@@ -283,7 +283,9 @@ class GoogleCloudKmsV1CryptoKey
283283 alias_method :import_only? , :import_only
284284
285285 # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
286- # values for encrypt, decrypt, and sign operations on a CryptoKey.
286+ # values for encrypt, decrypt, and sign operations on a CryptoKey or
287+ # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
288+ # policy).
287289 # Corresponds to the JSON property `keyAccessJustificationsPolicy`
288290 # @return [Google::Apis::KmsinventoryV1::GoogleCloudKmsV1KeyAccessJustificationsPolicy]
289291 attr_accessor :key_access_justifications_policy
@@ -552,13 +554,16 @@ def update!(**args)
552554 end
553555
554556 # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
555- # values for encrypt, decrypt, and sign operations on a CryptoKey.
557+ # values for encrypt, decrypt, and sign operations on a CryptoKey or
558+ # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
559+ # policy).
556560 class GoogleCloudKmsV1KeyAccessJustificationsPolicy
557561 include Google ::Apis ::Core ::Hashable
558562
559- # The list of allowed reasons for access to a CryptoKey. Zero allowed access
560- # reasons means all encrypt, decrypt, and sign operations for the CryptoKey
561- # associated with this policy will fail.
563+ # The list of allowed reasons for access to a CryptoKey. Note that empty
564+ # allowed_access_reasons has a different meaning depending on where this message
565+ # appears. If this is under KeyAccessJustificationsPolicyConfig, it means allow-
566+ # all. If this is under CryptoKey, it means deny-all.
562567 # Corresponds to the JSON property `allowedAccessReasons`
563568 # @return [Array<String>]
564569 attr_accessor :allowed_access_reasons
0 commit comments