# Constants
See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.
# Structs
AccessSelector: Specifies roles and/or permissions to analyze, to determine both the identities possessing them and the resources they control.
AnalyzeIamPolicyLongrunningMetadata: Represents the metadata of the longrunning operation for the AnalyzeIamPolicyLongrunning rpc.
AnalyzeIamPolicyLongrunningResponse: A response message for AssetService.AnalyzeIamPolicyLongrunning.
AnalyzeIamPolicyResponse: A response message for AssetService.AnalyzeIamPolicy.
AuditConfig: Specifies the audit configuration for a service.
AuditLogConfig: Provides the configuration for logging a type of permissions.
Binding: Associates `members`, or principals, with a `role`.
ExportIamPolicyAnalysisRequest: A request message for AssetService.ExportIamPolicyAnalysis.
Expr: Represents a textual expression in the Common Expression Language (CEL) syntax.
GcsDestination: A Cloud Storage location.
GoogleCloudAssetV1p4beta1Access: An IAM role or permission under analysis.
GoogleCloudAssetV1p4beta1AccessControlList: An access control list, derived from the above IAM policy binding, which contains a set of resources and accesses.
GoogleCloudAssetV1p4beta1AnalysisState: Represents the detailed state of an entity under analysis, such as a resource, an identity or an access.
GoogleCloudAssetV1p4beta1Edge: A directional edge.
GoogleCloudAssetV1p4beta1Identity: An identity under analysis.
GoogleCloudAssetV1p4beta1Resource: A Google Cloud resource under analysis.
GoogleCloudAssetV1p7beta1Asset: An asset in Google Cloud.
GoogleCloudAssetV1p7beta1RelatedAsset: An asset identify in Google Cloud which contains its name, type and ancestors.
GoogleCloudAssetV1p7beta1RelatedAssets: The detailed related assets with the `relationship_type`.
GoogleCloudAssetV1p7beta1RelationshipAttributes: The relationship attributes which include `type`, `source_resource_type`, `target_resource_type` and `action`.
GoogleCloudAssetV1p7beta1Resource: A representation of a Google Cloud resource.
GoogleCloudOrgpolicyV1BooleanPolicy: Used in `policy_type` to specify how `boolean_policy` will behave at this resource.
GoogleCloudOrgpolicyV1ListPolicy: Used in `policy_type` to specify how `list_policy` behaves at this resource.
GoogleCloudOrgpolicyV1Policy: Defines a Cloud Organization `Policy` which is used to specify `Constraints` for configurations of Cloud Platform resources.
GoogleCloudOrgpolicyV1RestoreDefault: Ignores policies set above this resource and restores the `constraint_default` enforcement behavior of the specific `Constraint` at this resource.
GoogleIdentityAccesscontextmanagerV1AccessLevel: An `AccessLevel` is a label that can be applied to requests to Google Cloud services, along with a list of requirements necessary for the label to be applied.
GoogleIdentityAccesscontextmanagerV1AccessPolicy: `AccessPolicy` is a container for `AccessLevels` (which define the necessary attributes to use Google Cloud services) and `ServicePerimeters` (which define regions of services able to freely pass data within a perimeter).
GoogleIdentityAccesscontextmanagerV1ApiOperation: Identification for an API Operation.
GoogleIdentityAccesscontextmanagerV1BasicLevel: `BasicLevel` is an `AccessLevel` using a set of recommended features.
GoogleIdentityAccesscontextmanagerV1Condition: A condition necessary for an `AccessLevel` to be granted.
GoogleIdentityAccesscontextmanagerV1CustomLevel: `CustomLevel` is an `AccessLevel` using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request.
GoogleIdentityAccesscontextmanagerV1DevicePolicy: `DevicePolicy` specifies device specific restrictions necessary to acquire a given access level.
GoogleIdentityAccesscontextmanagerV1EgressFrom: Defines the conditions under which an EgressPolicy matches a request.
GoogleIdentityAccesscontextmanagerV1EgressPolicy: Policy for egress from perimeter.
GoogleIdentityAccesscontextmanagerV1EgressTo: Defines the conditions under which an EgressPolicy matches a request.
GoogleIdentityAccesscontextmanagerV1IngressFrom: Defines the conditions under which an IngressPolicy matches a request.
GoogleIdentityAccesscontextmanagerV1IngressPolicy: Policy for ingress into ServicePerimeter.
GoogleIdentityAccesscontextmanagerV1IngressSource: The source that IngressPolicy authorizes access from.
GoogleIdentityAccesscontextmanagerV1IngressTo: Defines the conditions under which an IngressPolicy matches a request.
GoogleIdentityAccesscontextmanagerV1MethodSelector: An allowed method or permission of a service specified in ApiOperation.
GoogleIdentityAccesscontextmanagerV1OsConstraint: A restriction on the OS type and version of devices making requests.
GoogleIdentityAccesscontextmanagerV1ServicePerimeter: `ServicePerimeter` describes a set of Google Cloud resources which can freely import and export data amongst themselves, but not export outside of the `ServicePerimeter`.
GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig: `ServicePerimeterConfig` specifies a set of Google Cloud resources that describe specific Service Perimeter configuration.
GoogleIdentityAccesscontextmanagerV1VpcAccessibleServices: Specifies how APIs are allowed to communicate within the Service Perimeter.
IamPolicyAnalysis: An analysis message to group the query and results.
IamPolicyAnalysisOutputConfig: Output configuration for export IAM policy analysis destination.
IamPolicyAnalysisQuery: IAM policy analysis query message.
IamPolicyAnalysisResult: IAM Policy analysis result, consisting of one IAM policy binding and derived access control lists.
IdentitySelector: Specifies an identity for which to determine resource access, based on roles assigned either directly to them or to the groups they belong to, directly or indirectly.
Operation: This resource represents a long-running operation that is the result of a network API call.
Options: Contains request options.
Policy: An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources.
ResourceSelector: Specifies the resource to analyze for access policies, which may be set directly on the resource, or on ancestors such as organizations, folders or projects.
Status: The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs.