|
1206 | 1206 | ],
|
1207 | 1207 | "parameters": {
|
1208 | 1208 | "append": {
|
1209 |
| - "description": "Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite. So far, only scoped_access_settings supports appending. Global access_levels, dry_run_access_levels, and reauth_settings are not compatible with append functionality, and the request will return an error if append=true when these settings are in the update_mask. The request will also return an error if append=true when \"scoped_access_settings\" is not set in the update_mask.", |
| 1209 | + "description": "Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite. So far, only scoped_access_settings supports appending. Global access_levels, dry_run_access_levels, reauth_settings, and session_settings are not compatible with append functionality, and the request will return an error if append=true when these settings are in the update_mask. The request will also return an error if append=true when \"scoped_access_settings\" is not set in the update_mask.", |
1210 | 1210 | "location": "query",
|
1211 | 1211 | "type": "boolean"
|
1212 | 1212 | },
|
|
1218 | 1218 | "type": "string"
|
1219 | 1219 | },
|
1220 | 1220 | "updateMask": {
|
1221 |
| - "description": "Required. Only the fields specified in this mask are updated. Because name and group_key cannot be changed, update_mask is required and may only contain the following fields: `access_levels`, `dry_run_access_levels`, `reauth_settings`, `scoped_access_settings`. update_mask { paths: \"access_levels\" }", |
| 1221 | + "description": "Required. Only the fields specified in this mask are updated. Because name and group_key cannot be changed, update_mask is required and may only contain the following fields: `access_levels`, `dry_run_access_levels`, `reauth_settings` `session_settings`, `scoped_access_settings`. update_mask { paths: \"access_levels\" }", |
1222 | 1222 | "format": "google-fieldmask",
|
1223 | 1223 | "location": "query",
|
1224 | 1224 | "type": "string"
|
|
1295 | 1295 | }
|
1296 | 1296 | }
|
1297 | 1297 | },
|
1298 |
| - "revision": "20241014", |
| 1298 | + "revision": "20241022", |
1299 | 1299 | "rootUrl": "https://accesscontextmanager.googleapis.com/",
|
1300 | 1300 | "schemas": {
|
1301 | 1301 | "AccessContextManagerOperationMetadata": {
|
|
1387 | 1387 | "reauthSettings": {
|
1388 | 1388 | "$ref": "ReauthSettings",
|
1389 | 1389 | "description": "Optional. Reauth settings applied to user access on a given AccessScope."
|
| 1390 | + }, |
| 1391 | + "sessionSettings": { |
| 1392 | + "$ref": "SessionSettings", |
| 1393 | + "description": "Optional. Session settings applied to user access on a given AccessScope. Migrated from ReauthSettings" |
1390 | 1394 | }
|
1391 | 1395 | },
|
1392 | 1396 | "type": "object"
|
|
1880 | 1884 | "type": "object"
|
1881 | 1885 | },
|
1882 | 1886 | "GcpUserAccessBinding": {
|
1883 |
| - "description": "Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access.", |
| 1887 | + "description": "Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access. Next ID: 11", |
1884 | 1888 | "id": "GcpUserAccessBinding",
|
1885 | 1889 | "properties": {
|
1886 | 1890 | "accessLevels": {
|
|
2500 | 2504 | },
|
2501 | 2505 | "type": "object"
|
2502 | 2506 | },
|
| 2507 | + "SessionSettings": { |
| 2508 | + "description": "Stores settings related to Google Cloud Session Length including session duration, the type of challenge (i.e. method) they should face when their session expires, and other related settings.", |
| 2509 | + "id": "SessionSettings", |
| 2510 | + "properties": { |
| 2511 | + "maxInactivity": { |
| 2512 | + "description": "Optional. How long a user is allowed to take between actions before a new access token must be issued. Presently only set for Cloud Apps.", |
| 2513 | + "format": "google-duration", |
| 2514 | + "type": "string" |
| 2515 | + }, |
| 2516 | + "sessionLength": { |
| 2517 | + "description": "Optional. The session length. Setting this field to zero is equal to disabling. Session. Also can set infinite session by flipping the enabled bit to false below. If use_oidc_max_age is true, for OIDC apps, the session length will be the minimum of this field and OIDC max_age param.", |
| 2518 | + "format": "google-duration", |
| 2519 | + "type": "string" |
| 2520 | + }, |
| 2521 | + "sessionLengthEnabled": { |
| 2522 | + "description": "Optional. Big red button to turn off GCSL. When false, all fields set above will be disregarded and the session length is basically infinite.", |
| 2523 | + "type": "boolean" |
| 2524 | + }, |
| 2525 | + "sessionReauthMethod": { |
| 2526 | + "description": "Optional. Session method when users GCP session is up.", |
| 2527 | + "enum": [ |
| 2528 | + "SESSION_REAUTH_METHOD_UNSPECIFIED", |
| 2529 | + "LOGIN", |
| 2530 | + "SECURITY_KEY", |
| 2531 | + "PASSWORD" |
| 2532 | + ], |
| 2533 | + "enumDescriptions": [ |
| 2534 | + "If method undefined in API, we will use LOGIN by default.", |
| 2535 | + "The user will prompted to perform regular login. Users who are enrolled for two-step verification and haven't chosen to \"Remember this computer\" will be prompted for their second factor.", |
| 2536 | + "The user will be prompted to autheticate using their security key. If no security key has been configured, then we will fallback to LOGIN.", |
| 2537 | + "The user will be prompted for their password." |
| 2538 | + ], |
| 2539 | + "type": "string" |
| 2540 | + }, |
| 2541 | + "useOidcMaxAge": { |
| 2542 | + "description": "Optional. Only useful for OIDC apps. When false, the OIDC max_age param, if passed in the authentication request will be ignored. When true, the re-auth period will be the minimum of the session_length field and the max_age OIDC param.", |
| 2543 | + "type": "boolean" |
| 2544 | + } |
| 2545 | + }, |
| 2546 | + "type": "object" |
| 2547 | + }, |
2503 | 2548 | "SetIamPolicyRequest": {
|
2504 | 2549 | "description": "Request message for `SetIamPolicy` method.",
|
2505 | 2550 | "id": "SetIamPolicyRequest",
|
|
0 commit comments