File: apigee_v1.organizations.html

package info (click to toggle)
python-googleapi 2.180.0-1
  • links: PTS
  • area: main
  • in suites: forky
  • size: 527,124 kB
  • sloc: python: 11,076; javascript: 249; sh: 114; makefile: 59
file content (1026 lines) | stat: -rw-r--r-- 91,949 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
<html><body>
<style>

body, h1, h2, h3, div, span, p, pre, a {
  margin: 0;
  padding: 0;
  border: 0;
  font-weight: inherit;
  font-style: inherit;
  font-size: 100%;
  font-family: inherit;
  vertical-align: baseline;
}

body {
  font-size: 13px;
  padding: 1em;
}

h1 {
  font-size: 26px;
  margin-bottom: 1em;
}

h2 {
  font-size: 24px;
  margin-bottom: 1em;
}

h3 {
  font-size: 20px;
  margin-bottom: 1em;
  margin-top: 1em;
}

pre, code {
  line-height: 1.5;
  font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
}

pre {
  margin-top: 0.5em;
}

h1, h2, h3, p {
  font-family: Arial, sans serif;
}

h1, h2, h3 {
  border-bottom: solid #CCC 1px;
}

.toc_element {
  margin-top: 0.5em;
}

.firstline {
  margin-left: 2 em;
}

.method  {
  margin-top: 1em;
  border: solid 1px #CCC;
  padding: 1em;
  background: #EEE;
}

.details {
  font-weight: bold;
  font-size: 14px;
}

</style>

<h1><a href="apigee_v1.html">Apigee API</a> . <a href="apigee_v1.organizations.html">organizations</a></h1>
<h2>Instance Methods</h2>
<p class="toc_element">
  <code><a href="apigee_v1.organizations.analytics.html">analytics()</a></code>
</p>
<p class="firstline">Returns the analytics Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.apiproducts.html">apiproducts()</a></code>
</p>
<p class="firstline">Returns the apiproducts Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.apis.html">apis()</a></code>
</p>
<p class="firstline">Returns the apis Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.appgroups.html">appgroups()</a></code>
</p>
<p class="firstline">Returns the appgroups Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.apps.html">apps()</a></code>
</p>
<p class="firstline">Returns the apps Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.datacollectors.html">datacollectors()</a></code>
</p>
<p class="firstline">Returns the datacollectors Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.deployments.html">deployments()</a></code>
</p>
<p class="firstline">Returns the deployments Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.developers.html">developers()</a></code>
</p>
<p class="firstline">Returns the developers Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.dnsZones.html">dnsZones()</a></code>
</p>
<p class="firstline">Returns the dnsZones Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.endpointAttachments.html">endpointAttachments()</a></code>
</p>
<p class="firstline">Returns the endpointAttachments Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.envgroups.html">envgroups()</a></code>
</p>
<p class="firstline">Returns the envgroups Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.environments.html">environments()</a></code>
</p>
<p class="firstline">Returns the environments Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.hostQueries.html">hostQueries()</a></code>
</p>
<p class="firstline">Returns the hostQueries Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.hostSecurityReports.html">hostSecurityReports()</a></code>
</p>
<p class="firstline">Returns the hostSecurityReports Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.hostStats.html">hostStats()</a></code>
</p>
<p class="firstline">Returns the hostStats Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.instances.html">instances()</a></code>
</p>
<p class="firstline">Returns the instances Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.keyvaluemaps.html">keyvaluemaps()</a></code>
</p>
<p class="firstline">Returns the keyvaluemaps Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.operations.html">operations()</a></code>
</p>
<p class="firstline">Returns the operations Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.optimizedHostStats.html">optimizedHostStats()</a></code>
</p>
<p class="firstline">Returns the optimizedHostStats Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.reports.html">reports()</a></code>
</p>
<p class="firstline">Returns the reports Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.securityAssessmentResults.html">securityAssessmentResults()</a></code>
</p>
<p class="firstline">Returns the securityAssessmentResults Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.securityMonitoringConditions.html">securityMonitoringConditions()</a></code>
</p>
<p class="firstline">Returns the securityMonitoringConditions Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.securityProfiles.html">securityProfiles()</a></code>
</p>
<p class="firstline">Returns the securityProfiles Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.securityProfilesV2.html">securityProfilesV2()</a></code>
</p>
<p class="firstline">Returns the securityProfilesV2 Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.sharedflows.html">sharedflows()</a></code>
</p>
<p class="firstline">Returns the sharedflows Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.sites.html">sites()</a></code>
</p>
<p class="firstline">Returns the sites Resource.</p>

<p class="toc_element">
  <code><a href="apigee_v1.organizations.spaces.html">spaces()</a></code>
</p>
<p class="firstline">Returns the spaces Resource.</p>

<p class="toc_element">
  <code><a href="#close">close()</a></code></p>
<p class="firstline">Close httplib2 connections.</p>
<p class="toc_element">
  <code><a href="#create">create(body=None, parent=None, x__xgafv=None)</a></code></p>
<p class="firstline">Creates an Apigee organization. See [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).</p>
<p class="toc_element">
  <code><a href="#delete">delete(name, retention=None, x__xgafv=None)</a></code></p>
<p class="firstline">Delete an Apigee organization. For organizations with BillingType EVALUATION, an immediate deletion is performed. For paid organizations (Subscription or Pay-as-you-go), a soft-deletion is performed. The organization can be restored within the soft-deletion period, which is specified using the `retention` field in the request or by filing a support ticket with Apigee. During the data retention period specified in the request, the Apigee organization cannot be recreated in the same Google Cloud project. **IMPORTANT: The default data retention setting for this operation is 7 days. To permanently delete the organization in 24 hours, set the retention parameter to `MINIMUM`.**</p>
<p class="toc_element">
  <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
<p class="firstline">Gets the profile for an Apigee organization. See [Understanding organizations](https://cloud.google.com/apigee/docs/api-platform/fundamentals/organization-structure).</p>
<p class="toc_element">
  <code><a href="#getControlPlaneAccess">getControlPlaneAccess(name, x__xgafv=None)</a></code></p>
<p class="firstline">Lists the service accounts allowed to access Apigee control plane directly for limited functionality. **Note**: Available to Apigee hybrid only.</p>
<p class="toc_element">
  <code><a href="#getDeployedIngressConfig">getDeployedIngressConfig(name, view=None, x__xgafv=None)</a></code></p>
<p class="firstline">Gets the deployed ingress configuration for an organization.</p>
<p class="toc_element">
  <code><a href="#getProjectMapping">getProjectMapping(name, x__xgafv=None)</a></code></p>
<p class="firstline">Gets the project ID and region for an Apigee organization.</p>
<p class="toc_element">
  <code><a href="#getRuntimeConfig">getRuntimeConfig(name, x__xgafv=None)</a></code></p>
<p class="firstline">Get runtime config for an organization.</p>
<p class="toc_element">
  <code><a href="#getSecuritySettings">getSecuritySettings(name, x__xgafv=None)</a></code></p>
<p class="firstline">GetSecuritySettings gets the security settings for API Security.</p>
<p class="toc_element">
  <code><a href="#getSyncAuthorization">getSyncAuthorization(name, body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Lists the service accounts with the permissions required to allow the Synchronizer to download environment data from the control plane. An ETag is returned in the response to `getSyncAuthorization`. Pass that ETag when calling [setSyncAuthorization](setSyncAuthorization) to ensure that you are updating the correct version. If you don't pass the ETag in the call to `setSyncAuthorization`, then the existing authorization is overwritten indiscriminately. For more information, see [Configure the Synchronizer](https://cloud.google.com/apigee/docs/hybrid/latest/synchronizer-access). **Note**: Available to Apigee hybrid only.</p>
<p class="toc_element">
  <code><a href="#list">list(parent, x__xgafv=None)</a></code></p>
<p class="firstline">Lists the Apigee organizations and associated Google Cloud projects that you have permission to access. See [Understanding organizations](https://cloud.google.com/apigee/docs/api-platform/fundamentals/organization-structure).</p>
<p class="toc_element">
  <code><a href="#setAddons">setAddons(org, body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Configures the add-ons for the Apigee organization. The existing add-on configuration will be fully replaced.</p>
<p class="toc_element">
  <code><a href="#setSyncAuthorization">setSyncAuthorization(name, body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Sets the permissions required to allow the Synchronizer to download environment data from the control plane. You must call this API to enable proper functioning of hybrid. Pass the ETag when calling `setSyncAuthorization` to ensure that you are updating the correct version. To get an ETag, call [getSyncAuthorization](getSyncAuthorization). If you don't pass the ETag in the call to `setSyncAuthorization`, then the existing authorization is overwritten indiscriminately. For more information, see [Configure the Synchronizer](https://cloud.google.com/apigee/docs/hybrid/latest/synchronizer-access). **Note**: Available to Apigee hybrid only.</p>
<p class="toc_element">
  <code><a href="#update">update(name, body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Updates the properties for an Apigee organization. No other fields in the organization profile will be updated.</p>
<p class="toc_element">
  <code><a href="#updateControlPlaneAccess">updateControlPlaneAccess(name, body=None, updateMask=None, x__xgafv=None)</a></code></p>
<p class="firstline">Updates the permissions required to allow Apigee runtime-plane components access to the control plane. Currently, the permissions required are to: 1. Allow runtime components to publish analytics data to the control plane. **Note**: Available to Apigee hybrid only.</p>
<p class="toc_element">
  <code><a href="#updateSecuritySettings">updateSecuritySettings(name, body=None, updateMask=None, x__xgafv=None)</a></code></p>
<p class="firstline">UpdateSecuritySettings updates the current security settings for API Security.</p>
<h3>Method Details</h3>
<div class="method">
    <code class="details" id="close">close()</code>
  <pre>Close httplib2 connections.</pre>
</div>

<div class="method">
    <code class="details" id="create">create(body=None, parent=None, x__xgafv=None)</code>
  <pre>Creates an Apigee organization. See [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).

Args:
  body: object, The request body.
    The object takes the form of:

{
  &quot;addonsConfig&quot;: { # Add-on configurations for the Apigee organization. # Optional. Addon configurations of the Apigee organization.
    &quot;advancedApiOpsConfig&quot;: { # Configuration for the Advanced API Ops add-on. # Configuration for the Advanced API Ops add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Advanced API Ops add-on is enabled.
    },
    &quot;analyticsConfig&quot;: { # Configuration for the Analytics add-on. # Configuration for the Analytics add-on. Only used in organizations.environments.addonsConfig.
      &quot;enabled&quot;: True or False, # Whether the Analytics add-on is enabled.
      &quot;expireTimeMillis&quot;: &quot;A String&quot;, # Output only. Time at which the Analytics add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
      &quot;state&quot;: &quot;A String&quot;, # Output only. The state of the Analytics add-on.
      &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The latest update time.
    },
    &quot;apiSecurityConfig&quot;: { # Configurations of the API Security add-on. # Configuration for the API Security add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the API security add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the API Security add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;connectorsPlatformConfig&quot;: { # Configuration for the Connectors Platform add-on. # Configuration for the Connectors Platform add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Connectors Platform add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the Connectors Platform add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;integrationConfig&quot;: { # Configuration for the Integration add-on. # Configuration for the Integration add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Integration add-on is enabled.
    },
    &quot;monetizationConfig&quot;: { # Configuration for the Monetization add-on. # Configuration for the Monetization add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Monetization add-on is enabled.
    },
  },
  &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will eventually be deprecated and replaced with a differently-named field. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting API consumer data. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # Optional. This field is needed only for customers using non-default data residency regions. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
  &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
  &quot;attributes&quot;: [ # Not used by Apigee.
    &quot;A String&quot;,
  ],
  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. When changing authorizedNetwork, you must reconfigure VPC peering. After VPC peering with previous network is deleted, [run the following command](https://cloud.google.com/sdk/gcloud/reference/services/vpc-peerings/delete): `gcloud services vpc-peerings delete --network=NETWORK`, where `NETWORK` is the name of the previous network. This will delete the previous Service Networking. Otherwise, you will get the following error: `The resource &#x27;projects/...-tp&#x27; is already linked to another shared VPC host &#x27;projects/...-tp`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
  &quot;billingType&quot;: &quot;A String&quot;, # Optional. Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
  &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Only used for the data residency region &quot;US&quot; or &quot;EU&quot;. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
  &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
  &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the Apigee organization.
  &quot;disableVpcPeering&quot;: True or False, # Optional. Flag that specifies whether the VPC Peering through Private Google Access should be disabled between the consumer network and Apigee. Valid only when RuntimeType is set to CLOUD. Required if an authorizedNetwork on the consumer project is not provided, in which case the flag should be set to true. The value must be set before the creation of any Apigee runtime instance and can be updated only when there are no runtime instances. **Note:** Apigee will be deprecating the vpc peering model that requires you to provide &#x27;authorizedNetwork&#x27;, by making the non-peering model as the default way of provisioning Apigee organization in future. So, this will be a temporary flag to enable the transition. Not supported for Apigee hybrid.
  &quot;displayName&quot;: &quot;A String&quot;, # Optional. Display name for the Apigee organization. Unused, but reserved for future use.
  &quot;environments&quot;: [ # Output only. List of environments in the Apigee organization.
    &quot;A String&quot;,
  ],
  &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization is scheduled for deletion.
  &quot;lastModifiedAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was last modified in milliseconds since epoch.
  &quot;name&quot;: &quot;A String&quot;, # Output only. Name of the Apigee organization.
  &quot;networkEgressRestricted&quot;: True or False, # Optional. Flag that specifies if internet egress is restricted for VPC Service Controls. Valid only when runtime_type is `CLOUD` and disable_vpc_peering is `true`.
  &quot;portalDisabled&quot;: True or False, # Optional. Configuration for the Portals settings.
  &quot;projectId&quot;: &quot;A String&quot;, # Output only. Project ID associated with the Apigee organization.
  &quot;properties&quot;: { # Message for compatibility with legacy Edge specification for Java Properties object in JSON. # Optional. Properties defined in the Apigee organization profile.
    &quot;property&quot;: [ # List of all properties in the object
      { # A single property entry in the Properties message.
        &quot;name&quot;: &quot;A String&quot;, # The property key
        &quot;value&quot;: &quot;A String&quot;, # The property value
      },
    ],
  },
  &quot;runtimeDatabaseEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting the data that is stored and replicated across runtime instances. Update is not allowed after the organization is created. If not specified or [RuntimeType](#RuntimeType) is `TRIAL`, a Google-Managed encryption key will be used. For example: &quot;projects/foo/locations/us/keyRings/bar/cryptoKeys/baz&quot;. **Note:** Not supported for Apigee hybrid.
  &quot;runtimeType&quot;: &quot;A String&quot;, # Required. Runtime type of the Apigee organization based on the Apigee subscription purchased.
  &quot;state&quot;: &quot;A String&quot;, # Output only. State of the organization. Values other than ACTIVE means the resource is not ready to use.
  &quot;subscriptionPlan&quot;: &quot;A String&quot;, # Output only. Subscription plan that the customer has purchased. Output only.
  &quot;subscriptionType&quot;: &quot;A String&quot;, # Output only. DEPRECATED: This will eventually be replaced by BillingType. Subscription type of the Apigee organization. Valid values include trial (free, limited, and for evaluation purposes only) or paid (full subscription has been purchased). See [Apigee pricing](https://cloud.google.com/apigee/pricing/).
  &quot;type&quot;: &quot;A String&quot;, # Not used by Apigee.
}

  parent: string, Required. Name of the Google Cloud project in which to associate the Apigee organization. Pass the information as a query parameter using the following structure in your request: `projects/`
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents a long-running operation that is the result of a network API call.
  &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
  &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
    &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
    &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
      {
        &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
      },
    ],
    &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
  },
  &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
  &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
  &quot;response&quot;: { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
}</pre>
</div>

<div class="method">
    <code class="details" id="delete">delete(name, retention=None, x__xgafv=None)</code>
  <pre>Delete an Apigee organization. For organizations with BillingType EVALUATION, an immediate deletion is performed. For paid organizations (Subscription or Pay-as-you-go), a soft-deletion is performed. The organization can be restored within the soft-deletion period, which is specified using the `retention` field in the request or by filing a support ticket with Apigee. During the data retention period specified in the request, the Apigee organization cannot be recreated in the same Google Cloud project. **IMPORTANT: The default data retention setting for this operation is 7 days. To permanently delete the organization in 24 hours, set the retention parameter to `MINIMUM`.**

Args:
  name: string, Required. Name of the organization. Use the following structure in your request: `organizations/{org}` (required)
  retention: string, Optional. This setting is applicable only for organizations that are soft-deleted (i.e., BillingType is not EVALUATION). It controls how long Organization data will be retained after the initial delete operation completes. During this period, the Organization may be restored to its last known state. After this period, the Organization will no longer be able to be restored. **Note: During the data retention period specified using this field, the Apigee organization cannot be recreated in the same Google Cloud project.**
    Allowed values
      DELETION_RETENTION_UNSPECIFIED - Default data retention setting of seven days will be applied.
      MINIMUM - Organization data will be retained for the minimum period of 24 hours.
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents a long-running operation that is the result of a network API call.
  &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
  &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
    &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
    &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
      {
        &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
      },
    ],
    &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
  },
  &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
  &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
  &quot;response&quot;: { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
}</pre>
</div>

<div class="method">
    <code class="details" id="get">get(name, x__xgafv=None)</code>
  <pre>Gets the profile for an Apigee organization. See [Understanding organizations](https://cloud.google.com/apigee/docs/api-platform/fundamentals/organization-structure).

Args:
  name: string, Required. Apigee organization name in the following format: `organizations/{org}` (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    {
  &quot;addonsConfig&quot;: { # Add-on configurations for the Apigee organization. # Optional. Addon configurations of the Apigee organization.
    &quot;advancedApiOpsConfig&quot;: { # Configuration for the Advanced API Ops add-on. # Configuration for the Advanced API Ops add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Advanced API Ops add-on is enabled.
    },
    &quot;analyticsConfig&quot;: { # Configuration for the Analytics add-on. # Configuration for the Analytics add-on. Only used in organizations.environments.addonsConfig.
      &quot;enabled&quot;: True or False, # Whether the Analytics add-on is enabled.
      &quot;expireTimeMillis&quot;: &quot;A String&quot;, # Output only. Time at which the Analytics add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
      &quot;state&quot;: &quot;A String&quot;, # Output only. The state of the Analytics add-on.
      &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The latest update time.
    },
    &quot;apiSecurityConfig&quot;: { # Configurations of the API Security add-on. # Configuration for the API Security add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the API security add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the API Security add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;connectorsPlatformConfig&quot;: { # Configuration for the Connectors Platform add-on. # Configuration for the Connectors Platform add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Connectors Platform add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the Connectors Platform add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;integrationConfig&quot;: { # Configuration for the Integration add-on. # Configuration for the Integration add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Integration add-on is enabled.
    },
    &quot;monetizationConfig&quot;: { # Configuration for the Monetization add-on. # Configuration for the Monetization add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Monetization add-on is enabled.
    },
  },
  &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will eventually be deprecated and replaced with a differently-named field. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting API consumer data. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # Optional. This field is needed only for customers using non-default data residency regions. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
  &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
  &quot;attributes&quot;: [ # Not used by Apigee.
    &quot;A String&quot;,
  ],
  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. When changing authorizedNetwork, you must reconfigure VPC peering. After VPC peering with previous network is deleted, [run the following command](https://cloud.google.com/sdk/gcloud/reference/services/vpc-peerings/delete): `gcloud services vpc-peerings delete --network=NETWORK`, where `NETWORK` is the name of the previous network. This will delete the previous Service Networking. Otherwise, you will get the following error: `The resource &#x27;projects/...-tp&#x27; is already linked to another shared VPC host &#x27;projects/...-tp`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
  &quot;billingType&quot;: &quot;A String&quot;, # Optional. Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
  &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Only used for the data residency region &quot;US&quot; or &quot;EU&quot;. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
  &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
  &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the Apigee organization.
  &quot;disableVpcPeering&quot;: True or False, # Optional. Flag that specifies whether the VPC Peering through Private Google Access should be disabled between the consumer network and Apigee. Valid only when RuntimeType is set to CLOUD. Required if an authorizedNetwork on the consumer project is not provided, in which case the flag should be set to true. The value must be set before the creation of any Apigee runtime instance and can be updated only when there are no runtime instances. **Note:** Apigee will be deprecating the vpc peering model that requires you to provide &#x27;authorizedNetwork&#x27;, by making the non-peering model as the default way of provisioning Apigee organization in future. So, this will be a temporary flag to enable the transition. Not supported for Apigee hybrid.
  &quot;displayName&quot;: &quot;A String&quot;, # Optional. Display name for the Apigee organization. Unused, but reserved for future use.
  &quot;environments&quot;: [ # Output only. List of environments in the Apigee organization.
    &quot;A String&quot;,
  ],
  &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization is scheduled for deletion.
  &quot;lastModifiedAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was last modified in milliseconds since epoch.
  &quot;name&quot;: &quot;A String&quot;, # Output only. Name of the Apigee organization.
  &quot;networkEgressRestricted&quot;: True or False, # Optional. Flag that specifies if internet egress is restricted for VPC Service Controls. Valid only when runtime_type is `CLOUD` and disable_vpc_peering is `true`.
  &quot;portalDisabled&quot;: True or False, # Optional. Configuration for the Portals settings.
  &quot;projectId&quot;: &quot;A String&quot;, # Output only. Project ID associated with the Apigee organization.
  &quot;properties&quot;: { # Message for compatibility with legacy Edge specification for Java Properties object in JSON. # Optional. Properties defined in the Apigee organization profile.
    &quot;property&quot;: [ # List of all properties in the object
      { # A single property entry in the Properties message.
        &quot;name&quot;: &quot;A String&quot;, # The property key
        &quot;value&quot;: &quot;A String&quot;, # The property value
      },
    ],
  },
  &quot;runtimeDatabaseEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting the data that is stored and replicated across runtime instances. Update is not allowed after the organization is created. If not specified or [RuntimeType](#RuntimeType) is `TRIAL`, a Google-Managed encryption key will be used. For example: &quot;projects/foo/locations/us/keyRings/bar/cryptoKeys/baz&quot;. **Note:** Not supported for Apigee hybrid.
  &quot;runtimeType&quot;: &quot;A String&quot;, # Required. Runtime type of the Apigee organization based on the Apigee subscription purchased.
  &quot;state&quot;: &quot;A String&quot;, # Output only. State of the organization. Values other than ACTIVE means the resource is not ready to use.
  &quot;subscriptionPlan&quot;: &quot;A String&quot;, # Output only. Subscription plan that the customer has purchased. Output only.
  &quot;subscriptionType&quot;: &quot;A String&quot;, # Output only. DEPRECATED: This will eventually be replaced by BillingType. Subscription type of the Apigee organization. Valid values include trial (free, limited, and for evaluation purposes only) or paid (full subscription has been purchased). See [Apigee pricing](https://cloud.google.com/apigee/pricing/).
  &quot;type&quot;: &quot;A String&quot;, # Not used by Apigee.
}</pre>
</div>

<div class="method">
    <code class="details" id="getControlPlaneAccess">getControlPlaneAccess(name, x__xgafv=None)</code>
  <pre>Lists the service accounts allowed to access Apigee control plane directly for limited functionality. **Note**: Available to Apigee hybrid only.

Args:
  name: string, Required. Resource name of the Control Plane Access. Use the following structure in your request: `organizations/{org}/controlPlaneAccess` (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # ControlPlaneAccess is the request body and response body of UpdateControlPlaneAccess. and the response body of GetControlPlaneAccess. The input identities contains an array of service accounts to grant access to the respective control plane resource, with each service account specified using the following format: `serviceAccount:`***service-account-name***. The ***service-account-name*** is formatted like an email address. For example: `my-control-plane-service_account@my_project_id.iam.gserviceaccount.com` You might specify multiple service accounts, for example, if you have multiple environments and wish to assign a unique service account to each one.
  &quot;analyticsPublisherIdentities&quot;: [ # Optional. Array of service accounts authorized to publish analytics data to the control plane (for the Message Processor component).
    &quot;A String&quot;,
  ],
  &quot;name&quot;: &quot;A String&quot;, # Identifier. The resource name of the ControlPlaneAccess. Format: &quot;organizations/{org}/controlPlaneAccess&quot;
  &quot;synchronizerIdentities&quot;: [ # Optional. Array of service accounts to grant access to control plane resources (for the Synchronizer component). The service accounts must have **Apigee Synchronizer Manager** role. See also [Create service accounts](https://cloud.google.com/apigee/docs/hybrid/latest/sa-about#create-the-service-accounts).
    &quot;A String&quot;,
  ],
}</pre>
</div>

<div class="method">
    <code class="details" id="getDeployedIngressConfig">getDeployedIngressConfig(name, view=None, x__xgafv=None)</code>
  <pre>Gets the deployed ingress configuration for an organization.

Args:
  name: string, Required. Name of the deployed configuration for the organization in the following format: &#x27;organizations/{org}/deployedIngressConfig&#x27;. (required)
  view: string, When set to FULL, additional details about the specific deployments receiving traffic will be included in the IngressConfig response&#x27;s RoutingRules.
    Allowed values
      INGRESS_CONFIG_VIEW_UNSPECIFIED - The default/unset value. The API will default to the BASIC view.
      BASIC - Include all ingress config data necessary for the runtime to configure ingress, but no more. Routing rules will include only basepath and destination environment. This the default value.
      FULL - Include all ingress config data, including internal debug info for each routing rule such as the proxy claiming a particular basepath and when the routing rule first appeared in the env group.
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    {
  &quot;environmentGroups&quot;: [ # List of environment groups in the organization.
    { # EnvironmentGroupConfig is a revisioned snapshot of an EnvironmentGroup and its associated routing rules.
      &quot;endpointChainingRules&quot;: [ # A list of proxies in each deployment group for proxy chaining calls.
        { # EndpointChainingRule specifies the proxies contained in a particular deployment group, so that other deployment groups can find them in chaining calls.
          &quot;deploymentGroup&quot;: &quot;A String&quot;, # The deployment group to target for cross-shard chaining calls to these proxies.
          &quot;proxyIds&quot;: [ # List of proxy ids which may be found in the given deployment group.
            &quot;A String&quot;,
          ],
        },
      ],
      &quot;hostnames&quot;: [ # Host names for the environment group.
        &quot;A String&quot;,
      ],
      &quot;location&quot;: &quot;A String&quot;, # When this message appears in the top-level IngressConfig, this field will be populated in lieu of the inlined routing_rules and hostnames fields. Some URL for downloading the full EnvironmentGroupConfig for this group.
      &quot;name&quot;: &quot;A String&quot;, # Name of the environment group in the following format: `organizations/{org}/envgroups/{envgroup}`.
      &quot;revisionId&quot;: &quot;A String&quot;, # Revision id that defines the ordering of the EnvironmentGroupConfig resource. The higher the revision, the more recently the configuration was deployed.
      &quot;routingRules&quot;: [ # Ordered list of routing rules defining how traffic to this environment group&#x27;s hostnames should be routed to different environments.
        {
          &quot;basepath&quot;: &quot;A String&quot;, # URI path prefix used to route to the specified environment. May contain one or more wildcards. For example, path segments consisting of a single `*` character will match any string.
          &quot;deploymentGroup&quot;: &quot;A String&quot;, # Name of a deployment group in an environment bound to the environment group in the following format: `organizations/{org}/environment/{env}/deploymentGroups/{group}` Only one of environment or deployment_group will be set.
          &quot;envGroupRevision&quot;: &quot;A String&quot;, # The env group config revision_id when this rule was added or last updated. This value is set when the rule is created and will only update if the the environment_id changes. It is used to determine if the runtime is up to date with respect to this rule. This field is omitted from the IngressConfig unless the GetDeployedIngressConfig API is called with view=FULL.
          &quot;environment&quot;: &quot;A String&quot;, # Name of an environment bound to the environment group in the following format: `organizations/{org}/environments/{env}`. Only one of environment or deployment_group will be set.
          &quot;otherTargets&quot;: [ # Conflicting targets, which will be resource names specifying either deployment groups or environments.
            &quot;A String&quot;,
          ],
          &quot;receiver&quot;: &quot;A String&quot;, # The resource name of the proxy revision that is receiving this basepath in the following format: `organizations/{org}/apis/{api}/revisions/{rev}`. This field is omitted from the IngressConfig unless the GetDeployedIngressConfig API is called with view=FULL.
          &quot;updateTime&quot;: &quot;A String&quot;, # The unix timestamp when this rule was updated. This is updated whenever env_group_revision is updated. This field is omitted from the IngressConfig unless the GetDeployedIngressConfig API is called with view=FULL.
        },
      ],
      &quot;uid&quot;: &quot;A String&quot;, # A unique id for the environment group config that will only change if the environment group is deleted and recreated.
    },
  ],
  &quot;name&quot;: &quot;A String&quot;, # Name of the resource in the following format: `organizations/{org}/deployedIngressConfig`.
  &quot;revisionCreateTime&quot;: &quot;A String&quot;, # Time at which the IngressConfig revision was created.
  &quot;revisionId&quot;: &quot;A String&quot;, # Revision id that defines the ordering on IngressConfig resources. The higher the revision, the more recently the configuration was deployed.
  &quot;uid&quot;: &quot;A String&quot;, # A unique id for the ingress config that will only change if the organization is deleted and recreated.
}</pre>
</div>

<div class="method">
    <code class="details" id="getProjectMapping">getProjectMapping(name, x__xgafv=None)</code>
  <pre>Gets the project ID and region for an Apigee organization.

Args:
  name: string, Required. Apigee organization name in the following format: `organizations/{org}` (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    {
  &quot;location&quot;: &quot;A String&quot;, # Output only. The Google Cloud region where control plane data is located. For more information, see https://cloud.google.com/about/locations/.
  &quot;organization&quot;: &quot;A String&quot;, # Name of the Apigee organization.
  &quot;projectId&quot;: &quot;A String&quot;, # Google Cloud project associated with the Apigee organization
  &quot;projectIds&quot;: [ # DEPRECATED: Use `project_id`. An Apigee Organization is mapped to a single project.
    &quot;A String&quot;,
  ],
}</pre>
</div>

<div class="method">
    <code class="details" id="getRuntimeConfig">getRuntimeConfig(name, x__xgafv=None)</code>
  <pre>Get runtime config for an organization.

Args:
  name: string, Required. Name of the runtime config for the organization in the following format: &#x27;organizations/{org}/runtimeConfig&#x27;. (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # Runtime configuration for the organization. Response for GetRuntimeConfig.
  &quot;analyticsBucket&quot;: &quot;A String&quot;, # Cloud Storage bucket used for uploading Analytics records.
  &quot;name&quot;: &quot;A String&quot;, # Name of the resource in the following format: `organizations/{org}/runtimeConfig`.
  &quot;tenantProjectId&quot;: &quot;A String&quot;, # Output only. Tenant project ID associated with the Apigee organization. The tenant project is used to host Google-managed resources that are dedicated to this Apigee organization. Clients have limited access to resources within the tenant project used to support Apigee runtime instances. Access to the tenant project is managed using SetSyncAuthorization. It can be empty if the tenant project hasn&#x27;t been created yet.
  &quot;traceBucket&quot;: &quot;A String&quot;, # Cloud Storage bucket used for uploading Trace records.
}</pre>
</div>

<div class="method">
    <code class="details" id="getSecuritySettings">getSecuritySettings(name, x__xgafv=None)</code>
  <pre>GetSecuritySettings gets the security settings for API Security.

Args:
  name: string, Required. The name of the SecuritySettings to retrieve. This will always be: &#x27;organizations/{org}/securitySettings&#x27;. (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # SecuritySettings reflects the current state of the SecuritySettings feature.
  &quot;mlRetrainingFeedbackEnabled&quot;: True or False, # Optional. If true the user consents to the use of ML models for Abuse detection.
  &quot;name&quot;: &quot;A String&quot;, # Identifier. Full resource name is always `organizations/{org}/securitySettings`.
}</pre>
</div>

<div class="method">
    <code class="details" id="getSyncAuthorization">getSyncAuthorization(name, body=None, x__xgafv=None)</code>
  <pre>Lists the service accounts with the permissions required to allow the Synchronizer to download environment data from the control plane. An ETag is returned in the response to `getSyncAuthorization`. Pass that ETag when calling [setSyncAuthorization](setSyncAuthorization) to ensure that you are updating the correct version. If you don&#x27;t pass the ETag in the call to `setSyncAuthorization`, then the existing authorization is overwritten indiscriminately. For more information, see [Configure the Synchronizer](https://cloud.google.com/apigee/docs/hybrid/latest/synchronizer-access). **Note**: Available to Apigee hybrid only.

Args:
  name: string, Required. Name of the Apigee organization. Use the following structure in your request: `organizations/{org}` (required)
  body: object, The request body.
    The object takes the form of:

{ # Request for GetSyncAuthorization.
}

  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    {
  &quot;etag&quot;: &quot;A String&quot;, # Entity tag (ETag) used for optimistic concurrency control as a way to help prevent simultaneous updates from overwriting each other. For example, when you call [getSyncAuthorization](organizations/getSyncAuthorization) an ETag is returned in the response. Pass that ETag when calling the [setSyncAuthorization](organizations/setSyncAuthorization) to ensure that you are updating the correct version. If you don&#x27;t pass the ETag in the call to `setSyncAuthorization`, then the existing authorization is overwritten indiscriminately. **Note**: We strongly recommend that you use the ETag in the read-modify-write cycle to avoid race conditions.
  &quot;identities&quot;: [ # Required. Array of service accounts to grant access to control plane resources, each specified using the following format: `serviceAccount:` service-account-name. The service-account-name is formatted like an email address. For example: `my-synchronizer-manager-service_account@my_project_id.iam.gserviceaccount.com` You might specify multiple service accounts, for example, if you have multiple environments and wish to assign a unique service account to each one. The service accounts must have **Apigee Synchronizer Manager** role. See also [Create service accounts](https://cloud.google.com/apigee/docs/hybrid/latest/sa-about#create-the-service-accounts).
    &quot;A String&quot;,
  ],
}</pre>
</div>

<div class="method">
    <code class="details" id="list">list(parent, x__xgafv=None)</code>
  <pre>Lists the Apigee organizations and associated Google Cloud projects that you have permission to access. See [Understanding organizations](https://cloud.google.com/apigee/docs/api-platform/fundamentals/organization-structure).

Args:
  parent: string, Required. Use the following structure in your request: `organizations` (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    {
  &quot;organizations&quot;: [ # List of Apigee organizations and associated Google Cloud projects.
    {
      &quot;location&quot;: &quot;A String&quot;, # Output only. The Google Cloud region where control plane data is located. For more information, see https://cloud.google.com/about/locations/.
      &quot;organization&quot;: &quot;A String&quot;, # Name of the Apigee organization.
      &quot;projectId&quot;: &quot;A String&quot;, # Google Cloud project associated with the Apigee organization
      &quot;projectIds&quot;: [ # DEPRECATED: Use `project_id`. An Apigee Organization is mapped to a single project.
        &quot;A String&quot;,
      ],
    },
  ],
}</pre>
</div>

<div class="method">
    <code class="details" id="setAddons">setAddons(org, body=None, x__xgafv=None)</code>
  <pre>Configures the add-ons for the Apigee organization. The existing add-on configuration will be fully replaced.

Args:
  org: string, Required. Name of the organization. Use the following structure in your request: `organizations/{org}` (required)
  body: object, The request body.
    The object takes the form of:

{ # Request for SetAddons.
  &quot;addonsConfig&quot;: { # Add-on configurations for the Apigee organization. # Required. Add-on configurations.
    &quot;advancedApiOpsConfig&quot;: { # Configuration for the Advanced API Ops add-on. # Configuration for the Advanced API Ops add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Advanced API Ops add-on is enabled.
    },
    &quot;analyticsConfig&quot;: { # Configuration for the Analytics add-on. # Configuration for the Analytics add-on. Only used in organizations.environments.addonsConfig.
      &quot;enabled&quot;: True or False, # Whether the Analytics add-on is enabled.
      &quot;expireTimeMillis&quot;: &quot;A String&quot;, # Output only. Time at which the Analytics add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
      &quot;state&quot;: &quot;A String&quot;, # Output only. The state of the Analytics add-on.
      &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The latest update time.
    },
    &quot;apiSecurityConfig&quot;: { # Configurations of the API Security add-on. # Configuration for the API Security add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the API security add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the API Security add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;connectorsPlatformConfig&quot;: { # Configuration for the Connectors Platform add-on. # Configuration for the Connectors Platform add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Connectors Platform add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the Connectors Platform add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;integrationConfig&quot;: { # Configuration for the Integration add-on. # Configuration for the Integration add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Integration add-on is enabled.
    },
    &quot;monetizationConfig&quot;: { # Configuration for the Monetization add-on. # Configuration for the Monetization add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Monetization add-on is enabled.
    },
  },
}

  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents a long-running operation that is the result of a network API call.
  &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
  &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
    &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
    &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
      {
        &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
      },
    ],
    &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
  },
  &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
  &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
  &quot;response&quot;: { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
}</pre>
</div>

<div class="method">
    <code class="details" id="setSyncAuthorization">setSyncAuthorization(name, body=None, x__xgafv=None)</code>
  <pre>Sets the permissions required to allow the Synchronizer to download environment data from the control plane. You must call this API to enable proper functioning of hybrid. Pass the ETag when calling `setSyncAuthorization` to ensure that you are updating the correct version. To get an ETag, call [getSyncAuthorization](getSyncAuthorization). If you don&#x27;t pass the ETag in the call to `setSyncAuthorization`, then the existing authorization is overwritten indiscriminately. For more information, see [Configure the Synchronizer](https://cloud.google.com/apigee/docs/hybrid/latest/synchronizer-access). **Note**: Available to Apigee hybrid only.

Args:
  name: string, Required. Name of the Apigee organization. Use the following structure in your request: `organizations/{org}` (required)
  body: object, The request body.
    The object takes the form of:

{
  &quot;etag&quot;: &quot;A String&quot;, # Entity tag (ETag) used for optimistic concurrency control as a way to help prevent simultaneous updates from overwriting each other. For example, when you call [getSyncAuthorization](organizations/getSyncAuthorization) an ETag is returned in the response. Pass that ETag when calling the [setSyncAuthorization](organizations/setSyncAuthorization) to ensure that you are updating the correct version. If you don&#x27;t pass the ETag in the call to `setSyncAuthorization`, then the existing authorization is overwritten indiscriminately. **Note**: We strongly recommend that you use the ETag in the read-modify-write cycle to avoid race conditions.
  &quot;identities&quot;: [ # Required. Array of service accounts to grant access to control plane resources, each specified using the following format: `serviceAccount:` service-account-name. The service-account-name is formatted like an email address. For example: `my-synchronizer-manager-service_account@my_project_id.iam.gserviceaccount.com` You might specify multiple service accounts, for example, if you have multiple environments and wish to assign a unique service account to each one. The service accounts must have **Apigee Synchronizer Manager** role. See also [Create service accounts](https://cloud.google.com/apigee/docs/hybrid/latest/sa-about#create-the-service-accounts).
    &quot;A String&quot;,
  ],
}

  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    {
  &quot;etag&quot;: &quot;A String&quot;, # Entity tag (ETag) used for optimistic concurrency control as a way to help prevent simultaneous updates from overwriting each other. For example, when you call [getSyncAuthorization](organizations/getSyncAuthorization) an ETag is returned in the response. Pass that ETag when calling the [setSyncAuthorization](organizations/setSyncAuthorization) to ensure that you are updating the correct version. If you don&#x27;t pass the ETag in the call to `setSyncAuthorization`, then the existing authorization is overwritten indiscriminately. **Note**: We strongly recommend that you use the ETag in the read-modify-write cycle to avoid race conditions.
  &quot;identities&quot;: [ # Required. Array of service accounts to grant access to control plane resources, each specified using the following format: `serviceAccount:` service-account-name. The service-account-name is formatted like an email address. For example: `my-synchronizer-manager-service_account@my_project_id.iam.gserviceaccount.com` You might specify multiple service accounts, for example, if you have multiple environments and wish to assign a unique service account to each one. The service accounts must have **Apigee Synchronizer Manager** role. See also [Create service accounts](https://cloud.google.com/apigee/docs/hybrid/latest/sa-about#create-the-service-accounts).
    &quot;A String&quot;,
  ],
}</pre>
</div>

<div class="method">
    <code class="details" id="update">update(name, body=None, x__xgafv=None)</code>
  <pre>Updates the properties for an Apigee organization. No other fields in the organization profile will be updated.

Args:
  name: string, Required. Apigee organization name in the following format: `organizations/{org}` (required)
  body: object, The request body.
    The object takes the form of:

{
  &quot;addonsConfig&quot;: { # Add-on configurations for the Apigee organization. # Optional. Addon configurations of the Apigee organization.
    &quot;advancedApiOpsConfig&quot;: { # Configuration for the Advanced API Ops add-on. # Configuration for the Advanced API Ops add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Advanced API Ops add-on is enabled.
    },
    &quot;analyticsConfig&quot;: { # Configuration for the Analytics add-on. # Configuration for the Analytics add-on. Only used in organizations.environments.addonsConfig.
      &quot;enabled&quot;: True or False, # Whether the Analytics add-on is enabled.
      &quot;expireTimeMillis&quot;: &quot;A String&quot;, # Output only. Time at which the Analytics add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
      &quot;state&quot;: &quot;A String&quot;, # Output only. The state of the Analytics add-on.
      &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The latest update time.
    },
    &quot;apiSecurityConfig&quot;: { # Configurations of the API Security add-on. # Configuration for the API Security add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the API security add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the API Security add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;connectorsPlatformConfig&quot;: { # Configuration for the Connectors Platform add-on. # Configuration for the Connectors Platform add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Connectors Platform add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the Connectors Platform add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;integrationConfig&quot;: { # Configuration for the Integration add-on. # Configuration for the Integration add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Integration add-on is enabled.
    },
    &quot;monetizationConfig&quot;: { # Configuration for the Monetization add-on. # Configuration for the Monetization add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Monetization add-on is enabled.
    },
  },
  &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will eventually be deprecated and replaced with a differently-named field. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting API consumer data. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # Optional. This field is needed only for customers using non-default data residency regions. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
  &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
  &quot;attributes&quot;: [ # Not used by Apigee.
    &quot;A String&quot;,
  ],
  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. When changing authorizedNetwork, you must reconfigure VPC peering. After VPC peering with previous network is deleted, [run the following command](https://cloud.google.com/sdk/gcloud/reference/services/vpc-peerings/delete): `gcloud services vpc-peerings delete --network=NETWORK`, where `NETWORK` is the name of the previous network. This will delete the previous Service Networking. Otherwise, you will get the following error: `The resource &#x27;projects/...-tp&#x27; is already linked to another shared VPC host &#x27;projects/...-tp`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
  &quot;billingType&quot;: &quot;A String&quot;, # Optional. Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
  &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Only used for the data residency region &quot;US&quot; or &quot;EU&quot;. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
  &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
  &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the Apigee organization.
  &quot;disableVpcPeering&quot;: True or False, # Optional. Flag that specifies whether the VPC Peering through Private Google Access should be disabled between the consumer network and Apigee. Valid only when RuntimeType is set to CLOUD. Required if an authorizedNetwork on the consumer project is not provided, in which case the flag should be set to true. The value must be set before the creation of any Apigee runtime instance and can be updated only when there are no runtime instances. **Note:** Apigee will be deprecating the vpc peering model that requires you to provide &#x27;authorizedNetwork&#x27;, by making the non-peering model as the default way of provisioning Apigee organization in future. So, this will be a temporary flag to enable the transition. Not supported for Apigee hybrid.
  &quot;displayName&quot;: &quot;A String&quot;, # Optional. Display name for the Apigee organization. Unused, but reserved for future use.
  &quot;environments&quot;: [ # Output only. List of environments in the Apigee organization.
    &quot;A String&quot;,
  ],
  &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization is scheduled for deletion.
  &quot;lastModifiedAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was last modified in milliseconds since epoch.
  &quot;name&quot;: &quot;A String&quot;, # Output only. Name of the Apigee organization.
  &quot;networkEgressRestricted&quot;: True or False, # Optional. Flag that specifies if internet egress is restricted for VPC Service Controls. Valid only when runtime_type is `CLOUD` and disable_vpc_peering is `true`.
  &quot;portalDisabled&quot;: True or False, # Optional. Configuration for the Portals settings.
  &quot;projectId&quot;: &quot;A String&quot;, # Output only. Project ID associated with the Apigee organization.
  &quot;properties&quot;: { # Message for compatibility with legacy Edge specification for Java Properties object in JSON. # Optional. Properties defined in the Apigee organization profile.
    &quot;property&quot;: [ # List of all properties in the object
      { # A single property entry in the Properties message.
        &quot;name&quot;: &quot;A String&quot;, # The property key
        &quot;value&quot;: &quot;A String&quot;, # The property value
      },
    ],
  },
  &quot;runtimeDatabaseEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting the data that is stored and replicated across runtime instances. Update is not allowed after the organization is created. If not specified or [RuntimeType](#RuntimeType) is `TRIAL`, a Google-Managed encryption key will be used. For example: &quot;projects/foo/locations/us/keyRings/bar/cryptoKeys/baz&quot;. **Note:** Not supported for Apigee hybrid.
  &quot;runtimeType&quot;: &quot;A String&quot;, # Required. Runtime type of the Apigee organization based on the Apigee subscription purchased.
  &quot;state&quot;: &quot;A String&quot;, # Output only. State of the organization. Values other than ACTIVE means the resource is not ready to use.
  &quot;subscriptionPlan&quot;: &quot;A String&quot;, # Output only. Subscription plan that the customer has purchased. Output only.
  &quot;subscriptionType&quot;: &quot;A String&quot;, # Output only. DEPRECATED: This will eventually be replaced by BillingType. Subscription type of the Apigee organization. Valid values include trial (free, limited, and for evaluation purposes only) or paid (full subscription has been purchased). See [Apigee pricing](https://cloud.google.com/apigee/pricing/).
  &quot;type&quot;: &quot;A String&quot;, # Not used by Apigee.
}

  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    {
  &quot;addonsConfig&quot;: { # Add-on configurations for the Apigee organization. # Optional. Addon configurations of the Apigee organization.
    &quot;advancedApiOpsConfig&quot;: { # Configuration for the Advanced API Ops add-on. # Configuration for the Advanced API Ops add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Advanced API Ops add-on is enabled.
    },
    &quot;analyticsConfig&quot;: { # Configuration for the Analytics add-on. # Configuration for the Analytics add-on. Only used in organizations.environments.addonsConfig.
      &quot;enabled&quot;: True or False, # Whether the Analytics add-on is enabled.
      &quot;expireTimeMillis&quot;: &quot;A String&quot;, # Output only. Time at which the Analytics add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
      &quot;state&quot;: &quot;A String&quot;, # Output only. The state of the Analytics add-on.
      &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The latest update time.
    },
    &quot;apiSecurityConfig&quot;: { # Configurations of the API Security add-on. # Configuration for the API Security add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the API security add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the API Security add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;connectorsPlatformConfig&quot;: { # Configuration for the Connectors Platform add-on. # Configuration for the Connectors Platform add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Connectors Platform add-on is enabled.
      &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time at which the Connectors Platform add-on expires in milliseconds since epoch. If unspecified, the add-on will never expire.
    },
    &quot;integrationConfig&quot;: { # Configuration for the Integration add-on. # Configuration for the Integration add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Integration add-on is enabled.
    },
    &quot;monetizationConfig&quot;: { # Configuration for the Monetization add-on. # Configuration for the Monetization add-on.
      &quot;enabled&quot;: True or False, # Flag that specifies whether the Monetization add-on is enabled.
    },
  },
  &quot;analyticsRegion&quot;: &quot;A String&quot;, # Required. DEPRECATED: This field will eventually be deprecated and replaced with a differently-named field. Primary Google Cloud region for analytics data storage. For valid values, see [Create an Apigee organization](https://cloud.google.com/apigee/docs/api-platform/get-started/create-org).
  &quot;apiConsumerDataEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting API consumer data. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;apiConsumerDataLocation&quot;: &quot;A String&quot;, # Optional. This field is needed only for customers using non-default data residency regions. Apigee stores some control plane data only in single region. This field determines which single region Apigee should use. For example: &quot;us-west1&quot; when control plane is in US or &quot;europe-west2&quot; when control plane is in EU.
  &quot;apigeeProjectId&quot;: &quot;A String&quot;, # Output only. Apigee Project ID associated with the organization. Use this project to allowlist Apigee in the Service Attachment when using private service connect with Apigee.
  &quot;attributes&quot;: [ # Not used by Apigee.
    &quot;A String&quot;,
  ],
  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. Compute Engine network used for Service Networking to be peered with Apigee runtime instances. See [Getting started with the Service Networking API](https://cloud.google.com/service-infrastructure/docs/service-networking/getting-started). Valid only when [RuntimeType](#RuntimeType) is set to `CLOUD`. The value must be set before the creation of a runtime instance and can be updated only when there are no runtime instances. For example: `default`. When changing authorizedNetwork, you must reconfigure VPC peering. After VPC peering with previous network is deleted, [run the following command](https://cloud.google.com/sdk/gcloud/reference/services/vpc-peerings/delete): `gcloud services vpc-peerings delete --network=NETWORK`, where `NETWORK` is the name of the previous network. This will delete the previous Service Networking. Otherwise, you will get the following error: `The resource &#x27;projects/...-tp&#x27; is already linked to another shared VPC host &#x27;projects/...-tp`. Apigee also supports shared VPC (that is, the host network project is not the same as the one that is peering with Apigee). See [Shared VPC overview](https://cloud.google.com/vpc/docs/shared-vpc). To use a shared VPC network, use the following format: `projects/{host-project-id}/{region}/networks/{network-name}`. For example: `projects/my-sharedvpc-host/global/networks/mynetwork` **Note:** Not supported for Apigee hybrid.
  &quot;billingType&quot;: &quot;A String&quot;, # Optional. Billing type of the Apigee organization. See [Apigee pricing](https://cloud.google.com/apigee/pricing).
  &quot;caCertificate&quot;: &quot;A String&quot;, # Output only. Base64-encoded public certificate for the root CA of the Apigee organization. Valid only when [RuntimeType](#RuntimeType) is `CLOUD`.
  &quot;controlPlaneEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting control plane data that is stored in a multi region. Only used for the data residency region &quot;US&quot; or &quot;EU&quot;. If not specified or [BillingType](#BillingType) is `EVALUATION`, a Google-Managed encryption key will be used. Format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`
  &quot;createdAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was created in milliseconds since epoch.
  &quot;customerName&quot;: &quot;A String&quot;, # Not used by Apigee.
  &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the Apigee organization.
  &quot;disableVpcPeering&quot;: True or False, # Optional. Flag that specifies whether the VPC Peering through Private Google Access should be disabled between the consumer network and Apigee. Valid only when RuntimeType is set to CLOUD. Required if an authorizedNetwork on the consumer project is not provided, in which case the flag should be set to true. The value must be set before the creation of any Apigee runtime instance and can be updated only when there are no runtime instances. **Note:** Apigee will be deprecating the vpc peering model that requires you to provide &#x27;authorizedNetwork&#x27;, by making the non-peering model as the default way of provisioning Apigee organization in future. So, this will be a temporary flag to enable the transition. Not supported for Apigee hybrid.
  &quot;displayName&quot;: &quot;A String&quot;, # Optional. Display name for the Apigee organization. Unused, but reserved for future use.
  &quot;environments&quot;: [ # Output only. List of environments in the Apigee organization.
    &quot;A String&quot;,
  ],
  &quot;expiresAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization is scheduled for deletion.
  &quot;lastModifiedAt&quot;: &quot;A String&quot;, # Output only. Time that the Apigee organization was last modified in milliseconds since epoch.
  &quot;name&quot;: &quot;A String&quot;, # Output only. Name of the Apigee organization.
  &quot;networkEgressRestricted&quot;: True or False, # Optional. Flag that specifies if internet egress is restricted for VPC Service Controls. Valid only when runtime_type is `CLOUD` and disable_vpc_peering is `true`.
  &quot;portalDisabled&quot;: True or False, # Optional. Configuration for the Portals settings.
  &quot;projectId&quot;: &quot;A String&quot;, # Output only. Project ID associated with the Apigee organization.
  &quot;properties&quot;: { # Message for compatibility with legacy Edge specification for Java Properties object in JSON. # Optional. Properties defined in the Apigee organization profile.
    &quot;property&quot;: [ # List of all properties in the object
      { # A single property entry in the Properties message.
        &quot;name&quot;: &quot;A String&quot;, # The property key
        &quot;value&quot;: &quot;A String&quot;, # The property value
      },
    ],
  },
  &quot;runtimeDatabaseEncryptionKeyName&quot;: &quot;A String&quot;, # Optional. Cloud KMS key name used for encrypting the data that is stored and replicated across runtime instances. Update is not allowed after the organization is created. If not specified or [RuntimeType](#RuntimeType) is `TRIAL`, a Google-Managed encryption key will be used. For example: &quot;projects/foo/locations/us/keyRings/bar/cryptoKeys/baz&quot;. **Note:** Not supported for Apigee hybrid.
  &quot;runtimeType&quot;: &quot;A String&quot;, # Required. Runtime type of the Apigee organization based on the Apigee subscription purchased.
  &quot;state&quot;: &quot;A String&quot;, # Output only. State of the organization. Values other than ACTIVE means the resource is not ready to use.
  &quot;subscriptionPlan&quot;: &quot;A String&quot;, # Output only. Subscription plan that the customer has purchased. Output only.
  &quot;subscriptionType&quot;: &quot;A String&quot;, # Output only. DEPRECATED: This will eventually be replaced by BillingType. Subscription type of the Apigee organization. Valid values include trial (free, limited, and for evaluation purposes only) or paid (full subscription has been purchased). See [Apigee pricing](https://cloud.google.com/apigee/pricing/).
  &quot;type&quot;: &quot;A String&quot;, # Not used by Apigee.
}</pre>
</div>

<div class="method">
    <code class="details" id="updateControlPlaneAccess">updateControlPlaneAccess(name, body=None, updateMask=None, x__xgafv=None)</code>
  <pre>Updates the permissions required to allow Apigee runtime-plane components access to the control plane. Currently, the permissions required are to: 1. Allow runtime components to publish analytics data to the control plane. **Note**: Available to Apigee hybrid only.

Args:
  name: string, Identifier. The resource name of the ControlPlaneAccess. Format: &quot;organizations/{org}/controlPlaneAccess&quot; (required)
  body: object, The request body.
    The object takes the form of:

{ # ControlPlaneAccess is the request body and response body of UpdateControlPlaneAccess. and the response body of GetControlPlaneAccess. The input identities contains an array of service accounts to grant access to the respective control plane resource, with each service account specified using the following format: `serviceAccount:`***service-account-name***. The ***service-account-name*** is formatted like an email address. For example: `my-control-plane-service_account@my_project_id.iam.gserviceaccount.com` You might specify multiple service accounts, for example, if you have multiple environments and wish to assign a unique service account to each one.
  &quot;analyticsPublisherIdentities&quot;: [ # Optional. Array of service accounts authorized to publish analytics data to the control plane (for the Message Processor component).
    &quot;A String&quot;,
  ],
  &quot;name&quot;: &quot;A String&quot;, # Identifier. The resource name of the ControlPlaneAccess. Format: &quot;organizations/{org}/controlPlaneAccess&quot;
  &quot;synchronizerIdentities&quot;: [ # Optional. Array of service accounts to grant access to control plane resources (for the Synchronizer component). The service accounts must have **Apigee Synchronizer Manager** role. See also [Create service accounts](https://cloud.google.com/apigee/docs/hybrid/latest/sa-about#create-the-service-accounts).
    &quot;A String&quot;,
  ],
}

  updateMask: string, List of fields to be updated. Fields that can be updated: synchronizer_identities, publisher_identities.
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents a long-running operation that is the result of a network API call.
  &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
  &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
    &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
    &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
      {
        &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
      },
    ],
    &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
  },
  &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
  &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
  &quot;response&quot;: { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
}</pre>
</div>

<div class="method">
    <code class="details" id="updateSecuritySettings">updateSecuritySettings(name, body=None, updateMask=None, x__xgafv=None)</code>
  <pre>UpdateSecuritySettings updates the current security settings for API Security.

Args:
  name: string, Identifier. Full resource name is always `organizations/{org}/securitySettings`. (required)
  body: object, The request body.
    The object takes the form of:

{ # SecuritySettings reflects the current state of the SecuritySettings feature.
  &quot;mlRetrainingFeedbackEnabled&quot;: True or False, # Optional. If true the user consents to the use of ML models for Abuse detection.
  &quot;name&quot;: &quot;A String&quot;, # Identifier. Full resource name is always `organizations/{org}/securitySettings`.
}

  updateMask: string, Optional. The list of fields to update. Allowed fields are: - ml_retraining_feedback_enabled
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # SecuritySettings reflects the current state of the SecuritySettings feature.
  &quot;mlRetrainingFeedbackEnabled&quot;: True or False, # Optional. If true the user consents to the use of ML models for Abuse detection.
  &quot;name&quot;: &quot;A String&quot;, # Identifier. Full resource name is always `organizations/{org}/securitySettings`.
}</pre>
</div>

</body></html>