1type: google.api.Service 2config_version: 3 3name: networksecurity.googleapis.com 4title: Network Security API 5 6apis: 7- name: google.cloud.location.Locations 8- name: google.cloud.networksecurity.v1.NetworkSecurity 9- name: google.iam.v1.IAMPolicy 10- name: google.longrunning.Operations 11 12types: 13- name: google.cloud.networksecurity.v1.OperationMetadata 14 15documentation: 16 rules: 17 - selector: google.cloud.location.Locations.GetLocation 18 description: Gets information about a location. 19 20 - selector: google.cloud.location.Locations.ListLocations 21 description: Lists information about the supported locations for this service. 22 23 - selector: google.iam.v1.IAMPolicy.GetIamPolicy 24 description: |- 25 Gets the access control policy for a resource. Returns an empty policy 26 if the resource exists and does not have a policy set. 27 28 - selector: google.iam.v1.IAMPolicy.SetIamPolicy 29 description: |- 30 Sets the access control policy on the specified resource. Replaces 31 any existing policy. 32 33 Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` 34 errors. 35 36 - selector: google.iam.v1.IAMPolicy.TestIamPermissions 37 description: |- 38 Returns permissions that a caller has on the specified resource. If the 39 resource does not exist, this will return an empty set of 40 permissions, not a `NOT_FOUND` error. 41 42 Note: This operation is designed to be used for building 43 permission-aware UIs and command-line tools, not for authorization 44 checking. This operation may "fail open" without warning. 45 46backend: 47 rules: 48 - selector: google.cloud.location.Locations.GetLocation 49 deadline: 60.0 50 - selector: google.cloud.location.Locations.ListLocations 51 deadline: 60.0 52 - selector: 'google.cloud.networksecurity.v1.NetworkSecurity.*' 53 deadline: 60.0 54 - selector: 'google.iam.v1.IAMPolicy.*' 55 deadline: 60.0 56 - selector: 'google.longrunning.Operations.*' 57 deadline: 60.0 58 59http: 60 rules: 61 - selector: google.cloud.location.Locations.GetLocation 62 get: '/v1/{name=projects/*/locations/*}' 63 - selector: google.cloud.location.Locations.ListLocations 64 get: '/v1/{name=projects/*}/locations' 65 - selector: google.iam.v1.IAMPolicy.GetIamPolicy 66 get: '/v1/{resource=projects/*/locations/*/authorizationPolicies/*}:getIamPolicy' 67 additional_bindings: 68 - get: '/v1/{resource=projects/*/locations/*/serverTlsPolicies/*}:getIamPolicy' 69 - get: '/v1/{resource=projects/*/locations/*/clientTlsPolicies/*}:getIamPolicy' 70 - selector: google.iam.v1.IAMPolicy.SetIamPolicy 71 post: '/v1/{resource=projects/*/locations/*/authorizationPolicies/*}:setIamPolicy' 72 body: '*' 73 additional_bindings: 74 - post: '/v1/{resource=projects/*/locations/*/serverTlsPolicies/*}:setIamPolicy' 75 body: '*' 76 - post: '/v1/{resource=projects/*/locations/*/clientTlsPolicies/*}:setIamPolicy' 77 body: '*' 78 - selector: google.iam.v1.IAMPolicy.TestIamPermissions 79 post: '/v1/{resource=projects/*/locations/*/authorizationPolicies/*}:testIamPermissions' 80 body: '*' 81 additional_bindings: 82 - post: '/v1/{resource=projects/*/locations/*/serverTlsPolicies/*}:testIamPermissions' 83 body: '*' 84 - post: '/v1/{resource=projects/*/locations/*/clientTlsPolicies/*}:testIamPermissions' 85 body: '*' 86 - selector: google.longrunning.Operations.CancelOperation 87 post: '/v1/{name=projects/*/locations/*/operations/*}:cancel' 88 body: '*' 89 - selector: google.longrunning.Operations.DeleteOperation 90 delete: '/v1/{name=projects/*/locations/*/operations/*}' 91 - selector: google.longrunning.Operations.GetOperation 92 get: '/v1/{name=projects/*/locations/*/operations/*}' 93 - selector: google.longrunning.Operations.ListOperations 94 get: '/v1/{name=projects/*/locations/*}/operations' 95 96authentication: 97 rules: 98 - selector: google.cloud.location.Locations.GetLocation 99 oauth: 100 canonical_scopes: |- 101 https://www.googleapis.com/auth/cloud-platform 102 - selector: google.cloud.location.Locations.ListLocations 103 oauth: 104 canonical_scopes: |- 105 https://www.googleapis.com/auth/cloud-platform 106 - selector: 'google.cloud.networksecurity.v1.NetworkSecurity.*' 107 oauth: 108 canonical_scopes: |- 109 https://www.googleapis.com/auth/cloud-platform 110 - selector: 'google.iam.v1.IAMPolicy.*' 111 oauth: 112 canonical_scopes: |- 113 https://www.googleapis.com/auth/cloud-platform 114 - selector: 'google.longrunning.Operations.*' 115 oauth: 116 canonical_scopes: |- 117 https://www.googleapis.com/auth/cloud-platform 118