The Connect Gateway service allows connectivity from external parties to connected Kubernetes clusters. Note that google-cloud-gke_connect-gateway-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-gke_connect-gateway instead. See the readme for more details.

Manage Apache Kafka clusters and resources. Note that google-cloud-managed_kafka-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-managed_kafka instead. See the readme for more details.

google-cloud-memorystore-v1 is the official client library for the Memorystore V1 API. Note that google-cloud-memorystore-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-memorystore instead. See the readme for more details.

google-cloud-memorystore-v1beta is the official client library for the Memorystore V1BETA API. Note that google-cloud-memorystore-v1beta is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-memorystore instead. See the readme for more details.

google-cloud-network_services-v1 is the official client library for the Network Services V1 API. Note that google-cloud-network_services-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-network_services instead. See the readme for more details.

The Oracle Database@Google Cloud API provides a set of APIs to manage Oracle database services, such as Exadata and Autonomous Databases. Note that google-cloud-oracle_database-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-oracle_database instead. See the readme for more details.

google-cloud-parallelstore-v1 is the official client library for the Parallelstore V1 API. Note that google-cloud-parallelstore-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-parallelstore instead. See the readme for more details.

google-cloud-parallelstore-v1beta is the official client library for the Parallelstore V1BETA API. Note that google-cloud-parallelstore-v1beta is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-parallelstore instead. See the readme for more details.

## Overview Privileged Access Manager (PAM) is a Google Cloud native, managed solution to secure, manage and audit privileged access while ensuring operational velocity and developer productivity. PAM enables just-in-time, time-bound, approval-based access elevations, and auditing of privileged access elevations and activity. PAM lets you define the rules of who can request access, what they can request access to, and if they should be granted access with or without approvals based on the sensitivity of the access and emergency of the situation. ## Concepts ### Entitlement An entitlement is an eligibility or license that allows specified users (requesters) to request and obtain access to specified resources subject to a set of conditions such as duration, etc. entitlements can be granted to both human and non-human principals. ### Grant A grant is an instance of active usage against the entitlement. A user can place a request for a grant against an entitlement. The request may be forwarded to an approver for their decision. Once approved, the grant is activated, ultimately giving the user access (roles/permissions) on a resource per the criteria specified in entitlement. ### How does PAM work PAM creates and uses a service agent (Google-managed service account) to perform the required IAM policy changes for granting access at a specific resource/access scope. The service agent requires getIAMPolicy and setIAMPolicy permissions at the appropriate (or higher) access scope - Organization/Folder/Project to make policy changes on the resources listed in PAM entitlements. When enabling PAM for a resource scope, the user/ principal performing that action should have the appropriate permissions at that resource scope (resourcemanager.{projects|folders|organizations}.setIamPolicy, resourcemanager.{projects|folders|organizations}.getIamPolicy, and resourcemanager.{projects|folders|organizations}.get) to list and grant the service agent/account the required access to perform IAM policy changes. Note that google-cloud-privileged_access_manager-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-privileged_access_manager instead. See the readme for more details.

Creates and manages Redis instances on the Google Cloud Platform. Note that google-cloud-redis-cluster-v1beta1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-redis-cluster instead. See the readme for more details.

Secret Manager Overview. Note that google-cloud-secret_manager-v1beta2 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-secret_manager instead. See the readme for more details.

Management API for Security Command Center, a built-in security and risk management solution for Google Cloud. Use this API to programmatically update the settings and configuration of Security Command Center. Note that google-cloud-security_center_management-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-security_center_management instead. See the readme for more details.

Security Command Center API provides access to temporal views of assets and findings within an organization. Note that google-cloud-security_center-v2 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-security_center instead. See the readme for more details.

The Public Certificate Authority API may be used to create and manage ACME external account binding keys associated with Google Trust Services' publicly trusted certificate authority. Note that google-cloud-security-public_ca-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-security-public_ca instead. See the readme for more details.

The Google Cloud Storage API allows applications to read and write data through the abstractions of buckets and objects, which are similar to directories and files except that buckets cannot contain other buckets, and directory-level operations (like directory rename) are not supported. Buckets share a single global namespace, and each bucket belongs to a specific project that has an associated owner that pays for the data stored in the bucket. This API is accessed using standard gRPC requests. Note that google-cloud-storage-control-v2 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-storage-control instead. See the readme for more details.

google-cloud-vision_ai-v1 is the official client library for the Vision AI V1 API. Note that google-cloud-vision_ai-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-vision_ai instead. See the readme for more details.

Allows administrators to create managed developer environments in the cloud. Note that google-cloud-workstations-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-workstations instead. See the readme for more details.

Allows administrators to create managed developer environments in the cloud. Note that google-cloud-workstations-v1beta is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-workstations instead. See the readme for more details.

Enables Fleet Engine for access to the On Demand Rides and Deliveries and Last Mile Fleet Solution APIs. Customer's use of Google Maps Content in the Cloud Logging Services is subject to the Google Maps Platform Terms of Service located at https://cloud.google.com/maps-platform/terms. Note that google-maps-fleet_engine-delivery-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-maps-fleet_engine-delivery instead. See the readme for more details.

Enables Fleet Engine for access to the On Demand Rides and Deliveries and Last Mile Fleet Solution APIs. Customer's use of Google Maps Content in the Cloud Logging Services is subject to the Google Maps Platform Terms of Service located at https://cloud.google.com/maps-platform/terms. Note that google-maps-fleet_engine-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-maps-fleet_engine instead. See the readme for more details.