feat(accesscontextmanager): update the api

#### accesscontextmanager:v1

The following keys were added:
- schemas.EgressTo.properties.roles (Total Keys: 2)
- schemas.IngressTo.properties.roles (Total Keys: 2)

Author: yoshi-automation

docs/dyn/accesscontextmanager_v1.accessPolicies.servicePerimeters.html

@@ -203,6 +203,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -236,6 +239,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -290,6 +296,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -323,6 +332,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -464,6 +476,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -497,6 +512,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -551,6 +569,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -584,6 +605,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -667,6 +691,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },
@@ -700,6 +727,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },
@@ -754,6 +784,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },
@@ -787,6 +820,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },
@@ -876,6 +912,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -909,6 +948,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -963,6 +1005,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -996,6 +1041,9 @@ <h3>Method Details</h3>
           &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
             &quot;A String&quot;,
           ],
+          &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+            &quot;A String&quot;,
+          ],
         },
         &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
       },
@@ -1101,6 +1149,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },
@@ -1134,6 +1185,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },
@@ -1188,6 +1242,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, that are allowed to be accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is specified for `resources`, then this EgressTo rule will authorize access to all resources outside the perimeter.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the egress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },
@@ -1221,6 +1278,9 @@ <h3>Method Details</h3>
               &quot;resources&quot;: [ # A list of resources, currently only projects in the form `projects/`, protected by this ServicePerimeter that are allowed to be accessed by sources defined in the corresponding IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter are allowed.
                 &quot;A String&quot;,
               ],
+              &quot;roles&quot;: [ # IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.
+                &quot;A String&quot;,
+              ],
             },
             &quot;title&quot;: &quot;A String&quot;, # Optional. Human-readable title for the ingress rule. The title must be unique within the perimeter and can not exceed 100 characters. Within the access policy, the combined length of all rule titles must not exceed 240,000 characters.
           },

googleapiclient/discovery_cache/documents/accesscontextmanager.v1.json

@@ -1295,7 +1295,7 @@
 }
 }
 },
-"revision": "20250212",
+"revision": "20250312",
 "rootUrl": "https://accesscontextmanager.googleapis.com/",
 "schemas": {
 "AccessContextManagerOperationMetadata": {
@@ -1854,6 +1854,13 @@
 "type": "string"
 },
 "type": "array"
+},
+"roles": {
+"description": "IAM roles that represent the set of operations that the sources specified in the corresponding EgressFrom. are allowed to perform in this ServicePerimeter.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -2051,6 +2058,13 @@
 "type": "string"
 },
 "type": "array"
+},
+"roles": {
+"description": "IAM roles that represent the set of operations that the sources specified in the corresponding IngressFrom are allowed to perform in this ServicePerimeter.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"