feat: [google-cloud-asset] A new message ResourceOwners is added (googleapis#13838)

gcf-owl-bot[bot] · web-flow · commit b464b68f31f1 · 2025-04-24T11:04:40.000-07:00
- [ ] Regenerate this pull request now. BEGIN_COMMIT_OVERRIDE feat: A new message `ResourceOwners` is added feat: A new value `REMOVE_GRANT` is added to enum `MethodType` feat: A new value `GOVERN_TAGS` is added to enum `MethodType` feat: A new message `AssetEnrichment` is added feat: A new field `enrichments` is added to message `.google.cloud.asset.v1.ResourceSearchResult` docs: A comment for field `service_account_impersonation_analysis` in message `.google.cloud.asset.v1.AnalyzeIamPolicyResponse` is changed docs: A comment for field `consolidated_policy` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedContainersResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedAssetsResponse` is changed docs: A comment for field `attached_resource` in message `.google.cloud.asset.v1.EffectiveTagDetails` is changed END_COMMIT_OVERRIDE feat: A new value `REMOVE_GRANT` is added to enum `MethodType` feat: A new value `GOVERN_TAGS` is added to enum `MethodType` feat: A new message `AssetEnrichment` is added feat: A new field `enrichments` is added to message `.google.cloud.asset.v1.ResourceSearchResult` docs: A comment for field `service_account_impersonation_analysis` in message `.google.cloud.asset.v1.AnalyzeIamPolicyResponse` is changed docs: A comment for field `consolidated_policy` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedContainersResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedAssetsResponse` is changed docs: A comment for field `attached_resource` in message `.google.cloud.asset.v1.EffectiveTagDetails` is changed PiperOrigin-RevId: 750916403 Source-Link: googleapis/googleapis@261895f Source-Link: https://github.com/googleapis/googleapis-gen/commit/023cbdaebc86e8c33ead780f78fe0cb1da89d1fd Copy-Tag: eyJwIjoicGFja2FnZXMvZ29vZ2xlLWNsb3VkLWFzc2V0Ly5Pd2xCb3QueWFtbCIsImgiOiIwMjNjYmRhZWJjODZlOGMzM2VhZDc4MGY3OGZlMGNiMWRhODlkMWZkIn0= --------- Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
diff --git a/packages/google-cloud-asset/google/cloud/asset/__init__.py b/packages/google-cloud-asset/google/cloud/asset/__init__.py
@@ -22,6 +22,7 @@
     AssetServiceAsyncClient,
 )
 from google.cloud.asset_v1.services.asset_service.client import AssetServiceClient
+from google.cloud.asset_v1.types.asset_enrichment_resourceowners import ResourceOwners
 from google.cloud.asset_v1.types.asset_service import (
     AnalyzeIamPolicyLongrunningMetadata,
     AnalyzeIamPolicyLongrunningRequest,
@@ -87,6 +88,7 @@
 )
 from google.cloud.asset_v1.types.assets import (
     Asset,
+    AssetEnrichment,
     AttachedResource,
     ConditionEvaluation,
     EffectiveTagDetails,
@@ -109,6 +111,7 @@
 __all__ = (
     "AssetServiceClient",
     "AssetServiceAsyncClient",
+    "ResourceOwners",
     "AnalyzeIamPolicyLongrunningMetadata",
     "AnalyzeIamPolicyLongrunningRequest",
     "AnalyzeIamPolicyLongrunningResponse",
@@ -171,6 +174,7 @@
     "UpdateSavedQueryRequest",
     "ContentType",
     "Asset",
+    "AssetEnrichment",
     "AttachedResource",
     "ConditionEvaluation",
     "EffectiveTagDetails",
diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/__init__.py b/packages/google-cloud-asset/google/cloud/asset_v1/__init__.py
@@ -19,6 +19,7 @@
 
 
 from .services.asset_service import AssetServiceAsyncClient, AssetServiceClient
+from .types.asset_enrichment_resourceowners import ResourceOwners
 from .types.asset_service import (
     AnalyzeIamPolicyLongrunningMetadata,
     AnalyzeIamPolicyLongrunningRequest,
@@ -84,6 +85,7 @@
 )
 from .types.assets import (
     Asset,
+    AssetEnrichment,
     AttachedResource,
     ConditionEvaluation,
     EffectiveTagDetails,
@@ -121,6 +123,7 @@
     "AnalyzerOrgPolicy",
     "AnalyzerOrgPolicyConstraint",
     "Asset",
+    "AssetEnrichment",
     "AssetServiceClient",
     "AttachedResource",
     "BatchGetAssetsHistoryRequest",
@@ -171,6 +174,7 @@
     "RelatedResources",
     "RelationshipAttributes",
     "Resource",
+    "ResourceOwners",
     "ResourceSearchResult",
     "SavedQuery",
     "SearchAllIamPoliciesRequest",
diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/types/__init__.py b/packages/google-cloud-asset/google/cloud/asset_v1/types/__init__.py
@@ -13,6 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
+from .asset_enrichment_resourceowners import ResourceOwners
 from .asset_service import (
     AnalyzeIamPolicyLongrunningMetadata,
     AnalyzeIamPolicyLongrunningRequest,
@@ -78,6 +79,7 @@
 )
 from .assets import (
     Asset,
+    AssetEnrichment,
     AttachedResource,
     ConditionEvaluation,
     EffectiveTagDetails,
@@ -98,6 +100,7 @@
 )
 
 __all__ = (
+    "ResourceOwners",
     "AnalyzeIamPolicyLongrunningMetadata",
     "AnalyzeIamPolicyLongrunningRequest",
     "AnalyzeIamPolicyLongrunningResponse",
@@ -160,6 +163,7 @@
     "UpdateSavedQueryRequest",
     "ContentType",
     "Asset",
+    "AssetEnrichment",
     "AttachedResource",
     "ConditionEvaluation",
     "EffectiveTagDetails",
diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_enrichment_resourceowners.py b/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_enrichment_resourceowners.py
@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*-
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+from __future__ import annotations
+
+from typing import MutableMapping, MutableSequence
+
+import proto  # type: ignore
+
+__protobuf__ = proto.module(
+    package="google.cloud.asset.v1",
+    manifest={
+        "ResourceOwners",
+    },
+)
+
+
+class ResourceOwners(proto.Message):
+    r"""The resource owners information.
+
+    Attributes:
+        resource_owners (MutableSequence[str]):
+            List of resource owners.
+    """
+
+    resource_owners: MutableSequence[str] = proto.RepeatedField(
+        proto.STRING,
+        number=1,
+    )
+
+
+__all__ = tuple(sorted(__protobuf__.manifest))
diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_service.py b/packages/google-cloud-asset/google/cloud/asset_v1/types/asset_service.py
@@ -1856,7 +1856,7 @@ class AnalyzeIamPolicyResponse(proto.Message):
             request.
         service_account_impersonation_analysis (MutableSequence[google.cloud.asset_v1.types.AnalyzeIamPolicyResponse.IamPolicyAnalysis]):
             The service account impersonation analysis if
-            [AnalyzeIamPolicyRequest.analyze_service_account_impersonation][]
+            [IamPolicyAnalysisQuery.Options.analyze_service_account_impersonation][google.cloud.asset.v1.IamPolicyAnalysisQuery.Options.analyze_service_account_impersonation]
             is enabled.
         fully_explored (bool):
             Represents whether all entries in the
@@ -3448,11 +3448,19 @@ class MethodType(proto.Enum):
                 DELETE (3):
                     Constraint applied when deleting the
                     resource.
+                REMOVE_GRANT (4):
+                    Constraint applied when removing an IAM
+                    grant.
+                GOVERN_TAGS (5):
+                    Constraint applied when enforcing forced
+                    tagging.
             """
             METHOD_TYPE_UNSPECIFIED = 0
             CREATE = 1
             UPDATE = 2
             DELETE = 3
+            REMOVE_GRANT = 4
+            GOVERN_TAGS = 5
 
         class ActionType(proto.Enum):
             r"""Allow or deny type.
@@ -3612,12 +3620,13 @@ class OrgPolicyResult(proto.Message):
                 The consolidated organization policy for the analyzed
                 resource. The consolidated organization policy is computed
                 by merging and evaluating
-                [AnalyzeOrgPoliciesResponse.policy_bundle][]. The evaluation
-                will respect the organization policy `hierarchy
+                [policy_bundle][google.cloud.asset.v1.AnalyzeOrgPoliciesResponse.OrgPolicyResult.policy_bundle].
+                The evaluation will respect the organization policy
+                `hierarchy
                 rules <https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy>`__.
             policy_bundle (MutableSequence[google.cloud.asset_v1.types.AnalyzerOrgPolicy]):
                 The ordered list of all organization policies from the
-                [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][].
+                [consolidated_policy.attached_resource][google.cloud.asset.v1.AnalyzerOrgPolicy.attached_resource].
                 to the scope specified in the request.
 
                 If the constraint is defined with default policy, it will
@@ -3790,7 +3799,7 @@ class GovernedContainer(proto.Message):
                 rules <https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy>`__.
             policy_bundle (MutableSequence[google.cloud.asset_v1.types.AnalyzerOrgPolicy]):
                 The ordered list of all organization policies from the
-                [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][].
+                [consolidated_policy.attached_resource][google.cloud.asset.v1.AnalyzerOrgPolicy.attached_resource].
                 to the scope specified in the request.
 
                 If the constraint is defined with default policy, it will
@@ -4144,7 +4153,7 @@ class GovernedAsset(proto.Message):
                 rules <https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy>`__.
             policy_bundle (MutableSequence[google.cloud.asset_v1.types.AnalyzerOrgPolicy]):
                 The ordered list of all organization policies from the
-                [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][]
+                [consolidated_policy.attached_resource][google.cloud.asset.v1.AnalyzerOrgPolicy.attached_resource]
                 to the scope specified in the request.
 
                 If the constraint is defined with default policy, it will
diff --git a/packages/google-cloud-asset/google/cloud/asset_v1/types/assets.py b/packages/google-cloud-asset/google/cloud/asset_v1/types/assets.py
@@ -30,11 +30,14 @@
 from google.rpc import code_pb2  # type: ignore
 import proto  # type: ignore
 
+from google.cloud.asset_v1.types import asset_enrichment_resourceowners
+
 __protobuf__ = proto.module(
     package="google.cloud.asset.v1",
     manifest={
         "TemporalAsset",
         "TimeWindow",
+        "AssetEnrichment",
         "Asset",
         "Resource",
         "RelatedAssets",
@@ -147,6 +150,30 @@ class TimeWindow(proto.Message):
     )
 
 
+class AssetEnrichment(proto.Message):
+    r"""The enhanced metadata information for a resource.
+
+    .. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
+
+    Attributes:
+        resource_owners (google.cloud.asset_v1.types.ResourceOwners):
+            The resource owners for a resource.
+
+            Note that this field only contains the members
+            that have "roles/owner" role in the resource's
+            IAM Policy.
+
+            This field is a member of `oneof`_ ``EnrichmentData``.
+    """
+
+    resource_owners: asset_enrichment_resourceowners.ResourceOwners = proto.Field(
+        proto.MESSAGE,
+        number=7,
+        oneof="EnrichmentData",
+        message=asset_enrichment_resourceowners.ResourceOwners,
+    )
+
+
 class Asset(proto.Message):
     r"""An asset in Google Cloud. An asset can be any resource in the Google
     Cloud `resource
@@ -571,8 +598,9 @@ class EffectiveTagDetails(proto.Message):
         attached_resource (str):
             The `full resource
             name <https://cloud.google.com/asset-inventory/docs/resource-name-format>`__
-            of the ancestor from which an [effective_tag][] is
-            inherited, according to `tag
+            of the ancestor from which
+            [effective_tags][google.cloud.asset.v1.EffectiveTagDetails.effective_tags]
+            are inherited, according to `tag
             inheritance <https://cloud.google.com/resource-manager/docs/tags/tags-overview#inheritance>`__.
 
             This field is a member of `oneof`_ ``_attached_resource``.
@@ -943,6 +971,32 @@ class ResourceSearchResult(proto.Message):
                -  ``effectiveTagValues:"123456789/env/prod*"``
                -  ``effectiveTagValues="123456789/env/prod"``
                -  ``effectiveTagValueIds="tagValues/456"``
+        enrichments (MutableSequence[google.cloud.asset_v1.types.AssetEnrichment]):
+            Enrichments of the asset. Currently supported enrichment
+            types with SearchAllResources API:
+
+            -  RESOURCE_OWNERS
+
+            The corresponding read masks in order to get the enrichment:
+
+            -  enrichments.resource_owners
+
+            The corresponding required permissions:
+
+            -  cloudasset.assets.searchEnrichmentResourceOwners
+
+            Example query to get resource owner enrichment:
+
+            ::
+
+                 scope: "projects/my-project"
+                 query: "name: my-project"
+                 assetTypes: "cloudresourcemanager.googleapis.com/Project"
+                 readMask: {
+                    paths: "asset_type"
+                    paths: "name"
+                    paths: "enrichments.resource_owners"
+                 }
         parent_asset_type (str):
             The type of this resource's immediate parent, if there is
             one.
@@ -1077,6 +1131,11 @@ class ResourceSearchResult(proto.Message):
         number=30,
         message="EffectiveTagDetails",
     )
+    enrichments: MutableSequence["AssetEnrichment"] = proto.RepeatedField(
+        proto.MESSAGE,
+        number=31,
+        message="AssetEnrichment",
+    )
     parent_asset_type: str = proto.Field(
         proto.STRING,
         number=103,
