googleapis
diff --git a/‎docs/dyn/analyticsadmin_v1alpha.properties.html‎
Lines changed: 22 additions & 0 deletions b/‎docs/dyn/analyticsadmin_v1alpha.properties.html‎
Lines changed: 22 additions & 0 deletions
diff --git a/‎docs/dyn/apigee_v1.organizations.apis.keyvaluemaps.html‎
Lines changed: 3 additions & 3 deletions b/‎docs/dyn/apigee_v1.organizations.apis.keyvaluemaps.html‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎docs/dyn/apigee_v1.organizations.environments.keyvaluemaps.html‎
Lines changed: 3 additions & 3 deletions b/‎docs/dyn/apigee_v1.organizations.environments.keyvaluemaps.html‎
Lines changed: 3 additions & 3 deletions
diff --git a/‎docs/dyn/apigee_v1.organizations.html‎
Lines changed: 12 additions & 0 deletions b/‎docs/dyn/apigee_v1.organizations.html‎
Lines changed: 12 additions & 0 deletions
@@ -170,6 +170,9 @@ <h2>Instance Methods</h2>
 <p class="toc_element">
   <code><a href="#fetchAutomatedGa4ConfigurationOptOut">fetchAutomatedGa4ConfigurationOptOut(body=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Fetches the opt out status for the automated GA4 setup process for a UA property. Note: this has no effect on GA4 property.</p>
+<p class="toc_element">
+  <code><a href="#fetchConnectedGa4Property">fetchConnectedGa4Property(property=None, x__xgafv=None)</a></code></p>
+<p class="firstline">Given a specified UA property, looks up the GA4 property connected to it. Note: this cannot be used with GA4 properties.</p>
 <p class="toc_element">
   <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
 <p class="firstline">Lookup for a single "GA4" Property.</p>
@@ -398,6 +401,25 @@ <h3>Method Details</h3>
 }</pre>
 </div>
 
+<div class="method">
+    <code class="details" id="fetchConnectedGa4Property">fetchConnectedGa4Property(property=None, x__xgafv=None)</code>
+  <pre>Given a specified UA property, looks up the GA4 property connected to it. Note: this cannot be used with GA4 properties.
+
+Args:
+  property: string, Required. The UA property for which to look up the connected GA4 property. Note this request uses the internal property ID, not the tracking ID of the form UA-XXXXXX-YY. Format: properties/{internal_web_property_id} Example: properties/1234
+  x__xgafv: string, V1 error format.
+    Allowed values
+      1 - v1 error format
+      2 - v2 error format
+
+Returns:
+  An object of the form:
+
+    { # Response for looking up GA4 property connected to a UA property.
+  &quot;property&quot;: &quot;A String&quot;, # The GA4 property connected to the UA property. An empty string is returned when there is no connected GA4 property. Format: properties/{property_id} Example: properties/1234
+}</pre>
+</div>
+
 <div class="method">
     <code class="details" id="get">get(name, x__xgafv=None)</code>
   <pre>Lookup for a single &quot;GA4&quot; Property.
 
@@ -104,7 +104,7 @@ <h3>Method Details</h3>
     The object takes the form of:
 
 { # Collection of key/value string pairs.
-  &quot;encrypted&quot;: True or False, # Optional. Flag that specifies whether entry values will be encrypted. You must set this value to `true`. Apigee X and hybrid do not support unencrytped key value maps.
+  &quot;encrypted&quot;: True or False, # Required. Flag that specifies whether entry values will be encrypted. This field is retained for backward compatibility and the value of encrypted will always be `true`. Apigee X and hybrid do not support unencrypted key value maps.
   &quot;name&quot;: &quot;A String&quot;, # Required. ID of the key value map.
 }
 
@@ -117,7 +117,7 @@ <h3>Method Details</h3>
   An object of the form:
 
     { # Collection of key/value string pairs.
-  &quot;encrypted&quot;: True or False, # Optional. Flag that specifies whether entry values will be encrypted. You must set this value to `true`. Apigee X and hybrid do not support unencrytped key value maps.
+  &quot;encrypted&quot;: True or False, # Required. Flag that specifies whether entry values will be encrypted. This field is retained for backward compatibility and the value of encrypted will always be `true`. Apigee X and hybrid do not support unencrypted key value maps.
   &quot;name&quot;: &quot;A String&quot;, # Required. ID of the key value map.
 }</pre>
 </div>
@@ -137,7 +137,7 @@ <h3>Method Details</h3>
   An object of the form:
 
     { # Collection of key/value string pairs.
-  &quot;encrypted&quot;: True or False, # Optional. Flag that specifies whether entry values will be encrypted. You must set this value to `true`. Apigee X and hybrid do not support unencrytped key value maps.
+  &quot;encrypted&quot;: True or False, # Required. Flag that specifies whether entry values will be encrypted. This field is retained for backward compatibility and the value of encrypted will always be `true`. Apigee X and hybrid do not support unencrypted key value maps.
   &quot;name&quot;: &quot;A String&quot;, # Required. ID of the key value map.
 }</pre>
 </div>
 
@@ -104,7 +104,7 @@ <h3>Method Details</h3>
     The object takes the form of:
 
 { # Collection of key/value string pairs.
-  &quot;encrypted&quot;: True or False, # Optional. Flag that specifies whether entry values will be encrypted. You must set this value to `true`. Apigee X and hybrid do not support unencrytped key value maps.
+  &quot;encrypted&quot;: True or False, # Required. Flag that specifies whether entry values will be encrypted. This field is retained for backward compatibility and the value of encrypted will always be `true`. Apigee X and hybrid do not support unencrypted key value maps.
   &quot;name&quot;: &quot;A String&quot;, # Required. ID of the key value map.
 }
 
@@ -117,7 +117,7 @@ <h3>Method Details</h3>
   An object of the form:
 
     { # Collection of key/value string pairs.
-  &quot;encrypted&quot;: True or False, # Optional. Flag that specifies whether entry values will be encrypted. You must set this value to `true`. Apigee X and hybrid do not support unencrytped key value maps.
+  &quot;encrypted&quot;: True or False, # Required. Flag that specifies whether entry values will be encrypted. This field is retained for backward compatibility and the value of encrypted will always be `true`. Apigee X and hybrid do not support unencrypted key value maps.
   &quot;name&quot;: &quot;A String&quot;, # Required. ID of the key value map.
 }</pre>
 </div>
@@ -137,7 +137,7 @@ <h3>Method Details</h3>
   An object of the form:
 
     { # Collection of key/value string pairs.
-  &quot;encrypted&quot;: True or False, # Optional. Flag that specifies whether entry values will be encrypted. You must set this value to `true`. Apigee X and hybrid do not support unencrytped key value maps.
+  &quot;encrypted&quot;: True or False, # Required. Flag that specifies whether entry values will be encrypted. This field is retained for backward compatibility and the value of encrypted will always be `true`. Apigee X and hybrid do not support unencrypted key value maps.
   &quot;name&quot;: &quot;A String&quot;, # Required. ID of the key value map.
 }</pre>
 </div>
 
@@ -250,13 +250,16 @@ <h3>Method Details</h3>
     },
   },
   &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will be deprecated once Apigee supports DRZ. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
+  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting API consumer data. Required for US/EU regions when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION` or the region is not US/EU, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
+  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # This field is needed only for customers with control plane in US or EU. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
   &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
   &quot;attributes&quot;: [ # Not used by Apigee.
     &quot;A String&quot;,
   ],
   &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
   &quot;billingType&quot;: &quot;A String&quot;, # Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
   &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
+  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Required when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
   &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
   &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
   &quot;description&quot;: &quot;A String&quot;, # Description of the Apigee organization.
@@ -388,13 +391,16 @@ <h3>Method Details</h3>
     },
   },
   &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will be deprecated once Apigee supports DRZ. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
+  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting API consumer data. Required for US/EU regions when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION` or the region is not US/EU, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
+  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # This field is needed only for customers with control plane in US or EU. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
   &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
   &quot;attributes&quot;: [ # Not used by Apigee.
     &quot;A String&quot;,
   ],
   &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
   &quot;billingType&quot;: &quot;A String&quot;, # Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
   &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
+  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Required when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
   &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
   &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
   &quot;description&quot;: &quot;A String&quot;, # Description of the Apigee organization.
@@ -706,13 +712,16 @@ <h3>Method Details</h3>
     },
   },
   &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will be deprecated once Apigee supports DRZ. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
+  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting API consumer data. Required for US/EU regions when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION` or the region is not US/EU, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
+  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # This field is needed only for customers with control plane in US or EU. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
   &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
   &quot;attributes&quot;: [ # Not used by Apigee.
     &quot;A String&quot;,
   ],
   &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
   &quot;billingType&quot;: &quot;A String&quot;, # Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
   &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
+  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Required when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
   &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
   &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
   &quot;description&quot;: &quot;A String&quot;, # Description of the Apigee organization.
@@ -769,13 +778,16 @@ <h3>Method Details</h3>
     },
   },
   &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will be deprecated once Apigee supports DRZ. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
+  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting API consumer data. Required for US/EU regions when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION` or the region is not US/EU, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
+  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # This field is needed only for customers with control plane in US or EU. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
   &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
   &quot;attributes&quot;: [ # Not used by Apigee.
     &quot;A String&quot;,
   ],
   &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
   &quot;billingType&quot;: &quot;A String&quot;, # Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
   &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
+  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Required when [BillingType](#BillingType) is `SUBSCRIPTION`. When [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
   &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
   &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
   &quot;description&quot;: &quot;A String&quot;, # Description of the Apigee organization.