// Code generated by sidekick. DO NOT EDIT.
//
// Copyright 2026 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

import Foundation
import GoogleCloudWkt

/// A
/// [KeyAccessJustificationsPolicy][google.cloud.kms.v1.KeyAccessJustificationsPolicy]
/// specifies zero or more allowed
/// [AccessReason][google.cloud.kms.v1.AccessReason] values for encrypt, decrypt,
/// and sign operations on a [CryptoKey][google.cloud.kms.v1.CryptoKey] or
/// [KeyAccessJustificationsPolicyConfig][google.cloud.kms.v1.KeyAccessJustificationsPolicyConfig]
/// (the default Key Access Justifications policy).
///
/// [google.cloud.kms.v1.AccessReason]: <doc:AccessReason>
/// [google.cloud.kms.v1.CryptoKey]: <doc:CryptoKey>
/// [google.cloud.kms.v1.KeyAccessJustificationsPolicy]: <doc:KeyAccessJustificationsPolicy>
public struct KeyAccessJustificationsPolicy: Codable, Equatable, GoogleCloudWkt._AnyPackable,
  Sendable
{
  /// The list of allowed reasons for access to a
  /// [CryptoKey][google.cloud.kms.v1.CryptoKey]. Note that empty
  /// allowed_access_reasons has a different meaning depending on where this
  /// message appears. If this is under
  /// [KeyAccessJustificationsPolicyConfig][google.cloud.kms.v1.KeyAccessJustificationsPolicyConfig],
  /// it means allow-all. If this is under
  /// [CryptoKey][google.cloud.kms.v1.CryptoKey], it means deny-all.
  ///
  /// [google.cloud.kms.v1.CryptoKey]: <doc:CryptoKey>
  public var allowedAccessReasons: [AccessReason] = []

  /// Initialize a new instance of `KeyAccessJustificationsPolicy`.
  public init() {}

  /// Use `config` to return a new instance of this object, with some fields updated.
  ///
  /// Commonly used to initialize the value, for example:
  ///
  /// ```
  /// let value = KeyAccessJustificationsPolicy().with { $0.allowedAccessReasons = ... }
  /// ```
  public func with(_ config: (inout Self) throws -> Swift.Void) rethrows -> Self {
    var copy = self
    try config(&copy)
    return copy
  }

  public static var _anyTypeUrl: Swift.String {
    return "type.googleapis.com/google.cloud.kms.v1.KeyAccessJustificationsPolicy"
  }
  public init(fromAny any: GoogleCloudWkt.`Any`) throws {
    self = try GoogleCloudWkt._slowAnyDeserialize(Self.self, from: any)
  }
  public func _pack() throws -> GoogleCloudWkt.Struct {
    return try GoogleCloudWkt._slowAnySerialize(message: self)
  }
}
