public static final class AssetServiceGrpc.AssetServiceStub extends AbstractAsyncStub<AssetServiceGrpc.AssetServiceStub>
Asset service definition.
Inheritance
java.lang.Object >
io.grpc.stub.AbstractStub >
io.grpc.stub.AbstractAsyncStub >
AssetServiceGrpc.AssetServiceStub
Inherited Members
io.grpc.stub.AbstractAsyncStub.<T>newStub(io.grpc.stub.AbstractStub.StubFactory<T>,io.grpc.Channel)
io.grpc.stub.AbstractAsyncStub.<T>newStub(io.grpc.stub.AbstractStub.StubFactory<T>,io.grpc.Channel,io.grpc.CallOptions)
io.grpc.stub.AbstractStub.<T>withOption(io.grpc.CallOptions.Key<T>,T)
io.grpc.stub.AbstractStub.build(io.grpc.Channel,io.grpc.CallOptions)
io.grpc.stub.AbstractStub.getCallOptions()
io.grpc.stub.AbstractStub.getChannel()
io.grpc.stub.AbstractStub.withCallCredentials(io.grpc.CallCredentials)
io.grpc.stub.AbstractStub.withChannel(io.grpc.Channel)
io.grpc.stub.AbstractStub.withCompression(java.lang.String)
io.grpc.stub.AbstractStub.withDeadline(io.grpc.Deadline)
io.grpc.stub.AbstractStub.withDeadlineAfter(long,java.util.concurrent.TimeUnit)
io.grpc.stub.AbstractStub.withExecutor(java.util.concurrent.Executor)
io.grpc.stub.AbstractStub.withInterceptors(io.grpc.ClientInterceptor...)
io.grpc.stub.AbstractStub.withMaxInboundMessageSize(int)
io.grpc.stub.AbstractStub.withMaxOutboundMessageSize(int)
io.grpc.stub.AbstractStub.withWaitForReady()
Methods
analyzeIamPolicy(AnalyzeIamPolicyRequest request, StreamObserver<AnalyzeIamPolicyResponse> responseObserver)
public void analyzeIamPolicy(AnalyzeIamPolicyRequest request, StreamObserver<AnalyzeIamPolicyResponse> responseObserver)
Analyzes IAM policies to answer which identities have what accesses on
which resources.
analyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest request, StreamObserver<Operation> responseObserver)
public void analyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest request, StreamObserver<Operation> responseObserver)
Analyzes IAM policies asynchronously to answer which identities have what
accesses on which resources, and writes the analysis results to a Google
Cloud Storage or a BigQuery destination. For Cloud Storage destination, the
output format is the JSON format that represents a
AnalyzeIamPolicyResponse.
This method implements the
google.longrunning.Operation, which allows
you to track the operation status. We recommend intervals of at least 2
seconds with exponential backoff retry to poll the operation result. The
metadata contains the metadata for the long-running operation.
analyzeMove(AnalyzeMoveRequest request, StreamObserver<AnalyzeMoveResponse> responseObserver)
public void analyzeMove(AnalyzeMoveRequest request, StreamObserver<AnalyzeMoveResponse> responseObserver)
Analyze moving a resource to a specified destination without kicking off
the actual move. The analysis is best effort depending on the user's
permissions of viewing different hierarchical policies and configurations.
The policies and configuration are subject to change before the actual
resource migration takes place.
analyzeOrgPolicies(AnalyzeOrgPoliciesRequest request, StreamObserver<AnalyzeOrgPoliciesResponse> responseObserver)
public void analyzeOrgPolicies(AnalyzeOrgPoliciesRequest request, StreamObserver<AnalyzeOrgPoliciesResponse> responseObserver)
Analyzes organization policies under a scope.
analyzeOrgPolicyGovernedAssets(AnalyzeOrgPolicyGovernedAssetsRequest request, StreamObserver<AnalyzeOrgPolicyGovernedAssetsResponse> responseObserver)
public void analyzeOrgPolicyGovernedAssets(AnalyzeOrgPolicyGovernedAssetsRequest request, StreamObserver<AnalyzeOrgPolicyGovernedAssetsResponse> responseObserver)
Analyzes organization policies governed assets (Google Cloud resources or
policies) under a scope. This RPC supports custom constraints and the
following 10 canned constraints:
- storage.uniformBucketLevelAccess
- iam.disableServiceAccountKeyCreation
- iam.allowedPolicyMemberDomains
- compute.vmExternalIpAccess
- appengine.enforceServiceAccountActAsCheck
- gcp.resourceLocations
- compute.trustedImageProjects
- compute.skipDefaultNetworkCreation
- compute.requireOsLogin
- compute.disableNestedVirtualization
This RPC only returns either resources of types supported by searchable
asset
types,
or IAM policies.
analyzeOrgPolicyGovernedContainers(AnalyzeOrgPolicyGovernedContainersRequest request, StreamObserver<AnalyzeOrgPolicyGovernedContainersResponse> responseObserver)
public void analyzeOrgPolicyGovernedContainers(AnalyzeOrgPolicyGovernedContainersRequest request, StreamObserver<AnalyzeOrgPolicyGovernedContainersResponse> responseObserver)
Analyzes organization policies governed containers (projects, folders or
organization) under a scope.
batchGetAssetsHistory(BatchGetAssetsHistoryRequest request, StreamObserver<BatchGetAssetsHistoryResponse> responseObserver)
public void batchGetAssetsHistory(BatchGetAssetsHistoryRequest request, StreamObserver<BatchGetAssetsHistoryResponse> responseObserver)
Batch gets the update history of assets that overlap a time window.
For IAM_POLICY content, this API outputs history when the asset and its
attached IAM POLICY both exist. This can create gaps in the output history.
Otherwise, this API outputs history with asset in both non-delete or
deleted status.
If a specified asset does not exist, this API returns an INVALID_ARGUMENT
error.
batchGetEffectiveIamPolicies(BatchGetEffectiveIamPoliciesRequest request, StreamObserver<BatchGetEffectiveIamPoliciesResponse> responseObserver)
public void batchGetEffectiveIamPolicies(BatchGetEffectiveIamPoliciesRequest request, StreamObserver<BatchGetEffectiveIamPoliciesResponse> responseObserver)
Gets effective IAM policies for a batch of resources.
build(Channel channel, CallOptions callOptions)
protected AssetServiceGrpc.AssetServiceStub build(Channel channel, CallOptions callOptions)
Parameters
| Name |
Description |
channel |
io.grpc.Channel
|
callOptions |
io.grpc.CallOptions
|
Returns
Overrides
io.grpc.stub.AbstractStub.build(io.grpc.Channel,io.grpc.CallOptions)
createFeed(CreateFeedRequest request, StreamObserver<Feed> responseObserver)
public void createFeed(CreateFeedRequest request, StreamObserver<Feed> responseObserver)
Creates a feed in a parent project/folder/organization to listen to its
asset updates.
createSavedQuery(CreateSavedQueryRequest request, StreamObserver<SavedQuery> responseObserver)
public void createSavedQuery(CreateSavedQueryRequest request, StreamObserver<SavedQuery> responseObserver)
Creates a saved query in a parent project/folder/organization.
deleteFeed(DeleteFeedRequest request, StreamObserver<Empty> responseObserver)
public void deleteFeed(DeleteFeedRequest request, StreamObserver<Empty> responseObserver)
Parameters
deleteSavedQuery(DeleteSavedQueryRequest request, StreamObserver<Empty> responseObserver)
public void deleteSavedQuery(DeleteSavedQueryRequest request, StreamObserver<Empty> responseObserver)
Parameters
exportAssets(ExportAssetsRequest request, StreamObserver<Operation> responseObserver)
public void exportAssets(ExportAssetsRequest request, StreamObserver<Operation> responseObserver)
Exports assets with time and resource types to a given Cloud Storage
location/BigQuery table. For Cloud Storage location destinations, the
output format is newline-delimited JSON. Each line represents a
google.cloud.asset.v1.Asset in the JSON
format; for BigQuery table destinations, the output table stores the fields
in asset Protobuf as columns. This API implements the
google.longrunning.Operation API, which
allows you to keep track of the export. We recommend intervals of at least
2 seconds with exponential retry to poll the export operation result. For
regular-size resource parent, the export operation usually finishes within
5 minutes.
getFeed(GetFeedRequest request, StreamObserver<Feed> responseObserver)
public void getFeed(GetFeedRequest request, StreamObserver<Feed> responseObserver)
Gets details about an asset feed.
| Name |
Description |
request |
GetFeedRequest
|
responseObserver |
io.grpc.stub.StreamObserver<Feed>
|
getSavedQuery(GetSavedQueryRequest request, StreamObserver<SavedQuery> responseObserver)
public void getSavedQuery(GetSavedQueryRequest request, StreamObserver<SavedQuery> responseObserver)
Gets details about a saved query.
listAssets(ListAssetsRequest request, StreamObserver<ListAssetsResponse> responseObserver)
public void listAssets(ListAssetsRequest request, StreamObserver<ListAssetsResponse> responseObserver)
Lists assets with time and resource types and returns paged results in
response.
listFeeds(ListFeedsRequest request, StreamObserver<ListFeedsResponse> responseObserver)
public void listFeeds(ListFeedsRequest request, StreamObserver<ListFeedsResponse> responseObserver)
Lists all asset feeds in a parent project/folder/organization.
listSavedQueries(ListSavedQueriesRequest request, StreamObserver<ListSavedQueriesResponse> responseObserver)
public void listSavedQueries(ListSavedQueriesRequest request, StreamObserver<ListSavedQueriesResponse> responseObserver)
Lists all saved queries in a parent project/folder/organization.
queryAssets(QueryAssetsRequest request, StreamObserver<QueryAssetsResponse> responseObserver)
public void queryAssets(QueryAssetsRequest request, StreamObserver<QueryAssetsResponse> responseObserver)
Issue a job that queries assets using a SQL statement compatible with
BigQuery Standard
SQL.
If the query execution finishes within timeout and there's no pagination,
the full query results will be returned in the QueryAssetsResponse.
Otherwise, full query results can be obtained by issuing extra requests
with the job_reference from the a previous QueryAssets call.
Note, the query result has approximately 10 GB limitation enforced by
BigQuery
https://cloud.google.com/bigquery/docs/best-practices-performance-output,
queries return larger results will result in errors.
searchAllIamPolicies(SearchAllIamPoliciesRequest request, StreamObserver<SearchAllIamPoliciesResponse> responseObserver)
public void searchAllIamPolicies(SearchAllIamPoliciesRequest request, StreamObserver<SearchAllIamPoliciesResponse> responseObserver)
Searches all IAM policies within the specified scope, such as a project,
folder, or organization. The caller must be granted the
cloudasset.assets.searchAllIamPolicies permission on the desired scope,
otherwise the request will be rejected.
searchAllResources(SearchAllResourcesRequest request, StreamObserver<SearchAllResourcesResponse> responseObserver)
public void searchAllResources(SearchAllResourcesRequest request, StreamObserver<SearchAllResourcesResponse> responseObserver)
Searches all Google Cloud resources within the specified scope, such as a
project, folder, or organization. The caller must be granted the
cloudasset.assets.searchAllResources permission on the desired scope,
otherwise the request will be rejected.
updateFeed(UpdateFeedRequest request, StreamObserver<Feed> responseObserver)
public void updateFeed(UpdateFeedRequest request, StreamObserver<Feed> responseObserver)
Updates an asset feed configuration.
updateSavedQuery(UpdateSavedQueryRequest request, StreamObserver<SavedQuery> responseObserver)
public void updateSavedQuery(UpdateSavedQueryRequest request, StreamObserver<SavedQuery> responseObserver)
Parameters
