Reference of ntt.audit.v1alpha.Project

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

Optional parent ntt.audit.v1alpha.Project

Names of Projects

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

found Projects

list of not found Projects

Requested page size. Server may return fewer Projects than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return. Typically, this is the value of [ListProjectsResponse.next_page_token][ntt.audit.v1alpha.ListProjectsResponse.next_page_token]

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination list of field path with order directive, either 'asc' or 'desc'. If direction is not provided, 'asc' is assumed. e.g. "state.nested_field asc, state.something.else desc, theme"

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

The list of Projects

A token to retrieve previous page of results. Pass this value in the [ListProjectsRequest.page_token][ntt.audit.v1alpha.ListProjectsRequest.page_token]

A token to retrieve next page of results. Pass this value in the [ListProjectsRequest.page_token][ntt.audit.v1alpha.ListProjectsRequest.page_token]

Reference to ntt.audit.v1alpha.Project

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

Requested page size. Server may return fewer Projects than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return.

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view Changes to Project that don't affect any of masked fields won't be sent back.

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask Changes to Project that don't affect any of masked fields won't be sent back.

Changes of Projects

When present, PageTokens used for page navigation should be updated.

New token to retrieve previous page of results.

New token to retrieve next page of results.

Project resource body

Project resource body

FieldMask applied to request - change will be applied only for fields in the mask

Reference of ntt.audit.v1alpha.Project

Name of Organization

Reference of ntt.audit.v1alpha.Organization

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

Optional parent ntt.audit.v1alpha.Organization

Names of Organizations

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

found Organizations

list of not found Organizations

Requested page size. Server may return fewer Organizations than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return. Typically, this is the value of [ListOrganizationsResponse.next_page_token][ntt.audit.v1alpha.ListOrganizationsResponse.next_page_token]

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination list of field path with order directive, either 'asc' or 'desc'. If direction is not provided, 'asc' is assumed. e.g. "state.nested_field asc, state.something.else desc, theme"

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

The list of Organizations

A token to retrieve previous page of results. Pass this value in the [ListOrganizationsRequest.page_token][ntt.audit.v1alpha.ListOrganizationsRequest.page_token]

A token to retrieve next page of results. Pass this value in the [ListOrganizationsRequest.page_token][ntt.audit.v1alpha.ListOrganizationsRequest.page_token]

Reference to ntt.audit.v1alpha.Organization

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

Requested page size. Server may return fewer Organizations than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return.

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view Changes to Organization that don't affect any of masked fields won't be sent back.

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask Changes to Organization that don't affect any of masked fields won't be sent back.

Changes of Organizations

When present, PageTokens used for page navigation should be updated.

New token to retrieve previous page of results.

New token to retrieve next page of results.

Organization resource body

Organization resource body

FieldMask applied to request - change will be applied only for fields in the mask

Reference of ntt.audit.v1alpha.Organization

Name of AuditedResourceDescriptor - must combine service and type fields with '/' as separator, for example: "IAM/RoleBinding".

Optional. A concise name for the audited object type that might be displayed in user interfaces. It should be a Title Cased Noun Phrase, without any article or other determiners.

Optional. A detailed description of the audited object type that might be used in documentation.

Required. A set of labels used to describe instances of this audited resource type. For example, for "RoleBinding" we can define name+member. This can allow us to make query like "who allowed user X to do those things?"

Promoted Label Key Sets allow defining multiple indexing rules for underlying backend enabling query optimizations.

Reference of ntt.audit.v1alpha.AuditedResourceDescriptor

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

Optional parent ntt.audit.v1alpha.AuditedResourceDescriptor

Names of AuditedResourceDescriptors

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

found AuditedResourceDescriptors

list of not found AuditedResourceDescriptors

Requested page size. Server may return fewer AuditedResourceDescriptors than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return. Typically, this is the value of [ListAuditedResourceDescriptorsResponse.next_page_token][ntt.audit.v1alpha.ListAuditedResourceDescriptorsResponse.next_page_token]

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination list of field path with order directive, either 'asc' or 'desc'. If direction is not provided, 'asc' is assumed. e.g. "state.nested_field asc, state.something.else desc, theme"

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

The list of AuditedResourceDescriptors

A token to retrieve previous page of results. Pass this value in the [ListAuditedResourceDescriptorsRequest.page_token][ntt.audit.v1alpha.ListAuditedResourceDescriptorsRequest.page_token]

A token to retrieve next page of results. Pass this value in the [ListAuditedResourceDescriptorsRequest.page_token][ntt.audit.v1alpha.ListAuditedResourceDescriptorsRequest.page_token]

Reference to ntt.audit.v1alpha.AuditedResourceDescriptor

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

Requested page size. Server may return fewer AuditedResourceDescriptors than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return.

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view Changes to AuditedResourceDescriptor that don't affect any of masked fields won't be sent back.

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask Changes to AuditedResourceDescriptor that don't affect any of masked fields won't be sent back.

Changes of AuditedResourceDescriptors

When present, PageTokens used for page navigation should be updated.

New token to retrieve previous page of results.

New token to retrieve next page of results.

AuditedResourceDescriptor resource body

AuditedResourceDescriptor resource body

FieldMask applied to request - change will be applied only for fields in the mask

Name of MethodDescriptor - must combine service and method type values with '/' as separator, for example: "IAM/UpdateRoleBinding".

Optional. A concise name for the audited object type that might be displayed in user interfaces. It should be a Title Cased Noun Phrase, without any article or other determiners.

Optional. A detailed description of the audited method type that might be used in documentation.

A set of labels used to describe instances of this audited method type. For example, for "UpdateRoleBinding" we can define member label. This can allow us to make query like "who tried to give user X permissions to those things?"

Promoted Label Key Sets allow defining multiple indexing rules for underlying backend enabling query optimizations.

Reference of ntt.audit.v1alpha.MethodDescriptor

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

Optional parent ntt.audit.v1alpha.MethodDescriptor

Names of MethodDescriptors

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

found MethodDescriptors

list of not found MethodDescriptors

Requested page size. Server may return fewer MethodDescriptors than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return. Typically, this is the value of [ListMethodDescriptorsResponse.next_page_token][ntt.audit.v1alpha.ListMethodDescriptorsResponse.next_page_token]

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination list of field path with order directive, either 'asc' or 'desc'. If direction is not provided, 'asc' is assumed. e.g. "state.nested_field asc, state.something.else desc, theme"

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

If true, server will skip checking if query result is present in it's cache

The list of MethodDescriptors

A token to retrieve previous page of results. Pass this value in the [ListMethodDescriptorsRequest.page_token][ntt.audit.v1alpha.ListMethodDescriptorsRequest.page_token]

A token to retrieve next page of results. Pass this value in the [ListMethodDescriptorsRequest.page_token][ntt.audit.v1alpha.ListMethodDescriptorsRequest.page_token]

Reference to ntt.audit.v1alpha.MethodDescriptor

A list of extra fields to be obtained for each response item on top of fields defined by request field view

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask

Requested page size. Server may return fewer MethodDescriptors than requested. If unspecified, server will pick an appropriate default.

A token identifying a page of results the server should return.

Order By - https://cloud.google.com/apis/design/design_patterns#list_pagination

Filter - filter results by field criteria. Simplified SQL-like syntax with following operators: <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels CONTAINS "severity:important" OR (state.last_error_time > "2018-11-15T10:00:00Z" AND state.status = "ERROR")'

A list of extra fields to be obtained for each response item on top of fields defined by request field view Changes to MethodDescriptor that don't affect any of masked fields won't be sent back.

View defines list of standard response fields present in response items. Additional fields can be amended by request field field_mask Changes to MethodDescriptor that don't affect any of masked fields won't be sent back.

Changes of MethodDescriptors

When present, PageTokens used for page navigation should be updated.

New token to retrieve previous page of results.

New token to retrieve next page of results.

MethodDescriptor resource body

MethodDescriptor resource body

FieldMask applied to request - change will be applied only for fields in the mask

Name of ActivityLog. It contains scope + ID of the log. ID is a base64 encoded unique key that identifies tuple: scope request_id authentication.principal authorization.granted_permissions authorization.denied_permissions service.name method.type labels

Key is not to be decoded outside of service, but treated as opaque string

Contains scope from name field without resource ID. Used for internal purpose for filtering (logs are using custom store). Example formats are:

• organization/umbrella
• projects/mars_exploration
• </li> </ul> </td></tr>

Generated ID of the request. Same ID must be used in ResourceChangeLog objects associated with this request.

Authentication data - informs who made a request

Authorization data - informs what permissions were granted or denied for associated request

Information about the service

Information about the method

List of query-able labels

List of events attached to this log

Message contents

Time of a message

Final status of a request

Time when request finished

Client message received event

Server message sent event

Request finished event

Type name of a method, for example "UpdateRoleBinding"

Parent reference of ntt.audit.v1alpha.ActivityLog

A audit filter that specifies which activity logs should be returned

The time interval for which results should be returned. Only logs that contain data points in the specified interval are included in the response.

Cap on a number of activity logs to be included in a response. Number of logs in an actual response can be higher, since logs are read in bulk with second precision - exceed logs above the limit will share same timestamp as the logs below the limit.

Results will be adjusted to the "end time" taken from interval field (adjusted also by page_token if provided).

Token which identifies next page with further results. Token should be taken from [ListActivityLogsResponse.next_page_token][ntt.audit.v1alpha.ListActivityLogsResponse.next_page_token].

One or more activity method logs that match the filter included in the request.

If there are more results than have been returned, then this field is set to a non-empty value. To see the additional results, use that value as pageToken in the next call to this method.

Query execution errors that may have caused the response data returned to be incomplete.

List of activity logs to be added to service. Can be coming from different scopes.

Resource change log names - one name per each activity log, in same order as in the request

Name of ResourceChangeLog. It contains scope + ID of the log. ID is a base64 encoded unique key that identifies tuple: scope request_id authentication.principal service.name resource.name resource.type resource.pre.labels resource.post.labels

ID part should not be decoded, but treated as opaque string

Contains scope from name field without resource ID. Used for internal purpose for filtering (logs are using custom store). Supported formats are:

• organization/umbrella
• projects/mars_exploration
• </li> </ul> </td></tr>

Unique identifier of request - it must match the one in the associated activity log.

Time of the change - equal to request timestamp (activity log)

Authentication data - informs who made a change

Information about the service

Describes change on the resource

Describes state of the transaction

Fully qualified name of the resource (eg. "RoleBinding/Public") that has changed from this request (if successful)

Name of the resource type for example "RoleBinding".

Action on the resource

State of the resource before change. It is empty if action is CREATE

State of the resource after change. It is empty if action is DELETE

unique identifier of the transaction.

Indicator of try counter. If transaction has been concluded at first try, try_counter will be 1. If on the second try, then number will be 2 (etc).

State of the transaction.

Parent reference of ntt.audit.v1alpha.ResourceChangeLog

A audit filter that specifies which resource change logs should be returned

The time interval for which results should be returned. Only logs that contain data points in the specified interval are included in the response.

Cap on a number of resource change logs to be included in a response. Number of logs in an actual response can be higher, since logs are read in bulk with second precision - exceed logs above the limit will share same timestamp as the logs below the limit.

Results will be adjusted to the "end time" taken from interval field (adjusted also by page_token if provided).

Token which identifies next page with further results. Token should be taken from [ListResourceChangeLogsResponse.next_page_token][ntt.audit.v1alpha.ListResourceChangeLogsResponse.next_page_token].

One or more resource change logs that match the filter included in the request.

If there are more results than have been returned, then this field is set to a non-empty value. To see the additional results, use that value as pageToken in the next call to this method.

Query execution errors that may have caused the response data returned to be incomplete.

ID of the request - must be same as the one used in activity logs

Time of the request

Authentication data - informs who made a change

Information about the service

Information about transaction

List of changes

Resource change log keys - one key per each resource change, in same order

list of resource change log keys.

Time of the request - must be same as in CreatePreCommittedResourceChangeLogsRequest

final state of the transaction - must be COMMITTED or ROLLED_BACK

Indicates that this change did not happen - it is just proposal of the change. Such a log should be followed by another ResourceChangeLog with value COMMITTED or ROLLED_BACK. If one transaction has been retried multiple times, then there may be multiple records with PRE_COMMITTED, last record should indicate final transaction state.

Indicates change has been committed successfully.

Indicates that change did not happen. Log of this type should be treated as attempt of change.

Added is returned when watched document is added, either created or enters Query view

Modified is returned when watched document is modified

Removed is returned when AuditedResourceDescriptor is deleted or leaves Query view

Integer describing index of added AuditedResourceDescriptor in resulting query view.

Name of modified AuditedResourceDescriptor

New version of AuditedResourceDescriptor or masked difference, depending on mask_changes instrumentation of issued [WatchAuditedResourceDescriptorRequest] or [WatchAuditedResourceDescriptorsRequest]

Used when mask_changes is set, contains field paths of modified properties.

Previous view index specifies previous position of modified AuditedResourceDescriptor. When modification doesn't affect sorted order, value will remain identical to [view_index].

Integer specifying AuditedResourceDescriptor new index in resulting query view.

Integer specifying removed AuditedResourceDescriptor index.

Name of the principal, for example: "user:our_new_admin@example.com"

List of permissions that were granted

List of permissions that were denied

BigTable config

The label key.

Added is returned when watched document is added, either created or enters Query view

Modified is returned when watched document is modified

Removed is returned when MethodDescriptor is deleted or leaves Query view

Integer describing index of added MethodDescriptor in resulting query view.

Name of modified MethodDescriptor

New version of MethodDescriptor or masked difference, depending on mask_changes instrumentation of issued [WatchMethodDescriptorRequest] or [WatchMethodDescriptorsRequest]

Used when mask_changes is set, contains field paths of modified properties.

Previous view index specifies previous position of modified MethodDescriptor. When modification doesn't affect sorted order, value will remain identical to [view_index].

Integer specifying MethodDescriptor new index in resulting query view.

Integer specifying removed MethodDescriptor index.

Object data

Values for all of the labels listed in the associated audited object descriptor - they are extracted from protobuf object and used for filtering

Added is returned when watched document is added, either created or enters Query view

Modified is returned when watched document is modified

Removed is returned when Organization is deleted or leaves Query view

Integer describing index of added Organization in resulting query view.

Name of modified Organization

New version of Organization or masked difference, depending on mask_changes instrumentation of issued [WatchOrganizationRequest] or [WatchOrganizationsRequest]

Used when mask_changes is set, contains field paths of modified properties.

Previous view index specifies previous position of modified Organization. When modification doesn't affect sorted order, value will remain identical to [view_index].

Integer specifying Organization new index in resulting query view.

Integer specifying removed Organization index.

Added is returned when watched document is added, either created or enters Query view

Modified is returned when watched document is modified

Removed is returned when Project is deleted or leaves Query view

Integer describing index of added Project in resulting query view.

Name of modified Project

New version of Project or masked difference, depending on mask_changes instrumentation of issued [WatchProjectRequest] or [WatchProjectsRequest]

Used when mask_changes is set, contains field paths of modified properties.

Previous view index specifies previous position of modified Project. When modification doesn't affect sorted order, value will remain identical to [view_index].

Integer specifying Project new index in resulting query view.

Integer specifying removed Project index.

Fully qualified service name executing a request

Optional - end of the time interval. If not provided, current time will be assumed.

Required. The beginning of the time interval. The start time must not be later than the end time.