|
26 | 26 | @class GTLRAccessContextManager_AccessLevel;
|
27 | 27 | @class GTLRAccessContextManager_AccessPolicy;
|
28 | 28 | @class GTLRAccessContextManager_ApiOperation;
|
| 29 | +@class GTLRAccessContextManager_Application; |
29 | 30 | @class GTLRAccessContextManager_AuditConfig;
|
30 | 31 | @class GTLRAccessContextManager_AuditLogConfig;
|
31 | 32 | @class GTLRAccessContextManager_AuthorizedOrgsDesc;
|
@@ -558,6 +559,20 @@ FOUNDATION_EXTERN NSString * const kGTLRAccessContextManager_SupportedService_Su
|
558 | 559 | @end
|
559 | 560 |
|
560 | 561 |
|
| 562 | +/** |
| 563 | + * An application that accesses Google Cloud APIs. |
| 564 | + */ |
| 565 | +@interface GTLRAccessContextManager_Application : GTLRObject |
| 566 | + |
| 567 | +/** The OAuth client ID of the application. */ |
| 568 | +@property(nonatomic, copy, nullable) NSString *clientId; |
| 569 | + |
| 570 | +/** The name of the application. Example: "Cloud Console" */ |
| 571 | +@property(nonatomic, copy, nullable) NSString *name; |
| 572 | + |
| 573 | +@end |
| 574 | + |
| 575 | + |
561 | 576 | /**
|
562 | 577 | * Specifies the audit configuration for a service. The configuration
|
563 | 578 | * determines which permission types are logged, and what identities, if any,
|
@@ -995,8 +1010,11 @@ FOUNDATION_EXTERN NSString * const kGTLRAccessContextManager_SupportedService_Su
|
995 | 1010 | @interface GTLRAccessContextManager_EgressFrom : GTLRObject
|
996 | 1011 |
|
997 | 1012 | /**
|
998 |
| - * A list of identities that are allowed access through this [EgressPolicy], in |
999 |
| - * the format of `user:{email_id}` or `serviceAccount:{email_id}`. |
| 1013 | + * A list of identities that are allowed access through [EgressPolicy]. |
| 1014 | + * Identities can be an individual user, service account, Google group, or |
| 1015 | + * third-party identity. The `v1` identities that have the prefix `user`, |
| 1016 | + * `group`, `serviceAccount`, `principal`, and `principalSet` in |
| 1017 | + * https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported. |
1000 | 1018 | */
|
1001 | 1019 | @property(nonatomic, strong, nullable) NSArray<NSString *> *identities;
|
1002 | 1020 |
|
@@ -1117,8 +1135,9 @@ FOUNDATION_EXTERN NSString * const kGTLRAccessContextManager_SupportedService_Su
|
1117 | 1135 |
|
1118 | 1136 | /**
|
1119 | 1137 | * A list of external resources that are allowed to be accessed. Only AWS and
|
1120 |
| - * Azure resources are supported. For Amazon S3, the supported format is |
1121 |
| - * s3://BUCKET_NAME. For Azure Storage, the supported format is |
| 1138 | + * Azure resources are supported. For Amazon S3, the supported formats are |
| 1139 | + * s3://BUCKET_NAME, s3a://BUCKET_NAME, and s3n://BUCKET_NAME. For Azure |
| 1140 | + * Storage, the supported format is |
1122 | 1141 | * azure://myaccount.blob.core.windows.net/CONTAINER_NAME. A request matches if
|
1123 | 1142 | * it contains an external resource in this list (Example: s3://bucket/path).
|
1124 | 1143 | * Currently '*' is not allowed.
|
@@ -1245,6 +1264,13 @@ FOUNDATION_EXTERN NSString * const kGTLRAccessContextManager_SupportedService_Su
|
1245 | 1264 | */
|
1246 | 1265 | @property(nonatomic, copy, nullable) NSString *name;
|
1247 | 1266 |
|
| 1267 | +/** |
| 1268 | + * Optional. A list of applications that are subject to this binding's |
| 1269 | + * restrictions. If the list is empty, the binding restrictions will |
| 1270 | + * universally apply to all applications. |
| 1271 | + */ |
| 1272 | +@property(nonatomic, strong, nullable) NSArray<GTLRAccessContextManager_Application *> *restrictedClientApplications; |
| 1273 | + |
1248 | 1274 | @end
|
1249 | 1275 |
|
1250 | 1276 |
|
@@ -1302,8 +1328,11 @@ FOUNDATION_EXTERN NSString * const kGTLRAccessContextManager_SupportedService_Su
|
1302 | 1328 | @interface GTLRAccessContextManager_IngressFrom : GTLRObject
|
1303 | 1329 |
|
1304 | 1330 | /**
|
1305 |
| - * A list of identities that are allowed access through this ingress policy, in |
1306 |
| - * the format of `user:{email_id}` or `serviceAccount:{email_id}`. |
| 1331 | + * A list of identities that are allowed access through [IngressPolicy]. |
| 1332 | + * Identities can be an individual user, service account, Google group, or |
| 1333 | + * third-party identity. The `v1` identities that have the prefix `user`, |
| 1334 | + * `group`, `serviceAccount`, `principal`, and `principalSet` in |
| 1335 | + * https://cloud.google.com/iam/docs/principal-identifiers#v1 are supported. |
1307 | 1336 | */
|
1308 | 1337 | @property(nonatomic, strong, nullable) NSArray<NSString *> *identities;
|
1309 | 1338 |
|
|
0 commit comments