|
197 | 197 | "type": "string" |
198 | 198 | }, |
199 | 199 | "pageSize": { |
200 | | - "description": "Optional. Page size. If a value is not specified, the default value of 10 is used.", |
| 200 | + "description": "Optional. Page size. If a value is not specified, the default value of 10 is used. The maximum value is 50.", |
201 | 201 | "format": "int32", |
202 | 202 | "location": "query", |
203 | 203 | "type": "integer" |
|
291 | 291 | "https://www.googleapis.com/auth/cloud-platform" |
292 | 292 | ] |
293 | 293 | }, |
| 294 | + "enableComplianceUpdates": { |
| 295 | + "description": "This endpoint enables Assured Workloads service to offer compliance updates for the folder based assured workload. It sets up an Assured Workloads Service Agent, having permissions to read compliance controls (for example: Org Policies) applied on the workload. The caller must have `resourcemanager.folders.getIamPolicy` and `resourcemanager.folders.setIamPolicy` permissions on the assured workload folder.", |
| 296 | + "flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}:enableComplianceUpdates", |
| 297 | + "httpMethod": "PUT", |
| 298 | + "id": "assuredworkloads.organizations.locations.workloads.enableComplianceUpdates", |
| 299 | + "parameterOrder": [ |
| 300 | + "name" |
| 301 | + ], |
| 302 | + "parameters": { |
| 303 | + "name": { |
| 304 | + "description": "Required. The `name` field is used to identify the workload. Format: organizations/{org_id}/locations/{location_id}/workloads/{workload_id}", |
| 305 | + "location": "path", |
| 306 | + "pattern": "^organizations/[^/]+/locations/[^/]+/workloads/[^/]+$", |
| 307 | + "required": true, |
| 308 | + "type": "string" |
| 309 | + } |
| 310 | + }, |
| 311 | + "path": "v1/{+name}:enableComplianceUpdates", |
| 312 | + "response": { |
| 313 | + "$ref": "GoogleCloudAssuredworkloadsV1EnableComplianceUpdatesResponse" |
| 314 | + }, |
| 315 | + "scopes": [ |
| 316 | + "https://www.googleapis.com/auth/cloud-platform" |
| 317 | + ] |
| 318 | + }, |
294 | 319 | "enableResourceMonitoring": { |
295 | 320 | "description": "Enable resource violation monitoring for a workload.", |
296 | 321 | "flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}:enableResourceMonitoring", |
|
474 | 499 | } |
475 | 500 | }, |
476 | 501 | "resources": { |
| 502 | + "updates": { |
| 503 | + "methods": { |
| 504 | + "apply": { |
| 505 | + "description": "This endpoint creates a new operation to apply the given update.", |
| 506 | + "flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}/updates/{updatesId}:apply", |
| 507 | + "httpMethod": "POST", |
| 508 | + "id": "assuredworkloads.organizations.locations.workloads.updates.apply", |
| 509 | + "parameterOrder": [ |
| 510 | + "name" |
| 511 | + ], |
| 512 | + "parameters": { |
| 513 | + "name": { |
| 514 | + "description": "Required. The resource name of the update. Format: organizations/{org_id}/locations/{location_id}/workloads/{workload_id}/updates/{update_id}", |
| 515 | + "location": "path", |
| 516 | + "pattern": "^organizations/[^/]+/locations/[^/]+/workloads/[^/]+/updates/[^/]+$", |
| 517 | + "required": true, |
| 518 | + "type": "string" |
| 519 | + } |
| 520 | + }, |
| 521 | + "path": "v1/{+name}:apply", |
| 522 | + "request": { |
| 523 | + "$ref": "GoogleCloudAssuredworkloadsV1ApplyWorkloadUpdateRequest" |
| 524 | + }, |
| 525 | + "response": { |
| 526 | + "$ref": "GoogleLongrunningOperation" |
| 527 | + }, |
| 528 | + "scopes": [ |
| 529 | + "https://www.googleapis.com/auth/cloud-platform" |
| 530 | + ] |
| 531 | + }, |
| 532 | + "list": { |
| 533 | + "description": "This endpoint lists all updates for the given workload.", |
| 534 | + "flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}/updates", |
| 535 | + "httpMethod": "GET", |
| 536 | + "id": "assuredworkloads.organizations.locations.workloads.updates.list", |
| 537 | + "parameterOrder": [ |
| 538 | + "parent" |
| 539 | + ], |
| 540 | + "parameters": { |
| 541 | + "pageSize": { |
| 542 | + "description": "Page size. The default value is 20 and the max allowed value is 100.", |
| 543 | + "format": "int32", |
| 544 | + "location": "query", |
| 545 | + "type": "integer" |
| 546 | + }, |
| 547 | + "pageToken": { |
| 548 | + "description": "Page token returned from previous request.", |
| 549 | + "location": "query", |
| 550 | + "type": "string" |
| 551 | + }, |
| 552 | + "parent": { |
| 553 | + "description": "Required. organizations/{org_id}/locations/{location_id}/workloads/{workload_id}", |
| 554 | + "location": "path", |
| 555 | + "pattern": "^organizations/[^/]+/locations/[^/]+/workloads/[^/]+$", |
| 556 | + "required": true, |
| 557 | + "type": "string" |
| 558 | + } |
| 559 | + }, |
| 560 | + "path": "v1/{+parent}/updates", |
| 561 | + "response": { |
| 562 | + "$ref": "GoogleCloudAssuredworkloadsV1ListWorkloadUpdatesResponse" |
| 563 | + }, |
| 564 | + "scopes": [ |
| 565 | + "https://www.googleapis.com/auth/cloud-platform" |
| 566 | + ] |
| 567 | + } |
| 568 | + } |
| 569 | + }, |
477 | 570 | "violations": { |
478 | 571 | "methods": { |
479 | 572 | "acknowledge": { |
|
591 | 684 | } |
592 | 685 | } |
593 | 686 | }, |
594 | | - "revision": "20250213", |
| 687 | + "revision": "20250410", |
595 | 688 | "rootUrl": "https://assuredworkloads.googleapis.com/", |
596 | 689 | "schemas": { |
597 | 690 | "GoogleCloudAssuredworkloadsV1AcknowledgeViolationRequest": { |
|
648 | 741 | }, |
649 | 742 | "type": "object" |
650 | 743 | }, |
| 744 | + "GoogleCloudAssuredworkloadsV1ApplyWorkloadUpdateOperationMetadata": { |
| 745 | + "description": "Operation metadata to give request details of ApplyWorkloadUpdate.", |
| 746 | + "id": "GoogleCloudAssuredworkloadsV1ApplyWorkloadUpdateOperationMetadata", |
| 747 | + "properties": { |
| 748 | + "action": { |
| 749 | + "description": "Optional. The time the operation was created.", |
| 750 | + "enum": [ |
| 751 | + "WORKLOAD_UPDATE_ACTION_UNSPECIFIED", |
| 752 | + "APPLY" |
| 753 | + ], |
| 754 | + "enumDescriptions": [ |
| 755 | + "Unspecified value.", |
| 756 | + "The update is applied." |
| 757 | + ], |
| 758 | + "type": "string" |
| 759 | + }, |
| 760 | + "createTime": { |
| 761 | + "description": "Optional. Output only. The time the operation was created.", |
| 762 | + "format": "google-datetime", |
| 763 | + "readOnly": true, |
| 764 | + "type": "string" |
| 765 | + }, |
| 766 | + "updateName": { |
| 767 | + "description": "Required. The resource name of the update", |
| 768 | + "type": "string" |
| 769 | + } |
| 770 | + }, |
| 771 | + "type": "object" |
| 772 | + }, |
| 773 | + "GoogleCloudAssuredworkloadsV1ApplyWorkloadUpdateRequest": { |
| 774 | + "description": "Request to apply update to a workload.", |
| 775 | + "id": "GoogleCloudAssuredworkloadsV1ApplyWorkloadUpdateRequest", |
| 776 | + "properties": { |
| 777 | + "action": { |
| 778 | + "description": "The action to be performed on the update.", |
| 779 | + "enum": [ |
| 780 | + "WORKLOAD_UPDATE_ACTION_UNSPECIFIED", |
| 781 | + "APPLY" |
| 782 | + ], |
| 783 | + "enumDescriptions": [ |
| 784 | + "Unspecified value.", |
| 785 | + "The update is applied." |
| 786 | + ], |
| 787 | + "type": "string" |
| 788 | + } |
| 789 | + }, |
| 790 | + "type": "object" |
| 791 | + }, |
| 792 | + "GoogleCloudAssuredworkloadsV1ApplyWorkloadUpdateResponse": { |
| 793 | + "description": "Response for ApplyWorkloadUpdate endpoint.", |
| 794 | + "id": "GoogleCloudAssuredworkloadsV1ApplyWorkloadUpdateResponse", |
| 795 | + "properties": { |
| 796 | + "appliedUpdate": { |
| 797 | + "$ref": "GoogleCloudAssuredworkloadsV1WorkloadUpdate", |
| 798 | + "description": "The update that was applied." |
| 799 | + } |
| 800 | + }, |
| 801 | + "type": "object" |
| 802 | + }, |
651 | 803 | "GoogleCloudAssuredworkloadsV1AssetMoveAnalysis": { |
652 | 804 | "description": "Represents move analysis results for an asset.", |
653 | 805 | "id": "GoogleCloudAssuredworkloadsV1AssetMoveAnalysis", |
|
775 | 927 | }, |
776 | 928 | "type": "object" |
777 | 929 | }, |
| 930 | + "GoogleCloudAssuredworkloadsV1EnableComplianceUpdatesResponse": { |
| 931 | + "description": "Response for EnableComplianceUpdates endpoint.", |
| 932 | + "id": "GoogleCloudAssuredworkloadsV1EnableComplianceUpdatesResponse", |
| 933 | + "properties": {}, |
| 934 | + "type": "object" |
| 935 | + }, |
778 | 936 | "GoogleCloudAssuredworkloadsV1EnableResourceMonitoringResponse": { |
779 | 937 | "description": "Response for EnableResourceMonitoring endpoint.", |
780 | 938 | "id": "GoogleCloudAssuredworkloadsV1EnableResourceMonitoringResponse", |
|
799 | 957 | }, |
800 | 958 | "type": "object" |
801 | 959 | }, |
| 960 | + "GoogleCloudAssuredworkloadsV1ListWorkloadUpdatesResponse": { |
| 961 | + "description": "Response of listing the compliance updates per workload with pagination.", |
| 962 | + "id": "GoogleCloudAssuredworkloadsV1ListWorkloadUpdatesResponse", |
| 963 | + "properties": { |
| 964 | + "nextPageToken": { |
| 965 | + "description": "The next page token. Return empty if reached the last page.", |
| 966 | + "type": "string" |
| 967 | + }, |
| 968 | + "workloadUpdates": { |
| 969 | + "description": "The list of workload updates for a given workload.", |
| 970 | + "items": { |
| 971 | + "$ref": "GoogleCloudAssuredworkloadsV1WorkloadUpdate" |
| 972 | + }, |
| 973 | + "type": "array" |
| 974 | + } |
| 975 | + }, |
| 976 | + "type": "object" |
| 977 | + }, |
802 | 978 | "GoogleCloudAssuredworkloadsV1ListWorkloadsResponse": { |
803 | 979 | "description": "Response of ListWorkloads endpoint.", |
804 | 980 | "id": "GoogleCloudAssuredworkloadsV1ListWorkloadsResponse", |
|
888 | 1064 | }, |
889 | 1065 | "type": "object" |
890 | 1066 | }, |
| 1067 | + "GoogleCloudAssuredworkloadsV1OrgPolicy": { |
| 1068 | + "description": "This assured workload service object is used to represent the org policy attached to a resource. It servces the same purpose as the orgpolicy.v2.Policy object but with functionality that is limited to what is supported by Assured Workloads(e.g. only one rule under one OrgPolicy object, no conditions, etc).", |
| 1069 | + "id": "GoogleCloudAssuredworkloadsV1OrgPolicy", |
| 1070 | + "properties": { |
| 1071 | + "constraint": { |
| 1072 | + "description": "The constraint name of the OrgPolicy. e.g. \"constraints/gcp.resourceLocations\".", |
| 1073 | + "type": "string" |
| 1074 | + }, |
| 1075 | + "inherit": { |
| 1076 | + "description": "If `inherit` is true, policy rules of the lowest ancestor in the resource hierarchy chain are inherited. If it is false, policy rules are not inherited.", |
| 1077 | + "type": "boolean" |
| 1078 | + }, |
| 1079 | + "reset": { |
| 1080 | + "description": "Ignores policies set above this resource and restores to the `constraint_default` value. `reset` can only be true when `rules` is empty and `inherit` is false.", |
| 1081 | + "type": "boolean" |
| 1082 | + }, |
| 1083 | + "resource": { |
| 1084 | + "description": "Resource that the OrgPolicy attaches to. Format: folders/123\" projects/123\".", |
| 1085 | + "type": "string" |
| 1086 | + }, |
| 1087 | + "rule": { |
| 1088 | + "$ref": "GoogleCloudAssuredworkloadsV1OrgPolicyPolicyRule", |
| 1089 | + "description": "The rule of the OrgPolicy." |
| 1090 | + } |
| 1091 | + }, |
| 1092 | + "type": "object" |
| 1093 | + }, |
| 1094 | + "GoogleCloudAssuredworkloadsV1OrgPolicyPolicyRule": { |
| 1095 | + "description": "A rule used to express this policy.", |
| 1096 | + "id": "GoogleCloudAssuredworkloadsV1OrgPolicyPolicyRule", |
| 1097 | + "properties": { |
| 1098 | + "allowAll": { |
| 1099 | + "description": "ListPolicy only when all values are allowed.", |
| 1100 | + "type": "boolean" |
| 1101 | + }, |
| 1102 | + "denyAll": { |
| 1103 | + "description": "ListPolicy only when all values are denied.", |
| 1104 | + "type": "boolean" |
| 1105 | + }, |
| 1106 | + "enforce": { |
| 1107 | + "description": "BooleanPolicy only.", |
| 1108 | + "type": "boolean" |
| 1109 | + }, |
| 1110 | + "values": { |
| 1111 | + "$ref": "GoogleCloudAssuredworkloadsV1OrgPolicyPolicyRuleStringValues", |
| 1112 | + "description": "ListPolicy only when custom values are specified." |
| 1113 | + } |
| 1114 | + }, |
| 1115 | + "type": "object" |
| 1116 | + }, |
| 1117 | + "GoogleCloudAssuredworkloadsV1OrgPolicyPolicyRuleStringValues": { |
| 1118 | + "description": "The values allowed for a ListPolicy.", |
| 1119 | + "id": "GoogleCloudAssuredworkloadsV1OrgPolicyPolicyRuleStringValues", |
| 1120 | + "properties": { |
| 1121 | + "allowedValues": { |
| 1122 | + "description": "List of values allowed at this resource.", |
| 1123 | + "items": { |
| 1124 | + "type": "string" |
| 1125 | + }, |
| 1126 | + "type": "array" |
| 1127 | + }, |
| 1128 | + "deniedValues": { |
| 1129 | + "description": "List of values denied at this resource.", |
| 1130 | + "items": { |
| 1131 | + "type": "string" |
| 1132 | + }, |
| 1133 | + "type": "array" |
| 1134 | + } |
| 1135 | + }, |
| 1136 | + "type": "object" |
| 1137 | + }, |
| 1138 | + "GoogleCloudAssuredworkloadsV1OrgPolicyUpdate": { |
| 1139 | + "description": "Represents an update for an org policy control applied on an Assured Workload resource. The inherited org policy is not considered.", |
| 1140 | + "id": "GoogleCloudAssuredworkloadsV1OrgPolicyUpdate", |
| 1141 | + "properties": { |
| 1142 | + "appliedPolicy": { |
| 1143 | + "$ref": "GoogleCloudAssuredworkloadsV1OrgPolicy", |
| 1144 | + "description": "The org policy currently applied on the assured workload resource." |
| 1145 | + }, |
| 1146 | + "suggestedPolicy": { |
| 1147 | + "$ref": "GoogleCloudAssuredworkloadsV1OrgPolicy", |
| 1148 | + "description": "The suggested org policy that replaces the applied policy." |
| 1149 | + } |
| 1150 | + }, |
| 1151 | + "type": "object" |
| 1152 | + }, |
891 | 1153 | "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest": { |
892 | 1154 | "description": "Request for restricting list of available resources in Workload environment.", |
893 | 1155 | "id": "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest", |
|
917 | 1179 | "properties": {}, |
918 | 1180 | "type": "object" |
919 | 1181 | }, |
| 1182 | + "GoogleCloudAssuredworkloadsV1UpdateDetails": { |
| 1183 | + "description": "The details of the update.", |
| 1184 | + "id": "GoogleCloudAssuredworkloadsV1UpdateDetails", |
| 1185 | + "properties": { |
| 1186 | + "orgPolicyUpdate": { |
| 1187 | + "$ref": "GoogleCloudAssuredworkloadsV1OrgPolicyUpdate", |
| 1188 | + "description": "Update to one org policy, e.g. gcp.resourceLocation." |
| 1189 | + } |
| 1190 | + }, |
| 1191 | + "type": "object" |
| 1192 | + }, |
920 | 1193 | "GoogleCloudAssuredworkloadsV1Violation": { |
921 | 1194 | "description": "Workload monitoring Violation.", |
922 | 1195 | "id": "GoogleCloudAssuredworkloadsV1Violation", |
|
1663 | 1936 | }, |
1664 | 1937 | "type": "object" |
1665 | 1938 | }, |
| 1939 | + "GoogleCloudAssuredworkloadsV1WorkloadUpdate": { |
| 1940 | + "description": "A workload update is a change to the workload's compliance configuration.", |
| 1941 | + "id": "GoogleCloudAssuredworkloadsV1WorkloadUpdate", |
| 1942 | + "properties": { |
| 1943 | + "createTime": { |
| 1944 | + "description": "The time the update was created.", |
| 1945 | + "format": "google-datetime", |
| 1946 | + "type": "string" |
| 1947 | + }, |
| 1948 | + "details": { |
| 1949 | + "$ref": "GoogleCloudAssuredworkloadsV1UpdateDetails", |
| 1950 | + "description": "The details of the update." |
| 1951 | + }, |
| 1952 | + "name": { |
| 1953 | + "description": "Output only. Immutable. Identifier. Resource name of the WorkloadUpdate. Format: organizations/{organization}/locations/{location}/workloads/{workload}/updates/{update}", |
| 1954 | + "readOnly": true, |
| 1955 | + "type": "string" |
| 1956 | + }, |
| 1957 | + "state": { |
| 1958 | + "description": "Output only. The state of the update.", |
| 1959 | + "enum": [ |
| 1960 | + "STATE_UNSPECIFIED", |
| 1961 | + "AVAILABLE", |
| 1962 | + "APPLIED", |
| 1963 | + "WITHDRAWN" |
| 1964 | + ], |
| 1965 | + "enumDescriptions": [ |
| 1966 | + "Unspecified.", |
| 1967 | + "The update is available to be applied.", |
| 1968 | + "The update has been applied.", |
| 1969 | + "The update has been withdrawn by the service." |
| 1970 | + ], |
| 1971 | + "readOnly": true, |
| 1972 | + "type": "string" |
| 1973 | + }, |
| 1974 | + "updateTime": { |
| 1975 | + "description": "The time the update was last updated.", |
| 1976 | + "format": "google-datetime", |
| 1977 | + "type": "string" |
| 1978 | + } |
| 1979 | + }, |
| 1980 | + "type": "object" |
| 1981 | + }, |
1666 | 1982 | "GoogleCloudAssuredworkloadsV1WorkloadWorkloadOptions": { |
1667 | 1983 | "description": "Options to be set for the given created workload.", |
1668 | 1984 | "id": "GoogleCloudAssuredworkloadsV1WorkloadWorkloadOptions", |
|
0 commit comments