googleapis.com – accesscontextmanager
An API for setting attribute based access control to requests to Google Cloud services.
- Homepage
- https://api.apis.guru/v2/specs/googleapis.com:accesscontextmanager/v1.json
- Provider
- googleapis.com:accesscontextmanager / accesscontextmanager
- OpenAPI version
- 3.0.0
- Spec (JSON)
- https://api.apis.guru/v2/specs/googleapis.com/accesscontextmanager/v1/openapi.json
- Spec (YAML)
- https://api.apis.guru/v2/specs/googleapis.com/accesscontextmanager/v1/openapi.yaml
Tools (22)
Extracted live via the executor SDK.
-
accessPolicies.accesscontextmanagerAccessPoliciesAccessLevelsCreateCreates an access level. The long-running operation from this RPC has a successful status after the access level propagates to long-lasting storage. If access levels contain errors, an error response is returned for the first error encountered.
-
accessPolicies.accesscontextmanagerAccessPoliciesAccessLevelsListLists all access levels for an access policy.
-
accessPolicies.accesscontextmanagerAccessPoliciesAccessLevelsReplaceAllReplaces all existing access levels in an access policy with the access levels provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. If the replacement contains errors, an error response is returned for the first error encountered. Upon error, the replacement is cancelled, and existing access levels are not affected. The Operation.response field contains ReplaceAccessLevelsResponse. Removing access levels contained in existing service perimeters result in an error.
-
accessPolicies.accesscontextmanagerAccessPoliciesAuthorizedOrgsDescsCreateCreates an authorized orgs desc. The long-running operation from this RPC has a successful status after the authorized orgs desc propagates to long-lasting storage. If a authorized orgs desc contains errors, an error response is returned for the first error encountered. The name of this
AuthorizedOrgsDescwill be assigned during creation. -
accessPolicies.accesscontextmanagerAccessPoliciesAuthorizedOrgsDescsListLists all authorized orgs descs for an access policy.
-
accessPolicies.accesscontextmanagerAccessPoliciesCreateCreates an access policy. This method fails if the organization already has an access policy. The long-running operation has a successful status after the access policy propagates to long-lasting storage. Syntactic and basic semantic errors are returned in
metadataas a BadRequest proto. -
accessPolicies.accesscontextmanagerAccessPoliciesGetIamPolicyGets the IAM policy for the specified Access Context Manager access policy.
-
accessPolicies.accesscontextmanagerAccessPoliciesListLists all access policies in an organization.
-
accessPolicies.accesscontextmanagerAccessPoliciesServicePerimetersCommitCommits the dry-run specification for all the service perimeters in an access policy. A commit operation on a service perimeter involves copying its
specfield to thestatusfield of the service perimeter. Only service perimeters withuse_explicit_dry_run_specfield set to true are affected by a commit operation. The long-running operation from this RPC has a successful status after the dry-run specifications for all the service perimeters have been committed. If a commit fails, it causes the long-running operation to return an error response and the entire commit operation is cancelled. When successful, the Operation.response field contains CommitServicePerimetersResponse. Thedry_runand thespecfields are cleared after a successful commit operation. -
accessPolicies.accesscontextmanagerAccessPoliciesServicePerimetersCreateCreates a service perimeter. The long-running operation from this RPC has a successful status after the service perimeter propagates to long-lasting storage. If a service perimeter contains errors, an error response is returned for the first error encountered.
-
accessPolicies.accesscontextmanagerAccessPoliciesServicePerimetersListLists all service perimeters for an access policy.
-
accessPolicies.accesscontextmanagerAccessPoliciesServicePerimetersReplaceAllReplace all existing service perimeters in an access policy with the service perimeters provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. Replacements containing errors result in an error response for the first error encountered. Upon an error, replacement are cancelled and existing service perimeters are not affected. The Operation.response field contains ReplaceServicePerimetersResponse.
-
accessPolicies.accesscontextmanagerAccessPoliciesServicePerimetersTestIamPermissionsReturns the IAM permissions that the caller has on the specified Access Context Manager resource. The resource can be an AccessPolicy, AccessLevel, or ServicePerimeter. This method does not support other resources.
-
accessPolicies.accesscontextmanagerAccessPoliciesSetIamPolicySets the IAM policy for the specified Access Context Manager access policy. This method replaces the existing IAM policy on the access policy. The IAM policy controls the set of users who can perform specific operations on the Access Context Manager access policy.
-
operations.accesscontextmanagerOperationsCancelStarts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns
google.rpc.Code.UNIMPLEMENTED. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding toCode.CANCELLED. -
organizations.accesscontextmanagerOrganizationsGcpUserAccessBindingsCreateCreates a GcpUserAccessBinding. If the client specifies a name, the server ignores it. Fails if a resource already exists with the same group_key. Completion of this long-running operation does not necessarily signify that the new binding is deployed onto all affected users, which may take more time.
-
organizations.accesscontextmanagerOrganizationsGcpUserAccessBindingsDeleteDeletes a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that the binding deletion is deployed onto all affected users, which may take more time.
-
organizations.accesscontextmanagerOrganizationsGcpUserAccessBindingsGetGets the GcpUserAccessBinding with the given name.
-
organizations.accesscontextmanagerOrganizationsGcpUserAccessBindingsListLists all GcpUserAccessBindings for a Google Cloud organization.
-
organizations.accesscontextmanagerOrganizationsGcpUserAccessBindingsPatchUpdates a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that the changed binding is deployed onto all affected users, which may take more time.
-
openapi.previewSpecPreview an OpenAPI document before adding it as a source
-
openapi.addSourceAdd an OpenAPI source and register its operations as tools