How to get json representation from search_all_iam_policies() results

Question

I'm working to implement the search_all_iam_policies() method in google-cloud-asset as follows:

from google.cloud import asset_v1
ASSET_CLIENT = asset_v1.AssetServiceClient()
response = ASSET_CLIENT.search_all_iam_policies(
  scope='projects/my_project',
  query='my.email@domain.com'
)
policies = []
for policy in response:
  policies.append(policy)
return json.dumps({
  'policies': policies
})

But cannot find a way to get JSON representation of policies nor policy. In this case 'response' is a google.cloud.asset_v1.services.asset_service.pagers.SearchAllIamPoliciesPager and each 'policy' is an google.cloud.asset_v1.types.assets.IamPolicySearchResult. I can print them to the console but need them in JSON format to send to another system.

gcloud asset search-all-iam-policies --scope='organizations/123456' --query='policy:"domain:mycompany.com"' --format=json will give you the output in sjon format. are you looking for this? — Mahboob, Feb 02 '21 at 19:29
No. This is going to be within an application so I don't want to require CLI. — Michael, Feb 02 '21 at 19:52

Pietervdw · Answer 1 · 2022-01-13T11:41:09.567

Just to expand on Michaels answer. When using that approach you "lose" some information namely the resource, project, asset_type and organization.

from google.cloud import asset_v1
from google.protobuf.json_format import MessageToJson

ASSET_CLIENT = asset_v1.AssetServiceClient()
response = ASSET_CLIENT.search_all_iam_policies(
  scope='projects/my_project',
  query='my.email@domain.com' # This field is optional
)
policies = []
for policy in response:
    policies.append(
        {
            "resource": f"{policy.resource}",
            "project": f"{policy.project}",
            "bindings": json.loads(MessageToJson(policy.policy)).get('bindings'),
            "asset_type": f"{policy.asset_type}",
            "organization": f"{policy.organization}"
        }
    )

This will give you a list of dicts that look like the following:

{
  'resource': '//some_resource',
  'project': 'some_project',
  'bindings': [
    {
      'role': 'some_role',
      'members': [
        'projectEditor:some_project',
        'projectOwner:some_project'
      ]
    },
    {
      'role': 'some_other_role',
      'members': [
        'projectViewer:some_project'
      ]
    },
  ],
  'asset_type': 'some_asset_type',
  'organization': 'some_organization'
}

score 0 · Answer 2 · answered Feb 02 '21 at 21:36

Found a way to decode the message like this:

from google.cloud import asset_v1
from google.protobuf.json_format import MessageToDict
ASSET_CLIENT = asset_v1.AssetServiceClient()
response = ASSET_CLIENT.search_all_iam_policies(
  scope='projects/my_project',
  query='my.email@domain.com'
)
policies = []
for policy in response:
  policies.append(MessageToDict(policy.policy))
return json.dumps({
  'policies': policies
})

How to get json representation from search_all_iam_policies() results

2 Answers2