googleapis
diff --git a/‎discovery/apigee-v1.json‎
Lines changed: 14 additions & 2 deletions b/‎discovery/apigee-v1.json‎
Lines changed: 14 additions & 2 deletions
diff --git a/‎discovery/assuredworkloads-v1.json‎
Lines changed: 33 additions & 17 deletions b/‎discovery/assuredworkloads-v1.json‎
Lines changed: 33 additions & 17 deletions
diff --git a/‎discovery/assuredworkloads-v1beta1.json‎
Lines changed: 21 additions & 72 deletions b/‎discovery/assuredworkloads-v1beta1.json‎
Lines changed: 21 additions & 72 deletions
@@ -8744,7 +8744,7 @@
       }
     }
   },
-  "revision": "20230329",
+  "revision": "20230410",
   "rootUrl": "https://apigee.googleapis.com/",
   "schemas": {
     "EdgeConfigstoreBundleBadBundle": {
@@ -11960,7 +11960,7 @@
       "id": "GoogleCloudApigeeV1KeyValueMap",
       "properties": {
         "encrypted": {
-          "description": "Optional. Flag that specifies whether entry values will be encrypted. You must set this value to `true`. Apigee X and hybrid do not support unencrytped key value maps.",
+          "description": "Required. Flag that specifies whether entry values will be encrypted. This field is retained for backward compatibility and the value of encrypted will always be `true`. Apigee X and hybrid do not support unencrypted key value maps.",
           "type": "boolean"
         },
         "name": {
@@ -12897,6 +12897,14 @@
           "description": "Required. DEPRECATED: This field will be deprecated once Apigee supports DRZ. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).",
           "type": "string"
         },
+        "apiConsumerDataEncryptionKeyName": {
+          "description": "Cloud KMS key name used for encrypting API consumer data. Required for US/EU regions when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION` or the region is not US/EU, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`",
+          "type": "string"
+        },
+        "apiConsumerDataLocation": {
+          "description": "This field is needed only for customers with control plane in US or EU. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: \"us-west1\" when control plane is in US or \"europe-west2\" when control plane is in EU.",
+          "type": "string"
+        },
         "apigeeProjectId": {
           "description": "Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.",
           "readOnly": true,
@@ -12935,6 +12943,10 @@
           "readOnly": true,
           "type": "string"
         },
+        "controlPlaneEncryptionKeyName": {
+          "description": "Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Required when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`",
+          "type": "string"
+        },
         "createdAt": {
           "description": "Output only. Time that the Apigee organization was created in milliseconds since epoch.",
           "format": "int64",
 
@@ -215,7 +215,7 @@
                   ]
                 },
                 "delete": {
-                  "description": "Deletes the workload. Make sure that workload's direct children are already in a deleted state, otherwise the request will fail with a FAILED_PRECONDITION error. In addition to assuredworkloads.workload.delete permission, the user should also have orgpolicy.policy.set permission on the deleted folder to remove Assured Workloads OrgPolicies.",
+                  "description": "Deletes the workload. Make sure that workload's direct children are already in a deleted state, otherwise the request will fail with a FAILED_PRECONDITION error.",
                   "flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/workloads/{workloadsId}",
                   "httpMethod": "DELETE",
                   "id": "assuredworkloads.organizations.locations.workloads.delete",
@@ -254,7 +254,7 @@
                   ],
                   "parameters": {
                     "name": {
-                      "description": "Required. The resource name of the Workload to fetch. This is the workloads's relative path in the API, formatted as \"organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}\". For example, \"organizations/123/locations/us-east1/workloads/assured-workload-1\".",
+                      "description": "Required. The resource name of the Workload to fetch. This is the workload's relative path in the API, formatted as \"organizations/{organization_id}/locations/{location_id}/workloads/{workload_id}\". For example, \"organizations/123/locations/us-east1/workloads/assured-workload-1\".",
                       "location": "path",
                       "pattern": "^organizations/[^/]+/locations/[^/]+/workloads/[^/]+$",
                       "required": true,
@@ -519,7 +519,7 @@
       }
     }
   },
-  "revision": "20230331",
+  "revision": "20230406",
   "rootUrl": "https://assuredworkloads.googleapis.com/",
   "schemas": {
     "GoogleCloudAssuredworkloadsV1AcknowledgeViolationRequest": {
@@ -580,8 +580,8 @@
             "Assured Workloads For Canada Regions and Support controls",
             "International Traffic in Arms Regulations",
             "Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
-            "Assured Workloads for Partners;",
-            "Assured Workloads for Israel",
+            "Assured Workloads for Partners",
+            "Assured Workloads for Israel Regions",
             "Assured Workloads for Israel Regions",
             "Assured Workloads for Canada Protected B regime"
           ],
@@ -640,7 +640,7 @@
       "type": "object"
     },
     "GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest": {
-      "description": "Request for updating permission settings for a partner workload.",
+      "description": "Request of updating permission settings for a partner workload.",
       "id": "GoogleCloudAssuredworkloadsV1MutatePartnerPermissionsRequest",
       "properties": {
         "etag": {
@@ -675,7 +675,7 @@
             "Unknown restriction type.",
             "Allow the use all of all gcp products, irrespective of the compliance posture. This effectively removes gcp.restrictServiceUsage OrgPolicy on the AssuredWorkloads Folder.",
             "Based on Workload's compliance regime, allowed list changes. See - https://cloud.google.com/assured-workloads/docs/supported-products for the list of supported resources.",
-            "Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of compliant resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows."
+            "Similar to ALLOW_COMPLIANT_RESOURCES but adds the list of compliant resources to the existing list of resources. Effective org-policy of the Folder is considered to ensure there is no disruption to the existing customer workflows."
           ],
           "type": "string"
         }
@@ -697,7 +697,7 @@
           "type": "boolean"
         },
         "acknowledgementTime": {
-          "description": "Optional. Timestamp when this violation was acknowledged last. This will be absent when acknowledged field is marked as false.",
+          "description": "Optional. Timestamp when this violation was acknowledged first. Check exception_contexts to find the last time the violation was acknowledged when there are more than one violations. This field will be absent when acknowledged field is marked as false.",
           "format": "google-datetime",
           "type": "string"
         },
@@ -928,8 +928,8 @@
             "Assured Workloads For Canada Regions and Support controls",
             "International Traffic in Arms Regulations",
             "Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
-            "Assured Workloads for Partners;",
-            "Assured Workloads for Israel",
+            "Assured Workloads for Partners",
+            "Assured Workloads for Israel Regions",
             "Assured Workloads for Israel Regions",
             "Assured Workloads for Canada Protected B regime"
           ],
@@ -1005,12 +1005,16 @@
           "enum": [
             "PARTNER_UNSPECIFIED",
             "LOCAL_CONTROLS_BY_S3NS",
-            "SOVEREIGN_CONTROLS_BY_T_SYSTEMS"
+            "SOVEREIGN_CONTROLS_BY_T_SYSTEMS",
+            "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT",
+            "SOVEREIGN_CONTROLS_BY_PSN"
           ],
           "enumDescriptions": [
             "",
             "Enum representing S3NS (Thales) partner.",
-            "Enum representing T_SYSTEM (TSI) partner."
+            "Enum representing T_SYSTEM (TSI) partner.",
+            "Enum representing SIA_MINSAIT (Indra) partner.",
+            "Enum representing PSN (TIM) partner."
           ],
           "type": "string"
         },
@@ -1082,8 +1086,20 @@
           ],
           "type": "string"
         },
-        "ekmProvisioningErrorMessage": {
+        "ekmProvisioningErrorMapping": {
           "description": "Detailed error message if Ekm provisioning fails",
+          "enum": [
+            "EKM_PROVISIONING_ERROR_MAPPING_UNSPECIFIED",
+            "INVALID_SERVICE_ACCOUNT",
+            "MISSING_METRICS_SCOPE_ADMIN_PERMISSION",
+            "MISSING_EKM_CONNECTION_ADMIN_PERMISSION"
+          ],
+          "enumDescriptions": [
+            "Error is unspecified.",
+            "Service account is used is invalid.",
+            "Iam permission monitoring.MetricsScopeAdmin wasn't applied.",
+            "Iam permission cloudkms.ekmConnectionsAdmin wasn't applied."
+          ],
           "type": "string"
         },
         "ekmProvisioningState": {
@@ -1106,7 +1122,7 @@
       "type": "object"
     },
     "GoogleCloudAssuredworkloadsV1WorkloadKMSSettings": {
-      "description": "Settings specific to the Key Management Service.",
+      "description": "Settings specific to the Key Management Service. This message is deprecated. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.",
       "id": "GoogleCloudAssuredworkloadsV1WorkloadKMSSettings",
       "properties": {
         "nextRotationTime": {
@@ -1161,7 +1177,7 @@
           ],
           "enumDescriptions": [
             "Unknown resource type.",
-            "Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.",
+            "Consumer project. AssuredWorkloads Projects are no longer supported. This field will be ignored only in CreateWorkload requests. ListWorkloads and GetWorkload will continue to provide projects information. Use CONSUMER_FOLDER instead.",
             "Consumer Folder.",
             "Consumer project containing encryption keys.",
             "Keyring resource that hosts encryption keys."
@@ -1184,7 +1200,7 @@
           "type": "string"
         },
         "resourceType": {
-          "description": "Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)",
+          "description": "Indicates the type of resource. This field should be specified to correspond the id to the right resource type (CONSUMER_FOLDER or ENCRYPTION_KEYS_PROJECT)",
           "enum": [
             "RESOURCE_TYPE_UNSPECIFIED",
             "CONSUMER_PROJECT",
@@ -1194,7 +1210,7 @@
           ],
           "enumDescriptions": [
             "Unknown resource type.",
-            "Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.",
+            "Consumer project. AssuredWorkloads Projects are no longer supported. This field will be ignored only in CreateWorkload requests. ListWorkloads and GetWorkload will continue to provide projects information. Use CONSUMER_FOLDER instead.",
             "Consumer Folder.",
             "Consumer project containing encryption keys.",
             "Keyring resource that hosts encryption keys."
 
@@ -595,7 +595,7 @@
       }
     }
   },
-  "revision": "20230331",
+  "revision": "20230406",
   "rootUrl": "https://assuredworkloads.googleapis.com/",
   "schemas": {
     "GoogleCloudAssuredworkloadsV1beta1AcknowledgeViolationRequest": {
@@ -633,73 +633,6 @@
       },
       "type": "object"
     },
-    "GoogleCloudAssuredworkloadsV1beta1CreateWorkloadOperationMetadata": {
-      "description": "Operation metadata to give request details of CreateWorkload.",
-      "id": "GoogleCloudAssuredworkloadsV1beta1CreateWorkloadOperationMetadata",
-      "properties": {
-        "complianceRegime": {
-          "description": "Optional. Compliance controls that should be applied to the resources managed by the workload.",
-          "enum": [
-            "COMPLIANCE_REGIME_UNSPECIFIED",
-            "IL4",
-            "CJIS",
-            "FEDRAMP_HIGH",
-            "FEDRAMP_MODERATE",
-            "US_REGIONAL_ACCESS",
-            "HIPAA",
-            "HITRUST",
-            "EU_REGIONS_AND_SUPPORT",
-            "CA_REGIONS_AND_SUPPORT",
-            "ITAR",
-            "AU_REGIONS_AND_US_SUPPORT",
-            "ASSURED_WORKLOADS_FOR_PARTNERS",
-            "ISR_REGIONS",
-            "ISR_REGIONS_AND_SUPPORT",
-            "CA_PROTECTED_B"
-          ],
-          "enumDescriptions": [
-            "Unknown compliance regime.",
-            "Information protection as per DoD IL4 requirements.",
-            "Criminal Justice Information Services (CJIS) Security policies.",
-            "FedRAMP High data protection controls",
-            "FedRAMP Moderate data protection controls",
-            "Assured Workloads For US Regions data protection controls",
-            "Health Insurance Portability and Accountability Act controls",
-            "Health Information Trust Alliance controls",
-            "Assured Workloads For EU Regions and Support controls",
-            "Assured Workloads For Canada Regions and Support controls",
-            "International Traffic in Arms Regulations",
-            "Assured Workloads for Australia Regions and Support controls Available for public preview consumption. Don't create production workloads.",
-            "Assured Workloads for Partners;",
-            "Assured Workloads for Israel",
-            "Assured Workloads for Israel Regions",
-            "Assured Workloads for Canada Protected B regime"
-          ],
-          "type": "string"
-        },
-        "createTime": {
-          "description": "Optional. Time when the operation was created.",
-          "format": "google-datetime",
-          "type": "string"
-        },
-        "displayName": {
-          "description": "Optional. The display name of the workload.",
-          "type": "string"
-        },
-        "parent": {
-          "description": "Optional. The parent of the workload.",
-          "type": "string"
-        },
-        "resourceSettings": {
-          "description": "Optional. Resource properties in the input that are used for creating/customizing workload resources.",
-          "items": {
-            "$ref": "GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettings"
-          },
-          "type": "array"
-        }
-      },
-      "type": "object"
-    },
     "GoogleCloudAssuredworkloadsV1beta1ListViolationsResponse": {
       "description": "Response of ListViolations endpoint.",
       "id": "GoogleCloudAssuredworkloadsV1beta1ListViolationsResponse",
@@ -774,7 +707,7 @@
           "type": "boolean"
         },
         "acknowledgementTime": {
-          "description": "Optional. Timestamp when this violation was acknowledged last. This will be absent when acknowledged field is marked as false.",
+          "description": "Optional. Timestamp when this violation was acknowledged first. Check exception_contexts to find the last time the violation was acknowledged when there are more than one violations. This field will be absent when acknowledged field is marked as false.",
           "format": "google-datetime",
           "type": "string"
         },
@@ -1098,12 +1031,16 @@
           "enum": [
             "PARTNER_UNSPECIFIED",
             "LOCAL_CONTROLS_BY_S3NS",
-            "SOVEREIGN_CONTROLS_BY_T_SYSTEMS"
+            "SOVEREIGN_CONTROLS_BY_T_SYSTEMS",
+            "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT",
+            "SOVEREIGN_CONTROLS_BY_PSN"
           ],
           "enumDescriptions": [
             "",
             "Enum representing S3NS (Thales) partner.",
-            "Enum representing T_SYSTEM (TSI) partner."
+            "Enum representing T_SYSTEM (TSI) partner.",
+            "Enum representing SIA_MINSAIT (Indra) partner.",
+            "Enum representing PSN (TIM) partner."
           ],
           "type": "string"
         },
@@ -1186,8 +1123,20 @@
           ],
           "type": "string"
         },
-        "ekmProvisioningErrorMessage": {
+        "ekmProvisioningErrorMapping": {
           "description": "Detailed error message if Ekm provisioning fails",
+          "enum": [
+            "EKM_PROVISIONING_ERROR_MAPPING_UNSPECIFIED",
+            "INVALID_SERVICE_ACCOUNT",
+            "MISSING_METRICS_SCOPE_ADMIN_PERMISSION",
+            "MISSING_EKM_CONNECTION_ADMIN_PERMISSION"
+          ],
+          "enumDescriptions": [
+            "Error is unspecified.",
+            "Service account is used is invalid.",
+            "Iam permission monitoring.MetricsScopeAdmin wasn't applied.",
+            "Iam permission cloudkms.ekmConnectionsAdmin wasn't applied."
+          ],
           "type": "string"
         },
         "ekmProvisioningState": {