Class: Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/asset/v1/asset_service.rb

Overview

The response message for AssetService.AnalyzeOrgPolicyGovernedAssets.

Defined Under Namespace

Classes: GovernedAsset, GovernedIamPolicy, GovernedResource

Instance Attribute Summary collapse

Instance Attribute Details

#constraint ⇒ ::Google::Cloud::Asset::V1::AnalyzerOrgPolicyConstraint

Returns The definition of the constraint in the request.

Returns:



2485
2486
2487
2488
2489
2490
2491
2492
2493
2494
2495
2496
2497
2498
2499
2500
2501
2502
2503
2504
2505
2506
2507
2508
2509
2510
2511
2512
2513
2514
2515
2516
2517
2518
2519
2520
2521
2522
2523
2524
2525
2526
2527
2528
2529
2530
2531
2532
2533
2534
2535
2536
2537
2538
2539
2540
2541
2542
2543
2544
2545
2546
2547
2548
2549
2550
2551
2552
2553
2554
2555
2556
2557
2558
2559
2560
2561
2562
2563
2564
2565
2566
2567
2568
2569
2570
2571
2572
2573
2574
2575
2576
2577
2578
2579
2580
2581
2582
2583
2584
2585
2586
2587
2588
2589
2590
2591
2592
2593
2594
2595
2596
2597
2598
2599
2600
2601
2602
2603
2604
2605
2606
2607
2608
2609
2610
2611
2612
 
# File 'proto_docs/google/cloud/asset/v1/asset_service.rb', line 2485

class AnalyzeOrgPolicyGovernedAssetsResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # The Google Cloud resources governed by the organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] full_resource_name
  #   @return [::String]
  #     The [full resource name]
  #     (https://cloud.google.com/asset-inventory/docs/resource-name-format) of
  #     the Google Cloud resource.
  # @!attribute [rw] parent
  #   @return [::String]
  #     The [full resource name]
  #     (https://cloud.google.com/asset-inventory/docs/resource-name-format) of
  #     the parent of
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource#full_resource_name AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource.full_resource_name}.
  # @!attribute [rw] project
  #   @return [::String]
  #     The project that this resource belongs to, in the format of
  #     projects/\\{PROJECT_NUMBER}. This field is available when the resource
  #     belongs to a project.
  # @!attribute [rw] folders
  #   @return [::Array<::String>]
  #     The folder(s) that this resource belongs to, in the format of
  #     folders/\\{FOLDER_NUMBER}. This field is available when the resource
  #     belongs (directly or cascadingly) to one or more folders.
  # @!attribute [rw] organization
  #   @return [::String]
  #     The organization that this resource belongs to, in the format of
  #     organizations/\\{ORGANIZATION_NUMBER}. This field is available when the
  #     resource belongs (directly or cascadingly) to an organization.
  # @!attribute [rw] asset_type
  #   @return [::String]
  #     The asset type of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource#full_resource_name AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource.full_resource_name}
  #     Example:
  #     `cloudresourcemanager.googleapis.com/Project`
  #     See [Cloud Asset Inventory Supported Asset
  #     Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
  #     for all supported asset types.
  # @!attribute [rw] effective_tags
  #   @return [::Array<::Google::Cloud::Asset::V1::EffectiveTagDetails>]
  #     The effective tags on this resource.
  class GovernedResource
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # The IAM policies governed by the organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] attached_resource
  #   @return [::String]
  #     The full resource name of the resource on which this IAM policy is set.
  #     Example:
  #     `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
  #     See [Cloud Asset Inventory Resource Name
  #     Format](https://cloud.google.com/asset-inventory/docs/resource-name-format)
  #     for more information.
  # @!attribute [rw] policy
  #   @return [::Google::Iam::V1::Policy]
  #     The IAM policy directly set on the given resource.
  # @!attribute [rw] project
  #   @return [::String]
  #     The project that this IAM policy belongs to, in the format of
  #     projects/\\{PROJECT_NUMBER}. This field is available when the IAM policy
  #     belongs to a project.
  # @!attribute [rw] folders
  #   @return [::Array<::String>]
  #     The folder(s) that this IAM policy belongs to, in the format of
  #     folders/\\{FOLDER_NUMBER}. This field is available when the IAM policy
  #     belongs (directly or cascadingly) to one or more folders.
  # @!attribute [rw] organization
  #   @return [::String]
  #     The organization that this IAM policy belongs to, in the format of
  #     organizations/\\{ORGANIZATION_NUMBER}. This field is available when the
  #     IAM policy belongs (directly or cascadingly) to an organization.
  # @!attribute [rw] asset_type
  #   @return [::String]
  #     The asset type of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedIamPolicy#attached_resource AnalyzeOrgPolicyGovernedAssetsResponse.GovernedIamPolicy.attached_resource}.
  #     Example:
  #     `cloudresourcemanager.googleapis.com/Project`
  #     See [Cloud Asset Inventory Supported Asset
  #     Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
  #     for all supported asset types.
  class GovernedIamPolicy
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Represents a Google Cloud asset(resource or IAM policy) governed by the
  # organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] governed_resource
  #   @return [::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource]
  #     A Google Cloud resource governed by the organization
  #     policies of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  #
  #     Note: The following fields are mutually exclusive: `governed_resource`, `governed_iam_policy`. If a field in that set is populated, all other fields in the set will automatically be cleared.
  # @!attribute [rw] governed_iam_policy
  #   @return [::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedIamPolicy]
  #     An IAM policy governed by the organization
  #     policies of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  #
  #     Note: The following fields are mutually exclusive: `governed_iam_policy`, `governed_resource`. If a field in that set is populated, all other fields in the set will automatically be cleared.
  # @!attribute [rw] consolidated_policy
  #   @return [::Google::Cloud::Asset::V1::AnalyzerOrgPolicy]
  #     The consolidated policy for the analyzed asset. The consolidated
  #     policy is computed by merging and evaluating
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedAsset#policy_bundle AnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset.policy_bundle}.
  #     The evaluation will respect the organization policy [hierarchy
  #     rules](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy).
  # @!attribute [rw] policy_bundle
  #   @return [::Array<::Google::Cloud::Asset::V1::AnalyzerOrgPolicy>]
  #     The ordered list of all organization policies from the
  #     [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][]
  #     to the scope specified in the request.
  #
  #     If the constraint is defined with default policy, it will also appear in
  #     the list.
  class GovernedAsset
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#governed_assets ⇒ ::Array<::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedAsset>

Returns The list of the analyzed governed assets.

Returns:



2485
2486
2487
2488
2489
2490
2491
2492
2493
2494
2495
2496
2497
2498
2499
2500
2501
2502
2503
2504
2505
2506
2507
2508
2509
2510
2511
2512
2513
2514
2515
2516
2517
2518
2519
2520
2521
2522
2523
2524
2525
2526
2527
2528
2529
2530
2531
2532
2533
2534
2535
2536
2537
2538
2539
2540
2541
2542
2543
2544
2545
2546
2547
2548
2549
2550
2551
2552
2553
2554
2555
2556
2557
2558
2559
2560
2561
2562
2563
2564
2565
2566
2567
2568
2569
2570
2571
2572
2573
2574
2575
2576
2577
2578
2579
2580
2581
2582
2583
2584
2585
2586
2587
2588
2589
2590
2591
2592
2593
2594
2595
2596
2597
2598
2599
2600
2601
2602
2603
2604
2605
2606
2607
2608
2609
2610
2611
2612
 
# File 'proto_docs/google/cloud/asset/v1/asset_service.rb', line 2485

class AnalyzeOrgPolicyGovernedAssetsResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # The Google Cloud resources governed by the organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] full_resource_name
  #   @return [::String]
  #     The [full resource name]
  #     (https://cloud.google.com/asset-inventory/docs/resource-name-format) of
  #     the Google Cloud resource.
  # @!attribute [rw] parent
  #   @return [::String]
  #     The [full resource name]
  #     (https://cloud.google.com/asset-inventory/docs/resource-name-format) of
  #     the parent of
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource#full_resource_name AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource.full_resource_name}.
  # @!attribute [rw] project
  #   @return [::String]
  #     The project that this resource belongs to, in the format of
  #     projects/\\{PROJECT_NUMBER}. This field is available when the resource
  #     belongs to a project.
  # @!attribute [rw] folders
  #   @return [::Array<::String>]
  #     The folder(s) that this resource belongs to, in the format of
  #     folders/\\{FOLDER_NUMBER}. This field is available when the resource
  #     belongs (directly or cascadingly) to one or more folders.
  # @!attribute [rw] organization
  #   @return [::String]
  #     The organization that this resource belongs to, in the format of
  #     organizations/\\{ORGANIZATION_NUMBER}. This field is available when the
  #     resource belongs (directly or cascadingly) to an organization.
  # @!attribute [rw] asset_type
  #   @return [::String]
  #     The asset type of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource#full_resource_name AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource.full_resource_name}
  #     Example:
  #     `cloudresourcemanager.googleapis.com/Project`
  #     See [Cloud Asset Inventory Supported Asset
  #     Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
  #     for all supported asset types.
  # @!attribute [rw] effective_tags
  #   @return [::Array<::Google::Cloud::Asset::V1::EffectiveTagDetails>]
  #     The effective tags on this resource.
  class GovernedResource
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # The IAM policies governed by the organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] attached_resource
  #   @return [::String]
  #     The full resource name of the resource on which this IAM policy is set.
  #     Example:
  #     `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
  #     See [Cloud Asset Inventory Resource Name
  #     Format](https://cloud.google.com/asset-inventory/docs/resource-name-format)
  #     for more information.
  # @!attribute [rw] policy
  #   @return [::Google::Iam::V1::Policy]
  #     The IAM policy directly set on the given resource.
  # @!attribute [rw] project
  #   @return [::String]
  #     The project that this IAM policy belongs to, in the format of
  #     projects/\\{PROJECT_NUMBER}. This field is available when the IAM policy
  #     belongs to a project.
  # @!attribute [rw] folders
  #   @return [::Array<::String>]
  #     The folder(s) that this IAM policy belongs to, in the format of
  #     folders/\\{FOLDER_NUMBER}. This field is available when the IAM policy
  #     belongs (directly or cascadingly) to one or more folders.
  # @!attribute [rw] organization
  #   @return [::String]
  #     The organization that this IAM policy belongs to, in the format of
  #     organizations/\\{ORGANIZATION_NUMBER}. This field is available when the
  #     IAM policy belongs (directly or cascadingly) to an organization.
  # @!attribute [rw] asset_type
  #   @return [::String]
  #     The asset type of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedIamPolicy#attached_resource AnalyzeOrgPolicyGovernedAssetsResponse.GovernedIamPolicy.attached_resource}.
  #     Example:
  #     `cloudresourcemanager.googleapis.com/Project`
  #     See [Cloud Asset Inventory Supported Asset
  #     Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
  #     for all supported asset types.
  class GovernedIamPolicy
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Represents a Google Cloud asset(resource or IAM policy) governed by the
  # organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] governed_resource
  #   @return [::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource]
  #     A Google Cloud resource governed by the organization
  #     policies of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  #
  #     Note: The following fields are mutually exclusive: `governed_resource`, `governed_iam_policy`. If a field in that set is populated, all other fields in the set will automatically be cleared.
  # @!attribute [rw] governed_iam_policy
  #   @return [::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedIamPolicy]
  #     An IAM policy governed by the organization
  #     policies of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  #
  #     Note: The following fields are mutually exclusive: `governed_iam_policy`, `governed_resource`. If a field in that set is populated, all other fields in the set will automatically be cleared.
  # @!attribute [rw] consolidated_policy
  #   @return [::Google::Cloud::Asset::V1::AnalyzerOrgPolicy]
  #     The consolidated policy for the analyzed asset. The consolidated
  #     policy is computed by merging and evaluating
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedAsset#policy_bundle AnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset.policy_bundle}.
  #     The evaluation will respect the organization policy [hierarchy
  #     rules](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy).
  # @!attribute [rw] policy_bundle
  #   @return [::Array<::Google::Cloud::Asset::V1::AnalyzerOrgPolicy>]
  #     The ordered list of all organization policies from the
  #     [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][]
  #     to the scope specified in the request.
  #
  #     If the constraint is defined with default policy, it will also appear in
  #     the list.
  class GovernedAsset
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end

#next_page_token ⇒ ::String

Returns The page token to fetch the next page for AnalyzeOrgPolicyGovernedAssetsResponse.governed_assets.

Returns:



2485
2486
2487
2488
2489
2490
2491
2492
2493
2494
2495
2496
2497
2498
2499
2500
2501
2502
2503
2504
2505
2506
2507
2508
2509
2510
2511
2512
2513
2514
2515
2516
2517
2518
2519
2520
2521
2522
2523
2524
2525
2526
2527
2528
2529
2530
2531
2532
2533
2534
2535
2536
2537
2538
2539
2540
2541
2542
2543
2544
2545
2546
2547
2548
2549
2550
2551
2552
2553
2554
2555
2556
2557
2558
2559
2560
2561
2562
2563
2564
2565
2566
2567
2568
2569
2570
2571
2572
2573
2574
2575
2576
2577
2578
2579
2580
2581
2582
2583
2584
2585
2586
2587
2588
2589
2590
2591
2592
2593
2594
2595
2596
2597
2598
2599
2600
2601
2602
2603
2604
2605
2606
2607
2608
2609
2610
2611
2612
 
# File 'proto_docs/google/cloud/asset/v1/asset_service.rb', line 2485

class AnalyzeOrgPolicyGovernedAssetsResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # The Google Cloud resources governed by the organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] full_resource_name
  #   @return [::String]
  #     The [full resource name]
  #     (https://cloud.google.com/asset-inventory/docs/resource-name-format) of
  #     the Google Cloud resource.
  # @!attribute [rw] parent
  #   @return [::String]
  #     The [full resource name]
  #     (https://cloud.google.com/asset-inventory/docs/resource-name-format) of
  #     the parent of
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource#full_resource_name AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource.full_resource_name}.
  # @!attribute [rw] project
  #   @return [::String]
  #     The project that this resource belongs to, in the format of
  #     projects/\\{PROJECT_NUMBER}. This field is available when the resource
  #     belongs to a project.
  # @!attribute [rw] folders
  #   @return [::Array<::String>]
  #     The folder(s) that this resource belongs to, in the format of
  #     folders/\\{FOLDER_NUMBER}. This field is available when the resource
  #     belongs (directly or cascadingly) to one or more folders.
  # @!attribute [rw] organization
  #   @return [::String]
  #     The organization that this resource belongs to, in the format of
  #     organizations/\\{ORGANIZATION_NUMBER}. This field is available when the
  #     resource belongs (directly or cascadingly) to an organization.
  # @!attribute [rw] asset_type
  #   @return [::String]
  #     The asset type of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource#full_resource_name AnalyzeOrgPolicyGovernedAssetsResponse.GovernedResource.full_resource_name}
  #     Example:
  #     `cloudresourcemanager.googleapis.com/Project`
  #     See [Cloud Asset Inventory Supported Asset
  #     Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
  #     for all supported asset types.
  # @!attribute [rw] effective_tags
  #   @return [::Array<::Google::Cloud::Asset::V1::EffectiveTagDetails>]
  #     The effective tags on this resource.
  class GovernedResource
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # The IAM policies governed by the organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] attached_resource
  #   @return [::String]
  #     The full resource name of the resource on which this IAM policy is set.
  #     Example:
  #     `//compute.googleapis.com/projects/my_project_123/zones/zone1/instances/instance1`.
  #     See [Cloud Asset Inventory Resource Name
  #     Format](https://cloud.google.com/asset-inventory/docs/resource-name-format)
  #     for more information.
  # @!attribute [rw] policy
  #   @return [::Google::Iam::V1::Policy]
  #     The IAM policy directly set on the given resource.
  # @!attribute [rw] project
  #   @return [::String]
  #     The project that this IAM policy belongs to, in the format of
  #     projects/\\{PROJECT_NUMBER}. This field is available when the IAM policy
  #     belongs to a project.
  # @!attribute [rw] folders
  #   @return [::Array<::String>]
  #     The folder(s) that this IAM policy belongs to, in the format of
  #     folders/\\{FOLDER_NUMBER}. This field is available when the IAM policy
  #     belongs (directly or cascadingly) to one or more folders.
  # @!attribute [rw] organization
  #   @return [::String]
  #     The organization that this IAM policy belongs to, in the format of
  #     organizations/\\{ORGANIZATION_NUMBER}. This field is available when the
  #     IAM policy belongs (directly or cascadingly) to an organization.
  # @!attribute [rw] asset_type
  #   @return [::String]
  #     The asset type of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedIamPolicy#attached_resource AnalyzeOrgPolicyGovernedAssetsResponse.GovernedIamPolicy.attached_resource}.
  #     Example:
  #     `cloudresourcemanager.googleapis.com/Project`
  #     See [Cloud Asset Inventory Supported Asset
  #     Types](https://cloud.google.com/asset-inventory/docs/supported-asset-types)
  #     for all supported asset types.
  class GovernedIamPolicy
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Represents a Google Cloud asset(resource or IAM policy) governed by the
  # organization policies of the
  # {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  # @!attribute [rw] governed_resource
  #   @return [::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedResource]
  #     A Google Cloud resource governed by the organization
  #     policies of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  #
  #     Note: The following fields are mutually exclusive: `governed_resource`, `governed_iam_policy`. If a field in that set is populated, all other fields in the set will automatically be cleared.
  # @!attribute [rw] governed_iam_policy
  #   @return [::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedIamPolicy]
  #     An IAM policy governed by the organization
  #     policies of the
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsRequest#constraint AnalyzeOrgPolicyGovernedAssetsRequest.constraint}.
  #
  #     Note: The following fields are mutually exclusive: `governed_iam_policy`, `governed_resource`. If a field in that set is populated, all other fields in the set will automatically be cleared.
  # @!attribute [rw] consolidated_policy
  #   @return [::Google::Cloud::Asset::V1::AnalyzerOrgPolicy]
  #     The consolidated policy for the analyzed asset. The consolidated
  #     policy is computed by merging and evaluating
  #     {::Google::Cloud::Asset::V1::AnalyzeOrgPolicyGovernedAssetsResponse::GovernedAsset#policy_bundle AnalyzeOrgPolicyGovernedAssetsResponse.GovernedAsset.policy_bundle}.
  #     The evaluation will respect the organization policy [hierarchy
  #     rules](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy).
  # @!attribute [rw] policy_bundle
  #   @return [::Array<::Google::Cloud::Asset::V1::AnalyzerOrgPolicy>]
  #     The ordered list of all organization policies from the
  #     [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][]
  #     to the scope specified in the request.
  #
  #     If the constraint is defined with default policy, it will also appear in
  #     the list.
  class GovernedAsset
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end
end