Google Cloud Asset Inventory v1 API - Class AssetService.AssetServiceBase (3.11.0)

Version 3.11.0

• 3.12.0 (latest)
• 3.11.0
• 3.10.0
• 3.9.0
• 3.8.0
• 3.7.0
• 3.6.0
• 3.5.0
• 3.4.0
• 3.3.0
• 3.2.0
• 3.1.0
• 3.0.0
• 2.11.0
• 2.10.0
• 2.9.0
• 2.8.0
• 2.7.0

[BindServiceMethod(typeof(AssetService), "BindService")]
public abstract class AssetService.AssetServiceBase

Reference documentation and code samples for the Google Cloud Asset Inventory v1 API class AssetService.AssetServiceBase.

Base class for server-side implementations of AssetService

Inheritance

object > AssetService.AssetServiceBase

Inherited Members

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ToString()

Namespace

Google.Cloud.Asset.V1

Assembly

Google.Cloud.Asset.V1.dll

Methods

AnalyzeIamPolicy(AnalyzeIamPolicyRequest, ServerCallContext)

public virtual Task<AnalyzeIamPolicyResponse> AnalyzeIamPolicy(AnalyzeIamPolicyRequest request, ServerCallContext context)

Analyzes IAM policies to answer which identities have what accesses on which resources.

Parameters
Name	Description
request	AnalyzeIamPolicyRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskAnalyzeIamPolicyResponse	The response to send back to the client (wrapped by a task).

AnalyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest, ServerCallContext)

public virtual Task<Operation> AnalyzeIamPolicyLongrunning(AnalyzeIamPolicyLongrunningRequest request, ServerCallContext context)

Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Google Cloud Storage or a BigQuery destination. For Cloud Storage destination, the output format is the JSON format that represents a [AnalyzeIamPolicyResponse][google.cloud.asset.v1.AnalyzeIamPolicyResponse]. This method implements the [google.longrunning.Operation][google.longrunning.Operation], which allows you to track the operation status. We recommend intervals of at least 2 seconds with exponential backoff retry to poll the operation result. The metadata contains the metadata for the long-running operation.

Parameters
Name	Description
request	AnalyzeIamPolicyLongrunningRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskOperation	The response to send back to the client (wrapped by a task).

AnalyzeMove(AnalyzeMoveRequest, ServerCallContext)

public virtual Task<AnalyzeMoveResponse> AnalyzeMove(AnalyzeMoveRequest request, ServerCallContext context)

Analyze moving a resource to a specified destination without kicking off the actual move. The analysis is best effort depending on the user's permissions of viewing different hierarchical policies and configurations. The policies and configuration are subject to change before the actual resource migration takes place.

Parameters
Name	Description
request	AnalyzeMoveRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskAnalyzeMoveResponse	The response to send back to the client (wrapped by a task).

AnalyzeOrgPolicies(AnalyzeOrgPoliciesRequest, ServerCallContext)

public virtual Task<AnalyzeOrgPoliciesResponse> AnalyzeOrgPolicies(AnalyzeOrgPoliciesRequest request, ServerCallContext context)

Analyzes organization policies under a scope.

Parameters
Name	Description
request	AnalyzeOrgPoliciesRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskAnalyzeOrgPoliciesResponse	The response to send back to the client (wrapped by a task).

AnalyzeOrgPolicyGovernedAssets(AnalyzeOrgPolicyGovernedAssetsRequest, ServerCallContext)

public virtual Task<AnalyzeOrgPolicyGovernedAssetsResponse> AnalyzeOrgPolicyGovernedAssets(AnalyzeOrgPolicyGovernedAssetsRequest request, ServerCallContext context)

Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. This RPC supports custom constraints and the following canned constraints:

• constraints/ainotebooks.accessMode
• constraints/ainotebooks.disableFileDownloads
• constraints/ainotebooks.disableRootAccess
• constraints/ainotebooks.disableTerminal
• constraints/ainotebooks.environmentOptions
• constraints/ainotebooks.requireAutoUpgradeSchedule
• constraints/ainotebooks.restrictVpcNetworks
• constraints/compute.disableGuestAttributesAccess
• constraints/compute.disableInstanceDataAccessApis
• constraints/compute.disableNestedVirtualization
• constraints/compute.disableSerialPortAccess
• constraints/compute.disableSerialPortLogging
• constraints/compute.disableVpcExternalIpv6
• constraints/compute.requireOsLogin
• constraints/compute.requireShieldedVm
• constraints/compute.restrictLoadBalancerCreationForTypes
• constraints/compute.restrictProtocolForwardingCreationForTypes
• constraints/compute.restrictXpnProjectLienRemoval
• constraints/compute.setNewProjectDefaultToZonalDNSOnly
• constraints/compute.skipDefaultNetworkCreation
• constraints/compute.trustedImageProjects
• constraints/compute.vmCanIpForward
• constraints/compute.vmExternalIpAccess
• constraints/gcp.detailedAuditLoggingMode
• constraints/gcp.resourceLocations
• constraints/iam.allowedPolicyMemberDomains
• constraints/iam.automaticIamGrantsForDefaultServiceAccounts
• constraints/iam.disableServiceAccountCreation
• constraints/iam.disableServiceAccountKeyCreation
• constraints/iam.disableServiceAccountKeyUpload
• constraints/iam.restrictCrossProjectServiceAccountLienRemoval
• constraints/iam.serviceAccountKeyExpiryHours
• constraints/resourcemanager.accessBoundaries
• constraints/resourcemanager.allowedExportDestinations
• constraints/sql.restrictAuthorizedNetworks
• constraints/sql.restrictNoncompliantDiagnosticDataAccess
• constraints/sql.restrictNoncompliantResourceCreation
• constraints/sql.restrictPublicIp
• constraints/storage.publicAccessPrevention
• constraints/storage.restrictAuthTypes
• constraints/storage.uniformBucketLevelAccess

This RPC only returns either resources of types supported by search APIs or IAM policies.

Parameters
Name	Description
request	AnalyzeOrgPolicyGovernedAssetsRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskAnalyzeOrgPolicyGovernedAssetsResponse	The response to send back to the client (wrapped by a task).

AnalyzeOrgPolicyGovernedContainers(AnalyzeOrgPolicyGovernedContainersRequest, ServerCallContext)

public virtual Task<AnalyzeOrgPolicyGovernedContainersResponse> AnalyzeOrgPolicyGovernedContainers(AnalyzeOrgPolicyGovernedContainersRequest request, ServerCallContext context)

Analyzes organization policies governed containers (projects, folders or organization) under a scope.

Parameters
Name	Description
request	AnalyzeOrgPolicyGovernedContainersRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskAnalyzeOrgPolicyGovernedContainersResponse	The response to send back to the client (wrapped by a task).

BatchGetAssetsHistory(BatchGetAssetsHistoryRequest, ServerCallContext)

public virtual Task<BatchGetAssetsHistoryResponse> BatchGetAssetsHistory(BatchGetAssetsHistoryRequest request, ServerCallContext context)

Batch gets the update history of assets that overlap a time window. For IAM_POLICY content, this API outputs history when the asset and its attached IAM POLICY both exist. This can create gaps in the output history. Otherwise, this API outputs history with asset in both non-delete or deleted status. If a specified asset does not exist, this API returns an INVALID_ARGUMENT error.

Parameters
Name	Description
request	BatchGetAssetsHistoryRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskBatchGetAssetsHistoryResponse	The response to send back to the client (wrapped by a task).

BatchGetEffectiveIamPolicies(BatchGetEffectiveIamPoliciesRequest, ServerCallContext)

public virtual Task<BatchGetEffectiveIamPoliciesResponse> BatchGetEffectiveIamPolicies(BatchGetEffectiveIamPoliciesRequest request, ServerCallContext context)

Gets effective IAM policies for a batch of resources.

Parameters
Name	Description
request	BatchGetEffectiveIamPoliciesRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskBatchGetEffectiveIamPoliciesResponse	The response to send back to the client (wrapped by a task).

CreateFeed(CreateFeedRequest, ServerCallContext)

public virtual Task<Feed> CreateFeed(CreateFeedRequest request, ServerCallContext context)

Creates a feed in a parent project/folder/organization to listen to its asset updates.

Parameters
Name	Description
request	CreateFeedRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskFeed	The response to send back to the client (wrapped by a task).

CreateSavedQuery(CreateSavedQueryRequest, ServerCallContext)

public virtual Task<SavedQuery> CreateSavedQuery(CreateSavedQueryRequest request, ServerCallContext context)

Creates a saved query in a parent project/folder/organization.

Parameters
Name	Description
request	CreateSavedQueryRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskSavedQuery	The response to send back to the client (wrapped by a task).

DeleteFeed(DeleteFeedRequest, ServerCallContext)

public virtual Task<Empty> DeleteFeed(DeleteFeedRequest request, ServerCallContext context)

Deletes an asset feed.

Parameters
Name	Description
request	DeleteFeedRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskEmpty	The response to send back to the client (wrapped by a task).

DeleteSavedQuery(DeleteSavedQueryRequest, ServerCallContext)

public virtual Task<Empty> DeleteSavedQuery(DeleteSavedQueryRequest request, ServerCallContext context)

Deletes a saved query.

Parameters
Name	Description
request	DeleteSavedQueryRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskEmpty	The response to send back to the client (wrapped by a task).

ExportAssets(ExportAssetsRequest, ServerCallContext)

public virtual Task<Operation> ExportAssets(ExportAssetsRequest request, ServerCallContext context)

Exports assets with time and resource types to a given Cloud Storage location/BigQuery table. For Cloud Storage location destinations, the output format is newline-delimited JSON. Each line represents a [google.cloud.asset.v1.Asset][google.cloud.asset.v1.Asset] in the JSON format; for BigQuery table destinations, the output table stores the fields in asset Protobuf as columns. This API implements the [google.longrunning.Operation][google.longrunning.Operation] API, which allows you to keep track of the export. We recommend intervals of at least 2 seconds with exponential retry to poll the export operation result. For regular-size resource parent, the export operation usually finishes within 5 minutes.

Parameters
Name	Description
request	ExportAssetsRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskOperation	The response to send back to the client (wrapped by a task).

GetFeed(GetFeedRequest, ServerCallContext)

public virtual Task<Feed> GetFeed(GetFeedRequest request, ServerCallContext context)

Gets details about an asset feed.

Parameters
Name	Description
request	GetFeedRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskFeed	The response to send back to the client (wrapped by a task).

GetSavedQuery(GetSavedQueryRequest, ServerCallContext)

public virtual Task<SavedQuery> GetSavedQuery(GetSavedQueryRequest request, ServerCallContext context)

Gets details about a saved query.

Parameters
Name	Description
request	GetSavedQueryRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskSavedQuery	The response to send back to the client (wrapped by a task).

ListAssets(ListAssetsRequest, ServerCallContext)

public virtual Task<ListAssetsResponse> ListAssets(ListAssetsRequest request, ServerCallContext context)

Lists assets with time and resource types and returns paged results in response.

Parameters
Name	Description
request	ListAssetsRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskListAssetsResponse	The response to send back to the client (wrapped by a task).

ListFeeds(ListFeedsRequest, ServerCallContext)

public virtual Task<ListFeedsResponse> ListFeeds(ListFeedsRequest request, ServerCallContext context)

Lists all asset feeds in a parent project/folder/organization.

Parameters
Name	Description
request	ListFeedsRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskListFeedsResponse	The response to send back to the client (wrapped by a task).

ListSavedQueries(ListSavedQueriesRequest, ServerCallContext)

public virtual Task<ListSavedQueriesResponse> ListSavedQueries(ListSavedQueriesRequest request, ServerCallContext context)

Lists all saved queries in a parent project/folder/organization.

Parameters
Name	Description
request	ListSavedQueriesRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskListSavedQueriesResponse	The response to send back to the client (wrapped by a task).

QueryAssets(QueryAssetsRequest, ServerCallContext)

public virtual Task<QueryAssetsResponse> QueryAssets(QueryAssetsRequest request, ServerCallContext context)

Issue a job that queries assets using a SQL statement compatible with BigQuery SQL.

If the query execution finishes within timeout and there's no pagination, the full query results will be returned in the QueryAssetsResponse.

Otherwise, full query results can be obtained by issuing extra requests with the job_reference from the a previous QueryAssets call.

Note, the query result has approximately 10 GB limitation enforced by BigQuery. Queries return larger results will result in errors.

Parameters
Name	Description
request	QueryAssetsRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskQueryAssetsResponse	The response to send back to the client (wrapped by a task).

SearchAllIamPolicies(SearchAllIamPoliciesRequest, ServerCallContext)

public virtual Task<SearchAllIamPoliciesResponse> SearchAllIamPolicies(SearchAllIamPoliciesRequest request, ServerCallContext context)

Searches all IAM policies within the specified scope, such as a project, folder, or organization. The caller must be granted the cloudasset.assets.searchAllIamPolicies permission on the desired scope, otherwise the request will be rejected.

Parameters
Name	Description
request	SearchAllIamPoliciesRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskSearchAllIamPoliciesResponse	The response to send back to the client (wrapped by a task).

SearchAllResources(SearchAllResourcesRequest, ServerCallContext)

public virtual Task<SearchAllResourcesResponse> SearchAllResources(SearchAllResourcesRequest request, ServerCallContext context)

Searches all Google Cloud resources within the specified scope, such as a project, folder, or organization. The caller must be granted the cloudasset.assets.searchAllResources permission on the desired scope, otherwise the request will be rejected.

Parameters
Name	Description
request	SearchAllResourcesRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskSearchAllResourcesResponse	The response to send back to the client (wrapped by a task).

UpdateFeed(UpdateFeedRequest, ServerCallContext)

public virtual Task<Feed> UpdateFeed(UpdateFeedRequest request, ServerCallContext context)

Updates an asset feed configuration.

Parameters
Name	Description
request	UpdateFeedRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskFeed	The response to send back to the client (wrapped by a task).

UpdateSavedQuery(UpdateSavedQueryRequest, ServerCallContext)

public virtual Task<SavedQuery> UpdateSavedQuery(UpdateSavedQueryRequest request, ServerCallContext context)

Updates a saved query.

Parameters
Name	Description
request	UpdateSavedQueryRequest The request received from the client.
context	ServerCallContext The context of the server-side call handler being invoked.

Returns
Type	Description
TaskSavedQuery	The response to send back to the client (wrapped by a task).