如何从search_all_iam_policies()结果中获取json表示

Question

我正在努力实现google-cloud-asset中的search_all_iam_policies()方法，如下所示：

from google.cloud import asset_v1
ASSET_CLIENT = asset_v1.AssetServiceClient()
response = ASSET_CLIENT.search_all_iam_policies(
  scope='projects/my_project',
  query='my.email@domain.com'
)
policies = []
for policy in response:
  policies.append(policy)
return json.dumps({
  'policies': policies
})

但是找不到一种方法来获取策略或策略的JSON表示。在这种情况下，‘google.cloud.asset_v1.services.asset_service.pagers.SearchAllIamPoliciesPager’是一个响应，每个‘google.cloud.asset_v1.types.assets.IamPolicySearchResult.’是一个响应我可以将它们打印到控制台，但需要将它们以JSON格式发送到另一个系统。

Answer 1

只是在上面对Michaels的回答进行扩展。当使用这种方法时，您会“丢失”一些信息，即资源、项目、asset_type和组织。

from google.cloud import asset_v1
from google.protobuf.json_format import MessageToJson

ASSET_CLIENT = asset_v1.AssetServiceClient()
response = ASSET_CLIENT.search_all_iam_policies(
  scope='projects/my_project',
  query='my.email@domain.com' # This field is optional
)
policies = []
for policy in response:
    policies.append(
        {
            "resource": f"{policy.resource}",
            "project": f"{policy.project}",
            "bindings": json.loads(MessageToJson(policy.policy)).get('bindings'),
            "asset_type": f"{policy.asset_type}",
            "organization": f"{policy.organization}"
        }
    )

这将为您提供一个字典列表，如下所示：

{
  'resource': '//some_resource',
  'project': 'some_project',
  'bindings': [
    {
      'role': 'some_role',
      'members': [
        'projectEditor:some_project',
        'projectOwner:some_project'
      ]
    },
    {
      'role': 'some_other_role',
      'members': [
        'projectViewer:some_project'
      ]
    },
  ],
  'asset_type': 'some_asset_type',
  'organization': 'some_organization'
}

Answer 2

找到了一种解码消息的方法，如下所示：

from google.cloud import asset_v1
from google.protobuf.json_format import MessageToDict
ASSET_CLIENT = asset_v1.AssetServiceClient()
response = ASSET_CLIENT.search_all_iam_policies(
  scope='projects/my_project',
  query='my.email@domain.com'
)
policies = []
for policy in response:
  policies.append(MessageToDict(policy.policy))
return json.dumps({
  'policies': policies
})