Class V1Resource.AnalyzeOrgPolicyGovernedAssetsRequest
Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. This RPC supports custom constraints and the following canned constraints: * constraints/ainotebooks.accessMode * constraints/ainotebooks.disableFileDownloads * constraints/ainotebooks.disableRootAccess * constraints/ainotebooks.disableTerminal * constraints/ainotebooks.environmentOptions * constraints/ainotebooks.requireAutoUpgradeSchedule * constraints/ainotebooks.restrictVpcNetworks * constraints/compute.disableGuestAttributesAccess * constraints/compute.disableInstanceDataAccessApis * constraints/compute.disableNestedVirtualization * constraints/compute.disableSerialPortAccess * constraints/compute.disableSerialPortLogging * constraints/compute.disableVpcExternalIpv6 * constraints/compute.requireOsLogin * constraints/compute.requireShieldedVm * constraints/compute.restrictLoadBalancerCreationForTypes * constraints/compute.restrictProtocolForwardingCreationForTypes * constraints/compute.restrictXpnProjectLienRemoval * constraints/compute.setNewProjectDefaultToZonalDNSOnly * constraints/compute.skipDefaultNetworkCreation * constraints/compute.trustedImageProjects * constraints/compute.vmCanIpForward * constraints/compute.vmExternalIpAccess * constraints/gcp.detailedAuditLoggingMode * constraints/gcp.resourceLocations * constraints/iam.allowedPolicyMemberDomains * constraints/iam.automaticIamGrantsForDefaultServiceAccounts * constraints/iam.disableServiceAccountCreation * constraints/iam.disableServiceAccountKeyCreation * constraints/iam.disableServiceAccountKeyUpload * constraints/iam.restrictCrossProjectServiceAccountLienRemoval * constraints/iam.serviceAccountKeyExpiryHours
- constraints/resourcemanager.accessBoundaries * constraints/resourcemanager.allowedExportDestinations * constraints/sql.restrictAuthorizedNetworks * constraints/sql.restrictNoncompliantDiagnosticDataAccess * constraints/sql.restrictNoncompliantResourceCreation * constraints/sql.restrictPublicIp * constraints/storage.publicAccessPrevention * constraints/storage.restrictAuthTypes * constraints/storage.uniformBucketLevelAccess This RPC only returns either resources of types supported by search APIs or IAM policies.
Inheritance
Inherited Members
Namespace: Google.Apis.CloudAsset.v1
Assembly: Google.Apis.CloudAsset.v1.dll
Syntax
public class V1Resource.AnalyzeOrgPolicyGovernedAssetsRequest : CloudAssetBaseServiceRequest<AnalyzeOrgPolicyGovernedAssetsResponse>, IClientServiceRequest<AnalyzeOrgPolicyGovernedAssetsResponse>, IClientServiceRequest
Constructors
AnalyzeOrgPolicyGovernedAssetsRequest(IClientService, string)
Constructs a new AnalyzeOrgPolicyGovernedAssets request.
Declaration
public AnalyzeOrgPolicyGovernedAssetsRequest(IClientService service, string scope)
Parameters
Type | Name | Description |
---|---|---|
IClientService | service | |
string | scope |
Properties
Constraint
Required. The name of the constraint to analyze governed assets for. The analysis only contains analyzed organization policies for the provided constraint.
Declaration
[RequestParameter("constraint", RequestParameterType.Query)]
public virtual string Constraint { get; set; }
Property Value
Type | Description |
---|---|
string |
Filter
The expression to filter AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets. For governed resources,
filtering is currently available for bare literal values and the following fields: *
governed_resource.project * governed_resource.folders * consolidated_policy.rules.enforce When filtering
by governed_resource.project
or consolidated_policy.rules.enforce
, the only supported operator is
=
. When filtering by governed_resource.folders
, the supported operators are =
and :
. For
example, filtering by governed_resource.project="projects/12345678"
will return all the governed
resources under "projects/12345678", including the project itself if applicable. For governed IAM
policies, filtering is currently available for bare literal values and the following fields: *
governed_iam_policy.project * governed_iam_policy.folders * consolidated_policy.rules.enforce When
filtering by governed_iam_policy.project
or consolidated_policy.rules.enforce
, the only supported
operator is =
. When filtering by governed_iam_policy.folders
, the supported operators are =
and
:
. For example, filtering by governed_iam_policy.folders:"folders/12345678"
will return all the
governed IAM policies under "folders/001".
Declaration
[RequestParameter("filter", RequestParameterType.Query)]
public virtual string Filter { get; set; }
Property Value
Type | Description |
---|---|
string |
HttpMethod
Gets the HTTP method.
Declaration
public override string HttpMethod { get; }
Property Value
Type | Description |
---|---|
string |
Overrides
MethodName
Gets the method name.
Declaration
public override string MethodName { get; }
Property Value
Type | Description |
---|---|
string |
Overrides
PageSize
The maximum number of items to return per page. If unspecified, AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets will contain 100 items with a maximum of 200.
Declaration
[RequestParameter("pageSize", RequestParameterType.Query)]
public virtual int? PageSize { get; set; }
Property Value
Type | Description |
---|---|
int? |
PageToken
The pagination token to retrieve the next page.
Declaration
[RequestParameter("pageToken", RequestParameterType.Query)]
public virtual string PageToken { get; set; }
Property Value
Type | Description |
---|---|
string |
RestPath
Gets the REST path.
Declaration
public override string RestPath { get; }
Property Value
Type | Description |
---|---|
string |
Overrides
Scope
Required. The organization to scope the request. Only organization policies within the scope will be analyzed. The output assets will also be limited to the ones governed by those in-scope organization policies. * organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
Declaration
[RequestParameter("scope", RequestParameterType.Path)]
public virtual string Scope { get; }
Property Value
Type | Description |
---|---|
string |
Methods
InitParameters()
Initializes AnalyzeOrgPolicyGovernedAssets parameter list.
Declaration
protected override void InitParameters()