Defaults to 5000. The maximum value is 5000; values above 5000 are rounded /// down to 5000. /// /// [pageToken] - A page token, received from a previous /// Simulator.ListReplayResults call. Provide this token to retrieve the next /// page of results. When paginating, all other parameters provided to /// \[Simulator.ListReplayResults\[\] must match the call that provided the /// page token. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleCloudPolicysimulatorV1ListReplayResultsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.**30%:/<Dz%W__e8QRRg|q~88Mk%--hcGG@Mh%-mgggwX=%X''3??L/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/accessPolicySimulations/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. TZZo} qX=%XggFLLazo|{%ǂ/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/orgPolicyViolationsPreviews/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.$=2?X%z+yyqƥ*#JJ"/// Creates and starts a Replay using the given ReplayConfig. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource where this Replay will be /// created. This resource must be a project, folder, or organization with a /// location. Example: `projects/my-example-project/locations/global` /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.eeq}}ъ((\/// Gets the specified Replay. /// /// Each `Replay` is available for at least 7 days. /// /// Request parameters: /// /// [name] - Required. The name of the Replay to retrieve, in the following /// format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, /// where `{resource-id}` is the ID of the project, folder, or organization /// that owns the `Replay`. Example: /// `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36` /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleCloudPolicysimulatorV1Replay]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ŧŧŭӣӣӣbӔy%Ӕ>>JVVc 5/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+/operations/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningOperation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.''4@@JXXettߙߙߦou/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+/operations$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleLongrunningListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.DDBJ  !:/<_% !//<KKXGGc'/// Lists the results of running a Replay. /// /// Request parameters: /// /// [parent] - Required. The Replay whose results are listed, in the following /// format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}` /// Example: /// `projects/my-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36` /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/replays/\[^/\]+$`. /// /// [pageSize] - The maximum number of ReplayResult objects to return. /// Defaults to 5000. The maximum value is 5000; values above 5000 are rounded /// down to 5000. /// /// [pageToken] - A page token, received from a previous /// Simulator.ListReplayResults call. Provide this token to retrieve the next /// page of results. When paginating, all other parameters provided to /// \[Simulator.ListReplayResults\[\] must match the call that provided the /// page token. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleCloudPolicysimulatorV1ListReplayResultsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.∉$  D  . $(4.F;D6<IMNTc_ejkv}w ׁSh/// Reference to the launch that will be used while audit logging and to /// control the launch. /// /// Should be set only in the alternate policy.mD/// Specify constraint for configurations of Google Cloud resources...R뮄:/// Similar to PolicySpec but with an extra 'launch' field for launch reference. /// /// The PolicySpec here is specific for dry-run.##(88 =GG LVV [zjyyC5A06FJKNhOST\`adV  #'(+E,019=>fxtz%{E<C7=HLMPjQUV^bcjj/"l(/// Deprecated.tt/// Dry-run policy. /// /// Audit-only policy, can be used to monitor how the policy would have /// impacted the existing and future resources if it's enforced.[ځ9/// An opaque tag indicating the current state of the policy, used for /// concurrency control. /// /// This 'etag' is computed by the server based on the value of other fields, /// and may be sent on update and delete requests to ensure the client has an /// up-to-date value before proceeding. /// /// Optional.アv/// The resource name of the policy. /// /// Must be one of the following forms, where `constraint_name` is the name of /// the constraint which this policy configures: * /// `projects/{project_number}/policies/{constraint_name}` * /// `folders/{folder_id}/policies/{constraint_name}` * /// `organizations/{organization_id}/policies/{constraint_name}` For example, /// `projects/123/policies/compute.disableSerialPortAccess`. Note: /// `projects/{project_id}/policies/{constraint_name}` is also an acceptable /// name for API requests, but responses will return the name using the /// equivalent project number. /// /// Immutable.]4/// Basic information about the organization policy.g__y/// Defines an organization policy which is used to specify constraints for /// configurations of Google Cloud resources.   =FGGPF]aDokv}qw .!$()-<>AQ -+045;)>/// An opaque tag indicating the current version of the policySpec, used for /// concurrency control. /// /// This field is ignored if used in a `CreatePolicy` request. When the policy /// is returned from either a `GetPolicy` or a `ListPolicies` request, this /// `etag` indicates the version of the current policySpec to use when /// executing a read-modify-write loop. When the policy is returned from a /// `GetEffectivePolicy` request, the `etag` will be unset.cc/// Determines the inheritance behavior for this policy. /// /// If `inherit_from_parent` is true, policy rules set higher up in the /// hierarchy (up to the closest root) are inherited and present in the /// effective policy. If it is false, then no rules are inherited, and this /// policy becomes the new root for evaluation. This field can be set only for /// policies which configure list constraints.ycׁD/// Ignores policies set above this resource and restores the /// `constraint_default` enforcement behavior of the specific constraint at /// this resource. /// /// This field can be set in policies for either list or boolean constraints. /// If set, `rules` must be empty and `inherit_from_parent` must be set to /// false./// In policies for boolean constraints, the following requirements apply: - /// There must be one and only one policy rule where condition is unset. /// /// - Boolean policy rules with conditions must set `enforced` to the opposite /// of the policy rule without a condition. - During policy evaluation, policy /// rules with conditions that are true for a target resource take precedence./// The time stamp this was previously updated. /// /// This represents the last time a call to `CreatePolicy` or `UpdatePolicy` /// was made for that policy. /// /// Output only.JJn/// Defines a Google Cloud policy specification which is used to specify /// constraints for configurations of Google Cloud resources.## (66;JJ O\\ anns   -$Z/45@LA\jks  $7+5&,:>?CXNZ_`kxlGHPrgpbhuyz}~-  : ̀/// Setting this to true means that all values are allowed. /// /// This field can be set only in policies for list constraints.d نdH/// A condition that determines whether this rule is used to evaluate the /// policy. /// /// When set, the google.type.Expr.expression field must contain 1 to 10 /// subexpressions, joined by the `||` or `&&` operators. Each subexpression /// must use the `resource.matchTag()`, `resource.matchTagId()`, /// `resource.hasTagKey()`, or `resource.hasTagKeyId()` Common Expression /// Language (CEL) function. The `resource.matchTag()` function takes the /// following arguments: * `key_name`: the namespaced name of the tag key, /// with the organization ID and a slash (`/`) as a prefix; for example, /// `123456789012/environment` * `value_name`: the short name of the tag value /// For example: `resource.matchTag('123456789012/environment, 'prod')` The /// `resource.matchTagId()` function takes the following arguments: * /// `key_id`: the permanent ID of the tag key; for example, /// `tagKeys/123456789012` * `value_id`: the permanent ID of the tag value; /// for example, `tagValues/567890123456` For example: /// `resource.matchTagId('tagKeys/123456789012', 'tagValues/567890123456')` /// The `resource.hasTagKey()` function takes the following argument: * /// `key_name`: the namespaced name of the tag key, with the organization ID /// and a slash (`/`) as a prefix; for example, `123456789012/environment` For /// example: `resource.hasTagKey('123456789012/environment')` The /// `resource.hasTagKeyId()` function takes the following arguments: * /// `key_id`: the permanent ID of the tag key; for example, /// `tagKeys/123456789012` For example: /// `resource.hasTagKeyId('tagKeys/123456789012')`r/// Setting this to true means that all values are denied. /// /// This field can be set only in policies for list constraints./// If `true`, then the policy is enforced. /// /// If `false`, then any configuration is acceptable. This field can be set in /// policies for boolean constraints, custom constraints and managed /// constraints.!&!/// Required for managed constraints if parameters are defined. /// /// Passes parameter values when policy enforcement is enabled. Ensure that /// parameter value types match those defined in the constraint definition. /// For example: ``` { "allowedLocations" : ["us-east1", "us-west1"], /// "allowAll" : true } ``` /// /// Optional. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.0x/// List of values to be used for this policy rule. /// /// This field can be set only in policies for list constraints.ʁ  ݑ '/// A rule used to express this policy.))<)C)C)H)Z)Z )_)m)m)r))q))))))N))+))*)*))** * **$**P**&*+*,*7*B*8*R*}*~*******************+*+4++ ++++&++6+a+b+j+++++|+++++++++++++))])'# E'#/// How the principal's access, specified in the AccessState field, changed /// between the current (baseline) policies and proposed (simulated) policies. /// Possible string values are: /// - "ACCESS_CHANGE_TYPE_UNSPECIFIED" : Default value. This value is unused. /// - "NO_CHANGE" : The principal's access did not change. This includes the /// case where both baseline and simulated are UNKNOWN, but the unknown /// information is equivalent. /// - "UNKNOWN_CHANGE" : The principal's access under both the current /// policies and the proposed policies is `UNKNOWN`, but the unknown /// information differs between them. /// - "ACCESS_REVOKED" : The principal had access under the current policies /// (`GRANTED`), but will no longer have access after the proposed changes /// (`NOT_GRANTED`). /// - "ACCESS_GAINED" : The principal did not have access under the current /// policies (`NOT_GRANTED`), but will have access after the proposed changes /// (`GRANTED`). /// - "ACCESS_MAYBE_REVOKED" : This result can occur for the following /// reasons: * The principal had access under the current policies /// (`GRANTED`), but their access after the proposed changes is `UNKNOWN`. * /// The principal's access under the current policies is `UNKNOWN`, but they /// will not have access after the proposed changes (`NOT_GRANTED`). /// - "ACCESS_MAYBE_GAINED" : This result can occur for the following reasons: /// * The principal did not have access under the current policies /// (`NOT_GRANTED`), but their access after the proposed changes is `UNKNOWN`. /// * The principal's access under the current policies is `UNKNOWN`, but they /// will have access after the proposed changes (`GRANTED`).('4(/// The results of evaluating the access tuple under the current (baseline) /// policies. /// /// If the AccessState couldn't be fully evaluated, this field explains why.)(!)/// The results of evaluating the access tuple under the proposed (simulated) /// policies. /// /// If the AccessState couldn't be fully evaluated, this field explains why.++, ii /// A summary and comparison of the principal's access under the current /// (baseline) policies and the proposed (simulated) policies for a single /// access tuple.>>?? ?????%?%?*?;?;?@?O?O ?T?^?^?c?w?w?|>>ˀ??????u??Cl@?@@@@@@@@@ @4@+@a@@6@;@<@G@S@H@c@q@r@z@@@@@@@@@@@@@@@@@@@@A AIA"AA A AA%A)A*A-AGA.A2A3A;A?A@AHAJALAOB_A_BPBsBjBBzBBuB{BBBBBBBBBBBBBBBBBBBBBBBBBCC&CCUC9CSC4C:CXC\C]Cc???2./2/// Indicates whether _this binding_ provides the specified permission to the /// specified principal for the specified resource. /// /// This field does _not_ indicate whether the principal actually has the /// permission for the resource. There might be another binding that overrides /// this binding. To determine whether the principal actually has the /// permission, use the `access` field in the TroubleshootIamPolicyResponse. /// /// Required. /// Possible string values are: /// - "ACCESS_STATE_UNSPECIFIED" : Default value. This value is unused. /// - "GRANTED" : The principal has the permission. /// - "NOT_GRANTED" : The principal does not have the permission. /// - "UNKNOWN_CONDITIONAL" : The principal has the permission only if a /// condition expression evaluates to `true`. /// - "UNKNOWN_INFO_DENIED" : The user who created the Replay does not have /// access to all of the policies that Policy Simulator needs to evaluate.323/// A condition expression that prevents this binding from granting access /// unless the expression evaluates to `true`. /// /// To learn about IAM Conditions, see /// https://cloud.google.com/iam/docs/conditions-overview.7;3!%7;/// Indicates whether each principal in the binding includes the principal /// specified in the request, either directly or indirectly. /// /// Each key identifies a principal in the binding, and each value indicates /// whether the principal in the binding includes the principal in the /// request. For example, suppose that a binding includes the following /// principals: * `user:alice@example.com` * `group:product-eng@example.com` /// The principal in the replayed access tuple is `user:bob@example.com`. This /// user is a principal of the group `group:product-eng@example.com`. For the /// first principal in the binding, the key is `user:alice@example.com`, and /// the `membership` field in the value is set to `MEMBERSHIP_NOT_INCLUDED`. /// For the second principal in the binding, the key is /// `group:product-eng@example.com`, and the `membership` field in the value /// is set to `MEMBERSHIP_INCLUDED`.9N7K 9N/// The relevance of this binding to the overall determination for the entire /// policy. /// Possible string values are: /// - "HEURISTIC_RELEVANCE_UNSPECIFIED" : Default value. This value is unused. /// - "NORMAL" : The data point has a limited effect on the result. Changing /// the data point is unlikely to affect the overall determination. /// - "HIGH" : The data point has a strong effect on the result. Changing the /// data point is likely to affect the overall determination.:b9\ :b/// The role that this binding grants. /// /// For example, `roles/compute.serviceAgent`. For a complete list of /// predefined IAM roles, as well as the permissions in each role, see /// https://cloud.google.com/iam/help/roles/reference./// The relevance of the permission's existence, or nonexistence, in the role /// to the overall determination for the entire policy. /// Possible string values are: /// - "HEURISTIC_RELEVANCE_UNSPECIFIED" : Default value. This value is unused. /// - "NORMAL" : The data point has a limited effect on the result. Changing /// the data point is unlikely to affect the overall determination. /// - "HIGH" : The data point has a strong effect on the result. Changing the /// data point is likely to affect the overall determination.CrCr]C-->-b/// Details about how a binding in a policy affects a principal's ability to use /// a permission.KL@LGLGLLL\L\LaKKrLuLLLLLLLMWLLM LMLLM MMMM+M"M@M2M>M-M3MCMGMHMNLuLuLIF]IۃV/// Indicates whether the binding includes the principal. /// Possible string values are: /// - "MEMBERSHIP_UNSPECIFIED" : Default value. This value is unused. /// - "MEMBERSHIP_INCLUDED" : The binding includes the principal. The /// principal can be included directly or indirectly. For example: * A /// principal is included directly if that principal is listed in the binding. /// * A principal is included indirectly if that principal is in a Google /// group or Google Workspace domain that is listed in the binding. /// - "MEMBERSHIP_NOT_INCLUDED" : The binding does not include the principal. /// - "MEMBERSHIP_UNKNOWN_INFO_DENIED" : The user who created the Replay is /// not allowed to access the binding. /// - "MEMBERSHIP_UNKNOWN_UNSUPPORTED" : The principal is an unsupported type. /// Only Google Accounts and service accounts are supported.KIK/// The relevance of the principal's status to the overall determination for /// the binding. /// Possible string values are: /// - "HEURISTIC_RELEVANCE_UNSPECIFIED" : Default value. This value is unused. /// - "NORMAL" : The data point has a limited effect on the result. Changing /// the data point is unlikely to affect the overall determination. /// - "HIGH" : The data point has a strong effect on the result. Changing the /// data point is likely to affect the overall determination.M]M]MEEӈMF=/// Details about whether the binding includes the principal.SSSSSSS SSS SSSmSTT%T&T&T/<T<T@VwTUTJTlT\TjTWT]ToTsTtTzTTTTTTTTTTTTTTTTUNTU?U\U]UcUdUwUoUyUUUUUzUUUUUUUUVXUVIVfVgVmVnSSTQuN₞Quq/// Whether the principal in the access tuple has permission to access the /// resource in the access tuple under the given policies. /// Possible string values are: /// - "ACCESS_STATE_UNSPECIFIED" : Default value. This value is unused. /// - "GRANTED" : The principal has the permission. /// - "NOT_GRANTED" : The principal does not have the permission. /// - "UNKNOWN_CONDITIONAL" : The principal has the permission only if a /// condition expression evaluates to `true`. /// - "UNKNOWN_INFO_DENIED" : The user who created the Replay does not have /// access to all of the policies that Policy Simulator needs to evaluate.RrQRr/// If the AccessState is `UNKNOWN`, this field contains a list of errors /// explaining why the result is `UNKNOWN`. /// /// If the `AccessState` is `GRANTED` or `NOT_GRANTED`, this field is omitted.SsR}Ss/// If the AccessState is `UNKNOWN`, this field contains the policies that led /// to that result. /// /// If the `AccessState` is `GRANTED` or `NOT_GRANTED`, this field is omitted.V}V} VN"N"jN/// Details about how a set of policies, listed in ExplainedPolicy, resulted in /// a certain AccessState when replaying an access tuple.bVbbb bbbbbbbbb bbbbbVbVbc'c0c1c1c:[cGcKec[cUcmcbckc]cccpctcuc{ccccccccccccccccdcddddddddddddddddeee8eeeee!e*e"e:eKeLeTeeveketefeleye}e~eeeeeeeeeeeeeeeeeeeebbc([X[׃/// Indicates whether _this policy_ provides the specified permission to the /// specified principal for the specified resource. /// /// This field does _not_ indicate whether the principal actually has the /// permission for the resource. There might be another policy that overrides /// this policy. To determine whether the principal actually has the /// permission, use the `access` field in the TroubleshootIamPolicyResponse. /// Possible string values are: /// - "ACCESS_STATE_UNSPECIFIED" : Default value. This value is unused. /// - "GRANTED" : The principal has the permission. /// - "NOT_GRANTED" : The principal does not have the permission. /// - "UNKNOWN_CONDITIONAL" : The principal has the permission only if a /// condition expression evaluates to `true`. /// - "UNKNOWN_INFO_DENIED" : The user who created the Replay does not have /// access to all of the policies that Policy Simulator needs to evaluate.][P]/// Details about how each binding in the policy affects the principal's /// ability, or inability, to use the permission for the resource. /// /// If the user who created the Replay does not have access to the policy, /// this field is omitted.^]7^/// The full resource name that identifies the resource. /// /// For example, /// `//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance`. /// If the user who created the Replay does not have access to the policy, /// this field is omitted. For examples of full resource names for Google /// Cloud services, see /// https://cloud.google.com/iam/help/troubleshooter/full-resource-names.__ _/// The IAM policy attached to the resource. /// /// If the user who created the Replay does not have access to the policy, /// this field is empty.bH_ǂbH]/// The relevance of this policy to the overall determination in the /// TroubleshootIamPolicyResponse. /// /// If the user who created the Replay does not have access to the policy, /// this field is omitted. /// Possible string values are: /// - "HEURISTIC_RELEVANCE_UNSPECIFIED" : Default value. This value is unused. /// - "NORMAL" : The data point has a limited effect on the result. Changing /// the data point is unlikely to affect the overall determination. /// - "HIGH" : The data point has a strong effect on the result. Changing the /// data point is likely to affect the overall determination.fff)WWDWL/// Details about how a specific IAM Policy contributed to the access check.ij/j6j6j;jNjN jSii쀉jyjjjjj%jjljjkkkjkkkkk#kIk.kWkk}k]k{kXk^kkkkkkklklslllljyjy2jiHhiH/// A token that you can use to retrieve the next page of results. /// /// If this field is omitted, there are no subsequent pages.iiZi*/// The list of OrgPolicyViolationsPreviewll(lggԆhi/// ListOrgPolicyViolationsPreviewsResponse is the response message for /// OrgPolicyViolationsPreviewService.ListOrgPolicyViolationsPreviews.ooppp ppp"ooyp@p{pppp%ppr(pppppppppppqpqq-q qqqq q#q'q(q,q;q=q@r qPqrrrrp@p@p|o6no6/// A token that you can use to retrieve the next page of results. /// /// If this field is omitted, there are no subsequent pages.ooHvo#/// The list of OrgPolicyViolationsr.r.rRmmۅ]n_}/// ListOrgPolicyViolationsResponse is the response message for /// OrgPolicyViolationsPreviewService.ListOrgPolicyViolationstuuuuu.u.u3ttmuKuuuuu%uuvuuuuuuuuuuuuuuv!vvvuvvvvv v/v1v4vvDvvvvvuKuKutZstZ/// A token that you can use to retrieve the next page of ReplayResult /// objects. /// /// If this field is omitted, there are no subsequent pages.ttlit$/// The results of running a Replay.www&s:s:sv5/// Response message for Simulator.ListReplayResults.|D|p|w|w|||| ||D|Dc||||||1||}}}}A}4}}2}}}7};}<}@}O}Q}T~2}d~#~@~A~G~H~[~S~]~}~p~c~n~^~d~s~w~x~|~~~d~Ursyz|||zxAz/// The OrgPolicy CustomConstraint changes to preview violations for. /// /// Any existing CustomConstraints with the same name will be overridden in /// the simulation. That is, violations will be determined as if all custom /// constraints in the overlay were instantiated. Only a single /// custom_constraint is supported in the overlay at a time. For evaluating /// multiple constraints, multiple `GenerateOrgPolicyViolationsPreview` /// requests are made, where each request evaluates a single constraint. /// /// Optional.|7zցi|7 /// The OrgPolicy changes to preview violations for. /// /// Any existing OrgPolicies with the same name will be overridden in the /// simulation. That is, violations will be determined as if all policies in /// the overlay were created or updated. /// /// Optional.ww㈁x&/// The proposed changes to OrgPolicy.=DDI__d.S ? 1Aghp<!:"?CDJNzN;/// The new or updated custom constraint. /// /// Optional.cd/// Resource the constraint is attached to. /// /// Example: "organization/987654" /// /// Optional.YY }ff//// A change to an OrgPolicy custom constraint.  ""'i>w.gY#!&*+.H/34<@Aiw>>vx7^73/// The new or updated OrgPolicy. /// /// Optional.Bf/// The parent of the policy we are attaching to. /// /// Example: "projects/123456" /// /// Optional.}}/// A change to an OrgPolicy.<CCH^^ cnn s}} n5 '7]^f}x~(*9:BcYaTZfjknost| EFNrep`fuyz}~1w#dw)/// The custom constraint being violated.I0/// Any error encountered during the evaluation.ڀ/// The name of the \`OrgPolicyViolation\`. /// /// Example: /// organizations/my-example-org/locations/global/orgPolicyViolationsPreviews/506a5f7f/orgPolicyViolations/38ce\`b*/// The resource violating the constraint.ʁNyyp/// OrgPolicyViolation is a resource representing a single resource violating a /// single OrgPolicy constraint.   !..3GG LWW\v/ )+TG1E,2JNOSbdgh 56>aU_PVdhilmqrz~;<Dn[lV\quvyz~"#&vvSoSQ/// Time when this `OrgPolicyViolationsPreview` was created. /// /// Output only.b\/// The names of the constraints against which all `OrgPolicyViolations` were /// evaluated. /// /// If `OrgPolicyOverlay` only contains `PolicyOverlay` then it contains the /// name of the configured custom constraint, applicable to the specified /// policies. Otherwise it contains the name of the constraint specified in /// `CustomConstraintOverlay`. Format: /// `organizations/{organization_id}/customConstraints/{custom_constraint_id}` /// Example: `organizations/123/customConstraints/custom.createOnlyE2TypeVms` /// /// Output only.,Ám,K/// The resource name of the `OrgPolicyViolationsPreview`. /// /// It has the following format: /// `organizations/{organization}/locations/{location}/orgPolicyViolationsPreviews/{orgPolicyViolationsPreview}` /// Example: /// `organizations/my-example-org/locations/global/orgPolicyViolationsPreviews/506a5f7f` /// /// Output only.5L/// The proposed changes we are previewing violations for. /// /// Required.€w/// A summary of the state of all resources scanned for compliance with the /// changed OrgPolicy. /// /// Output only.<Ԃ/// The state of the `OrgPolicyViolationsPreview`. /// /// Output only. /// Possible string values are: /// - "PREVIEW_STATE_UNSPECIFIED" : The state is unspecified. /// - "PREVIEW_PENDING" : The OrgPolicyViolationsPreview has not been created /// yet. /// - "PREVIEW_RUNNING" : The OrgPolicyViolationsPreview is currently being /// created. /// - "PREVIEW_SUCCEEDED" : The OrgPolicyViolationsPreview creation finished /// successfully. /// - "PREVIEW_FAILED" : The OrgPolicyViolationsPreview creation failed with /// an error.ށ/// The number of OrgPolicyViolations in this `OrgPolicyViolationsPreview`. /// /// This count may differ from `resource_summary.noncompliant_count` because /// each OrgPolicyViolation is specific to a resource **and** constraint. If /// there are multiple constraints being evaluated (i.e. multiple policies in /// the overlay), a single resource may violate multiple constraints. /// /// Output only.55MYh/// OrgPolicyViolationsPreview is a resource providing a preview of the /// violations that will exist if an OrgPolicy change is made. /// /// The list of violations are modeled as child resources and retrieved via a /// ListOrgPolicyViolations API call. There are potentially more /// OrgPolicyViolations than could fit in an embedded field. Thus, the use of a /// child resource instead of a field.%%*99 >JJOaa fssxڀ: " %)*->8PEN@FSWX[rfytzy8dJ/// Number of scanned resources with zero violations. /// /// Output only.hQ/// Number of resources that returned an error when scanned. /// /// Output only.pnpQ/// Number of scanned resources with at least one violation. /// /// Output only./// Number of resources checked for compliance. /// /// Must equal: unenforced + noncompliant + compliant + error /// /// Output only.(ˀ/// Number of resources where the constraint was not enforced, i.e. the Policy /// set `enforced: false` for that resource. /// /// Output only.  .!b/// A summary of the state of all resources scanned for compliance with the /// changed OrgPolicy.x   xxs$Y15kE?oGLMXaYq ,#*$/34:SE.UZ[fwg 0C>TJREKW[\b~z uz>/// The configuration used for the `Replay`. /// /// Required.22/// The resource name of the `Replay`, which has the following format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, /// where `{resource-id}` is the ID of the project, folder, or organization /// that owns the Replay. /// /// Example: /// `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36` /// /// Output only.;K/// Summary statistics about the replayed log entries. /// /// Output only.nҁn|/// The current state of the `Replay`. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : Default value. This value is unused. /// - "PENDING" : The `Replay` has not started yet. /// - "RUNNING" : The `Replay` is currently running. /// - "SUCCEEDED" : The `Replay` has successfully completed. /// - "FAILED" : The `Replay` has finished with an error.qq>4/// A resource describing a `Replay`, or simulation.\9BCCL)Y]pgwrx   #:`/// The logs to use as input for the Replay. /// Possible string values are: /// - "LOG_SOURCE_UNSPECIFIED" : An unspecified log source. If the log source /// is unspecified, the Replay defaults to using `RECENT_ACCESSES`. /// - "RECENT_ACCESSES" : All access logs from the last 90 days. These logs /// may not include logs from the most recent 7 days./// A mapping of the resources that you want to simulate policies for and the /// policies that you want to simulate. /// /// Keys are the full resource names for the resources. For example, /// `//cloudresourcemanager.googleapis.com/projects/my-project`. For examples /// of full resource names for Google Cloud services, see /// https://cloud.google.com/iam/help/troubleshooter/full-resource-names. /// Values are Policy objects representing the policies that you want to /// simulate. Replays automatically take into account any IAM policies /// inherited through the resource hierarchy, and any policies set on /// descendant resources. You do not need to include these policies in the /// policy overlay.>6(/// The configuration used for a Replay.sss:#="/#?jks<d*Dd/// A summary and comparison of the principal's access under the current /// (baseline) policies and the proposed (simulated) policies for a single /// access tuple. /// /// The evaluation of the principal's access is reported in the AccessState /// field.넊 /// The difference between the results of evaluating an access tuple under the /// current (baseline) policies and under the proposed (simulated) policies. /// /// This difference explains how a principal's access could change if the /// proposed policies were applied.ƥ      %// 4ƥƥEmvwwǀǍǑ=ǦǛrǨǭǮǹǺd.,1569S:>?GKLtȆȂȮCȈȍȎșȠȚȰ5 $ EXSɁZ_`kslɃɒɓɛɼɲɺɭɳɿL#$/>0N\]eʍ|ʋw}ʐʔʕʘʲʙʝʞʦʪʫ&$)-.4EEnԀ/// The access tuple that was replayed. /// /// This field includes information about the principal, resource, and /// permission that were involved in the access attempt.l䁌lQ/// The difference between the principal's access under the current (baseline) /// policies and the principal's access under the proposed (simulated) /// policies. /// /// This field is only included for access tuples that were successfully /// replayed and had different results under the current policies and the /// proposed policies.(u(/// The error that caused the access tuple replay to fail. /// /// This field is only included for access tuples that were not replayed /// successfully.Ā2ZĀ;/// The latest date this access tuple was seen in the logs.LđL/// The resource name of the `ReplayResult`, in the following format: /// `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}/results/{replay-result-id}`, /// where `{resource-id}` is the ID of the project, folder, or organization /// that owns the Replay. /// /// Example: /// `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36/results/1234`ƚUKƚ5/// The Replay that the access tuple was included in.CCgwwL/// The result of replaying a single access tuple against a simulated state.Ϲ   $227GGL\\aϹϹzЪгдднoR   "8)6$*;?@CVNj]hX^mqruърѸ;ьёђѝѪўѺ-=UK҃W\]hui҅ғҔҜҳҮҴ$>+<&,AEFIzzЫme/// The number of replayed log entries with a difference between baseline and /// simulated policies.;P;9/// The number of log entries that could not be replayed.΄JB΄-/// The total number of log entries replayed.ΑK./// The date of the newest log entry replayed."K"./// The date of the oldest log entry replayed.Ϧ1Ϧf/// The number of replayed log entries with no difference between baseline and /// simulated policies.XX|w86/// Summary statistics about the replayed log entries.##(77 <nOzۃۄۄۍ0ۚ۞ܒ۱ۨ۳۹۴ۺ1(F8D39IMNTg_{nyio~܂܃܉OOE{؏t$؏/// The ancestry path of the resource in Google Cloud /// [resource hierarchy](https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy), /// represented as a list of relative resource names. /// /// An ancestry path starts with the closest ancestor in the hierarchy and /// ends at root. If the resource is a project, folder, or organization, the /// ancestry path starts from the resource itself. Example: /// `["projects/123456789", "folders/5432", "organizations/1234"]`ٝ؝ ٝ/// The asset type of the resource as defined by CAIS. /// /// Example: `compute.googleapis.com/Firewall` See /// [Supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types) /// for more information.٫-Ё /// The full name of the resource. /// /// Example: /// `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1` /// See /// [Resource names](https://cloud.google.com/apis/design/resource_names#full_resource_name) /// for more information.ܘܘܼtt7D/// ResourceContext provides the context we know about a resource. /// /// It is similar in concept to google.cloud.asset.v1.Resource, but focuses on /// the information specifically used by Simulator. =,566?%LPiZkqlr?0MNTUg`znxio}}-qu=/// The configuration for logging of each type of permission.ɀ/// Specifies a service that will be enabled for audit logging. /// /// For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. /// `allServices` is a special value that covers all services.嗀ݭݭV/// Specifies the audit configuration for a service. /// /// The configuration determines which permission types are logged, and what /// identities, if any, are exempted from logging. An AuditConfig must have one /// or more AuditLogConfigs. If there are AuditConfigs for both `allServices` /// and a specific service, the union of the two AuditConfigs is used for that /// service: the log_types specified in each AuditConfig are enabled, and the /// exempted_members in each AuditLogConfig are exempted. Example Policy with /// multiple AuditConfigs: { "audit_configs": \[ { "service": "allServices", /// "audit_log_configs": \[ { "log_type": "DATA_READ", "exempted_members": \[ /// "user:jose@example.com" \] }, { "log_type": "DATA_WRITE" }, { "log_type": /// "ADMIN_READ" } \] }, { "service": "sampleservice.googleapis.com", /// "audit_log_configs": \[ { "log_type": "DATA_READ" }, { "log_type": /// "DATA_WRITE", "exempted_members": \[ "user:aliya@example.com" \] } \] } \] } /// For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ /// logging. It also exempts `jose@example.com` from DATA_READ logging, and /// `aliya@example.com` from DATA_WRITE logging.6HJJOZZ _hh m66>xE'pb,*/347Q8<=EIJrxxJIꊂ/// The condition that is associated with this binding. /// /// If the condition evaluates to `true`, then this binding applies to the /// current request. If the condition evaluates to `false`, then this binding /// does not apply to the current request. However, a different role binding /// might grant the same role to one or more of the principals in this /// binding. To learn which resources support conditions in their IAM /// policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).yꘐyX/// Specifies the principals requesting access for a Google Cloud resource. /// /// `members` can have the following values: * `allUsers`: A special /// identifier that represents anyone who is on the internet; with or without /// a Google account. * `allAuthenticatedUsers`: A special identifier that /// represents anyone who is authenticated with a Google account or a service /// account. Does not include identities that come from external identity /// providers (IdPs) through identity federation. * `user:{emailid}`: An email /// address that represents a specific Google account. For example, /// `alice@example.com` . * `serviceAccount:{emailid}`: An email address that /// represents a Google service account. For example, /// `my-other-app@appspot.gserviceaccount.com`. * /// `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An /// identifier for a /// [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). /// For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * /// `group:{emailid}`: An email address that represents a Google group. For /// example, `admins@example.com`. * `domain:{domain}`: The G Suite domain /// (primary) that represents all the users of that domain. For example, /// `google.com` or `example.com`. * /// `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: /// A single identity in a workforce identity pool. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: /// All workforce identities in a group. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: /// All workforce identities with a specific attribute value. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id} /// / * `: All identities in a workforce identity pool. * /// `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: /// A single identity in a workload identity pool. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: /// A workload identity pool group. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: /// All identities in a workload identity pool with a certain attribute. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id} /// / * `: All identities in a workload identity pool. * /// `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique /// identifier) representing a user that has been recently deleted. For /// example, `alice@example.com?uid=123456789012345678901`. If the user is /// recovered, this value reverts to `user:{emailid}` and the recovered user /// retains the role in the binding. * /// `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus /// unique identifier) representing a service account that has been recently /// deleted. For example, /// `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If /// the service account is undeleted, this value reverts to /// `serviceAccount:{emailid}` and the undeleted service account retains the /// role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email /// address (plus unique identifier) representing a Google group that has been /// recently deleted. For example, /// `admins@example.com?uid=123456789012345678901`. If the group is recovered, /// this value reverts to `group:{emailid}` and the recovered group retains /// the role in the binding. * /// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: /// Deleted single identity in a workforce identity pool. For example, /// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.--/// Role that is assigned to the list of `members`, or principals. /// /// For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an /// overview of the IAM roles and permissions, see the /// [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For /// a list of the available pre-defined roles, see /// [here](https://cloud.google.com/iam/docs/understanding-roles).--Q37/// Associates `members`, or principals, with a `role`.    d,=FGGPG]awkyzG8UV\]phrxsy8)FGMN]Ymdk_eptu{,,>r@/// Specifies cloud audit logging configuration for this policy.   t/// Associates a list of `members`, or principals, with a `role`. /// /// Optionally, may specify a `condition` that determines how and when the /// `bindings` are applied. Each of the `bindings` must contain at least one /// principal. The `bindings` in a `Policy` can refer to up to 1,500 /// principals; up to 250 of these principals can be Google groups. Each /// occurrence of a principal counts towards these limits. For example, if the /// `bindings` grant 50 different roles to `user:alice@example.com`, and not /// to any other principal, then you can add another 1,450 principals to the /// `bindings` in the `Policy`. c9/// `etag` is used for optimistic concurrency control as a way to help prevent /// simultaneous updates of a policy from overwriting each other. /// /// It is strongly suggested that systems make use of the `etag` in the /// read-modify-write cycle to perform policy updates in order to avoid race /// conditions: An `etag` is returned in the response to `getIamPolicy`, and /// systems are expected to put that etag in the request to `setIamPolicy` to /// ensure that their change will be applied to the same version of the /// policy. **Important:** If you use IAM Conditions, you must include the /// `etag` field whenever you call `setIamPolicy`. If you omit this field, /// then IAM allows you to overwrite a version `3` policy with a version `1` /// policy, and all of the conditions in the version `3` policy are lost.x/// Specifies the format of the policy. /// /// Valid values are `0`, `1`, and `3`. Requests that specify an invalid value /// are rejected. Any operation that affects conditional role bindings must /// specify version `3`. This requirement applies to the following operations: /// * Getting a policy that includes a conditional role binding * Adding a /// conditional role binding to a policy * Changing a conditional role binding /// in a policy * Removing any role binding, with or without a condition, from /// a policy that includes conditions **Important:** If you use IAM /// Conditions, you must include the `etag` field whenever you call /// `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a /// version `3` policy with a version `1` policy, and all of the conditions in /// the version `3` policy are lost. If a policy does not include any /// conditions, operations on that policy may specify any valid version or /// leave the field unset. To learn which resources support conditions in /// their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).''D?oosF~f/// An Identity and Access Management (IAM) policy, which specifies access /// controls for Google Cloud resources. /// /// A `Policy` is a collection of `bindings`. A `binding` binds one or more /// `members`, or principals, to a single `role`. Principals can be user /// accounts, service accounts, Google groups, and domains (such as G Suite). A /// `role` is a named list of permissions; each `role` can be an IAM predefined /// role or a user-created custom role. For some types of Google Cloud /// resources, a `binding` can also specify a `condition`, which is a logical /// expression that allows access to a resource only if the expression evaluates /// to `true`. A condition can add constraints based on attributes of the /// request, the resource, or both. To learn which resources support conditions /// in their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). /// **JSON example:** ``` { "bindings": [ { "role": /// "roles/resourcemanager.organizationAdmin", "members": [ /// "user:mike@example.com", "group:admins@example.com", "domain:google.com", /// "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": /// "roles/resourcemanager.organizationViewer", "members": [ /// "user:eve@example.com" ], "condition": { "title": "expirable access", /// "description": "Does not grant access after Sep 2020", "expression": /// "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": /// "BwWWja0YfJA=", "version": 3 } ``` **YAML example:** ``` bindings: - /// members: - user:mike@example.com - group:admins@example.com - /// domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com /// role: roles/resourcemanager.organizationAdmin - members: - /// user:eve@example.com role: roles/resourcemanager.organizationViewer /// condition: title: expirable access description: Does not grant access after /// Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') /// etag: BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, /// see the [IAM documentation](https://cloud.google.com/iam/docs/).lllr <)-D7]K[FL`dekvRC`agh~s nC&/// The standard List next-page token.*~*J/// A list of operations that matches the specified filter in the request.\9.\/// Unordered list. /// /// Unreachable resources. Populated when the request sets /// `ListOperationsRequest.return_partial_success` and reads across /// collections. For example, when attempting to list all resources across all /// supported locations.1*B7/// The response message for Operations.ListOperations.&&&& &&& ''' ''"'" '''1'1 '6&&v'I'c'l'm'm'vo'')''''''''''''''(i'''''''''(([(%((#(((((,(-(0(J(1(5(6(>(B(C(k((y((((((((((((((((((((((((()))))) )))) )&)9)1)e));)@)A)L)W)M)y)l)w)g)m)|)))))))))))'I'Is'd x x/// If the value is `false`, it means the operation is still in progress. /// /// If `true`, the operation is completed, and either `error` or `response` is /// available.  b I/// The error result of the operation in case of failure or cancellation." "/// Service-specific metadata associated with the operation. /// /// It typically contains progress information and common metadata such as /// create time. Some services might not provide such metadata. Any method /// that returns a long-running operation should document the metadata type, /// if any. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.#"#/// The server-assigned name, which is only unique within the same service /// that originally returns it. /// /// If you use the default HTTP mapping, the `name` should be a resource name /// ending with `operations/{unique_id}`.&#&‚/// The normal, successful response of the operation. /// /// If the original method returns no data on success, such as `Delete`, the /// response is `google.protobuf.Empty`. If the original method is standard /// `Get`/`Create`/`Update`, the response should be the resource. For other /// methods, the response should have the type `XxxResponse`, where `Xxx` is /// the original method name. For example, if the original method name is /// `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.))_)00c/// This resource represents a long-running operation that is the result of a /// network API call.ρ0/// A custom constraint defined by customers which can *only* be applied to the /// given resource types and organization. /// /// By creating a custom constraint, customers can apply policies of this custom /// constraint. *Creating a custom constraint itself does NOT apply any policy /// enforcement*. /// A message that holds specific allowed and denied values. /// /// This message can define specific values and subtrees of the Resource Manager /// resource hierarchy (`Organizations`, `Folders`, `Projects`) that are allowed /// or denied. This is achieved by using the `under:` and optional `is:` /// prefixes. The `under:` prefix is used to denote resource subtree values. The /// `is:` prefix is used to denote specific values, and is required only if the /// value contains a ":". Values prefixed with "is:" are treated the same as /// values with no prefix. Ancestry subtrees must be in one of the following /// formats: - `projects/` (for example, `projects/tokyo-rain-123`) - `folders/` /// (for example, `folders/1234`) - `organizations/` (for example, /// `organizations/1234`) The `supports_under` field of the associated /// `Constraint` defines whether ancestry prefixes can be used.---XG/// Information about the principal, resource, and permission to check.hhǁV/// Provides the configuration for logging a type of permissions. /// /// Example: { "audit_log_configs": \[ { "log_type": "DATA_READ", /// "exempted_members": \[ "user:jose@example.com" \] }, { "log_type": /// "DATA_WRITE" } \] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while /// exempting jose@example.com from DATA_READ logging.+#+#,/// The `Status` type defines a logical error model that is suitable for /// different programming environments, including REST APIs and RPC APIs. /// /// It is used by [gRPC](https://github.com/grpc). Each `Status` message /// contains three pieces of data: error code, error message, and error details. /// You can find out more about this error model and how to work with it in the /// [API Design Guide](https://cloud.google.com/apis/design/errors).--/t/// Represents a whole or partial calendar date, such as a birthday. /// /// The time of day and time zone are either specified elsewhere or are /// insignificant. The date is relative to the Gregorian Calendar. This can /// represent one of the following: * A full date, with non-zero year, month, /// and day values. * A month and day, with a zero year (for example, an /// anniversary). * A year on its own, with a zero month and a zero day. * A /// year and month, with a zero day (for example, a credit card expiration /// date). Related types: * google.type.TimeOfDay * google.type.DateTime * /// google.protobuf.Timestamp//49/// Represents a textual expression in the Common Expression Language (CEL) /// syntax. /// /// CEL is a C-like expression language. The syntax and semantics of CEL are /// documented at https://github.com/google/cel-spec. Example (Comparison): /// title: "Summary size limit" description: "Determines if a summary is less /// than 100 chars" expression: "document.summary.size() \< 100" Example /// (Equality): title: "Requestor is owner" description: "Determines if /// requestor is the document owner" expression: "document.owner == /// request.auth.claims.email" Example (Logic): title: "Public documents" /// description: "Determine whether the document should be publicly visible" /// expression: "document.type != 'private' && document.type != 'internal'" /// Example (Data Manipulation): title: "Notification string" description: /// "Create a notification string with a timestamp." expression: "'New message /// received at ' + string(document.create_time)" The exact variables and /// functions that may be referenced within an expression are determined by the /// service that evaluates it. See the service documentation for additional /// information.GHmЀ)[ʂ*`aЃj Wvz҄օ $<_#oӇ#Aj@U͊ SG}Nj4]^wݍ^txÎ_ 'w$%c;gh̲ͳ [ڳCIߴ6CIϵ1>~#/<]d̷ӷ׷ظ%rxԸ:@kqٹߺ0λdIY_ \Ͻ4Ys1m@@@ @W@X@@@@@AA>AEAIAKALA{AAABBB4B:BTBZBBCC$C~CCCD(DyDDDEEgEEEFF(F.F~FFFFG9GnGGGHH"H/HoHHII%I&IlImIIIIIJ)JaJhJlJnJoJJJJJK7K=KKKKKL L<LBLLLLLM/M<MBMMMNN*N7NwNNNNNOO(O5OVO]OOOOOPPPkPqPPPPQQ,Q2QbQhQQQRBRRS%SpSST TT TbThTTTUURUUUUUVV4VAVVVW.WjW{WWWWXXXIXUXbXXXXYY Y Y Y+YTYUYYYZZZ Z0ZYZZZZZ[8[][[\\\Y\t\v\w\\\]!]5]|]]]]]^^^^Z^^^^___=_C_____``/`````a,a2aaaabbLbdb~bbcccc?c@cpc|ccccdd d$d&d'didddde8eLeUeeff)f2f3fpffffg)g\gbgggh'h-hGhMhhhiFiLiiijjLj\jbjjjjkkRkkkllGlalnllm*m;mgmmmmnnn7nCnQndnnnnnnoo7oYo_oooopp7pppppqFqLqqqrr6rrrrss6s=s>susvssssst3tktrtvtwtttu+u1uKuQuuvvavgvwwWw]wwx:x@xxxxyy y\yiyoyyzzMzQzYzszzzz{{L{{{{{|'|(|X|d|q|||}*}1}5}7}8}}}}~~1~2~k~q~~~ ?]#)^dN~29:qrKRVXY(IdeAiOUETZ7=Q^d6>Xp1m5ANov ;de*jk AGagG.4Q2gno4;k ,29`#)t+1!.n,MT 34-SYsy!l|!r V5<lJPjpIO_B'7=:o7Q^K56fr#')*_$>Dhi}Wnt)^_\]QX\^_xDFGi+b56;;den gm Zgm#;UbGS`;deVwHi9?Y_aqw¬²gÜ KĀćĈĿ *1ařŠŤŦŧ9wư,GHLjǎǽ,{ Zjpɥɫ `ʕ,9i˩,-]iẘ̫̲!%&GM͉̓ͣͩbΰ9Wϕϛ9?АНУ)ayѓѠTU҅ґҞҿ6=ACDwӠӡ@FԕԻ2~Մ q~ք :Rly׹-.^jwؘ؟Z`٭ٳ-v|ڧڭl۽ Qܠ4:݅ݕݛ4AGޘ #<Tpߕ߯߼/mT[\Bz)DErxSbg ] Wgm!'x+Gan(]deh4fb&W"+,]}JN1^_$jn P;_ \:[ar 4CRagh k{HXl'm}6Rn{Q"(y]<%Vvw p.y!r:Z`sWc0C>GHy  / < Q          8 v |    # 1 7    `   D  +i>(lRop  ;AEK/MSci-.dj2FXjNuFzRCe3No(ycNhi  C  !!T!!""W""##b#y#$$*$s$%%V%%&3&&''1'2''''(((o((()))?)V)i)}))))**D****+(+l+++++,,B,f,,,,,-----P----.-.}..//V///00%0o00141d11222d2223333l3344I4453556!6[666674797H7I77788i889?9Y9Z999::S:h:i:::;:;;;<2<^<}<~<==*={=>>`>>>>? ?!?7?K?Z?s?????@#@U@|@@@AAQA~AAB/BBBSBbBBCC(CfCoCpCCCDD7DSDDDDE E-ELEaEEEEEEFF[FFGGIGGH/HuHII<IIIIJ7JJJlJK KRKKKKLCLXLlLrLsLLLMMQMZM[MMMNNN!N"NrNNO-OjOOP PPPPQQfQQQQRRTRzR{RRRS9S}S~SSSSSST6TBT}TTTU1UBUPUgUUUV;VLVZVqVzV{VVVWW'WJWcWWWWWWXX^XXXY6Y}YYZ8ZnZZ[-[{[[[\+\p\v\\]]4]5]p]v]]^6^^^_ _ _9_?____` `1`7```aacaab9bSbTbbbbbbbbcAcMc~cccd?ddddee,eVeeeefff4fTfffggg.gaggggggghhchhhi9iWiXiiiij2jJjpjvjwjjjk&kKkkkll]lvlllllm mVmcmmmmmmnnYnnno'oEoFoloooppp7p=p>ppppq/qBq[qqqr r"r+r,r]rrrrs,s3s7s9s:spsstt tKtitjtttuu*uBuHuIuuuv#v6vvvvvvww1w_wwwwwx x?xxxy)ykyzzNzTzdzqzzzz{ {{]{{{{|5|A|B|s||||||}C}V}o}~~&~4~K~~~CXf}_cef$`a@[|3rMVW 6ovz|}?@tz 5;<K[o3rvxy!M   ?Zjy)hD P-Kgd6+1D_`b*z' 23pv'-@ KRf*0fl *CSmstV@F)23d0N 6Mx6nt  KQd~%&w!5F]o0^9_!:_z 8>N)w #89rx4w#_uv+7c=y"6eno *7Pe <^Bz\4]sS_B[Io:(s(5pq1u Hptvw%n3|Œ’)Brsðö/0nĎďOŝŹſ=RSƋƢƣ+<BCLJǓ VfzȢ'7Kuɝ@gʵ7@Ar˜˸>Kñ̿̚2kͻ/GHxΎΏ./πϚ϶Ϸ.CXqwxFxѬ/CwҞLUVӇӹ-UԅԒԽ=fmqstշջ >r֪PVף0uؚ؛rَ٨٩<Fڥ 3FLM۔۠  W܌ܕܖ7Dc݂ݟݦݪݬݭ3ރ n߼ W2Po+1yFR"3AXaegh7-H%tx1jQ $8k 6MUh:O G7\_S34uv Tdx!*+\ \nS>a*xM*lD3x   M S   6   ! p     S Y   A  (u%lm ;A1~ fN/Q#)*Wc*;I`,:Q~9Uw<l67MS'Bij#/n5FTk*X")-/0~   Z k ~    !%!+!x!""""("s"""#8#Z#`####$*$0$$%%j%&& &U&&&&&' ''-'@'F'G'}'''((M(](q((()))Y)))))* *)*M*i******+++ +"+#+l++,,T,,---T-X--.:..//f/////00N00111y122T223:334 414Q;PolicySimulatorApiFoldersResourceFoldersLocationsResource/FoldersLocationsAccessPolicySimulationsResource9FoldersLocationsAccessPolicySimulationsOperationsResource3FoldersLocationsOrgPolicyViolationsPreviewsResource=FoldersLocationsOrgPolicyViolationsPreviewsOperationsResourceFoldersLocationsReplaysResource)FoldersLocationsReplaysOperationsResource&FoldersLocationsReplaysResultsResourceOperationsResourceOrganizationsResourceOrganizationsLocationsResource5OrganizationsLocationsAccessPolicySimulationsResource?OrganizationsLocationsAccessPolicySimulationsOperationsResource9OrganizationsLocationsOrgPolicyViolationsPreviewsResourceCOrganizationsLocationsOrgPolicyViolationsPreviewsOperationsResourceLOrganizationsLocationsOrgPolicyViolationsPreviewsOrgPolicyViolationsResource%OrganizationsLocationsReplaysResource/OrganizationsLocationsReplaysOperationsResource,OrganizationsLocationsReplaysResultsResourceProjectsResourceProjectsLocationsResource0ProjectsLocationsAccessPolicySimulationsResource:ProjectsLocationsAccessPolicySimulationsOperationsResource4ProjectsLocationsOrgPolicyViolationsPreviewsResource>ProjectsLocationsOrgPolicyViolationsPreviewsOperationsResource ProjectsLocationsReplaysResource*ProjectsLocationsReplaysOperationsResource'ProjectsLocationsReplaysResultsResource)GoogleCloudOrgpolicyV2AlternatePolicySpecGoogleCloudOrgpolicyV2Policy GoogleCloudOrgpolicyV2PolicySpec*GoogleCloudOrgpolicyV2PolicySpecPolicyRule+GoogleCloudPolicysimulatorV1AccessStateDiff.GoogleCloudPolicysimulatorV1BindingExplanationAGoogleCloudPolicysimulatorV1BindingExplanationAnnotatedMembership+GoogleCloudPolicysimulatorV1ExplainedAccess+GoogleCloudPolicysimulatorV1ExplainedPolicyCGoogleCloudPolicysimulatorV1ListOrgPolicyViolationsPreviewsResponse;GoogleCloudPolicysimulatorV1ListOrgPolicyViolationsResponse5GoogleCloudPolicysimulatorV1ListReplayResultsResponse,GoogleCloudPolicysimulatorV1OrgPolicyOverlayCGoogleCloudPolicysimulatorV1OrgPolicyOverlayCustomConstraintOverlay9GoogleCloudPolicysimulatorV1OrgPolicyOverlayPolicyOverlay.GoogleCloudPolicysimulatorV1OrgPolicyViolation6GoogleCloudPolicysimulatorV1OrgPolicyViolationsPreviewDGoogleCloudPolicysimulatorV1OrgPolicyViolationsPreviewResourceCounts"GoogleCloudPolicysimulatorV1Replay(GoogleCloudPolicysimulatorV1ReplayConfig&GoogleCloudPolicysimulatorV1ReplayDiff(GoogleCloudPolicysimulatorV1ReplayResult0GoogleCloudPolicysimulatorV1ReplayResultsSummary+GoogleCloudPolicysimulatorV1ResourceContextGoogleIamV1AuditConfigGoogleIamV1BindingGoogleIamV1Policy'GoogleLongrunningListOperationsResponseGoogleLongrunningOperationф