feat(policysimulator): update the API

#### policysimulator:v1alpha The following keys were added: - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.flatPath - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.httpMethod - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.id - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameterOrder - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.location - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.pattern - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.required - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.type - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.path - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.request.$ref - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.response.$ref - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.scopes - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly The following keys were changed: - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.list.parameters.pageSize.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.list.parameters.pageToken.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.resources.orgPolicyViolations.methods.list.parameters.pageSize.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.resources.orgPolicyViolations.methods.list.parameters.pageToken.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay.properties.customConstraints.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay.properties.policies.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraint.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraintParent.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay.properties.policy.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay.properties.policyParent.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay.properties.customConstraints.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay.properties.policies.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraint.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraintParent.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay.properties.policy.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay.properties.policyParent.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.description - schemas.GoogleIamV1Binding.properties.role.description #### policysimulator:v1beta The following keys were added: - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.flatPath - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.httpMethod - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.id - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameterOrder - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.location - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.pattern - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.required - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.parameters.parent.type - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.path - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.request.$ref - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.response.$ref - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate.scopes - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly The following keys were changed: - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.list.parameters.pageSize.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.list.parameters.pageToken.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.resources.orgPolicyViolations.methods.list.parameters.pageSize.description - resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.resources.orgPolicyViolations.methods.list.parameters.pageToken.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay.properties.customConstraints.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay.properties.policies.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraint.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraintParent.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay.properties.policy.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay.properties.policyParent.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay.properties.customConstraints.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay.properties.policies.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraint.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraintParent.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay.properties.policy.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay.properties.policyParent.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.description - schemas.GoogleIamV1Binding.properties.role.description #### policysimulator:v1 The following keys were added: - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly The following keys were changed: - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay.properties.customConstraints.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay.properties.policies.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraint.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraintParent.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay.properties.policy.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay.properties.policyParent.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.description - schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay.properties.customConstraints.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay.properties.policies.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraint.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay.properties.customConstraintParent.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay.properties.policy.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay.properties.policyParent.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.description - schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.description - schemas.GoogleIamV1Binding.properties.role.description
googleapis · Feb 2, 2024 · 499a27d · 499a27d
1 parent 14129bb
commit 499a27d
Show file tree

Hide file tree

Showing 4 changed files with 189 additions and 103 deletions.
diff --git a/discovery/policysimulator-v1.json b/discovery/policysimulator-v1.json
@@ -707,7 +707,7 @@
       }
     }
   },
-  "revision": "20231217",
+  "revision": "20240128",
   "rootUrl": "https://policysimulator.googleapis.com/",
   "schemas": {
     "GoogleCloudOrgpolicyV2AlternatePolicySpec": {
@@ -1402,14 +1402,14 @@
       "id": "GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlay",
       "properties": {
         "customConstraints": {
-          "description": "The OrgPolicy CustomConstraint changes to preview violations for. Any existing CustomConstraints with the same name will be overridden in the simulation. That is, violations will be determined as if all custom constraints in the overlay were instantiated. Only a single custom_constraint is supported in the overlay at a time. For evaluating multiple constraints, multiple `GenerateOrgPolicyViolationsPreview` requests are made, where each request evaluates a single constraint.",
+          "description": "Optional. The OrgPolicy CustomConstraint changes to preview violations for. Any existing CustomConstraints with the same name will be overridden in the simulation. That is, violations will be determined as if all custom constraints in the overlay were instantiated. Only a single custom_constraint is supported in the overlay at a time. For evaluating multiple constraints, multiple `GenerateOrgPolicyViolationsPreview` requests are made, where each request evaluates a single constraint.",
           "items": {
             "$ref": "GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayCustomConstraintOverlay"
           },
           "type": "array"
         },
         "policies": {
-          "description": "The OrgPolicy changes to preview violations for. Any existing OrgPolicies with the same name will be overridden in the simulation. That is, violations will be determined as if all policies in the overlay were created or updated.",
+          "description": "Optional. The OrgPolicy changes to preview violations for. Any existing OrgPolicies with the same name will be overridden in the simulation. That is, violations will be determined as if all policies in the overlay were created or updated.",
           "items": {
             "$ref": "GoogleCloudPolicysimulatorV1alphaOrgPolicyOverlayPolicyOverlay"
           },
@@ -1424,10 +1424,10 @@
       "properties": {
         "customConstraint": {
           "$ref": "GoogleCloudOrgpolicyV2CustomConstraint",
-          "description": "The new or updated custom constraint."
+          "description": "Optional. The new or updated custom constraint."
         },
         "customConstraintParent": {
-          "description": "Resource the constraint is attached to. Example: \"organization/987654\"",
+          "description": "Optional. Resource the constraint is attached to. Example: \"organization/987654\"",
           "type": "string"
         }
       },
@@ -1439,10 +1439,10 @@
       "properties": {
         "policy": {
           "$ref": "GoogleCloudOrgpolicyV2Policy",
-          "description": "The new or updated OrgPolicy."
+          "description": "Optional. The new or updated OrgPolicy."
         },
         "policyParent": {
-          "description": "The parent of the policy we are attaching to. Example: \"projects/123456\"",
+          "description": "Optional. The parent of the policy we are attaching to. Example: \"projects/123456\"",
           "type": "string"
         }
       },
@@ -1513,28 +1513,33 @@
       "id": "GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts",
       "properties": {
         "compliant": {
-          "description": "Number of scanned resources with zero violations.",
+          "description": "Output only. Number of scanned resources with zero violations.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "errors": {
-          "description": "Number of resources that returned an error when scanned.",
+          "description": "Output only. Number of resources that returned an error when scanned.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "noncompliant": {
-          "description": "Number of scanned resources with at least one violation.",
+          "description": "Output only. Number of scanned resources with at least one violation.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "scanned": {
-          "description": "Number of resources checked for compliance. Must equal: unenforced + noncompliant + compliant + error",
+          "description": "Output only. Number of resources checked for compliance. Must equal: unenforced + noncompliant + compliant + error",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "unenforced": {
-          "description": "Number of resources where the constraint was not enforced, i.e. the Policy set `enforced: false` for that resource.",
+          "description": "Output only. Number of resources where the constraint was not enforced, i.e. the Policy set `enforced: false` for that resource.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         }
       },
@@ -1595,14 +1600,14 @@
       "id": "GoogleCloudPolicysimulatorV1betaOrgPolicyOverlay",
       "properties": {
         "customConstraints": {
-          "description": "The OrgPolicy CustomConstraint changes to preview violations for. Any existing CustomConstraints with the same name will be overridden in the simulation. That is, violations will be determined as if all custom constraints in the overlay were instantiated. Only a single custom_constraint is supported in the overlay at a time. For evaluating multiple constraints, multiple `GenerateOrgPolicyViolationsPreview` requests are made, where each request evaluates a single constraint.",
+          "description": "Optional. The OrgPolicy CustomConstraint changes to preview violations for. Any existing CustomConstraints with the same name will be overridden in the simulation. That is, violations will be determined as if all custom constraints in the overlay were instantiated. Only a single custom_constraint is supported in the overlay at a time. For evaluating multiple constraints, multiple `GenerateOrgPolicyViolationsPreview` requests are made, where each request evaluates a single constraint.",
           "items": {
             "$ref": "GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayCustomConstraintOverlay"
           },
           "type": "array"
         },
         "policies": {
-          "description": "The OrgPolicy changes to preview violations for. Any existing OrgPolicies with the same name will be overridden in the simulation. That is, violations will be determined as if all policies in the overlay were created or updated.",
+          "description": "Optional. The OrgPolicy changes to preview violations for. Any existing OrgPolicies with the same name will be overridden in the simulation. That is, violations will be determined as if all policies in the overlay were created or updated.",
           "items": {
             "$ref": "GoogleCloudPolicysimulatorV1betaOrgPolicyOverlayPolicyOverlay"
           },
@@ -1617,10 +1622,10 @@
       "properties": {
         "customConstraint": {
           "$ref": "GoogleCloudOrgpolicyV2CustomConstraint",
-          "description": "The new or updated custom constraint."
+          "description": "Optional. The new or updated custom constraint."
         },
         "customConstraintParent": {
-          "description": "Resource the constraint is attached to. Example: \"organization/987654\"",
+          "description": "Optional. Resource the constraint is attached to. Example: \"organization/987654\"",
           "type": "string"
         }
       },
@@ -1632,10 +1637,10 @@
       "properties": {
         "policy": {
           "$ref": "GoogleCloudOrgpolicyV2Policy",
-          "description": "The new or updated OrgPolicy."
+          "description": "Optional. The new or updated OrgPolicy."
         },
         "policyParent": {
-          "description": "The parent of the policy we are attaching to. Example: \"projects/123456\"",
+          "description": "Optional. The parent of the policy we are attaching to. Example: \"projects/123456\"",
           "type": "string"
         }
       },
@@ -1706,28 +1711,33 @@
       "id": "GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts",
       "properties": {
         "compliant": {
-          "description": "Number of scanned resources with zero violations.",
+          "description": "Output only. Number of scanned resources with zero violations.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "errors": {
-          "description": "Number of resources that returned an error when scanned.",
+          "description": "Output only. Number of resources that returned an error when scanned.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "noncompliant": {
-          "description": "Number of scanned resources with at least one violation.",
+          "description": "Output only. Number of scanned resources with at least one violation.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "scanned": {
-          "description": "Number of resources checked for compliance. Must equal: unenforced + noncompliant + compliant + error",
+          "description": "Output only. Number of resources checked for compliance. Must equal: unenforced + noncompliant + compliant + error",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         },
         "unenforced": {
-          "description": "Number of resources where the constraint was not enforced, i.e. the Policy set `enforced: false` for that resource.",
+          "description": "Output only. Number of resources where the constraint was not enforced, i.e. the Policy set `enforced: false` for that resource.",
           "format": "int32",
+          "readOnly": true,
           "type": "integer"
         }
       },
@@ -1797,7 +1807,7 @@
           "type": "array"
         },
         "role": {
-          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
           "type": "string"
         }
       },