Package com.google.cloud.policytroubleshooter.iam.v3 (1.45.0)

Repository

Client Classes

Client classes are the main entry point to using a package. They contain several variations of Java methods for each of the API's methods.

ClientDescription
com.google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooterClientService Description: IAM Policy Troubleshooter service.

This service helps you troubleshoot access issues for Google Cloud resources.

Settings Classes

Settings classes can be used to configure credentials, endpoints, and retry settings for a Client.

SettingsDescription
com.google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooterSettingsSettings class to configure an instance of PolicyTroubleshooterClient.

The default instance has everything set to sensible defaults:

Classes

ClassDescription
com.google.cloud.policytroubleshooter.iam.v3.AccessTupleInformation about the principal, resource, and permission to check.
com.google.cloud.policytroubleshooter.iam.v3.AccessTuple.BuilderInformation about the principal, resource, and permission to check.
com.google.cloud.policytroubleshooter.iam.v3.AllowBindingExplanationDetails about how a role binding in an allow policy affects a principal's ability to use a permission.
com.google.cloud.policytroubleshooter.iam.v3.AllowBindingExplanation.AnnotatedAllowMembershipDetails about whether the role binding includes the principal.
com.google.cloud.policytroubleshooter.iam.v3.AllowBindingExplanation.AnnotatedAllowMembership.BuilderDetails about whether the role binding includes the principal.
com.google.cloud.policytroubleshooter.iam.v3.AllowBindingExplanation.BuilderDetails about how a role binding in an allow policy affects a principal's ability to use a permission.
com.google.cloud.policytroubleshooter.iam.v3.AllowPolicyExplanationDetails about how the relevant IAM allow policies affect the final access state.
com.google.cloud.policytroubleshooter.iam.v3.AllowPolicyExplanation.BuilderDetails about how the relevant IAM allow policies affect the final access state.
com.google.cloud.policytroubleshooter.iam.v3.ConditionContextAdditional context for troubleshooting conditional role bindings and deny rules.
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.BuilderAdditional context for troubleshooting conditional role bindings and deny rules.
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.EffectiveTagA tag that applies to a resource during policy evaluation. Tags can be either directly bound to a resource or inherited from its ancestor. EffectiveTag contains the name and namespaced_name of the tag value
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.EffectiveTag.BuilderA tag that applies to a resource during policy evaluation. Tags can be either directly bound to a resource or inherited from its ancestor. EffectiveTag contains the name and namespaced_name of the tag value
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.PeerThis message defines attributes for a node that handles a network request. The node can be either a service or an application that sends, forwards, or receives the request. Service peers should fill in
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.Peer.BuilderThis message defines attributes for a node that handles a network request. The node can be either a service or an application that sends, forwards, or receives the request. Service peers should fill in
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.RequestThis message defines attributes for an HTTP request. If the actual request is not an HTTP request, the runtime system should try to map the actual request to an equivalent HTTP request.
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.Request.BuilderThis message defines attributes for an HTTP request. If the actual request is not an HTTP request, the runtime system should try to map the actual request to an equivalent HTTP request.
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.ResourceCore attributes for a resource. A resource is an addressable (named) entity provided by the destination service. For example, a Compute Engine instance.
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.Resource.BuilderCore attributes for a resource. A resource is an addressable (named) entity provided by the destination service. For example, a Compute Engine instance.
com.google.cloud.policytroubleshooter.iam.v3.ConditionExplanationExplanation for how a condition affects a principal's access
com.google.cloud.policytroubleshooter.iam.v3.ConditionExplanation.BuilderExplanation for how a condition affects a principal's access
com.google.cloud.policytroubleshooter.iam.v3.ConditionExplanation.EvaluationStateEvaluated state of a condition expression.
com.google.cloud.policytroubleshooter.iam.v3.ConditionExplanation.EvaluationState.BuilderEvaluated state of a condition expression.
com.google.cloud.policytroubleshooter.iam.v3.DenyPolicyExplanationDetails about how the relevant IAM deny policies affect the final access state.
com.google.cloud.policytroubleshooter.iam.v3.DenyPolicyExplanation.BuilderDetails about how the relevant IAM deny policies affect the final access state.
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanationDetails about how a deny rule in a deny policy affects a principal's ability to use a permission.
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatchingDetails about whether the principal in the request is listed as a denied principal in the deny rule, either directly or through membership in a principal set.
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatching.BuilderDetails about whether the principal in the request is listed as a denied principal in the deny rule, either directly or through membership in a principal set.
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatchingDetails about whether the permission in the request is denied by the deny rule.
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatching.BuilderDetails about whether the permission in the request is denied by the deny rule.
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.BuilderDetails about how a deny rule in a deny policy affects a principal's ability to use a permission.
com.google.cloud.policytroubleshooter.iam.v3.ExplainedAllowPolicyDetails about how a specific IAM allow policy contributed to the final access state.
com.google.cloud.policytroubleshooter.iam.v3.ExplainedAllowPolicy.BuilderDetails about how a specific IAM allow policy contributed to the final access state.
com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicyDetails about how a specific IAM deny policy Policy contributed to the access check.
com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy.BuilderDetails about how a specific IAM deny policy Policy contributed to the access check.
com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResourceDetails about how a specific resource contributed to the deny policy evaluation.
com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResource.BuilderDetails about how a specific resource contributed to the deny policy evaluation.
com.google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooterGrpcIAM Policy Troubleshooter service. This service helps you troubleshoot access issues for Google Cloud resources.
com.google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooterGrpc.PolicyTroubleshooterImplBaseBase class for the server implementation of the service PolicyTroubleshooter. IAM Policy Troubleshooter service.
com.google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooterSettings.BuilderBuilder for PolicyTroubleshooterSettings.
com.google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyRequestRequest for TroubleshootIamPolicy.
com.google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyRequest.BuilderRequest for TroubleshootIamPolicy.
com.google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyResponseResponse for TroubleshootIamPolicy.
com.google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyResponse.BuilderResponse for TroubleshootIamPolicy.
com.google.cloud.policytroubleshooter.iam.v3.TroubleshooterProto

Interfaces

InterfaceDescription
com.google.cloud.policytroubleshooter.iam.v3.AccessTupleOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.AllowBindingExplanation.AnnotatedAllowMembershipOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.AllowBindingExplanationOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.AllowPolicyExplanationOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.EffectiveTagOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.PeerOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.RequestOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ConditionContext.ResourceOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ConditionContextOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ConditionExplanation.EvaluationStateOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ConditionExplanationOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.DenyPolicyExplanationOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedDenyPrincipalMatchingOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation.AnnotatedPermissionMatchingOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanationOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ExplainedAllowPolicyOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicyOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResourceOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooterGrpc.AsyncServiceIAM Policy Troubleshooter service. This service helps you troubleshoot access issues for Google Cloud resources.
com.google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyRequestOrBuilder
com.google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyResponseOrBuilder

Enums

EnumDescription
com.google.cloud.policytroubleshooter.iam.v3.AllowAccessStateWhether IAM allow policies gives the principal the permission.
com.google.cloud.policytroubleshooter.iam.v3.DenyAccessStateWhether IAM deny policies deny the principal the permission.
com.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevanceThe extent to which a single data point contributes to an overall determination.
com.google.cloud.policytroubleshooter.iam.v3.MembershipMatchingStateWhether the principal in the request matches the principal in the policy.
com.google.cloud.policytroubleshooter.iam.v3.PermissionPatternMatchingStateWhether the permission in the request matches the permission in the policy.
com.google.cloud.policytroubleshooter.iam.v3.RolePermissionInclusionStateWhether a role includes a specific permission.
com.google.cloud.policytroubleshooter.iam.v3.TroubleshootIamPolicyResponse.OverallAccessStateWhether the principal has the permission on the resource.