policy:
  name: policy
  collection: accesscontextmanager.accessPolicies
  attributes:
  - &policy
    parameter_name: accessPoliciesId
    attribute_name: policy
    help: |
      The ID of the access policy.
    property: access_context_manager/policy
    fallthroughs:
    - hook: googlecloudsdk.command_lib.accesscontextmanager.policies:GetDefaultPolicy
      hint: automatically, if the current account belongs to an organization with
        exactly one access policy.
level:
  name: level
  request_id_field: accessLevel.name
  collection: accesscontextmanager.accessPolicies.accessLevels
  attributes:
  - *policy
  - parameter_name: accessLevelsId
    attribute_name: level
    help: |
      The ID of the access level.
perimeter:
  name: perimeter
  request_id_field: servicePerimeter.name
  collection: accesscontextmanager.accessPolicies.servicePerimeters
  attributes:
  - *policy
  - parameter_name: servicePerimetersId
    attribute_name: perimeter
    help: |
      The ID of the service perimeter.
authorized-orgs-desc:
  name: authorized-orgs-desc
  request_id_field: authorizedOrgsDesc.name
  collection: accesscontextmanager.accessPolicies.authorizedOrgsDescs
  attributes:
  - *policy
  - parameter_name: authorizedOrgsDescsId
    attribute_name: authorized_orgs_desc
    help: |
      The ID of the authorized organizations description.
organization:
  name: organization
  request_id_field: parent
  collection: accesscontextmanager.organizations
  attributes:
  - &organization
    parameter_name: organizationsId
    attribute_name: organization
    help: |
      The ID of the organization.
    property: access_context_manager/organization
cloud-access-binding:
  name: cloud-access-binding
  request_id_field: gcpUserAccessBinding.name
  collection: accesscontextmanager.organizations.gcpUserAccessBindings
  attributes:
  - *organization
  - parameter_name: gcpUserAccessBindingsId
    attribute_name: binding
    help: |
      The ID of the gcpUserAccessBinding.
supported-service:
  name: supported-service
  request_id_field: services.name
  collection: accesscontextmanager.services
  attributes:
  - parameter_name: name
    attribute_name: service_name
    help: |
      Service name.