Show / Hide Table of Contents

Class V1Resource

The "v1" collection of methods.

Inheritance
object
V1Resource
Inherited Members
object.Equals(object)
object.Equals(object, object)
object.GetHashCode()
object.GetType()
object.MemberwiseClone()
object.ReferenceEquals(object, object)
object.ToString()
Namespace: Google.Apis.CloudAsset.v1
Assembly: Google.Apis.CloudAsset.v1.dll
Syntax
public class V1Resource

Constructors

V1Resource(IClientService)

Constructs a new resource.

Declaration
public V1Resource(IClientService service)
Parameters
Type Name Description
IClientService service

Methods

AnalyzeIamPolicy(string)

Analyzes IAM policies to answer which identities have what accesses on which resources.

Declaration
public virtual V1Resource.AnalyzeIamPolicyRequest AnalyzeIamPolicy(string scope)
Parameters
Type Name Description
string scope

Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed. This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here. To know how to get folder or project id, visit here.

Returns
Type Description
V1Resource.AnalyzeIamPolicyRequest

AnalyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest, string)

Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Google Cloud Storage or a BigQuery destination. For Cloud Storage destination, the output format is the JSON format that represents a AnalyzeIamPolicyResponse. This method implements the google.longrunning.Operation, which allows you to track the operation status. We recommend intervals of at least 2 seconds with exponential backoff retry to poll the operation result. The metadata contains the metadata for the long-running operation.

Declaration
public virtual V1Resource.AnalyzeIamPolicyLongrunningRequest AnalyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest body, string scope)
Parameters
Type Name Description
AnalyzeIamPolicyLongrunningRequest body

The body of the request.

string scope

Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed. This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here. To know how to get folder or project id, visit here.

Returns
Type Description
V1Resource.AnalyzeIamPolicyLongrunningRequest

AnalyzeMove(string)

Analyze moving a resource to a specified destination without kicking off the actual move. The analysis is best effort depending on the user's permissions of viewing different hierarchical policies and configurations. The policies and configuration are subject to change before the actual resource migration takes place.

Declaration
public virtual V1Resource.AnalyzeMoveRequest AnalyzeMove(string resource)
Parameters
Type Name Description
string resource

Required. Name of the resource to perform the analysis against. Only Google Cloud projects are supported as of today. Hence, this can only be a project ID (such as "projects/my-project-id") or a project number (such as "projects/12345").

Returns
Type Description
V1Resource.AnalyzeMoveRequest

AnalyzeOrgPolicies(string)

Analyzes organization policies under a scope.

Declaration
public virtual V1Resource.AnalyzeOrgPoliciesRequest AnalyzeOrgPolicies(string scope)
Parameters
Type Name Description
string scope

Required. The organization to scope the request. Only organization policies within the scope will be analyzed. * organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")

Returns
Type Description
V1Resource.AnalyzeOrgPoliciesRequest

AnalyzeOrgPolicyGovernedAssets(string)

Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. This RPC supports custom constraints and the following 10 canned constraints: * storage.uniformBucketLevelAccess * iam.disableServiceAccountKeyCreation * iam.allowedPolicyMemberDomains * compute.vmExternalIpAccess * appengine.enforceServiceAccountActAsCheck * gcp.resourceLocations * compute.trustedImageProjects * compute.skipDefaultNetworkCreation * compute.requireOsLogin * compute.disableNestedVirtualization This RPC only returns either resources of types supported by searchable asset types, or IAM policies.

Declaration
public virtual V1Resource.AnalyzeOrgPolicyGovernedAssetsRequest AnalyzeOrgPolicyGovernedAssets(string scope)
Parameters
Type Name Description
string scope

Required. The organization to scope the request. Only organization policies within the scope will be analyzed. The output assets will also be limited to the ones governed by those in-scope organization policies. * organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")

Returns
Type Description
V1Resource.AnalyzeOrgPolicyGovernedAssetsRequest

AnalyzeOrgPolicyGovernedContainers(string)

Analyzes organization policies governed containers (projects, folders or organization) under a scope.

Declaration
public virtual V1Resource.AnalyzeOrgPolicyGovernedContainersRequest AnalyzeOrgPolicyGovernedContainers(string scope)
Parameters
Type Name Description
string scope

Required. The organization to scope the request. Only organization policies within the scope will be analyzed. The output containers will also be limited to the ones governed by those in-scope organization policies. * organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")

Returns
Type Description
V1Resource.AnalyzeOrgPolicyGovernedContainersRequest

BatchGetAssetsHistory(string)

Batch gets the update history of assets that overlap a time window. For IAM_POLICY content, this API outputs history when the asset and its attached IAM POLICY both exist. This can create gaps in the output history. Otherwise, this API outputs history with asset in both non-delete or deleted status. If a specified asset does not exist, this API returns an INVALID_ARGUMENT error.

Declaration
public virtual V1Resource.BatchGetAssetsHistoryRequest BatchGetAssetsHistory(string parent)
Parameters
Type Name Description
string parent

Required. The relative name of the root asset. It can only be an organization number (such as "organizations/123"), a project ID (such as "projects/my-project-id")", or a project number (such as "projects/12345").

Returns
Type Description
V1Resource.BatchGetAssetsHistoryRequest

ExportAssets(ExportAssetsRequest, string)

Exports assets with time and resource types to a given Cloud Storage location/BigQuery table. For Cloud Storage location destinations, the output format is newline-delimited JSON. Each line represents a google.cloud.asset.v1.Asset in the JSON format; for BigQuery table destinations, the output table stores the fields in asset Protobuf as columns. This API implements the google.longrunning.Operation API, which allows you to keep track of the export. We recommend intervals of at least 2 seconds with exponential retry to poll the export operation result. For regular-size resource parent, the export operation usually finishes within 5 minutes.

Declaration
public virtual V1Resource.ExportAssetsRequest ExportAssets(ExportAssetsRequest body, string parent)
Parameters
Type Name Description
ExportAssetsRequest body

The body of the request.

string parent

Required. The relative name of the root asset. This can only be an organization number (such as "organizations/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"), or a folder number (such as "folders/123").

Returns
Type Description
V1Resource.ExportAssetsRequest

QueryAssets(QueryAssetsRequest, string)

Issue a job that queries assets using a SQL statement compatible with BigQuery SQL. If the query execution finishes within timeout and there's no pagination, the full query results will be returned in the QueryAssetsResponse. Otherwise, full query results can be obtained by issuing extra requests with the job_reference from the a previous QueryAssets call. Note, the query result has approximately 10 GB limitation enforced by BigQuery. Queries return larger results will result in errors.

Declaration
public virtual V1Resource.QueryAssetsRequest QueryAssets(QueryAssetsRequest body, string parent)
Parameters
Type Name Description
QueryAssetsRequest body

The body of the request.

string parent

Required. The relative name of the root asset. This can only be an organization number (such as "organizations/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"), or a folder number (such as "folders/123"). Only assets belonging to the parent will be returned.

Returns
Type Description
V1Resource.QueryAssetsRequest

SearchAllIamPolicies(string)

Searches all IAM policies within the specified scope, such as a project, folder, or organization. The caller must be granted the cloudasset.assets.searchAllIamPolicies permission on the desired scope, otherwise the request will be rejected.

Declaration
public virtual V1Resource.SearchAllIamPoliciesRequest SearchAllIamPolicies(string scope)
Parameters
Type Name Description
string scope

Required. A scope can be a project, a folder, or an organization. The search is limited to the IAM policies within the scope. The caller must be granted the cloudasset.assets.searchAllIamPolicies permission on the desired scope. The allowed values are: * projects/{PROJECT_ID} (e.g., "projects/foo-bar")

  • projects/{PROJECT_NUMBER} (e.g., "projects/12345678") * folders/{FOLDER_NUMBER} (e.g., "folders/1234567")
  • organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
Returns
Type Description
V1Resource.SearchAllIamPoliciesRequest

SearchAllResources(string)

Searches all Google Cloud resources within the specified scope, such as a project, folder, or organization. The caller must be granted the cloudasset.assets.searchAllResources permission on the desired scope, otherwise the request will be rejected.

Declaration
public virtual V1Resource.SearchAllResourcesRequest SearchAllResources(string scope)
Parameters
Type Name Description
string scope

Required. A scope can be a project, a folder, or an organization. The search is limited to the resources within the scope. The caller must be granted the cloudasset.assets.searchAllResources permission on the desired scope. The allowed values are: * projects/{PROJECT_ID} (e.g., "projects/foo-bar")

  • projects/{PROJECT_NUMBER} (e.g., "projects/12345678") * folders/{FOLDER_NUMBER} (e.g., "folders/1234567")
  • organizations/{ORGANIZATION_NUMBER} (e.g., "organizations/123456")
Returns
Type Description
V1Resource.SearchAllResourcesRequest
In This Article
Back to top Generated by DocFX