Api-roll 42: 2016-11-08

discovery/googleapis/deploymentmanager__v2.json

 {
     "auth": {
         "oauth2": {
             "scopes": {
                 "https://www.googleapis.com/auth/cloud-platform": {
                     "description": "View and manage your data across Google Cloud Platform services"
                 },
                 "https://www.googleapis.com/auth/cloud-platform.read-only": {
                     "description": "View your data across Google Cloud Platform services"
                 },
                 "https://www.googleapis.com/auth/ndev.cloudman": {
                     "description": "View and manage your Google Cloud Platform management resources and deployment status information"
                 },
                 "https://www.googleapis.com/auth/ndev.cloudman.readonly": {
                     "description": "View your Google Cloud Platform management resources and deployment status information"
                 }
             }
         }
     },
     "basePath": "/deploymentmanager/v2/projects/",
     "baseUrl": "https://www.googleapis.com/deploymentmanager/v2/projects/",
     "batchPath": "batch",
     "canonicalName": "Deployment Manager",
     "description": "Declares, configures, and deploys complex solutions on Google Cloud Platform.",
     "discoveryVersion": "v1",
     "documentationLink": "https://cloud.google.com/deployment-manager/",
-    "etag": "\"C5oy1hgQsABtYOYIOXWcR3BgYqU/VKTGHMTHdbB4izSGLnyJ8sZ0pzw\"",
+    "etag": "\"C5oy1hgQsABtYOYIOXWcR3BgYqU/_DzPZRLHYQ4WaafnjMP1PAVCOok\"",
     "icons": {
         "x16": "http://www.google.com/images/icons/product/search-16.gif",
         "x32": "http://www.google.com/images/icons/product/search-32.gif"
     },
     "id": "deploymentmanager:v2",
     "kind": "discovery#restDescription",
     "name": "deploymentmanager",
     "ownerDomain": "google.com",
     "ownerName": "Google",
     "parameters": {
@@ skipping 142 matching lines @@
                     "response": {
                         "$ref": "Deployment"
                     },
                     "scopes": [
                         "https://www.googleapis.com/auth/cloud-platform",
                         "https://www.googleapis.com/auth/cloud-platform.read-only",
                         "https://www.googleapis.com/auth/ndev.cloudman",
                         "https://www.googleapis.com/auth/ndev.cloudman.readonly"
                     ]
                 },
+                "getIamPolicy": {
+                    "description": "Gets the access control policy for a resource. May be empty if no such policy or resource exists.",
+                    "httpMethod": "GET",
+                    "id": "deploymentmanager.deployments.getIamPolicy",
+                    "parameterOrder": [
+                        "project",
+                        "resource"
+                    ],
+                    "parameters": {
+                        "project": {
+                            "description": "Project ID for this request.",
+                            "location": "path",
+                            "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+                            "required": true,
+                            "type": "string"
+                        },
+                        "resource": {
+                            "description": "Name of the resource for this request.",
+                            "location": "path",
+                            "pattern": "[a-z](?:[-a-z0-9_]{0,61}[a-z0-9])?",
+                            "required": true,
+                            "type": "string"
+                        }
+                    },
+                    "path": "{project}/global/deployments/{resource}/getIamPolicy",
+                    "response": {
+                        "$ref": "Policy"
+                    },
+                    "scopes": [
+                        "https://www.googleapis.com/auth/cloud-platform",
+                        "https://www.googleapis.com/auth/ndev.cloudman"
+                    ]
+                },
                 "insert": {
                     "description": "Creates a deployment and all of the resources described by the deployment manifest.",
                     "httpMethod": "POST",
                     "id": "deploymentmanager.deployments.insert",
                     "parameterOrder": [
                         "project"
                     ],
                     "parameters": {
                         "preview": {
                             "description": "If set to true, creates a deployment and creates \"shell\" resources but does not actually instantiate these resources. This allows you to preview what your deployment looks like. After previewing a deployment, you can deploy your resources by making a request with the update() method or you can use the cancelPreview() method to cancel the preview altogether. Note that the deployment will still exist after you cancel the preview and you must separately delete this deployment if you want to remove it.",
@@ skipping 35 matching lines @@
                         },
                         "maxResults": {
                             "default": "500",
                             "description": "The maximum number of results per page that should be returned. If the number of available results is larger than maxResults, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests.",
                             "format": "uint32",
                             "location": "query",
                             "maximum": "500",
                             "minimum": "0",
                             "type": "integer"
                         },
+                        "orderBy": {
+                            "description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name.\n\nYou can also sort results in descending order based on the creation timestamp using orderBy=\"creationTimestamp desc\". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.\n\nCurrently, only sorting by name or creationTimestamp desc is supported.",
+                            "location": "query",
+                            "type": "string"
+                        },
                         "pageToken": {
                             "description": "Specifies a page token to use. Set pageToken to the nextPageToken returned by a previous list request to get the next page of results.",
                             "location": "query",
                             "type": "string"
                         },
                         "project": {
                             "description": "The project ID for this request.",
                             "location": "path",
                             "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?))",
                             "required": true,
@@ skipping 74 matching lines @@
                         "$ref": "Deployment"
                     },
                     "response": {
                         "$ref": "Operation"
                     },
                     "scopes": [
                         "https://www.googleapis.com/auth/cloud-platform",
                         "https://www.googleapis.com/auth/ndev.cloudman"
                     ]
                 },
+                "setIamPolicy": {
+                    "description": "Sets the access control policy on the specified resource. Replaces any existing policy.",
+                    "httpMethod": "POST",
+                    "id": "deploymentmanager.deployments.setIamPolicy",
+                    "parameterOrder": [
+                        "project",
+                        "resource"
+                    ],
+                    "parameters": {
+                        "project": {
+                            "description": "Project ID for this request.",
+                            "location": "path",
+                            "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+                            "required": true,
+                            "type": "string"
+                        },
+                        "resource": {
+                            "description": "Name of the resource for this request.",
+                            "location": "path",
+                            "pattern": "[a-z](?:[-a-z0-9_]{0,61}[a-z0-9])?",
+                            "required": true,
+                            "type": "string"
+                        }
+                    },
+                    "path": "{project}/global/deployments/{resource}/setIamPolicy",
+                    "request": {
+                        "$ref": "Policy"
+                    },
+                    "response": {
+                        "$ref": "Policy"
+                    },
+                    "scopes": [
+                        "https://www.googleapis.com/auth/cloud-platform",
+                        "https://www.googleapis.com/auth/ndev.cloudman"
+                    ]
+                },
                 "stop": {
                     "description": "Stops an ongoing operation. This does not roll back any work that has already been completed, but prevents any new work from being started.",
                     "httpMethod": "POST",
                     "id": "deploymentmanager.deployments.stop",
                     "parameterOrder": [
                         "project",
                         "deployment"
                     ],
                     "parameters": {
                         "deployment": {
@@ skipping 16 matching lines @@
                         "$ref": "DeploymentsStopRequest"
                     },
                     "response": {
                         "$ref": "Operation"
                     },
                     "scopes": [
                         "https://www.googleapis.com/auth/cloud-platform",
                         "https://www.googleapis.com/auth/ndev.cloudman"
                     ]
                 },
+                "testIamPermissions": {
+                    "description": "Returns permissions that a caller has on the specified resource.",
+                    "httpMethod": "POST",
+                    "id": "deploymentmanager.deployments.testIamPermissions",
+                    "parameterOrder": [
+                        "project",
+                        "resource"
+                    ],
+                    "parameters": {
+                        "project": {
+                            "description": "Project ID for this request.",
+                            "location": "path",
+                            "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+                            "required": true,
+                            "type": "string"
+                        },
+                        "resource": {
+                            "description": "Name of the resource for this request.",
+                            "location": "path",
+                            "pattern": "[a-z](?:[-a-z0-9_]{0,61}[a-z0-9])?",
+                            "required": true,
+                            "type": "string"
+                        }
+                    },
+                    "path": "{project}/global/deployments/{resource}/testIamPermissions",
+                    "request": {
+                        "$ref": "TestPermissionsRequest"
+                    },
+                    "response": {
+                        "$ref": "TestPermissionsResponse"
+                    },
+                    "scopes": [
+                        "https://www.googleapis.com/auth/cloud-platform",
+                        "https://www.googleapis.com/auth/ndev.cloudman"
+                    ]
+                },
                 "update": {
                     "description": "Updates a deployment and all of the resources described by the deployment manifest.",
                     "httpMethod": "PUT",
                     "id": "deploymentmanager.deployments.update",
                     "parameterOrder": [
                         "project",
                         "deployment"
                     ],
                     "parameters": {
                         "createPolicy": {
@@ skipping 127 matching lines @@
                         },
                         "maxResults": {
                             "default": "500",
                             "description": "The maximum number of results per page that should be returned. If the number of available results is larger than maxResults, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests.",
                             "format": "uint32",
                             "location": "query",
                             "maximum": "500",
                             "minimum": "0",
                             "type": "integer"
                         },
+                        "orderBy": {
+                            "description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name.\n\nYou can also sort results in descending order based on the creation timestamp using orderBy=\"creationTimestamp desc\". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.\n\nCurrently, only sorting by name or creationTimestamp desc is supported.",
+                            "location": "query",
+                            "type": "string"
+                        },
                         "pageToken": {
                             "description": "Specifies a page token to use. Set pageToken to the nextPageToken returned by a previous list request to get the next page of results.",
                             "location": "query",
                             "type": "string"
                         },
                         "project": {
                             "description": "The project ID for this request.",
                             "location": "path",
                             "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?))",
                             "required": true,
@@ skipping 64 matching lines @@
                         },
                         "maxResults": {
                             "default": "500",
                             "description": "The maximum number of results per page that should be returned. If the number of available results is larger than maxResults, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests.",
                             "format": "uint32",
                             "location": "query",
                             "maximum": "500",
                             "minimum": "0",
                             "type": "integer"
                         },
+                        "orderBy": {
+                            "description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name.\n\nYou can also sort results in descending order based on the creation timestamp using orderBy=\"creationTimestamp desc\". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.\n\nCurrently, only sorting by name or creationTimestamp desc is supported.",
+                            "location": "query",
+                            "type": "string"
+                        },
                         "pageToken": {
                             "description": "Specifies a page token to use. Set pageToken to the nextPageToken returned by a previous list request to get the next page of results.",
                             "location": "query",
                             "type": "string"
                         },
                         "project": {
                             "description": "The project ID for this request.",
                             "location": "path",
                             "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?))",
                             "required": true,
@@ skipping 80 matching lines @@
                         },
                         "maxResults": {
                             "default": "500",
                             "description": "The maximum number of results per page that should be returned. If the number of available results is larger than maxResults, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests.",
                             "format": "uint32",
                             "location": "query",
                             "maximum": "500",
                             "minimum": "0",
                             "type": "integer"
                         },
+                        "orderBy": {
+                            "description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name.\n\nYou can also sort results in descending order based on the creation timestamp using orderBy=\"creationTimestamp desc\". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.\n\nCurrently, only sorting by name or creationTimestamp desc is supported.",
+                            "location": "query",
+                            "type": "string"
+                        },
                         "pageToken": {
                             "description": "Specifies a page token to use. Set pageToken to the nextPageToken returned by a previous list request to get the next page of results.",
                             "location": "query",
                             "type": "string"
                         },
                         "project": {
                             "description": "The project ID for this request.",
                             "location": "path",
                             "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?))",
                             "required": true,
@@ skipping 30 matching lines @@
                         },
                         "maxResults": {
                             "default": "500",
                             "description": "The maximum number of results per page that should be returned. If the number of available results is larger than maxResults, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests.",
                             "format": "uint32",
                             "location": "query",
                             "maximum": "500",
                             "minimum": "0",
                             "type": "integer"
                         },
+                        "orderBy": {
+                            "description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name.\n\nYou can also sort results in descending order based on the creation timestamp using orderBy=\"creationTimestamp desc\". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.\n\nCurrently, only sorting by name or creationTimestamp desc is supported.",
+                            "location": "query",
+                            "type": "string"
+                        },
                         "pageToken": {
                             "description": "Specifies a page token to use. Set pageToken to the nextPageToken returned by a previous list request to get the next page of results.",
                             "location": "query",
                             "type": "string"
                         },
                         "project": {
                             "description": "The project ID for this request.",
                             "location": "path",
                             "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?))",
                             "required": true,
                             "type": "string"
                         }
                     },
                     "path": "{project}/global/types",
                     "response": {
                         "$ref": "TypesListResponse"
                     },
                     "scopes": [
                         "https://www.googleapis.com/auth/cloud-platform",
                         "https://www.googleapis.com/auth/cloud-platform.read-only",
                         "https://www.googleapis.com/auth/ndev.cloudman",
                         "https://www.googleapis.com/auth/ndev.cloudman.readonly"
                     ]
                 }
             }
         }
     },
-    "revision": "20160819",
+    "revision": "20161013",
     "rootUrl": "https://www.googleapis.com/",
     "schemas": {
+        "AuditConfig": {
+            "description": "Enables \"data access\" audit logging for a service and specifies a list of members that are log-exempted.",
+            "id": "AuditConfig",
+            "properties": {
+                "exemptedMembers": {
+                    "description": "Specifies the identities that are exempted from \"data access\" audit logging for the `service` specified above. Follows the same format of Binding.members.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                },
+                "service": {
+                    "description": "Specifies a service that will be enabled for \"data access\" audit logging. For example, `resourcemanager`, `storage`, `compute`. `allServices` is a special value that covers all services.",
+                    "type": "string"
+                }
+            },
+            "type": "object"
+        },
+        "Binding": {
+            "description": "Associates `members` with a `role`.",
+            "id": "Binding",
+            "properties": {
+                "members": {
+                    "description": "Specifies the identities requesting access for a Cloud Platform resource. `members` can have the following values:\n\n* `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account.\n\n* `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account.\n\n* `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@gmail.com` or `joe@example.com`.\n\n\n\n* `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`.\n\n* `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`.\n\n* `domain:{domain}`: A Google Apps domain name that represents all the users of that domain. For example, `google.com` or `example.com`.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                },
+                "role": {
+                    "description": "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+                    "type": "string"
+                }
+            },
+            "type": "object"
+        },
+        "Condition": {
+            "description": "A condition to be met.",
+            "id": "Condition",
+            "properties": {
+                "iam": {
+                    "description": "Trusted attributes supplied by the IAM system.",
+                    "type": "string"
+                },
+                "op": {
+                    "description": "An operator to apply the subject with.",
+                    "type": "string"
+                },
+                "svc": {
+                    "description": "Trusted attributes discharged by the service.",
+                    "type": "string"
+                },
+                "sys": {
+                    "description": "Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.",
+                    "type": "string"
+                },
+                "value": {
+                    "description": "DEPRECATED. Use 'values' instead.",
+                    "type": "string"
+                },
+                "values": {
+                    "description": "The objects of the condition. This is mutually exclusive with 'value'.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                }
+            },
+            "type": "object"
+        },
         "ConfigFile": {
             "description": "",
             "id": "ConfigFile",
             "properties": {
                 "content": {
                     "description": "The contents of the file.",
                     "type": "string"
                 }
             },
             "type": "object"
@@ skipping 146 matching lines @@
                     "description": "The contents of the file.",
                     "type": "string"
                 },
                 "name": {
                     "description": "The name of the file.",
                     "type": "string"
                 }
             },
             "type": "object"
         },
+        "LogConfig": {
+            "description": "Specifies what kind of log the caller must write",
+            "id": "LogConfig",
+            "properties": {
+                "counter": {
+                    "$ref": "LogConfigCounterOptions",
+                    "description": "Counter options."
+                }
+            },
+            "type": "object"
+        },
+        "LogConfigCounterOptions": {
+            "description": "Options for counters",
+            "id": "LogConfigCounterOptions",
+            "properties": {
+                "field": {
+                    "description": "The field value to attribute.",
+                    "type": "string"
+                },
+                "metric": {
+                    "description": "The metric to update.",
+                    "type": "string"
+                }
+            },
+            "type": "object"
+        },
         "Manifest": {
             "description": "",
             "id": "Manifest",
             "properties": {
                 "config": {
                     "$ref": "ConfigFile",
                     "description": "[Output Only] The YAML configuration for this manifest."
                 },
                 "expandedConfig": {
                     "description": "[Output Only] The fully-expanded configuration file, including any templates and references.",
@@ skipping 150 matching lines @@
                 "statusMessage": {
                     "description": "[Output Only] An optional textual description of the current status of the operation.",
                     "type": "string"
                 },
                 "targetId": {
                     "description": "[Output Only] The unique target ID, which identifies a specific incarnation of the target resource.",
                     "format": "uint64",
                     "type": "string"
                 },
                 "targetLink": {
-                    "description": "[Output Only] The URL of the resource that the operation modifies. If creating a persistent disk snapshot, this points to the persistent disk that the snapshot was created from.",
+                    "description": "[Output Only] The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk that the snapshot was created from.",
                     "type": "string"
                 },
                 "user": {
                     "description": "[Output Only] User who requested the operation, for example: user@example.com.",
                     "type": "string"
                 },
                 "warnings": {
                     "description": "[Output Only] If warning messages are generated during processing of the operation, this field will be populated.",
                     "items": {
                         "properties": {
@@ skipping 45 matching lines @@
                 "operations": {
                     "description": "[Output Only] Operations contained in this list response.",
                     "items": {
                         "$ref": "Operation"
                     },
                     "type": "array"
                 }
             },
             "type": "object"
         },
+        "Policy": {
+            "description": "Defines an Identity and Access Management (IAM) policy. It is used to specify access control policies for Cloud Platform resources.\n\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of `members` to a `role`, where the members can be user accounts, Google groups, Google domains, and service accounts. A `role` is a named list of permissions defined by IAM.\n\n**Example**\n\n{ \"bindings\": [ { \"role\": \"roles/owner\", \"members\": [ \"user:mike@example.com\", \"group:admins@example.com\", \"domain:google.com\", \"serviceAccount:my-other-app@appspot.gserviceaccount.com\", ] }, { \"role\": \"roles/viewer\", \"members\": [\"user:sean@example.com\"] } ] }\n\nFor a description of IAM and its features, see the [IAM developer's guide](https://cloud.google.com/iam).",
+            "id": "Policy",
+            "properties": {
+                "auditConfigs": {
+                    "description": "Specifies audit logging configs for \"data access\". \"data access\": generally refers to data reads/writes and admin reads. \"admin activity\": generally refers to admin writes.\n\nNote: `AuditConfig` doesn't apply to \"admin activity\", which always enables audit logging.",
+                    "items": {
+                        "$ref": "AuditConfig"
+                    },
+                    "type": "array"
+                },
+                "bindings": {
+                    "description": "Associates a list of `members` to a `role`. Multiple `bindings` must not be specified for the same `role`. `bindings` with no members will result in an error.",
+                    "items": {
+                        "$ref": "Binding"
+                    },
+                    "type": "array"
+                },
+                "etag": {
+                    "description": "`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy.\n\nIf no `etag` is provided in the call to `setIamPolicy`, then the existing policy is overwritten blindly.",
+                    "format": "byte",
+                    "type": "string"
+                },
+                "iamOwned": {
+                    "description": "",
+                    "type": "boolean"
+                },
+                "rules": {
+                    "description": "If more than one rule is specified, the rules are applied in the following manner: - All matching LOG rules are always applied. - If any DENY/DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if one or more matching rule requires logging. - Otherwise, if any ALLOW/ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if one or more matching rule requires logging. - Otherwise, if no rule applies, permission is denied.",
+                    "items": {
+                        "$ref": "Rule"
+                    },
+                    "type": "array"
+                },
+                "version": {
+                    "description": "Version of the `Policy`. The default version is 0.",
+                    "format": "int32",
+                    "type": "integer"
+                }
+            },
+            "type": "object"
+        },
         "Resource": {
             "description": "",
             "id": "Resource",
             "properties": {
+                "accessControl": {
+                    "$ref": "ResourceAccessControl",
+                    "description": "The Access Control Policy set on this resource."
+                },
                 "finalProperties": {
                     "description": "[Output Only] The evaluated properties of the resource with references expanded. Returned as serialized YAML.",
                     "type": "string"
                 },
                 "id": {
                     "description": "[Output Only] Unique identifier for the resource; defined by the server.",
                     "format": "uint64",
                     "type": "string"
                 },
                 "insertTime": {
@@ skipping 58 matching lines @@
                                 "type": "string"
                             }
                         },
                         "type": "object"
                     },
                     "type": "array"
                 }
             },
             "type": "object"
         },
+        "ResourceAccessControl": {
+            "description": "The access controls set on the resource.",
+            "id": "ResourceAccessControl",
+            "properties": {
+                "gcpIamPolicy": {
+                    "description": "The GCP IAM Policy to set on the resource.",
+                    "type": "string"
+                }
+            },
+            "type": "object"
+        },
         "ResourceUpdate": {
             "description": "",
             "id": "ResourceUpdate",
             "properties": {
+                "accessControl": {
+                    "$ref": "ResourceAccessControl",
+                    "description": "The Access Control Policy to set on this resource after updating the resource itself."
+                },
                 "error": {
                     "description": "[Output Only] If errors are generated during update of the resource, this field will be populated.",
                     "properties": {
                         "errors": {
                             "description": "[Output Only] The array of errors encountered while processing this operation.",
                             "items": {
                                 "properties": {
                                     "code": {
                                         "description": "[Output Only] The error type identifier for this error.",
                                         "type": "string"
@@ skipping 82 matching lines @@
                 "resources": {
                     "description": "Resources contained in this list response.",
                     "items": {
                         "$ref": "Resource"
                     },
                     "type": "array"
                 }
             },
             "type": "object"
         },
+        "Rule": {
+            "description": "A rule to be applied in a Policy.",
+            "id": "Rule",
+            "properties": {
+                "action": {
+                    "description": "Required",
+                    "type": "string"
+                },
+                "conditions": {
+                    "description": "Additional restrictions that must be met",
+                    "items": {
+                        "$ref": "Condition"
+                    },
+                    "type": "array"
+                },
+                "description": {
+                    "description": "Human-readable description of the rule.",
+                    "type": "string"
+                },
+                "ins": {
+                    "description": "If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in at least one of these entries.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                },
+                "logConfigs": {
+                    "description": "The config returned to callers of tech.iam.IAM.CheckPolicy for any entries that match the LOG action.",
+                    "items": {
+                        "$ref": "LogConfig"
+                    },
+                    "type": "array"
+                },
+                "notIns": {
+                    "description": "If one or more 'not_in' clauses are specified, the rule matches if the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                },
+                "permissions": {
+                    "description": "A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value of '*' matches all permissions, and a verb part of '*' (e.g., 'storage.buckets.*') matches all verbs.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                }
+            },
+            "type": "object"
+        },
         "TargetConfiguration": {
             "description": "",
             "id": "TargetConfiguration",
             "properties": {
                 "config": {
                     "$ref": "ConfigFile",
                     "description": "The configuration to use for this deployment."
                 },
                 "imports": {
                     "description": "Specifies any files to import for this configuration. This can be used to import templates or other files. For example, you might import a text file in order to use the file in a template.",
                     "items": {
                         "$ref": "ImportFile"
                     },
                     "type": "array"
                 }
             },
             "type": "object"
         },
+        "TestPermissionsRequest": {
+            "id": "TestPermissionsRequest",
+            "properties": {
+                "permissions": {
+                    "description": "The set of permissions to check for the 'resource'. Permissions with wildcards (such as '*' or 'storage.*') are not allowed.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                }
+            },
+            "type": "object"
+        },
+        "TestPermissionsResponse": {
+            "id": "TestPermissionsResponse",
+            "properties": {
+                "permissions": {
+                    "description": "A subset of `TestPermissionsRequest.permissions` that the caller is allowed.",
+                    "items": {
+                        "type": "string"
+                    },
+                    "type": "array"
+                }
+            },
+            "type": "object"
+        },
         "Type": {
             "description": "A resource type supported by Deployment Manager.",
             "id": "Type",
             "properties": {
                 "id": {
                     "description": "[Output Only] Unique identifier for the resource; defined by the server.",
                     "format": "uint64",
                     "type": "string"
                 },
                 "insertTime": {
@@ skipping 31 matching lines @@
                     "type": "array"
                 }
             },
             "type": "object"
         }
     },
     "servicePath": "deploymentmanager/v2/projects/",
     "title": "Google Cloud Deployment Manager API",
     "version": "v2"
 }