feat: Add Cloud_Resource Connection Support

Google APIs · copybara-github · commit eb0700c6f29c · 2022-03-07T15:20:17.000-08:00
PiperOrigin-RevId: 433053270
diff --git a/google/cloud/bigquery/connection/v1/connection.proto b/google/cloud/bigquery/connection/v1/connection.proto
@@ -1,4 +1,4 @@
-// Copyright 2021 Google LLC
+// Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -24,7 +24,6 @@ import "google/iam/v1/iam_policy.proto";
 import "google/iam/v1/policy.proto";
 import "google/protobuf/empty.proto";
 import "google/protobuf/field_mask.proto";
-import "google/protobuf/wrappers.proto";
 
 option csharp_namespace = "Google.Cloud.BigQuery.Connection.V1";
 option go_package = "google.golang.org/genproto/googleapis/cloud/bigquery/connection/v1;connection";
@@ -236,6 +235,9 @@ message Connection {
 
     // Cloud Spanner properties.
     CloudSpannerProperties cloud_spanner = 21;
+
+    // Cloud Resource properties.
+    CloudResourceProperties cloud_resource = 22;
   }
 
   // Output only. The creation timestamp of the connection.
@@ -334,3 +336,19 @@ message AwsAccessRole {
   // This identity will be used to access the user's AWS IAM Role.
   string identity = 2;
 }
+
+// Container for connection properties for delegation of access to GCP
+// resources.
+message CloudResourceProperties {
+  // Output only. The account ID of the service created for the purpose of this connection.
+  //
+  // The service account does not have any permissions associated with it
+  // when it is created. After creation, customers delegate permissions
+  // to the service account. When the connection is used in the context of an
+  // operation in BigQuery, the service account will be used to connect to the
+  // desired resources in GCP.
+  //
+  // The account ID is in the form of:
+  //   <service-1234>@gcp-sa-bigquery-cloudresource.iam.gserviceaccount.com
+  string service_account_id = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
+}
