feat: [google-cloud-asset] A new message ResourceOwners is added (#13838)

- [ ] Regenerate this pull request now. BEGIN_COMMIT_OVERRIDE feat: A new message `ResourceOwners` is added feat: A new value `REMOVE_GRANT` is added to enum `MethodType` feat: A new value `GOVERN_TAGS` is added to enum `MethodType` feat: A new message `AssetEnrichment` is added feat: A new field `enrichments` is added to message `.google.cloud.asset.v1.ResourceSearchResult` docs: A comment for field `service_account_impersonation_analysis` in message `.google.cloud.asset.v1.AnalyzeIamPolicyResponse` is changed docs: A comment for field `consolidated_policy` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedContainersResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedAssetsResponse` is changed docs: A comment for field `attached_resource` in message `.google.cloud.asset.v1.EffectiveTagDetails` is changed END_COMMIT_OVERRIDE feat: A new value `REMOVE_GRANT` is added to enum `MethodType` feat: A new value `GOVERN_TAGS` is added to enum `MethodType` feat: A new message `AssetEnrichment` is added feat: A new field `enrichments` is added to message `.google.cloud.asset.v1.ResourceSearchResult` docs: A comment for field `service_account_impersonation_analysis` in message `.google.cloud.asset.v1.AnalyzeIamPolicyResponse` is changed docs: A comment for field `consolidated_policy` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPoliciesResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedContainersResponse` is changed docs: A comment for field `policy_bundle` in message `.google.cloud.asset.v1.AnalyzeOrgPolicyGovernedAssetsResponse` is changed docs: A comment for field `attached_resource` in message `.google.cloud.asset.v1.EffectiveTagDetails` is changed PiperOrigin-RevId: 750916403 Source-Link: googleapis/googleapis@261895f Source-Link: googleapis/googleapis-gen@023cbda Copy-Tag: eyJwIjoicGFja2FnZXMvZ29vZ2xlLWNsb3VkLWFzc2V0Ly5Pd2xCb3QueWFtbCIsImgiOiIwMjNjYmRhZWJjODZlOGMzM2VhZDc4MGY3OGZlMGNiMWRhODlkMWZkIn0= --------- Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

Author: gcf-owl-bot[bot]

packages/google-cloud-asset/google/cloud/asset/__init__.py

@@ -22,6 +22,7 @@
  AssetServiceAsyncClient,
 )
 from google.cloud.asset_v1.services.asset_service.client import AssetServiceClient
+from google.cloud.asset_v1.types.asset_enrichment_resourceowners import ResourceOwners
 from google.cloud.asset_v1.types.asset_service import (
  AnalyzeIamPolicyLongrunningMetadata,
  AnalyzeIamPolicyLongrunningRequest,
@@ -87,6 +88,7 @@
 )
 from google.cloud.asset_v1.types.assets import (
  Asset,
+ AssetEnrichment,
  AttachedResource,
  ConditionEvaluation,
  EffectiveTagDetails,
@@ -109,6 +111,7 @@
 __all__ = (
  "AssetServiceClient",
  "AssetServiceAsyncClient",
+ "ResourceOwners",
  "AnalyzeIamPolicyLongrunningMetadata",
  "AnalyzeIamPolicyLongrunningRequest",
  "AnalyzeIamPolicyLongrunningResponse",
@@ -171,6 +174,7 @@
  "UpdateSavedQueryRequest",
  "ContentType",
  "Asset",
+ "AssetEnrichment",
  "AttachedResource",
  "ConditionEvaluation",
  "EffectiveTagDetails",

packages/google-cloud-asset/google/cloud/asset_v1/__init__.py

@@ -19,6 +19,7 @@
 
 
 from .services.asset_service import AssetServiceAsyncClient, AssetServiceClient
+from .types.asset_enrichment_resourceowners import ResourceOwners
 from .types.asset_service import (
  AnalyzeIamPolicyLongrunningMetadata,
  AnalyzeIamPolicyLongrunningRequest,
@@ -84,6 +85,7 @@
 )
 from .types.assets import (
  Asset,
+ AssetEnrichment,
  AttachedResource,
  ConditionEvaluation,
  EffectiveTagDetails,
@@ -121,6 +123,7 @@
  "AnalyzerOrgPolicy",
  "AnalyzerOrgPolicyConstraint",
  "Asset",
+ "AssetEnrichment",
  "AssetServiceClient",
  "AttachedResource",
  "BatchGetAssetsHistoryRequest",
@@ -171,6 +174,7 @@
  "RelatedResources",
  "RelationshipAttributes",
  "Resource",
+ "ResourceOwners",
  "ResourceSearchResult",
  "SavedQuery",
  "SearchAllIamPoliciesRequest",

packages/google-cloud-asset/google/cloud/asset_v1/types/__init__.py

@@ -13,6 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
+from .asset_enrichment_resourceowners import ResourceOwners
 from .asset_service import (
  AnalyzeIamPolicyLongrunningMetadata,
  AnalyzeIamPolicyLongrunningRequest,
@@ -78,6 +79,7 @@
 )
 from .assets import (
  Asset,
+ AssetEnrichment,
  AttachedResource,
  ConditionEvaluation,
  EffectiveTagDetails,
@@ -98,6 +100,7 @@
 )
 
 __all__ = (
+ "ResourceOwners",
  "AnalyzeIamPolicyLongrunningMetadata",
  "AnalyzeIamPolicyLongrunningRequest",
  "AnalyzeIamPolicyLongrunningResponse",
@@ -160,6 +163,7 @@
  "UpdateSavedQueryRequest",
  "ContentType",
  "Asset",
+ "AssetEnrichment",
  "AttachedResource",
  "ConditionEvaluation",
  "EffectiveTagDetails",

packages/google-cloud-asset/google/cloud/asset_v1/types/asset_enrichment_resourceowners.py

@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*-
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+from __future__ import annotations
+
+from typing import MutableMapping, MutableSequence
+
+import proto # type: ignore
+
+__protobuf__ = proto.module(
+ package="google.cloud.asset.v1",
+ manifest={
+ "ResourceOwners",
+ },
+)
+
+
+class ResourceOwners(proto.Message):
+ r"""The resource owners information.
+
+ Attributes:
+ resource_owners (MutableSequence[str]):
+ List of resource owners.
+ """
+
+ resource_owners: MutableSequence[str] = proto.RepeatedField(
+ proto.STRING,
+ number=1,
+ )
+
+
+__all__ = tuple(sorted(__protobuf__.manifest))

packages/google-cloud-asset/google/cloud/asset_v1/types/asset_service.py

@@ -1856,7 +1856,7 @@ class AnalyzeIamPolicyResponse(proto.Message):
  request.
  service_account_impersonation_analysis (MutableSequence[google.cloud.asset_v1.types.AnalyzeIamPolicyResponse.IamPolicyAnalysis]):
  The service account impersonation analysis if
- [AnalyzeIamPolicyRequest.analyze_service_account_impersonation][]
+ [IamPolicyAnalysisQuery.Options.analyze_service_account_impersonation][google.cloud.asset.v1.IamPolicyAnalysisQuery.Options.analyze_service_account_impersonation]
  is enabled.
  fully_explored (bool):
  Represents whether all entries in the
@@ -3448,11 +3448,19 @@ class MethodType(proto.Enum):
  DELETE (3):
  Constraint applied when deleting the
  resource.
+ REMOVE_GRANT (4):
+ Constraint applied when removing an IAM
+ grant.
+ GOVERN_TAGS (5):
+ Constraint applied when enforcing forced
+ tagging.
  """
  METHOD_TYPE_UNSPECIFIED = 0
  CREATE = 1
  UPDATE = 2
  DELETE = 3
+ REMOVE_GRANT = 4
+ GOVERN_TAGS = 5
 
  class ActionType(proto.Enum):
  r"""Allow or deny type.
@@ -3612,12 +3620,13 @@ class OrgPolicyResult(proto.Message):
  The consolidated organization policy for the analyzed
  resource. The consolidated organization policy is computed
  by merging and evaluating
- [AnalyzeOrgPoliciesResponse.policy_bundle][]. The evaluation
- will respect the organization policy `hierarchy
+ [policy_bundle][google.cloud.asset.v1.AnalyzeOrgPoliciesResponse.OrgPolicyResult.policy_bundle].
+ The evaluation will respect the organization policy
+ `hierarchy
  rules <https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy>`__.
  policy_bundle (MutableSequence[google.cloud.asset_v1.types.AnalyzerOrgPolicy]):
  The ordered list of all organization policies from the
- [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][].
+ [consolidated_policy.attached_resource][google.cloud.asset.v1.AnalyzerOrgPolicy.attached_resource].
  to the scope specified in the request.
 
  If the constraint is defined with default policy, it will
@@ -3790,7 +3799,7 @@ class GovernedContainer(proto.Message):
  rules <https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy>`__.
  policy_bundle (MutableSequence[google.cloud.asset_v1.types.AnalyzerOrgPolicy]):
  The ordered list of all organization policies from the
- [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][].
+ [consolidated_policy.attached_resource][google.cloud.asset.v1.AnalyzerOrgPolicy.attached_resource].
  to the scope specified in the request.
 
  If the constraint is defined with default policy, it will
@@ -4144,7 +4153,7 @@ class GovernedAsset(proto.Message):
  rules <https://cloud.google.com/resource-manager/docs/organization-policy/understanding-hierarchy>`__.
  policy_bundle (MutableSequence[google.cloud.asset_v1.types.AnalyzerOrgPolicy]):
  The ordered list of all organization policies from the
- [AnalyzeOrgPoliciesResponse.OrgPolicyResult.consolidated_policy.attached_resource][]
+ [consolidated_policy.attached_resource][google.cloud.asset.v1.AnalyzerOrgPolicy.attached_resource]
  to the scope specified in the request.
 
  If the constraint is defined with default policy, it will

packages/google-cloud-asset/google/cloud/asset_v1/types/assets.py

@@ -30,11 +30,14 @@
 from google.rpc import code_pb2 # type: ignore
 import proto # type: ignore
 
+from google.cloud.asset_v1.types import asset_enrichment_resourceowners
+
 __protobuf__ = proto.module(
  package="google.cloud.asset.v1",
  manifest={
  "TemporalAsset",
  "TimeWindow",
+ "AssetEnrichment",
  "Asset",
  "Resource",
  "RelatedAssets",
@@ -147,6 +150,30 @@ class TimeWindow(proto.Message):
  )
 
 
+class AssetEnrichment(proto.Message):
+ r"""The enhanced metadata information for a resource.
+
+ .. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
+
+ Attributes:
+ resource_owners (google.cloud.asset_v1.types.ResourceOwners):
+ The resource owners for a resource.
+
+ Note that this field only contains the members
+ that have "roles/owner" role in the resource's
+ IAM Policy.
+
+ This field is a member of `oneof`_ ``EnrichmentData``.
+ """
+
+ resource_owners: asset_enrichment_resourceowners.ResourceOwners = proto.Field(
+ proto.MESSAGE,
+ number=7,
+ oneof="EnrichmentData",
+ message=asset_enrichment_resourceowners.ResourceOwners,
+ )
+
+
 class Asset(proto.Message):
  r"""An asset in Google Cloud. An asset can be any resource in the Google
  Cloud `resource
@@ -571,8 +598,9 @@ class EffectiveTagDetails(proto.Message):
  attached_resource (str):
  The `full resource
  name <https://cloud.google.com/asset-inventory/docs/resource-name-format>`__
- of the ancestor from which an [effective_tag][] is
- inherited, according to `tag
+ of the ancestor from which
+ [effective_tags][google.cloud.asset.v1.EffectiveTagDetails.effective_tags]
+ are inherited, according to `tag
  inheritance <https://cloud.google.com/resource-manager/docs/tags/tags-overview#inheritance>`__.
 
  This field is a member of `oneof`_ ``_attached_resource``.
@@ -943,6 +971,32 @@ class ResourceSearchResult(proto.Message):
  - ``effectiveTagValues:"123456789/env/prod*"``
  - ``effectiveTagValues="123456789/env/prod"``
  - ``effectiveTagValueIds="tagValues/456"``
+ enrichments (MutableSequence[google.cloud.asset_v1.types.AssetEnrichment]):
+ Enrichments of the asset. Currently supported enrichment
+ types with SearchAllResources API:
+
+ - RESOURCE_OWNERS
+
+ The corresponding read masks in order to get the enrichment:
+
+ - enrichments.resource_owners
+
+ The corresponding required permissions:
+
+ - cloudasset.assets.searchEnrichmentResourceOwners
+
+ Example query to get resource owner enrichment:
+
+ ::
+
+ scope: "projects/my-project"
+ query: "name: my-project"
+ assetTypes: "cloudresourcemanager.googleapis.com/Project"
+ readMask: {
+ paths: "asset_type"
+ paths: "name"
+ paths: "enrichments.resource_owners"
+ }
  parent_asset_type (str):
  The type of this resource's immediate parent, if there is
  one.
@@ -1077,6 +1131,11 @@ class ResourceSearchResult(proto.Message):
  number=30,
  message="EffectiveTagDetails",
  )
+ enrichments: MutableSequence["AssetEnrichment"] = proto.RepeatedField(
+ proto.MESSAGE,
+ number=31,
+ message="AssetEnrichment",
+ )
  parent_asset_type: str = proto.Field(
  proto.STRING,
  number=103,