|
343 | 343 | "scopes": [ |
344 | 344 | "https://www.googleapis.com/auth/cloud-platform" |
345 | 345 | ] |
| 346 | + }, |
| 347 | + "restrictAllowedResources": { |
| 348 | + "description": "Restrict the list of resources allowed in the Workload environment. The current list of allowed products can be found at https://cloud.google.com/assured-workloads/docs/supported-products In addition to assuredworkloads.workload.update permission, the user should also have orgpolicy.policy.set permission on the folder resource to use this functionality.", |
| 349 | + "flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}:restrictAllowedResources", |
| 350 | + "httpMethod": "POST", |
| 351 | + "id": "assuredworkloads.organizations.locations.workloads.restrictAllowedResources", |
| 352 | + "parameterOrder": [ |
| 353 | + "name" |
| 354 | + ], |
| 355 | + "parameters": { |
| 356 | + "name": { |
| 357 | + "description": "Required. The resource name of the Workload. This is the workloads's relative path in the API, formatted as \"organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}\". For example, \"organizations/123/locations/us-east1/workloads/assured-workload-1\".", |
| 358 | + "location": "path", |
| 359 | + "pattern": "^organizations/[^/]+/locations/[^/]+/workloads/[^/]+$", |
| 360 | + "required": true, |
| 361 | + "type": "string" |
| 362 | + } |
| 363 | + }, |
| 364 | + "path": "v1/{+name}:restrictAllowedResources", |
| 365 | + "request": { |
| 366 | + "$ref": "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest" |
| 367 | + }, |
| 368 | + "response": { |
| 369 | + "$ref": "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesResponse" |
| 370 | + }, |
| 371 | + "scopes": [ |
| 372 | + "https://www.googleapis.com/auth/cloud-platform" |
| 373 | + ] |
346 | 374 | } |
347 | 375 | } |
348 | 376 | } |
|
351 | 379 | } |
352 | 380 | } |
353 | 381 | }, |
354 | | - "revision": "20220603", |
| 382 | + "revision": "20220609", |
355 | 383 | "rootUrl": "https://assuredworkloads.googleapis.com/", |
356 | 384 | "schemas": { |
357 | 385 | "GoogleCloudAssuredworkloadsV1CreateWorkloadOperationMetadata": { |
|
422 | 450 | }, |
423 | 451 | "type": "object" |
424 | 452 | }, |
| 453 | + "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest": { |
| 454 | + "description": "Request for restricting list of available resources in Workload environment.", |
| 455 | + "id": "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesRequest", |
| 456 | + "properties": { |
| 457 | + "restrictionType": { |
| 458 | + "description": "Required. The type of restriction for using gcp products in the Workload environment.", |
| 459 | + "enum": [ |
| 460 | + "RESTRICTION_TYPE_UNSPECIFIED", |
| 461 | + "ALLOW_ALL_GCP_RESOURCES", |
| 462 | + "ALLOW_COMPLIANT_RESOURCES" |
| 463 | + ], |
| 464 | + "enumDescriptions": [ |
| 465 | + "Unknown restriction type.", |
| 466 | + "Allow the use all of all gcp products, irrespective of the compliance posture. This effectively removes gcp.restrictServiceUsage OrgPolicy on the AssuredWorkloads Folder.", |
| 467 | + "Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources." |
| 468 | + ], |
| 469 | + "type": "string" |
| 470 | + } |
| 471 | + }, |
| 472 | + "type": "object" |
| 473 | + }, |
| 474 | + "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesResponse": { |
| 475 | + "description": "Response for restricting the list of allowed resources.", |
| 476 | + "id": "GoogleCloudAssuredworkloadsV1RestrictAllowedResourcesResponse", |
| 477 | + "properties": {}, |
| 478 | + "type": "object" |
| 479 | + }, |
425 | 480 | "GoogleCloudAssuredworkloadsV1Workload": { |
426 | 481 | "description": "An Workload object for managing highly regulated workloads of cloud customers.", |
427 | 482 | "id": "GoogleCloudAssuredworkloadsV1Workload", |
|
0 commit comments