OLD | NEW |
1 { | 1 { |
2 "auth": { | 2 "auth": { |
3 "oauth2": { | 3 "oauth2": { |
4 "scopes": { | 4 "scopes": { |
5 "https://www.googleapis.com/auth/cloud-platform": { | 5 "https://www.googleapis.com/auth/cloud-platform": { |
6 "description": "View and manage your data across Google Clou
d Platform services" | 6 "description": "View and manage your data across Google Clou
d Platform services" |
7 } | 7 } |
8 } | 8 } |
9 } | 9 } |
10 }, | 10 }, |
11 "basePath": "", | 11 "basePath": "", |
12 "baseUrl": "https://cloudkms.googleapis.com/", | 12 "baseUrl": "https://cloudkms.googleapis.com/", |
13 "batchPath": "batch", | 13 "batchPath": "batch", |
14 "canonicalName": "Cloud KMS", | 14 "canonicalName": "Cloud KMS", |
15 "description": "", | 15 "description": "Manages encryption for your cloud services the same way you
do on-premise. You can generate, use, rotate, and destroy AES256 encryption keys
.", |
16 "discoveryVersion": "v1", | 16 "discoveryVersion": "v1", |
17 "documentationLink": "https://cloud.google.com/kms/", | 17 "documentationLink": "https://cloud.google.com/kms/", |
18 "icons": { | 18 "icons": { |
19 "x16": "http://www.google.com/images/icons/product/search-16.gif", | 19 "x16": "http://www.google.com/images/icons/product/search-16.gif", |
20 "x32": "http://www.google.com/images/icons/product/search-32.gif" | 20 "x32": "http://www.google.com/images/icons/product/search-32.gif" |
21 }, | 21 }, |
22 "id": "cloudkms:v1beta1", | 22 "id": "cloudkms:v1beta1", |
23 "kind": "discovery#restDescription", | 23 "kind": "discovery#restDescription", |
24 "name": "cloudkms", | 24 "name": "cloudkms", |
25 "ownerDomain": "google.com", | 25 "ownerDomain": "google.com", |
26 "ownerName": "Google", | 26 "ownerName": "Google", |
27 "parameters": { | 27 "parameters": { |
28 "key": { | 28 "fields": { |
29 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", | 29 "description": "Selector specifying which fields to include in a par
tial response.", |
30 "location": "query", | 30 "location": "query", |
31 "type": "string" | 31 "type": "string" |
32 }, | 32 }, |
33 "access_token": { | |
34 "description": "OAuth access token.", | |
35 "location": "query", | |
36 "type": "string" | |
37 }, | |
38 "quotaUser": { | |
39 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", | |
40 "location": "query", | |
41 "type": "string" | |
42 }, | |
43 "pp": { | |
44 "default": "true", | |
45 "description": "Pretty-print response.", | |
46 "location": "query", | |
47 "type": "boolean" | |
48 }, | |
49 "oauth_token": { | |
50 "description": "OAuth 2.0 token for the current user.", | |
51 "location": "query", | |
52 "type": "string" | |
53 }, | |
54 "bearer_token": { | |
55 "description": "OAuth bearer token.", | |
56 "location": "query", | |
57 "type": "string" | |
58 }, | |
59 "upload_protocol": { | |
60 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", | |
61 "location": "query", | |
62 "type": "string" | |
63 }, | |
64 "prettyPrint": { | |
65 "default": "true", | |
66 "description": "Returns response with indentations and line breaks."
, | |
67 "location": "query", | |
68 "type": "boolean" | |
69 }, | |
70 "uploadType": { | 33 "uploadType": { |
71 "description": "Legacy upload protocol for media (e.g. \"media\", \"
multipart\").", | 34 "description": "Legacy upload protocol for media (e.g. \"media\", \"
multipart\").", |
72 "location": "query", | 35 "location": "query", |
73 "type": "string" | 36 "type": "string" |
74 }, | 37 }, |
75 "fields": { | 38 "callback": { |
76 "description": "Selector specifying which fields to include in a par
tial response.", | 39 "description": "JSONP", |
77 "location": "query", | 40 "location": "query", |
78 "type": "string" | 41 "type": "string" |
79 }, | 42 }, |
80 "$.xgafv": { | 43 "$.xgafv": { |
81 "description": "V1 error format.", | 44 "description": "V1 error format.", |
82 "enum": [ | 45 "enum": [ |
83 "1", | 46 "1", |
84 "2" | 47 "2" |
85 ], | 48 ], |
86 "enumDescriptions": [ | 49 "enumDescriptions": [ |
87 "v1 error format", | 50 "v1 error format", |
88 "v2 error format" | 51 "v2 error format" |
89 ], | 52 ], |
90 "location": "query", | 53 "location": "query", |
91 "type": "string" | 54 "type": "string" |
92 }, | 55 }, |
93 "callback": { | |
94 "description": "JSONP", | |
95 "location": "query", | |
96 "type": "string" | |
97 }, | |
98 "alt": { | 56 "alt": { |
99 "default": "json", | 57 "default": "json", |
100 "description": "Data format for response.", | 58 "description": "Data format for response.", |
101 "enum": [ | 59 "enum": [ |
102 "json", | 60 "json", |
103 "media", | 61 "media", |
104 "proto" | 62 "proto" |
105 ], | 63 ], |
106 "enumDescriptions": [ | 64 "enumDescriptions": [ |
107 "Responses with Content-Type of application/json", | 65 "Responses with Content-Type of application/json", |
108 "Media download with context-dependent Content-Type", | 66 "Media download with context-dependent Content-Type", |
109 "Responses with Content-Type of application/x-protobuf" | 67 "Responses with Content-Type of application/x-protobuf" |
110 ], | 68 ], |
111 "location": "query", | 69 "location": "query", |
112 "type": "string" | 70 "type": "string" |
| 71 }, |
| 72 "access_token": { |
| 73 "description": "OAuth access token.", |
| 74 "location": "query", |
| 75 "type": "string" |
| 76 }, |
| 77 "key": { |
| 78 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", |
| 79 "location": "query", |
| 80 "type": "string" |
| 81 }, |
| 82 "quotaUser": { |
| 83 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", |
| 84 "location": "query", |
| 85 "type": "string" |
| 86 }, |
| 87 "pp": { |
| 88 "default": "true", |
| 89 "description": "Pretty-print response.", |
| 90 "location": "query", |
| 91 "type": "boolean" |
| 92 }, |
| 93 "bearer_token": { |
| 94 "description": "OAuth bearer token.", |
| 95 "location": "query", |
| 96 "type": "string" |
| 97 }, |
| 98 "oauth_token": { |
| 99 "description": "OAuth 2.0 token for the current user.", |
| 100 "location": "query", |
| 101 "type": "string" |
| 102 }, |
| 103 "upload_protocol": { |
| 104 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", |
| 105 "location": "query", |
| 106 "type": "string" |
| 107 }, |
| 108 "prettyPrint": { |
| 109 "default": "true", |
| 110 "description": "Returns response with indentations and line breaks."
, |
| 111 "location": "query", |
| 112 "type": "boolean" |
113 } | 113 } |
114 }, | 114 }, |
115 "protocol": "rest", | 115 "protocol": "rest", |
116 "resources": { | 116 "resources": { |
117 "projects": { | 117 "projects": { |
118 "resources": { | 118 "resources": { |
119 "locations": { | 119 "locations": { |
120 "methods": { | 120 "methods": { |
121 "list": { | 121 "list": { |
122 "description": "Lists information about the supporte
d locations for this service.", | 122 "description": "Lists information about the supporte
d locations for this service.", |
123 "httpMethod": "GET", | 123 "httpMethod": "GET", |
124 "id": "cloudkms.projects.locations.list", | 124 "id": "cloudkms.projects.locations.list", |
125 "parameterOrder": [ | 125 "parameterOrder": [ |
126 "name" | 126 "name" |
127 ], | 127 ], |
128 "parameters": { | 128 "parameters": { |
129 "pageSize": { | |
130 "description": "The standard list page size.
", | |
131 "format": "int32", | |
132 "location": "query", | |
133 "type": "integer" | |
134 }, | |
135 "filter": { | 129 "filter": { |
136 "description": "The standard list filter.", | 130 "description": "The standard list filter.", |
137 "location": "query", | 131 "location": "query", |
138 "type": "string" | 132 "type": "string" |
139 }, | 133 }, |
140 "name": { | 134 "name": { |
141 "description": "The resource that owns the l
ocations collection, if applicable.", | 135 "description": "The resource that owns the l
ocations collection, if applicable.", |
142 "location": "path", | 136 "location": "path", |
143 "pattern": "^projects/[^/]+$", | 137 "pattern": "^projects/[^/]+$", |
144 "required": true, | 138 "required": true, |
145 "type": "string" | 139 "type": "string" |
146 }, | 140 }, |
147 "pageToken": { | 141 "pageToken": { |
148 "description": "The standard list page token
.", | 142 "description": "The standard list page token
.", |
149 "location": "query", | 143 "location": "query", |
150 "type": "string" | 144 "type": "string" |
| 145 }, |
| 146 "pageSize": { |
| 147 "description": "The standard list page size.
", |
| 148 "format": "int32", |
| 149 "location": "query", |
| 150 "type": "integer" |
151 } | 151 } |
152 }, | 152 }, |
153 "path": "v1beta1/{+name}/locations", | 153 "path": "v1beta1/{+name}/locations", |
154 "response": { | 154 "response": { |
155 "$ref": "ListLocationsResponse" | 155 "$ref": "ListLocationsResponse" |
156 }, | 156 }, |
157 "scopes": [ | 157 "scopes": [ |
158 "https://www.googleapis.com/auth/cloud-platform" | 158 "https://www.googleapis.com/auth/cloud-platform" |
159 ] | 159 ] |
160 }, | 160 }, |
(...skipping 18 matching lines...) Expand all Loading... |
179 "$ref": "Location" | 179 "$ref": "Location" |
180 }, | 180 }, |
181 "scopes": [ | 181 "scopes": [ |
182 "https://www.googleapis.com/auth/cloud-platform" | 182 "https://www.googleapis.com/auth/cloud-platform" |
183 ] | 183 ] |
184 } | 184 } |
185 }, | 185 }, |
186 "resources": { | 186 "resources": { |
187 "keyRings": { | 187 "keyRings": { |
188 "methods": { | 188 "methods": { |
189 "testIamPermissions": { | |
190 "description": "Returns permissions that a c
aller has on the specified resource.\nIf the resource does not exist, this will
return an empty set of\npermissions, not a NOT_FOUND error.", | |
191 "httpMethod": "POST", | |
192 "id": "cloudkms.projects.locations.keyRings.
testIamPermissions", | |
193 "parameterOrder": [ | |
194 "resource" | |
195 ], | |
196 "parameters": { | |
197 "resource": { | |
198 "description": "REQUIRED: The resour
ce for which the policy detail is being requested.\n`resource` is usually specif
ied as a path. For example, a Project\nresource is specified as `projects/{proje
ct}`.", | |
199 "location": "path", | |
200 "pattern": "^projects/[^/]+/location
s/[^/]+/keyRings/[^/]+$", | |
201 "required": true, | |
202 "type": "string" | |
203 } | |
204 }, | |
205 "path": "v1beta1/{+resource}:testIamPermissi
ons", | |
206 "request": { | |
207 "$ref": "TestIamPermissionsRequest" | |
208 }, | |
209 "response": { | |
210 "$ref": "TestIamPermissionsResponse" | |
211 }, | |
212 "scopes": [ | |
213 "https://www.googleapis.com/auth/cloud-p
latform" | |
214 ] | |
215 }, | |
216 "list": { | 189 "list": { |
217 "description": "Lists KeyRings.", | 190 "description": "Lists KeyRings.", |
218 "httpMethod": "GET", | 191 "httpMethod": "GET", |
219 "id": "cloudkms.projects.locations.keyRings.
list", | 192 "id": "cloudkms.projects.locations.keyRings.
list", |
220 "parameterOrder": [ | 193 "parameterOrder": [ |
221 "parent" | 194 "parent" |
222 ], | 195 ], |
223 "parameters": { | 196 "parameters": { |
| 197 "parent": { |
| 198 "description": "Required. The resour
ce name of the location associated with the\nKeyRings, in the format `projects/*
/locations/*`.", |
| 199 "location": "path", |
| 200 "pattern": "^projects/[^/]+/location
s/[^/]+$", |
| 201 "required": true, |
| 202 "type": "string" |
| 203 }, |
224 "pageToken": { | 204 "pageToken": { |
225 "description": "Optional pagination
token, returned earlier via\nListKeyRingsResponse.next_page_token.", | 205 "description": "Optional pagination
token, returned earlier via\nListKeyRingsResponse.next_page_token.", |
226 "location": "query", | 206 "location": "query", |
227 "type": "string" | 207 "type": "string" |
228 }, | 208 }, |
229 "pageSize": { | 209 "pageSize": { |
230 "description": "Optional limit on th
e number of KeyRings to include in the\nresponse. Further KeyRings can subseque
ntly be obtained by\nincluding the ListKeyRingsResponse.next_page_token in a sub
sequent\nrequest. If unspecified, the server will pick an appropriate default."
, | 210 "description": "Optional limit on th
e number of KeyRings to include in the\nresponse. Further KeyRings can subseque
ntly be obtained by\nincluding the ListKeyRingsResponse.next_page_token in a sub
sequent\nrequest. If unspecified, the server will pick an appropriate default."
, |
231 "format": "int32", | 211 "format": "int32", |
232 "location": "query", | 212 "location": "query", |
233 "type": "integer" | 213 "type": "integer" |
234 }, | |
235 "parent": { | |
236 "description": "Required. The resour
ce name of the location associated with the\nKeyRings, in the format `projects/*
/locations/*`.", | |
237 "location": "path", | |
238 "pattern": "^projects/[^/]+/location
s/[^/]+$", | |
239 "required": true, | |
240 "type": "string" | |
241 } | 214 } |
242 }, | 215 }, |
243 "path": "v1beta1/{+parent}/keyRings", | 216 "path": "v1beta1/{+parent}/keyRings", |
244 "response": { | 217 "response": { |
245 "$ref": "ListKeyRingsResponse" | 218 "$ref": "ListKeyRingsResponse" |
246 }, | 219 }, |
247 "scopes": [ | 220 "scopes": [ |
248 "https://www.googleapis.com/auth/cloud-p
latform" | 221 "https://www.googleapis.com/auth/cloud-p
latform" |
249 ] | 222 ] |
250 }, | 223 }, |
(...skipping 96 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
347 "type": "string" | 320 "type": "string" |
348 } | 321 } |
349 }, | 322 }, |
350 "path": "v1beta1/{+name}", | 323 "path": "v1beta1/{+name}", |
351 "response": { | 324 "response": { |
352 "$ref": "KeyRing" | 325 "$ref": "KeyRing" |
353 }, | 326 }, |
354 "scopes": [ | 327 "scopes": [ |
355 "https://www.googleapis.com/auth/cloud-p
latform" | 328 "https://www.googleapis.com/auth/cloud-p
latform" |
356 ] | 329 ] |
| 330 }, |
| 331 "testIamPermissions": { |
| 332 "description": "Returns permissions that a c
aller has on the specified resource.\nIf the resource does not exist, this will
return an empty set of\npermissions, not a NOT_FOUND error.", |
| 333 "httpMethod": "POST", |
| 334 "id": "cloudkms.projects.locations.keyRings.
testIamPermissions", |
| 335 "parameterOrder": [ |
| 336 "resource" |
| 337 ], |
| 338 "parameters": { |
| 339 "resource": { |
| 340 "description": "REQUIRED: The resour
ce for which the policy detail is being requested.\n`resource` is usually specif
ied as a path. For example, a Project\nresource is specified as `projects/{proje
ct}`.", |
| 341 "location": "path", |
| 342 "pattern": "^projects/[^/]+/location
s/[^/]+/keyRings/[^/]+$", |
| 343 "required": true, |
| 344 "type": "string" |
| 345 } |
| 346 }, |
| 347 "path": "v1beta1/{+resource}:testIamPermissi
ons", |
| 348 "request": { |
| 349 "$ref": "TestIamPermissionsRequest" |
| 350 }, |
| 351 "response": { |
| 352 "$ref": "TestIamPermissionsResponse" |
| 353 }, |
| 354 "scopes": [ |
| 355 "https://www.googleapis.com/auth/cloud-p
latform" |
| 356 ] |
357 } | 357 } |
358 }, | 358 }, |
359 "resources": { | 359 "resources": { |
360 "cryptoKeys": { | 360 "cryptoKeys": { |
361 "methods": { | 361 "methods": { |
| 362 "patch": { |
| 363 "description": "Update a CryptoKey."
, |
| 364 "httpMethod": "PATCH", |
| 365 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.patch", |
| 366 "parameterOrder": [ |
| 367 "name" |
| 368 ], |
| 369 "parameters": { |
| 370 "updateMask": { |
| 371 "description": "Required lis
t of fields to be updated in this request.", |
| 372 "format": "google-fieldmask"
, |
| 373 "location": "query", |
| 374 "type": "string" |
| 375 }, |
| 376 "name": { |
| 377 "description": "Output only.
The resource name for this CryptoKey in the format\n`projects/*/locations/*/key
Rings/*/cryptoKeys/*`.", |
| 378 "location": "path", |
| 379 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", |
| 380 "required": true, |
| 381 "type": "string" |
| 382 } |
| 383 }, |
| 384 "path": "v1beta1/{+name}", |
| 385 "request": { |
| 386 "$ref": "CryptoKey" |
| 387 }, |
| 388 "response": { |
| 389 "$ref": "CryptoKey" |
| 390 }, |
| 391 "scopes": [ |
| 392 "https://www.googleapis.com/auth
/cloud-platform" |
| 393 ] |
| 394 }, |
| 395 "get": { |
| 396 "description": "Returns metadata for
a given CryptoKey, as well as its\nprimary CryptoKeyVersion.", |
| 397 "httpMethod": "GET", |
| 398 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.get", |
| 399 "parameterOrder": [ |
| 400 "name" |
| 401 ], |
| 402 "parameters": { |
| 403 "name": { |
| 404 "description": "The name of
the CryptoKey to get.", |
| 405 "location": "path", |
| 406 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", |
| 407 "required": true, |
| 408 "type": "string" |
| 409 } |
| 410 }, |
| 411 "path": "v1beta1/{+name}", |
| 412 "response": { |
| 413 "$ref": "CryptoKey" |
| 414 }, |
| 415 "scopes": [ |
| 416 "https://www.googleapis.com/auth
/cloud-platform" |
| 417 ] |
| 418 }, |
362 "testIamPermissions": { | 419 "testIamPermissions": { |
363 "description": "Returns permissions
that a caller has on the specified resource.\nIf the resource does not exist, th
is will return an empty set of\npermissions, not a NOT_FOUND error.", | 420 "description": "Returns permissions
that a caller has on the specified resource.\nIf the resource does not exist, th
is will return an empty set of\npermissions, not a NOT_FOUND error.", |
364 "httpMethod": "POST", | 421 "httpMethod": "POST", |
365 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.testIamPermissions", | 422 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.testIamPermissions", |
366 "parameterOrder": [ | 423 "parameterOrder": [ |
367 "resource" | 424 "resource" |
368 ], | 425 ], |
369 "parameters": { | 426 "parameters": { |
370 "resource": { | 427 "resource": { |
371 "description": "REQUIRED: Th
e resource for which the policy detail is being requested.\n`resource` is usuall
y specified as a path. For example, a Project\nresource is specified as `project
s/{project}`.", | 428 "description": "REQUIRED: Th
e resource for which the policy detail is being requested.\n`resource` is usuall
y specified as a path. For example, a Project\nresource is specified as `project
s/{project}`.", |
(...skipping 42 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
414 ] | 471 ] |
415 }, | 472 }, |
416 "list": { | 473 "list": { |
417 "description": "Lists CryptoKeys.", | 474 "description": "Lists CryptoKeys.", |
418 "httpMethod": "GET", | 475 "httpMethod": "GET", |
419 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.list", | 476 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.list", |
420 "parameterOrder": [ | 477 "parameterOrder": [ |
421 "parent" | 478 "parent" |
422 ], | 479 ], |
423 "parameters": { | 480 "parameters": { |
| 481 "pageToken": { |
| 482 "description": "Optional pag
ination token, returned earlier via\nListCryptoKeysResponse.next_page_token.", |
| 483 "location": "query", |
| 484 "type": "string" |
| 485 }, |
424 "pageSize": { | 486 "pageSize": { |
425 "description": "Optional lim
it on the number of CryptoKeys to include in the\nresponse. Further CryptoKeys
can subsequently be obtained by\nincluding the ListCryptoKeysResponse.next_page_
token in a subsequent\nrequest. If unspecified, the server will pick an appropr
iate default.", | 487 "description": "Optional lim
it on the number of CryptoKeys to include in the\nresponse. Further CryptoKeys
can subsequently be obtained by\nincluding the ListCryptoKeysResponse.next_page_
token in a subsequent\nrequest. If unspecified, the server will pick an appropr
iate default.", |
426 "format": "int32", | 488 "format": "int32", |
427 "location": "query", | 489 "location": "query", |
428 "type": "integer" | 490 "type": "integer" |
429 }, | 491 }, |
430 "parent": { | 492 "parent": { |
431 "description": "Required. Th
e resource name of the KeyRing to list, in the format\n`projects/*/locations/*/k
eyRings/*`.", | 493 "description": "Required. Th
e resource name of the KeyRing to list, in the format\n`projects/*/locations/*/k
eyRings/*`.", |
432 "location": "path", | 494 "location": "path", |
433 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+$", | 495 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+$", |
434 "required": true, | 496 "required": true, |
435 "type": "string" | 497 "type": "string" |
436 }, | |
437 "pageToken": { | |
438 "description": "Optional pag
ination token, returned earlier via\nListCryptoKeysResponse.next_page_token.", | |
439 "location": "query", | |
440 "type": "string" | |
441 } | 498 } |
442 }, | 499 }, |
443 "path": "v1beta1/{+parent}/cryptoKey
s", | 500 "path": "v1beta1/{+parent}/cryptoKey
s", |
444 "response": { | 501 "response": { |
445 "$ref": "ListCryptoKeysResponse" | 502 "$ref": "ListCryptoKeysResponse" |
446 }, | 503 }, |
447 "scopes": [ | 504 "scopes": [ |
448 "https://www.googleapis.com/auth
/cloud-platform" | 505 "https://www.googleapis.com/auth
/cloud-platform" |
449 ] | 506 ] |
450 }, | 507 }, |
(...skipping 17 matching lines...) Expand all Loading... |
468 "request": { | 525 "request": { |
469 "$ref": "EncryptRequest" | 526 "$ref": "EncryptRequest" |
470 }, | 527 }, |
471 "response": { | 528 "response": { |
472 "$ref": "EncryptResponse" | 529 "$ref": "EncryptResponse" |
473 }, | 530 }, |
474 "scopes": [ | 531 "scopes": [ |
475 "https://www.googleapis.com/auth
/cloud-platform" | 532 "https://www.googleapis.com/auth
/cloud-platform" |
476 ] | 533 ] |
477 }, | 534 }, |
478 "setIamPolicy": { | |
479 "description": "Sets the access cont
rol policy on the specified resource. Replaces any\nexisting policy.", | |
480 "httpMethod": "POST", | |
481 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.setIamPolicy", | |
482 "parameterOrder": [ | |
483 "resource" | |
484 ], | |
485 "parameters": { | |
486 "resource": { | |
487 "description": "REQUIRED: Th
e resource for which the policy is being specified.\n`resource` is usually speci
fied as a path. For example, a Project\nresource is specified as `projects/{proj
ect}`.", | |
488 "location": "path", | |
489 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", | |
490 "required": true, | |
491 "type": "string" | |
492 } | |
493 }, | |
494 "path": "v1beta1/{+resource}:setIamP
olicy", | |
495 "request": { | |
496 "$ref": "SetIamPolicyRequest" | |
497 }, | |
498 "response": { | |
499 "$ref": "Policy" | |
500 }, | |
501 "scopes": [ | |
502 "https://www.googleapis.com/auth
/cloud-platform" | |
503 ] | |
504 }, | |
505 "create": { | 535 "create": { |
506 "description": "Create a new CryptoK
ey within a KeyRing.\n\nCryptoKey.purpose is required.", | 536 "description": "Create a new CryptoK
ey within a KeyRing.\n\nCryptoKey.purpose is required.", |
507 "httpMethod": "POST", | 537 "httpMethod": "POST", |
508 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.create", | 538 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.create", |
509 "parameterOrder": [ | 539 "parameterOrder": [ |
510 "parent" | 540 "parent" |
511 ], | 541 ], |
512 "parameters": { | 542 "parameters": { |
513 "parent": { | 543 "parent": { |
514 "description": "Required. Th
e name of the KeyRing associated with the\nCryptoKeys.", | 544 "description": "Required. Th
e name of the KeyRing associated with the\nCryptoKeys.", |
(...skipping 10 matching lines...) Expand all Loading... |
525 }, | 555 }, |
526 "path": "v1beta1/{+parent}/cryptoKey
s", | 556 "path": "v1beta1/{+parent}/cryptoKey
s", |
527 "request": { | 557 "request": { |
528 "$ref": "CryptoKey" | 558 "$ref": "CryptoKey" |
529 }, | 559 }, |
530 "response": { | 560 "response": { |
531 "$ref": "CryptoKey" | 561 "$ref": "CryptoKey" |
532 }, | 562 }, |
533 "scopes": [ | 563 "scopes": [ |
534 "https://www.googleapis.com/auth
/cloud-platform" | 564 "https://www.googleapis.com/auth
/cloud-platform" |
| 565 ] |
| 566 }, |
| 567 "setIamPolicy": { |
| 568 "description": "Sets the access cont
rol policy on the specified resource. Replaces any\nexisting policy.", |
| 569 "httpMethod": "POST", |
| 570 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.setIamPolicy", |
| 571 "parameterOrder": [ |
| 572 "resource" |
| 573 ], |
| 574 "parameters": { |
| 575 "resource": { |
| 576 "description": "REQUIRED: Th
e resource for which the policy is being specified.\n`resource` is usually speci
fied as a path. For example, a Project\nresource is specified as `projects/{proj
ect}`.", |
| 577 "location": "path", |
| 578 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", |
| 579 "required": true, |
| 580 "type": "string" |
| 581 } |
| 582 }, |
| 583 "path": "v1beta1/{+resource}:setIamP
olicy", |
| 584 "request": { |
| 585 "$ref": "SetIamPolicyRequest" |
| 586 }, |
| 587 "response": { |
| 588 "$ref": "Policy" |
| 589 }, |
| 590 "scopes": [ |
| 591 "https://www.googleapis.com/auth
/cloud-platform" |
535 ] | 592 ] |
536 }, | 593 }, |
537 "updatePrimaryVersion": { | 594 "updatePrimaryVersion": { |
538 "description": "Update the version o
f a CryptoKey that will be used in Encrypt", | 595 "description": "Update the version o
f a CryptoKey that will be used in Encrypt", |
539 "httpMethod": "POST", | 596 "httpMethod": "POST", |
540 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.updatePrimaryVersion", | 597 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.updatePrimaryVersion", |
541 "parameterOrder": [ | 598 "parameterOrder": [ |
542 "name" | 599 "name" |
543 ], | 600 ], |
544 "parameters": { | 601 "parameters": { |
(...skipping 32 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
577 "type": "string" | 634 "type": "string" |
578 } | 635 } |
579 }, | 636 }, |
580 "path": "v1beta1/{+resource}:getIamP
olicy", | 637 "path": "v1beta1/{+resource}:getIamP
olicy", |
581 "response": { | 638 "response": { |
582 "$ref": "Policy" | 639 "$ref": "Policy" |
583 }, | 640 }, |
584 "scopes": [ | 641 "scopes": [ |
585 "https://www.googleapis.com/auth
/cloud-platform" | 642 "https://www.googleapis.com/auth
/cloud-platform" |
586 ] | 643 ] |
587 }, | |
588 "get": { | |
589 "description": "Returns metadata for
a given CryptoKey, as well as its\nprimary CryptoKeyVersion.", | |
590 "httpMethod": "GET", | |
591 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.get", | |
592 "parameterOrder": [ | |
593 "name" | |
594 ], | |
595 "parameters": { | |
596 "name": { | |
597 "description": "The name of
the CryptoKey to get.", | |
598 "location": "path", | |
599 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", | |
600 "required": true, | |
601 "type": "string" | |
602 } | |
603 }, | |
604 "path": "v1beta1/{+name}", | |
605 "response": { | |
606 "$ref": "CryptoKey" | |
607 }, | |
608 "scopes": [ | |
609 "https://www.googleapis.com/auth
/cloud-platform" | |
610 ] | |
611 }, | |
612 "patch": { | |
613 "description": "Update a CryptoKey."
, | |
614 "httpMethod": "PATCH", | |
615 "id": "cloudkms.projects.locations.k
eyRings.cryptoKeys.patch", | |
616 "parameterOrder": [ | |
617 "name" | |
618 ], | |
619 "parameters": { | |
620 "updateMask": { | |
621 "description": "Required lis
t of fields to be updated in this request.", | |
622 "format": "google-fieldmask"
, | |
623 "location": "query", | |
624 "type": "string" | |
625 }, | |
626 "name": { | |
627 "description": "Output only.
The resource name for this CryptoKey in the format\n`projects/*/locations/*/key
Rings/*/cryptoKeys/*`.", | |
628 "location": "path", | |
629 "pattern": "^projects/[^/]+/
locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", | |
630 "required": true, | |
631 "type": "string" | |
632 } | |
633 }, | |
634 "path": "v1beta1/{+name}", | |
635 "request": { | |
636 "$ref": "CryptoKey" | |
637 }, | |
638 "response": { | |
639 "$ref": "CryptoKey" | |
640 }, | |
641 "scopes": [ | |
642 "https://www.googleapis.com/auth
/cloud-platform" | |
643 ] | |
644 } | 644 } |
645 }, | 645 }, |
646 "resources": { | 646 "resources": { |
647 "cryptoKeyVersions": { | 647 "cryptoKeyVersions": { |
648 "methods": { | 648 "methods": { |
649 "list": { | 649 "list": { |
650 "description": "Lists Crypto
KeyVersions.", | 650 "description": "Lists Crypto
KeyVersions.", |
651 "httpMethod": "GET", | 651 "httpMethod": "GET", |
652 "id": "cloudkms.projects.loc
ations.keyRings.cryptoKeys.cryptoKeyVersions.list", | 652 "id": "cloudkms.projects.loc
ations.keyRings.cryptoKeys.cryptoKeyVersions.list", |
653 "parameterOrder": [ | 653 "parameterOrder": [ |
(...skipping 20 matching lines...) Expand all Loading... |
674 } | 674 } |
675 }, | 675 }, |
676 "path": "v1beta1/{+parent}/c
ryptoKeyVersions", | 676 "path": "v1beta1/{+parent}/c
ryptoKeyVersions", |
677 "response": { | 677 "response": { |
678 "$ref": "ListCryptoKeyVe
rsionsResponse" | 678 "$ref": "ListCryptoKeyVe
rsionsResponse" |
679 }, | 679 }, |
680 "scopes": [ | 680 "scopes": [ |
681 "https://www.googleapis.
com/auth/cloud-platform" | 681 "https://www.googleapis.
com/auth/cloud-platform" |
682 ] | 682 ] |
683 }, | 683 }, |
684 "create": { | 684 "destroy": { |
685 "description": "Create a new
CryptoKeyVersion in a CryptoKey.\n\nThe server will assign the next sequential
id. If unset,\nstate will be set to\nENABLED.", | 685 "description": "Schedule a C
ryptoKeyVersion for destruction.\n\nUpon calling this method, CryptoKeyVersion.s
tate will be set to\nDESTROY_SCHEDULED\nand destroy_time will be set to a time 2
4\nhours in the future, at which point the state\nwill be changed to\nDESTROYED,
and the key\nmaterial will be irrevocably destroyed.\n\nBefore the destroy_time
is reached,\nRestoreCryptoKeyVersion may be called to reverse the process.", |
686 "httpMethod": "POST", | 686 "httpMethod": "POST", |
687 "id": "cloudkms.projects.loc
ations.keyRings.cryptoKeys.cryptoKeyVersions.create", | 687 "id": "cloudkms.projects.loc
ations.keyRings.cryptoKeys.cryptoKeyVersions.destroy", |
688 "parameterOrder": [ | 688 "parameterOrder": [ |
689 "parent" | 689 "name" |
690 ], | 690 ], |
691 "parameters": { | 691 "parameters": { |
692 "parent": { | 692 "name": { |
693 "description": "Requ
ired. The name of the CryptoKey associated with\nthe CryptoKeyVersions.", | 693 "description": "The
resource name of the CryptoKeyVersion to destroy.", |
694 "location": "path", | 694 "location": "path", |
695 "pattern": "^project
s/[^/]+/locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", | 695 "pattern": "^project
s/[^/]+/locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+/cryptoKeyVersions/[^/]+$
", |
696 "required": true, | 696 "required": true, |
697 "type": "string" | 697 "type": "string" |
698 } | 698 } |
699 }, | 699 }, |
700 "path": "v1beta1/{+parent}/c
ryptoKeyVersions", | 700 "path": "v1beta1/{+name}:des
troy", |
701 "request": { | 701 "request": { |
702 "$ref": "CryptoKeyVersio
n" | 702 "$ref": "DestroyCryptoKe
yVersionRequest" |
703 }, | 703 }, |
704 "response": { | 704 "response": { |
705 "$ref": "CryptoKeyVersio
n" | 705 "$ref": "CryptoKeyVersio
n" |
706 }, | 706 }, |
707 "scopes": [ | 707 "scopes": [ |
708 "https://www.googleapis.
com/auth/cloud-platform" | 708 "https://www.googleapis.
com/auth/cloud-platform" |
709 ] | 709 ] |
710 }, | 710 }, |
711 "destroy": { | 711 "create": { |
712 "description": "Schedule a C
ryptoKeyVersion for destruction.\n\nUpon calling this method, CryptoKeyVersion.s
tate will be set to\nDESTROY_SCHEDULED\nand destroy_time will be set to a time 2
4\nhours in the future, at which point the state\nwill be changed to\nDESTROYED,
and the key\nmaterial will be irrevocably destroyed.\n\nBefore the destroy_time
is reached,\nRestoreCryptoKeyVersion may be called to reverse the process.", | 712 "description": "Create a new
CryptoKeyVersion in a CryptoKey.\n\nThe server will assign the next sequential
id. If unset,\nstate will be set to\nENABLED.", |
713 "httpMethod": "POST", | 713 "httpMethod": "POST", |
714 "id": "cloudkms.projects.loc
ations.keyRings.cryptoKeys.cryptoKeyVersions.destroy", | 714 "id": "cloudkms.projects.loc
ations.keyRings.cryptoKeys.cryptoKeyVersions.create", |
715 "parameterOrder": [ | 715 "parameterOrder": [ |
716 "name" | 716 "parent" |
717 ], | 717 ], |
718 "parameters": { | 718 "parameters": { |
719 "name": { | 719 "parent": { |
720 "description": "The
resource name of the CryptoKeyVersion to destroy.", | 720 "description": "Requ
ired. The name of the CryptoKey associated with\nthe CryptoKeyVersions.", |
721 "location": "path", | 721 "location": "path", |
722 "pattern": "^project
s/[^/]+/locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+/cryptoKeyVersions/[^/]+$
", | 722 "pattern": "^project
s/[^/]+/locations/[^/]+/keyRings/[^/]+/cryptoKeys/[^/]+$", |
723 "required": true, | 723 "required": true, |
724 "type": "string" | 724 "type": "string" |
725 } | 725 } |
726 }, | 726 }, |
727 "path": "v1beta1/{+name}:des
troy", | 727 "path": "v1beta1/{+parent}/c
ryptoKeyVersions", |
728 "request": { | 728 "request": { |
729 "$ref": "DestroyCryptoKe
yVersionRequest" | 729 "$ref": "CryptoKeyVersio
n" |
730 }, | 730 }, |
731 "response": { | 731 "response": { |
732 "$ref": "CryptoKeyVersio
n" | 732 "$ref": "CryptoKeyVersio
n" |
733 }, | 733 }, |
734 "scopes": [ | 734 "scopes": [ |
735 "https://www.googleapis.
com/auth/cloud-platform" | 735 "https://www.googleapis.
com/auth/cloud-platform" |
736 ] | 736 ] |
737 }, | 737 }, |
738 "restore": { | 738 "restore": { |
739 "description": "Restore a Cr
yptoKeyVersion in the\nDESTROY_SCHEDULED,\nstate.\n\nUpon restoration of the Cry
ptoKeyVersion, state\nwill be set to DISABLED,\nand destroy_time will be cleared
.", | 739 "description": "Restore a Cr
yptoKeyVersion in the\nDESTROY_SCHEDULED,\nstate.\n\nUpon restoration of the Cry
ptoKeyVersion, state\nwill be set to DISABLED,\nand destroy_time will be cleared
.", |
(...skipping 83 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
823 } | 823 } |
824 } | 824 } |
825 } | 825 } |
826 } | 826 } |
827 } | 827 } |
828 } | 828 } |
829 } | 829 } |
830 } | 830 } |
831 } | 831 } |
832 }, | 832 }, |
833 "revision": "20170117", | 833 "revision": "20170201", |
834 "rootUrl": "https://cloudkms.googleapis.com/", | 834 "rootUrl": "https://cloudkms.googleapis.com/", |
835 "schemas": { | 835 "schemas": { |
836 "SetIamPolicyRequest": { | |
837 "description": "Request message for `SetIamPolicy` method.", | |
838 "id": "SetIamPolicyRequest", | |
839 "properties": { | |
840 "policy": { | |
841 "$ref": "Policy", | |
842 "description": "REQUIRED: The complete policy to be applied
to the `resource`. The size of\nthe policy is limited to a few 10s of KB. An emp
ty policy is a\nvalid policy but certain Cloud Platform services (such as Projec
ts)\nmight reject them." | |
843 }, | |
844 "updateMask": { | |
845 "description": "OPTIONAL: A FieldMask specifying which field
s of the policy to modify. Only\nthe fields in the mask will be modified. If no
mask is provided, a default\nmask is used:\npaths: \"bindings, etag\"\nThis fiel
d is only used by Cloud IAM.", | |
846 "format": "google-fieldmask", | |
847 "type": "string" | |
848 } | |
849 }, | |
850 "type": "object" | |
851 }, | |
852 "DecryptRequest": { | |
853 "description": "Request message for KeyManagementService.Decrypt.", | |
854 "id": "DecryptRequest", | |
855 "properties": { | |
856 "ciphertext": { | |
857 "description": "Required. The encrypted data originally retu
rned in\nEncryptResponse.ciphertext.", | |
858 "format": "byte", | |
859 "type": "string" | |
860 }, | |
861 "additionalAuthenticatedData": { | |
862 "description": "Optional data that must match the data origi
nally supplied in\nEncryptRequest.additional_authenticated_data.", | |
863 "format": "byte", | |
864 "type": "string" | |
865 } | |
866 }, | |
867 "type": "object" | |
868 }, | |
869 "Location": { | |
870 "description": "A resource that represents Google Cloud Platform loc
ation.", | |
871 "id": "Location", | |
872 "properties": { | |
873 "locationId": { | |
874 "description": "The canonical id for this location. For exam
ple: `\"us-east1\"`.", | |
875 "type": "string" | |
876 }, | |
877 "metadata": { | |
878 "additionalProperties": { | |
879 "description": "Properties of the object. Contains field
@type with type URL.", | |
880 "type": "any" | |
881 }, | |
882 "description": "Service-specific metadata. For example the a
vailable capacity at the given\nlocation.", | |
883 "type": "object" | |
884 }, | |
885 "labels": { | |
886 "additionalProperties": { | |
887 "type": "string" | |
888 }, | |
889 "description": "Cross-service attributes for the location. F
or example\n\n {\"cloud.googleapis.com/region\": \"us-east1\"}", | |
890 "type": "object" | |
891 }, | |
892 "name": { | |
893 "description": "Resource name for the location, which may va
ry between implementations.\nFor example: `\"projects/example-project/locations/
us-east1\"`", | |
894 "type": "string" | |
895 } | |
896 }, | |
897 "type": "object" | |
898 }, | |
899 "ListCryptoKeysResponse": { | |
900 "description": "Response message for KeyManagementService.ListCrypto
Keys.", | |
901 "id": "ListCryptoKeysResponse", | |
902 "properties": { | |
903 "nextPageToken": { | |
904 "description": "A token to retrieve next page of results. Pa
ss this value in\nListCryptoKeysRequest.page_token to retrieve the next page of
results.", | |
905 "type": "string" | |
906 }, | |
907 "cryptoKeys": { | |
908 "description": "The list of CryptoKeys.", | |
909 "items": { | |
910 "$ref": "CryptoKey" | |
911 }, | |
912 "type": "array" | |
913 }, | |
914 "totalSize": { | |
915 "description": "The total number of CryptoKeys that matched
the query.", | |
916 "format": "int32", | |
917 "type": "integer" | |
918 } | |
919 }, | |
920 "type": "object" | |
921 }, | |
922 "Condition": { | |
923 "description": "A condition to be met.", | |
924 "id": "Condition", | |
925 "properties": { | |
926 "sys": { | |
927 "description": "Trusted attributes supplied by any service t
hat owns resources and uses\nthe IAM system for access control.", | |
928 "enum": [ | |
929 "NO_ATTR", | |
930 "REGION", | |
931 "SERVICE", | |
932 "NAME", | |
933 "IP" | |
934 ], | |
935 "enumDescriptions": [ | |
936 "Default non-attribute type", | |
937 "Region of the resource", | |
938 "Service name", | |
939 "Resource name", | |
940 "IP address of the caller" | |
941 ], | |
942 "type": "string" | |
943 }, | |
944 "value": { | |
945 "description": "DEPRECATED. Use 'values' instead.", | |
946 "type": "string" | |
947 }, | |
948 "values": { | |
949 "description": "The objects of the condition. This is mutual
ly exclusive with 'value'.", | |
950 "items": { | |
951 "type": "string" | |
952 }, | |
953 "type": "array" | |
954 }, | |
955 "iam": { | |
956 "description": "Trusted attributes supplied by the IAM syste
m.", | |
957 "enum": [ | |
958 "NO_ATTR", | |
959 "AUTHORITY", | |
960 "ATTRIBUTION" | |
961 ], | |
962 "enumDescriptions": [ | |
963 "Default non-attribute.", | |
964 "Either principal or (if present) authority selector.", | |
965 "The principal (even if an authority selector is present
), which\nmust only be used for attribution, not authorization." | |
966 ], | |
967 "type": "string" | |
968 }, | |
969 "op": { | |
970 "description": "An operator to apply the subject with.", | |
971 "enum": [ | |
972 "NO_OP", | |
973 "EQUALS", | |
974 "NOT_EQUALS", | |
975 "IN", | |
976 "NOT_IN", | |
977 "DISCHARGED" | |
978 ], | |
979 "enumDescriptions": [ | |
980 "Default no-op.", | |
981 "DEPRECATED. Use IN instead.", | |
982 "DEPRECATED. Use NOT_IN instead.", | |
983 "Set-inclusion check.", | |
984 "Set-exclusion check.", | |
985 "Subject is discharged" | |
986 ], | |
987 "type": "string" | |
988 }, | |
989 "svc": { | |
990 "description": "Trusted attributes discharged by the service
.", | |
991 "type": "string" | |
992 } | |
993 }, | |
994 "type": "object" | |
995 }, | |
996 "CounterOptions": { | |
997 "description": "Options for counters", | |
998 "id": "CounterOptions", | |
999 "properties": { | |
1000 "metric": { | |
1001 "description": "The metric to update.", | |
1002 "type": "string" | |
1003 }, | |
1004 "field": { | |
1005 "description": "The field value to attribute.", | |
1006 "type": "string" | |
1007 } | |
1008 }, | |
1009 "type": "object" | |
1010 }, | |
1011 "AuditLogConfig": { | |
1012 "description": "Provides the configuration for logging a type of per
missions.\nExample:\n\n {\n \"audit_log_configs\": [\n {\n
\"log_type\": \"DATA_READ\",\n \"exempted_members\": [\n
\"user:foo@gmail.com\"\n ]\n },\n {\n \"log_type
\": \"DATA_WRITE\",\n }\n ]\n }\n\nThis enables 'DATA_READ' and '
DATA_WRITE' logging, while exempting\nfoo@gmail.com from DATA_READ logging.", | |
1013 "id": "AuditLogConfig", | |
1014 "properties": { | |
1015 "exemptedMembers": { | |
1016 "description": "Specifies the identities that do not cause l
ogging for this type of\npermission.\nFollows the same format of Binding.members
.", | |
1017 "items": { | |
1018 "type": "string" | |
1019 }, | |
1020 "type": "array" | |
1021 }, | |
1022 "logType": { | |
1023 "description": "The log type that this config enables.", | |
1024 "enum": [ | |
1025 "LOG_TYPE_UNSPECIFIED", | |
1026 "ADMIN_READ", | |
1027 "DATA_WRITE", | |
1028 "DATA_READ" | |
1029 ], | |
1030 "enumDescriptions": [ | |
1031 "Default case. Should never be this.", | |
1032 "Admin reads. Example: CloudIAM getIamPolicy", | |
1033 "Data writes. Example: CloudSQL Users create", | |
1034 "Data reads. Example: CloudSQL Users list" | |
1035 ], | |
1036 "type": "string" | |
1037 } | |
1038 }, | |
1039 "type": "object" | |
1040 }, | |
1041 "DecryptResponse": { | 836 "DecryptResponse": { |
1042 "description": "Response message for KeyManagementService.Decrypt.", | 837 "description": "Response message for KeyManagementService.Decrypt.", |
1043 "id": "DecryptResponse", | 838 "id": "DecryptResponse", |
1044 "properties": { | 839 "properties": { |
1045 "plaintext": { | 840 "plaintext": { |
1046 "description": "The decrypted data originally supplied in En
cryptRequest.plaintext.", | 841 "description": "The decrypted data originally supplied in En
cryptRequest.plaintext.", |
1047 "format": "byte", | 842 "format": "byte", |
1048 "type": "string" | 843 "type": "string" |
1049 } | 844 } |
1050 }, | 845 }, |
1051 "type": "object" | 846 "type": "object" |
1052 }, | 847 }, |
1053 "TestIamPermissionsRequest": { | 848 "TestIamPermissionsRequest": { |
1054 "description": "Request message for `TestIamPermissions` method.", | 849 "description": "Request message for `TestIamPermissions` method.", |
1055 "id": "TestIamPermissionsRequest", | 850 "id": "TestIamPermissionsRequest", |
1056 "properties": { | 851 "properties": { |
1057 "permissions": { | 852 "permissions": { |
1058 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", | 853 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", |
1059 "items": { | 854 "items": { |
1060 "type": "string" | 855 "type": "string" |
1061 }, | 856 }, |
1062 "type": "array" | 857 "type": "array" |
1063 } | 858 } |
1064 }, | 859 }, |
1065 "type": "object" | 860 "type": "object" |
1066 }, | 861 }, |
1067 "EncryptResponse": { | |
1068 "description": "Response message for KeyManagementService.Encrypt.", | |
1069 "id": "EncryptResponse", | |
1070 "properties": { | |
1071 "ciphertext": { | |
1072 "description": "The encrypted data.", | |
1073 "format": "byte", | |
1074 "type": "string" | |
1075 }, | |
1076 "name": { | |
1077 "description": "The resource name of the CryptoKeyVersion us
ed in encryption.", | |
1078 "type": "string" | |
1079 } | |
1080 }, | |
1081 "type": "object" | |
1082 }, | |
1083 "KeyRing": { | |
1084 "description": "A KeyRing is a toplevel logical grouping of CryptoKe
ys.", | |
1085 "id": "KeyRing", | |
1086 "properties": { | |
1087 "createTime": { | |
1088 "description": "Output only. The time at which this KeyRing
was created.", | |
1089 "format": "google-datetime", | |
1090 "type": "string" | |
1091 }, | |
1092 "name": { | |
1093 "description": "Output only. The resource name for the KeyRi
ng in the format\n`projects/*/locations/*/keyRings/*`.", | |
1094 "type": "string" | |
1095 } | |
1096 }, | |
1097 "type": "object" | |
1098 }, | |
1099 "ListLocationsResponse": { | |
1100 "description": "The response message for Locations.ListLocations.", | |
1101 "id": "ListLocationsResponse", | |
1102 "properties": { | |
1103 "locations": { | |
1104 "description": "A list of locations that matches the specifi
ed filter in the request.", | |
1105 "items": { | |
1106 "$ref": "Location" | |
1107 }, | |
1108 "type": "array" | |
1109 }, | |
1110 "nextPageToken": { | |
1111 "description": "The standard List next-page token.", | |
1112 "type": "string" | |
1113 } | |
1114 }, | |
1115 "type": "object" | |
1116 }, | |
1117 "Policy": { | 862 "Policy": { |
1118 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", | 863 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", |
1119 "id": "Policy", | 864 "id": "Policy", |
1120 "properties": { | 865 "properties": { |
1121 "etag": { | 866 "etag": { |
1122 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", | 867 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", |
1123 "format": "byte", | 868 "format": "byte", |
1124 "type": "string" | 869 "type": "string" |
1125 }, | 870 }, |
1126 "iamOwned": { | 871 "iamOwned": { |
(...skipping 21 matching lines...) Expand all Loading... |
1148 "bindings": { | 893 "bindings": { |
1149 "description": "Associates a list of `members` to a `role`.\
nMultiple `bindings` must not be specified for the same `role`.\n`bindings` with
no members will result in an error.", | 894 "description": "Associates a list of `members` to a `role`.\
nMultiple `bindings` must not be specified for the same `role`.\n`bindings` with
no members will result in an error.", |
1150 "items": { | 895 "items": { |
1151 "$ref": "Binding" | 896 "$ref": "Binding" |
1152 }, | 897 }, |
1153 "type": "array" | 898 "type": "array" |
1154 } | 899 } |
1155 }, | 900 }, |
1156 "type": "object" | 901 "type": "object" |
1157 }, | 902 }, |
| 903 "ListLocationsResponse": { |
| 904 "description": "The response message for Locations.ListLocations.", |
| 905 "id": "ListLocationsResponse", |
| 906 "properties": { |
| 907 "locations": { |
| 908 "description": "A list of locations that matches the specifi
ed filter in the request.", |
| 909 "items": { |
| 910 "$ref": "Location" |
| 911 }, |
| 912 "type": "array" |
| 913 }, |
| 914 "nextPageToken": { |
| 915 "description": "The standard List next-page token.", |
| 916 "type": "string" |
| 917 } |
| 918 }, |
| 919 "type": "object" |
| 920 }, |
| 921 "KeyRing": { |
| 922 "description": "A KeyRing is a toplevel logical grouping of CryptoKe
ys.", |
| 923 "id": "KeyRing", |
| 924 "properties": { |
| 925 "createTime": { |
| 926 "description": "Output only. The time at which this KeyRing
was created.", |
| 927 "format": "google-datetime", |
| 928 "type": "string" |
| 929 }, |
| 930 "name": { |
| 931 "description": "Output only. The resource name for the KeyRi
ng in the format\n`projects/*/locations/*/keyRings/*`.", |
| 932 "type": "string" |
| 933 } |
| 934 }, |
| 935 "type": "object" |
| 936 }, |
| 937 "EncryptResponse": { |
| 938 "description": "Response message for KeyManagementService.Encrypt.", |
| 939 "id": "EncryptResponse", |
| 940 "properties": { |
| 941 "name": { |
| 942 "description": "The resource name of the CryptoKeyVersion us
ed in encryption.", |
| 943 "type": "string" |
| 944 }, |
| 945 "ciphertext": { |
| 946 "description": "The encrypted data.", |
| 947 "format": "byte", |
| 948 "type": "string" |
| 949 } |
| 950 }, |
| 951 "type": "object" |
| 952 }, |
| 953 "RestoreCryptoKeyVersionRequest": { |
| 954 "description": "Request message for KeyManagementService.RestoreCryp
toKeyVersion.", |
| 955 "id": "RestoreCryptoKeyVersionRequest", |
| 956 "properties": {}, |
| 957 "type": "object" |
| 958 }, |
1158 "UpdateCryptoKeyPrimaryVersionRequest": { | 959 "UpdateCryptoKeyPrimaryVersionRequest": { |
1159 "description": "Request message for KeyManagementService.UpdateCrypt
oKeyPrimaryVersion.", | 960 "description": "Request message for KeyManagementService.UpdateCrypt
oKeyPrimaryVersion.", |
1160 "id": "UpdateCryptoKeyPrimaryVersionRequest", | 961 "id": "UpdateCryptoKeyPrimaryVersionRequest", |
1161 "properties": { | 962 "properties": { |
1162 "cryptoKeyVersionId": { | 963 "cryptoKeyVersionId": { |
1163 "description": "The id of the child CryptoKeyVersion to use
as primary.", | 964 "description": "The id of the child CryptoKeyVersion to use
as primary.", |
1164 "type": "string" | 965 "type": "string" |
1165 } | 966 } |
1166 }, | 967 }, |
1167 "type": "object" | 968 "type": "object" |
1168 }, | 969 }, |
1169 "RestoreCryptoKeyVersionRequest": { | |
1170 "description": "Request message for KeyManagementService.RestoreCryp
toKeyVersion.", | |
1171 "id": "RestoreCryptoKeyVersionRequest", | |
1172 "properties": {}, | |
1173 "type": "object" | |
1174 }, | |
1175 "DataAccessOptions": { | |
1176 "description": "Write a Data Access (Gin) log", | |
1177 "id": "DataAccessOptions", | |
1178 "properties": {}, | |
1179 "type": "object" | |
1180 }, | |
1181 "ListKeyRingsResponse": { | 970 "ListKeyRingsResponse": { |
1182 "description": "Response message for KeyManagementService.ListKeyRin
gs.", | 971 "description": "Response message for KeyManagementService.ListKeyRin
gs.", |
1183 "id": "ListKeyRingsResponse", | 972 "id": "ListKeyRingsResponse", |
1184 "properties": { | 973 "properties": { |
1185 "nextPageToken": { | 974 "nextPageToken": { |
1186 "description": "A token to retrieve next page of results. Pa
ss this value in\nListKeyRingsRequest.page_token to retrieve the next page of re
sults.", | 975 "description": "A token to retrieve next page of results. Pa
ss this value in\nListKeyRingsRequest.page_token to retrieve the next page of re
sults.", |
1187 "type": "string" | 976 "type": "string" |
1188 }, | 977 }, |
1189 "totalSize": { | 978 "totalSize": { |
1190 "description": "The total number of KeyRings that matched th
e query.", | 979 "description": "The total number of KeyRings that matched th
e query.", |
1191 "format": "int32", | 980 "format": "int32", |
1192 "type": "integer" | 981 "type": "integer" |
1193 }, | 982 }, |
1194 "keyRings": { | 983 "keyRings": { |
1195 "description": "The list of KeyRings.", | 984 "description": "The list of KeyRings.", |
1196 "items": { | 985 "items": { |
1197 "$ref": "KeyRing" | 986 "$ref": "KeyRing" |
1198 }, | 987 }, |
1199 "type": "array" | 988 "type": "array" |
1200 } | 989 } |
1201 }, | 990 }, |
1202 "type": "object" | 991 "type": "object" |
1203 }, | 992 }, |
| 993 "DataAccessOptions": { |
| 994 "description": "Write a Data Access (Gin) log", |
| 995 "id": "DataAccessOptions", |
| 996 "properties": {}, |
| 997 "type": "object" |
| 998 }, |
1204 "AuditConfig": { | 999 "AuditConfig": { |
1205 "description": "Specifies the audit configuration for a service.\nIt
consists of which permission types are logged, and what identities, if\nany, ar
e exempted from logging.\nAn AuditConifg must have one or more AuditLogConfigs."
, | 1000 "description": "Specifies the audit configuration for a service.\nIt
consists of which permission types are logged, and what identities, if\nany, ar
e exempted from logging.\nAn AuditConifg must have one or more AuditLogConfigs."
, |
1206 "id": "AuditConfig", | 1001 "id": "AuditConfig", |
1207 "properties": { | 1002 "properties": { |
| 1003 "service": { |
| 1004 "description": "Specifies a service that will be enabled for
audit logging.\nFor example, `resourcemanager`, `storage`, `compute`.\n`allServ
ices` is a special value that covers all services.", |
| 1005 "type": "string" |
| 1006 }, |
1208 "auditLogConfigs": { | 1007 "auditLogConfigs": { |
1209 "description": "The configuration for logging of each type o
f permission.\nNext ID: 4", | 1008 "description": "The configuration for logging of each type o
f permission.\nNext ID: 4", |
1210 "items": { | 1009 "items": { |
1211 "$ref": "AuditLogConfig" | 1010 "$ref": "AuditLogConfig" |
1212 }, | 1011 }, |
1213 "type": "array" | 1012 "type": "array" |
1214 }, | 1013 }, |
1215 "exemptedMembers": { | 1014 "exemptedMembers": { |
1216 "description": "Specifies the identities that are exempted f
rom \"data access\" audit\nlogging for the `service` specified above.\nFollows t
he same format of Binding.members.\nThis field is deprecated in favor of per-per
mission-type exemptions.", | 1015 "description": "Specifies the identities that are exempted f
rom \"data access\" audit\nlogging for the `service` specified above.\nFollows t
he same format of Binding.members.\nThis field is deprecated in favor of per-per
mission-type exemptions.", |
1217 "items": { | 1016 "items": { |
1218 "type": "string" | 1017 "type": "string" |
1219 }, | 1018 }, |
1220 "type": "array" | 1019 "type": "array" |
1221 }, | |
1222 "service": { | |
1223 "description": "Specifies a service that will be enabled for
audit logging.\nFor example, `resourcemanager`, `storage`, `compute`.\n`allServ
ices` is a special value that covers all services.", | |
1224 "type": "string" | |
1225 } | 1020 } |
1226 }, | 1021 }, |
1227 "type": "object" | 1022 "type": "object" |
1228 }, | 1023 }, |
1229 "CryptoKeyVersion": { | 1024 "CryptoKeyVersion": { |
1230 "description": "A CryptoKeyVersion represents an individual cryptogr
aphic key, and the\nassociated key material.\n\nIt can be used for cryptographic
operations either directly, or via its\nparent CryptoKey, in which case the ser
ver will choose the appropriate\nversion for the operation.", | 1025 "description": "A CryptoKeyVersion represents an individual cryptogr
aphic key, and the\nassociated key material.\n\nIt can be used for cryptographic
operations either directly, or via its\nparent CryptoKey, in which case the ser
ver will choose the appropriate\nversion for the operation.", |
1231 "id": "CryptoKeyVersion", | 1026 "id": "CryptoKeyVersion", |
1232 "properties": { | 1027 "properties": { |
1233 "createTime": { | 1028 "createTime": { |
1234 "description": "Output only. The time at which this CryptoKe
yVersion was created.", | 1029 "description": "Output only. The time at which this CryptoKe
yVersion was created.", |
(...skipping 73 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
1308 "format": "byte", | 1103 "format": "byte", |
1309 "type": "string" | 1104 "type": "string" |
1310 } | 1105 } |
1311 }, | 1106 }, |
1312 "type": "object" | 1107 "type": "object" |
1313 }, | 1108 }, |
1314 "ListCryptoKeyVersionsResponse": { | 1109 "ListCryptoKeyVersionsResponse": { |
1315 "description": "Response message for KeyManagementService.ListCrypto
KeyVersions.", | 1110 "description": "Response message for KeyManagementService.ListCrypto
KeyVersions.", |
1316 "id": "ListCryptoKeyVersionsResponse", | 1111 "id": "ListCryptoKeyVersionsResponse", |
1317 "properties": { | 1112 "properties": { |
| 1113 "totalSize": { |
| 1114 "description": "The total number of CryptoKeyVersions that m
atched the\nquery.", |
| 1115 "format": "int32", |
| 1116 "type": "integer" |
| 1117 }, |
1318 "cryptoKeyVersions": { | 1118 "cryptoKeyVersions": { |
1319 "description": "The list of CryptoKeyVersions.", | 1119 "description": "The list of CryptoKeyVersions.", |
1320 "items": { | 1120 "items": { |
1321 "$ref": "CryptoKeyVersion" | 1121 "$ref": "CryptoKeyVersion" |
1322 }, | 1122 }, |
1323 "type": "array" | 1123 "type": "array" |
1324 }, | 1124 }, |
1325 "nextPageToken": { | 1125 "nextPageToken": { |
1326 "description": "A token to retrieve next page of results. Pa
ss this value in\nListCryptoKeyVersionsRequest.page_token to retrieve the next p
age of\nresults.", | 1126 "description": "A token to retrieve next page of results. Pa
ss this value in\nListCryptoKeyVersionsRequest.page_token to retrieve the next p
age of\nresults.", |
1327 "type": "string" | 1127 "type": "string" |
1328 }, | |
1329 "totalSize": { | |
1330 "description": "The total number of CryptoKeyVersions that m
atched the\nquery.", | |
1331 "format": "int32", | |
1332 "type": "integer" | |
1333 } | 1128 } |
1334 }, | 1129 }, |
1335 "type": "object" | 1130 "type": "object" |
1336 }, | 1131 }, |
1337 "TestIamPermissionsResponse": { | 1132 "TestIamPermissionsResponse": { |
1338 "description": "Response message for `TestIamPermissions` method.", | 1133 "description": "Response message for `TestIamPermissions` method.", |
1339 "id": "TestIamPermissionsResponse", | 1134 "id": "TestIamPermissionsResponse", |
1340 "properties": { | 1135 "properties": { |
1341 "permissions": { | 1136 "permissions": { |
1342 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", | 1137 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", |
1343 "items": { | 1138 "items": { |
1344 "type": "string" | 1139 "type": "string" |
1345 }, | 1140 }, |
1346 "type": "array" | 1141 "type": "array" |
1347 } | 1142 } |
1348 }, | 1143 }, |
1349 "type": "object" | 1144 "type": "object" |
1350 }, | 1145 }, |
1351 "DestroyCryptoKeyVersionRequest": { | 1146 "DestroyCryptoKeyVersionRequest": { |
1352 "description": "Request message for KeyManagementService.DestroyCryp
toKeyVersion.", | 1147 "description": "Request message for KeyManagementService.DestroyCryp
toKeyVersion.", |
1353 "id": "DestroyCryptoKeyVersionRequest", | 1148 "id": "DestroyCryptoKeyVersionRequest", |
1354 "properties": {}, | 1149 "properties": {}, |
1355 "type": "object" | 1150 "type": "object" |
1356 }, | 1151 }, |
| 1152 "CryptoKey": { |
| 1153 "description": "A CryptoKey represents a logical key that can be use
d for cryptographic\noperations.\n\nA CryptoKey is made up of one or more versio
ns, which\nrepresent the actual key material used in cryptographic operations.", |
| 1154 "id": "CryptoKey", |
| 1155 "properties": { |
| 1156 "createTime": { |
| 1157 "description": "Output only. The time at which this CryptoKe
y was created.", |
| 1158 "format": "google-datetime", |
| 1159 "type": "string" |
| 1160 }, |
| 1161 "rotationPeriod": { |
| 1162 "description": "next_rotation_time will be advanced by this
period when the service\nautomatically rotates a key. Must be at least one day.\
n\nIf rotation_period is set, next_rotation_time must also be set.", |
| 1163 "format": "google-duration", |
| 1164 "type": "string" |
| 1165 }, |
| 1166 "primary": { |
| 1167 "$ref": "CryptoKeyVersion", |
| 1168 "description": "Output only. A copy of the \"primary\" Crypt
oKeyVersion that will be used\nby Encrypt when this CryptoKey is given\nin Encry
ptRequest.name.\n\nThe CryptoKey's primary version can be updated via\nUpdateCry
ptoKeyPrimaryVersion." |
| 1169 }, |
| 1170 "name": { |
| 1171 "description": "Output only. The resource name for this Cryp
toKey in the format\n`projects/*/locations/*/keyRings/*/cryptoKeys/*`.", |
| 1172 "type": "string" |
| 1173 }, |
| 1174 "purpose": { |
| 1175 "description": "The immutable purpose of this CryptoKey. Cur
rently, the only acceptable\npurpose is ENCRYPT_DECRYPT.", |
| 1176 "enum": [ |
| 1177 "CRYPTO_KEY_PURPOSE_UNSPECIFIED", |
| 1178 "ENCRYPT_DECRYPT" |
| 1179 ], |
| 1180 "enumDescriptions": [ |
| 1181 "Not specified.", |
| 1182 "CryptoKeys with this purpose may be used with\nEncrypt
and\nDecrypt." |
| 1183 ], |
| 1184 "type": "string" |
| 1185 }, |
| 1186 "nextRotationTime": { |
| 1187 "description": "At next_rotation_time, the Key Management Se
rvice will automatically:\n\n1. Create a new version of this CryptoKey.\n2. Mark
the new version as primary.\n\nKey rotations performed manually via\nCreateCryp
toKeyVersion and\nUpdateCryptoKeyPrimaryVersion\ndo not affect next_rotation_tim
e.", |
| 1188 "format": "google-datetime", |
| 1189 "type": "string" |
| 1190 } |
| 1191 }, |
| 1192 "type": "object" |
| 1193 }, |
1357 "Rule": { | 1194 "Rule": { |
1358 "description": "A rule to be applied in a Policy.", | 1195 "description": "A rule to be applied in a Policy.", |
1359 "id": "Rule", | 1196 "id": "Rule", |
1360 "properties": { | 1197 "properties": { |
1361 "notIn": { | |
1362 "description": "If one or more 'not_in' clauses are specifie
d, the rule matches\nif the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entri
es.\nThe format for in and not_in entries is the same as for members in a\nBindi
ng (see google/iam/v1/policy.proto).", | |
1363 "items": { | |
1364 "type": "string" | |
1365 }, | |
1366 "type": "array" | |
1367 }, | |
1368 "description": { | 1198 "description": { |
1369 "description": "Human-readable description of the rule.", | 1199 "description": "Human-readable description of the rule.", |
1370 "type": "string" | 1200 "type": "string" |
1371 }, | 1201 }, |
1372 "conditions": { | 1202 "conditions": { |
1373 "description": "Additional restrictions that must be met", | 1203 "description": "Additional restrictions that must be met", |
1374 "items": { | 1204 "items": { |
1375 "$ref": "Condition" | 1205 "$ref": "Condition" |
1376 }, | 1206 }, |
1377 "type": "array" | 1207 "type": "array" |
(...skipping 31 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
1409 ], | 1239 ], |
1410 "enumDescriptions": [ | 1240 "enumDescriptions": [ |
1411 "Default no action.", | 1241 "Default no action.", |
1412 "Matching 'Entries' grant access.", | 1242 "Matching 'Entries' grant access.", |
1413 "Matching 'Entries' grant access and the caller promises
to log\nthe request per the returned log_configs.", | 1243 "Matching 'Entries' grant access and the caller promises
to log\nthe request per the returned log_configs.", |
1414 "Matching 'Entries' deny access.", | 1244 "Matching 'Entries' deny access.", |
1415 "Matching 'Entries' deny access and the caller promises
to log\nthe request per the returned log_configs.", | 1245 "Matching 'Entries' deny access and the caller promises
to log\nthe request per the returned log_configs.", |
1416 "Matching 'Entries' tell IAM.Check callers to generate l
ogs." | 1246 "Matching 'Entries' tell IAM.Check callers to generate l
ogs." |
1417 ], | 1247 ], |
1418 "type": "string" | 1248 "type": "string" |
1419 } | 1249 }, |
1420 }, | 1250 "notIn": { |
1421 "type": "object" | 1251 "description": "If one or more 'not_in' clauses are specifie
d, the rule matches\nif the PRINCIPAL/AUTHORITY_SELECTOR is in none of the entri
es.\nThe format for in and not_in entries is the same as for members in a\nBindi
ng (see google/iam/v1/policy.proto).", |
1422 }, | 1252 "items": { |
1423 "CryptoKey": { | 1253 "type": "string" |
1424 "description": "A CryptoKey represents a logical key that can be use
d for cryptographic\noperations.\n\nA CryptoKey is made up of one or more versio
ns, which\nrepresent the actual key material used in cryptographic operations.", | 1254 }, |
1425 "id": "CryptoKey", | 1255 "type": "array" |
1426 "properties": { | |
1427 "purpose": { | |
1428 "description": "The immutable purpose of this CryptoKey. Cur
rently, the only acceptable\npurpose is ENCRYPT_DECRYPT.", | |
1429 "enum": [ | |
1430 "CRYPTO_KEY_PURPOSE_UNSPECIFIED", | |
1431 "ENCRYPT_DECRYPT" | |
1432 ], | |
1433 "enumDescriptions": [ | |
1434 "Not specified.", | |
1435 "CryptoKeys with this purpose may be used with\nEncrypt
and\nDecrypt." | |
1436 ], | |
1437 "type": "string" | |
1438 }, | |
1439 "nextRotationTime": { | |
1440 "description": "At next_rotation_time, the Key Management Se
rvice will automatically:\n\n1. Create a new version of this CryptoKey.\n2. Mark
the new version as primary.\n\nKey rotations performed manually via\nCreateCryp
toKeyVersion and\nUpdateCryptoKeyPrimaryVersion\ndo not affect next_rotation_tim
e.", | |
1441 "format": "google-datetime", | |
1442 "type": "string" | |
1443 }, | |
1444 "createTime": { | |
1445 "description": "Output only. The time at which this CryptoKe
y was created.", | |
1446 "format": "google-datetime", | |
1447 "type": "string" | |
1448 }, | |
1449 "rotationPeriod": { | |
1450 "description": "next_rotation_time will be advanced by this
period when the service\nautomatically rotates a key. Must be at least one day.\
n\nIf rotation_period is set, next_rotation_time must also be set.", | |
1451 "format": "google-duration", | |
1452 "type": "string" | |
1453 }, | |
1454 "primary": { | |
1455 "$ref": "CryptoKeyVersion", | |
1456 "description": "Output only. A copy of the \"primary\" Crypt
oKeyVersion that will be used\nby Encrypt when this CryptoKey is given\nin Encry
ptRequest.name.\n\nThe CryptoKey's primary version can be updated via\nUpdateCry
ptoKeyPrimaryVersion." | |
1457 }, | |
1458 "name": { | |
1459 "description": "Output only. The resource name for this Cryp
toKey in the format\n`projects/*/locations/*/keyRings/*/cryptoKeys/*`.", | |
1460 "type": "string" | |
1461 } | 1256 } |
1462 }, | 1257 }, |
1463 "type": "object" | 1258 "type": "object" |
1464 }, | 1259 }, |
1465 "LogConfig": { | 1260 "LogConfig": { |
1466 "description": "Specifies what kind of log the caller must write\nIn
crement a streamz counter with the specified metric and field names.\n\nMetric n
ames should start with a '/', generally be lowercase-only,\nand end in \"_count\
". Field names should not contain an initial slash.\nThe actual exported metric
names will have \"/iam/policy\" prepended.\n\nField names correspond to IAM requ
est parameters and field values are\ntheir respective values.\n\nAt present the
only supported field names are\n - \"iam_principal\", corresponding to IAMCont
ext.principal;\n - \"\" (empty string), resulting in one aggretated counter wi
th no field.\n\nExamples:\n counter { metric: \"/debug_access_count\" field: \
"iam_principal\" }\n ==> increment counter /iam/policy/backend_debug_access_cou
nt\n {iam_principal=[value of IAMContext.principal]}\n\nA
t this time we do not support:\n* multiple field names (though this may be suppo
rted in the future)\n* decrementing the counter\n* incrementing it by anything o
ther than 1", | 1261 "description": "Specifies what kind of log the caller must write\nIn
crement a streamz counter with the specified metric and field names.\n\nMetric n
ames should start with a '/', generally be lowercase-only,\nand end in \"_count\
". Field names should not contain an initial slash.\nThe actual exported metric
names will have \"/iam/policy\" prepended.\n\nField names correspond to IAM requ
est parameters and field values are\ntheir respective values.\n\nAt present the
only supported field names are\n - \"iam_principal\", corresponding to IAMCont
ext.principal;\n - \"\" (empty string), resulting in one aggretated counter wi
th no field.\n\nExamples:\n counter { metric: \"/debug_access_count\" field: \
"iam_principal\" }\n ==> increment counter /iam/policy/backend_debug_access_cou
nt\n {iam_principal=[value of IAMContext.principal]}\n\nA
t this time we do not support:\n* multiple field names (though this may be suppo
rted in the future)\n* decrementing the counter\n* incrementing it by anything o
ther than 1", |
1467 "id": "LogConfig", | 1262 "id": "LogConfig", |
1468 "properties": { | 1263 "properties": { |
| 1264 "dataAccess": { |
| 1265 "$ref": "DataAccessOptions", |
| 1266 "description": "Data access options." |
| 1267 }, |
| 1268 "cloudAudit": { |
| 1269 "$ref": "CloudAuditOptions", |
| 1270 "description": "Cloud audit options." |
| 1271 }, |
1469 "counter": { | 1272 "counter": { |
1470 "$ref": "CounterOptions", | 1273 "$ref": "CounterOptions", |
1471 "description": "Counter options." | 1274 "description": "Counter options." |
1472 }, | 1275 } |
1473 "dataAccess": { | 1276 }, |
1474 "$ref": "DataAccessOptions", | 1277 "type": "object" |
1475 "description": "Data access options." | 1278 }, |
1476 }, | 1279 "SetIamPolicyRequest": { |
1477 "cloudAudit": { | 1280 "description": "Request message for `SetIamPolicy` method.", |
1478 "$ref": "CloudAuditOptions", | 1281 "id": "SetIamPolicyRequest", |
1479 "description": "Cloud audit options." | 1282 "properties": { |
| 1283 "updateMask": { |
| 1284 "description": "OPTIONAL: A FieldMask specifying which field
s of the policy to modify. Only\nthe fields in the mask will be modified. If no
mask is provided, a default\nmask is used:\npaths: \"bindings, etag\"\nThis fiel
d is only used by Cloud IAM.", |
| 1285 "format": "google-fieldmask", |
| 1286 "type": "string" |
| 1287 }, |
| 1288 "policy": { |
| 1289 "$ref": "Policy", |
| 1290 "description": "REQUIRED: The complete policy to be applied
to the `resource`. The size of\nthe policy is limited to a few 10s of KB. An emp
ty policy is a\nvalid policy but certain Cloud Platform services (such as Projec
ts)\nmight reject them." |
| 1291 } |
| 1292 }, |
| 1293 "type": "object" |
| 1294 }, |
| 1295 "DecryptRequest": { |
| 1296 "description": "Request message for KeyManagementService.Decrypt.", |
| 1297 "id": "DecryptRequest", |
| 1298 "properties": { |
| 1299 "ciphertext": { |
| 1300 "description": "Required. The encrypted data originally retu
rned in\nEncryptResponse.ciphertext.", |
| 1301 "format": "byte", |
| 1302 "type": "string" |
| 1303 }, |
| 1304 "additionalAuthenticatedData": { |
| 1305 "description": "Optional data that must match the data origi
nally supplied in\nEncryptRequest.additional_authenticated_data.", |
| 1306 "format": "byte", |
| 1307 "type": "string" |
| 1308 } |
| 1309 }, |
| 1310 "type": "object" |
| 1311 }, |
| 1312 "Location": { |
| 1313 "description": "A resource that represents Google Cloud Platform loc
ation.", |
| 1314 "id": "Location", |
| 1315 "properties": { |
| 1316 "name": { |
| 1317 "description": "Resource name for the location, which may va
ry between implementations.\nFor example: `\"projects/example-project/locations/
us-east1\"`", |
| 1318 "type": "string" |
| 1319 }, |
| 1320 "locationId": { |
| 1321 "description": "The canonical id for this location. For exam
ple: `\"us-east1\"`.", |
| 1322 "type": "string" |
| 1323 }, |
| 1324 "metadata": { |
| 1325 "additionalProperties": { |
| 1326 "description": "Properties of the object. Contains field
@type with type URL.", |
| 1327 "type": "any" |
| 1328 }, |
| 1329 "description": "Service-specific metadata. For example the a
vailable capacity at the given\nlocation.", |
| 1330 "type": "object" |
| 1331 }, |
| 1332 "labels": { |
| 1333 "additionalProperties": { |
| 1334 "type": "string" |
| 1335 }, |
| 1336 "description": "Cross-service attributes for the location. F
or example\n\n {\"cloud.googleapis.com/region\": \"us-east1\"}", |
| 1337 "type": "object" |
| 1338 } |
| 1339 }, |
| 1340 "type": "object" |
| 1341 }, |
| 1342 "ListCryptoKeysResponse": { |
| 1343 "description": "Response message for KeyManagementService.ListCrypto
Keys.", |
| 1344 "id": "ListCryptoKeysResponse", |
| 1345 "properties": { |
| 1346 "nextPageToken": { |
| 1347 "description": "A token to retrieve next page of results. Pa
ss this value in\nListCryptoKeysRequest.page_token to retrieve the next page of
results.", |
| 1348 "type": "string" |
| 1349 }, |
| 1350 "cryptoKeys": { |
| 1351 "description": "The list of CryptoKeys.", |
| 1352 "items": { |
| 1353 "$ref": "CryptoKey" |
| 1354 }, |
| 1355 "type": "array" |
| 1356 }, |
| 1357 "totalSize": { |
| 1358 "description": "The total number of CryptoKeys that matched
the query.", |
| 1359 "format": "int32", |
| 1360 "type": "integer" |
| 1361 } |
| 1362 }, |
| 1363 "type": "object" |
| 1364 }, |
| 1365 "Condition": { |
| 1366 "description": "A condition to be met.", |
| 1367 "id": "Condition", |
| 1368 "properties": { |
| 1369 "op": { |
| 1370 "description": "An operator to apply the subject with.", |
| 1371 "enum": [ |
| 1372 "NO_OP", |
| 1373 "EQUALS", |
| 1374 "NOT_EQUALS", |
| 1375 "IN", |
| 1376 "NOT_IN", |
| 1377 "DISCHARGED" |
| 1378 ], |
| 1379 "enumDescriptions": [ |
| 1380 "Default no-op.", |
| 1381 "DEPRECATED. Use IN instead.", |
| 1382 "DEPRECATED. Use NOT_IN instead.", |
| 1383 "Set-inclusion check.", |
| 1384 "Set-exclusion check.", |
| 1385 "Subject is discharged" |
| 1386 ], |
| 1387 "type": "string" |
| 1388 }, |
| 1389 "svc": { |
| 1390 "description": "Trusted attributes discharged by the service
.", |
| 1391 "type": "string" |
| 1392 }, |
| 1393 "sys": { |
| 1394 "description": "Trusted attributes supplied by any service t
hat owns resources and uses\nthe IAM system for access control.", |
| 1395 "enum": [ |
| 1396 "NO_ATTR", |
| 1397 "REGION", |
| 1398 "SERVICE", |
| 1399 "NAME", |
| 1400 "IP" |
| 1401 ], |
| 1402 "enumDescriptions": [ |
| 1403 "Default non-attribute type", |
| 1404 "Region of the resource", |
| 1405 "Service name", |
| 1406 "Resource name", |
| 1407 "IP address of the caller" |
| 1408 ], |
| 1409 "type": "string" |
| 1410 }, |
| 1411 "value": { |
| 1412 "description": "DEPRECATED. Use 'values' instead.", |
| 1413 "type": "string" |
| 1414 }, |
| 1415 "values": { |
| 1416 "description": "The objects of the condition. This is mutual
ly exclusive with 'value'.", |
| 1417 "items": { |
| 1418 "type": "string" |
| 1419 }, |
| 1420 "type": "array" |
| 1421 }, |
| 1422 "iam": { |
| 1423 "description": "Trusted attributes supplied by the IAM syste
m.", |
| 1424 "enum": [ |
| 1425 "NO_ATTR", |
| 1426 "AUTHORITY", |
| 1427 "ATTRIBUTION" |
| 1428 ], |
| 1429 "enumDescriptions": [ |
| 1430 "Default non-attribute.", |
| 1431 "Either principal or (if present) authority selector.", |
| 1432 "The principal (even if an authority selector is present
), which\nmust only be used for attribution, not authorization." |
| 1433 ], |
| 1434 "type": "string" |
| 1435 } |
| 1436 }, |
| 1437 "type": "object" |
| 1438 }, |
| 1439 "CounterOptions": { |
| 1440 "description": "Options for counters", |
| 1441 "id": "CounterOptions", |
| 1442 "properties": { |
| 1443 "metric": { |
| 1444 "description": "The metric to update.", |
| 1445 "type": "string" |
| 1446 }, |
| 1447 "field": { |
| 1448 "description": "The field value to attribute.", |
| 1449 "type": "string" |
| 1450 } |
| 1451 }, |
| 1452 "type": "object" |
| 1453 }, |
| 1454 "AuditLogConfig": { |
| 1455 "description": "Provides the configuration for logging a type of per
missions.\nExample:\n\n {\n \"audit_log_configs\": [\n {\n
\"log_type\": \"DATA_READ\",\n \"exempted_members\": [\n
\"user:foo@gmail.com\"\n ]\n },\n {\n \"log_type
\": \"DATA_WRITE\",\n }\n ]\n }\n\nThis enables 'DATA_READ' and '
DATA_WRITE' logging, while exempting\nfoo@gmail.com from DATA_READ logging.", |
| 1456 "id": "AuditLogConfig", |
| 1457 "properties": { |
| 1458 "exemptedMembers": { |
| 1459 "description": "Specifies the identities that do not cause l
ogging for this type of\npermission.\nFollows the same format of Binding.members
.", |
| 1460 "items": { |
| 1461 "type": "string" |
| 1462 }, |
| 1463 "type": "array" |
| 1464 }, |
| 1465 "logType": { |
| 1466 "description": "The log type that this config enables.", |
| 1467 "enum": [ |
| 1468 "LOG_TYPE_UNSPECIFIED", |
| 1469 "ADMIN_READ", |
| 1470 "DATA_WRITE", |
| 1471 "DATA_READ" |
| 1472 ], |
| 1473 "enumDescriptions": [ |
| 1474 "Default case. Should never be this.", |
| 1475 "Admin reads. Example: CloudIAM getIamPolicy", |
| 1476 "Data writes. Example: CloudSQL Users create", |
| 1477 "Data reads. Example: CloudSQL Users list" |
| 1478 ], |
| 1479 "type": "string" |
1480 } | 1480 } |
1481 }, | 1481 }, |
1482 "type": "object" | 1482 "type": "object" |
1483 } | 1483 } |
1484 }, | 1484 }, |
1485 "servicePath": "", | 1485 "servicePath": "", |
1486 "title": "Google Cloud KMS API", | 1486 "title": "Google Cloud Key Management Service (KMS) API", |
1487 "version": "v1beta1" | 1487 "version": "v1beta1" |
1488 } | 1488 } |
OLD | NEW |