feat(policysimulator): update the api

#### policysimulator:v1

The following keys were added:
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly (Total Keys: 1)

#### policysimulator:v1alpha

The following keys were added:
- resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate (Total Keys: 12)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly (Total Keys: 1)

#### policysimulator:v1beta

The following keys were added:
- resources.organizations.resources.locations.resources.orgPolicyViolationsPreviews.methods.generate (Total Keys: 12)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1alphaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.compliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.errors.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.noncompliant.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.scanned.readOnly (Total Keys: 1)
- schemas.GoogleCloudPolicysimulatorV1betaOrgPolicyViolationsPreviewResourceCounts.properties.unenforced.readOnly (Total Keys: 1)

Author: yoshi-automation

docs/dyn/policysimulator_v1.folders.locations.replays.html

@@ -137,7 +137,7 @@ <h3>Method Details</h3>
             &quot;members&quot;: [ # Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `[email protected]` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `[email protected]`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `[email protected]`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `[email protected]?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `[email protected]?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `[email protected]?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.
               &quot;A String&quot;,
             ],
-            &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+            &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).
           },
         ],
         &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
@@ -237,7 +237,7 @@ <h3>Method Details</h3>
             &quot;members&quot;: [ # Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `[email protected]` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `[email protected]`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `[email protected]`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `[email protected]?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `[email protected]?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `[email protected]?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.
               &quot;A String&quot;,
             ],
-            &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+            &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).
           },
         ],
         &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.