chore: [iam] refactor BUILD (#2036)

* chore(deps): Update gapic-generator-java to 2.26.0

PiperOrigin-RevId: 567624307

Source-Link: googleapis/googleapis@2ecf4de

Source-Link: https://github.com/googleapis/googleapis-gen/commit/a5cfbd9a05b3a134e92886114db776fb33cec9f2
Copy-Tag: eyJwIjoiamF2YS1pYW0vLk93bEJvdC55YW1sIiwiaCI6ImE1Y2ZiZDlhMDViM2ExMzRlOTI4ODYxMTRkYjc3NmZiMzNjZWM5ZjIifQ==

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

* chore(deps): Update gapic-generator-java to 2.26.0

PiperOrigin-RevId: 567624307

Source-Link: googleapis/googleapis@2ecf4de

Source-Link: https://github.com/googleapis/googleapis-gen/commit/a5cfbd9a05b3a134e92886114db776fb33cec9f2
Copy-Tag: eyJwIjoiamF2YS1pYW0vLk93bEJvdC55YW1sIiwiaCI6ImE1Y2ZiZDlhMDViM2ExMzRlOTI4ODYxMTRkYjc3NmZiMzNjZWM5ZjIifQ==

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

* chore: refactor BUILD

PiperOrigin-RevId: 570077450

Source-Link: googleapis/googleapis@615270f

Source-Link: https://github.com/googleapis/googleapis-gen/commit/2ab4e3b5366de5ead65a0969ce8db21d09101b78
Copy-Tag: eyJwIjoiamF2YS1pYW0vLk93bEJvdC55YW1sIiwiaCI6IjJhYjRlM2I1MzY2ZGU1ZWFkNjVhMDk2OWNlOGRiMjFkMDkxMDFiNzgifQ==

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

* chore: refactor BUILD

PiperOrigin-RevId: 570077450

Source-Link: googleapis/googleapis@615270f

Source-Link: https://github.com/googleapis/googleapis-gen/commit/2ab4e3b5366de5ead65a0969ce8db21d09101b78
Copy-Tag: eyJwIjoiamF2YS1pYW0vLk93bEJvdC55YW1sIiwiaCI6IjJhYjRlM2I1MzY2ZGU1ZWFkNjVhMDk2OWNlOGRiMjFkMDkxMDFiNzgifQ==

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

java-iam/grpc-google-iam-v1/src/main/java/com/google/iam/v1/IAMPolicyGrpc.java

@@ -49,7 +49,7 @@ public final class IAMPolicyGrpc {
 
   private IAMPolicyGrpc() {}
 
-  public static final String SERVICE_NAME = "google.iam.v1.IAMPolicy";
+  public static final java.lang.String SERVICE_NAME = "google.iam.v1.IAMPolicy";
 
   // Static method descriptors that strictly reflect the proto.
   private static volatile io.grpc.MethodDescriptor<
@@ -682,9 +682,9 @@ private static final class IAMPolicyFileDescriptorSupplier
   private static final class IAMPolicyMethodDescriptorSupplier
       extends IAMPolicyBaseDescriptorSupplier
       implements io.grpc.protobuf.ProtoMethodDescriptorSupplier {
-    private final String methodName;
+    private final java.lang.String methodName;
 
-    IAMPolicyMethodDescriptorSupplier(String methodName) {
+    IAMPolicyMethodDescriptorSupplier(java.lang.String methodName) {
       this.methodName = methodName;
     }
 

java-iam/grpc-google-iam-v2/src/main/java/com/google/iam/v2/PoliciesGrpc.java

@@ -32,7 +32,7 @@ public final class PoliciesGrpc {
 
   private PoliciesGrpc() {}
 
-  public static final String SERVICE_NAME = "google.iam.v2.Policies";
+  public static final java.lang.String SERVICE_NAME = "google.iam.v2.Policies";
 
   // Static method descriptors that strictly reflect the proto.
   private static volatile io.grpc.MethodDescriptor<
@@ -789,9 +789,9 @@ private static final class PoliciesFileDescriptorSupplier extends PoliciesBaseDe
 
   private static final class PoliciesMethodDescriptorSupplier extends PoliciesBaseDescriptorSupplier
       implements io.grpc.protobuf.ProtoMethodDescriptorSupplier {
-    private final String methodName;
+    private final java.lang.String methodName;
 
-    PoliciesMethodDescriptorSupplier(String methodName) {
+    PoliciesMethodDescriptorSupplier(java.lang.String methodName) {
       this.methodName = methodName;
     }
 

java-iam/grpc-google-iam-v2beta/src/main/java/com/google/iam/v2beta/PoliciesGrpc.java

@@ -32,7 +32,7 @@ public final class PoliciesGrpc {
 
   private PoliciesGrpc() {}
 
-  public static final String SERVICE_NAME = "google.iam.v2beta.Policies";
+  public static final java.lang.String SERVICE_NAME = "google.iam.v2beta.Policies";
 
   // Static method descriptors that strictly reflect the proto.
   private static volatile io.grpc.MethodDescriptor<
@@ -791,9 +791,9 @@ private static final class PoliciesFileDescriptorSupplier extends PoliciesBaseDe
 
   private static final class PoliciesMethodDescriptorSupplier extends PoliciesBaseDescriptorSupplier
       implements io.grpc.protobuf.ProtoMethodDescriptorSupplier {
-    private final String methodName;
+    private final java.lang.String methodName;
 
-    PoliciesMethodDescriptorSupplier(String methodName) {
+    PoliciesMethodDescriptorSupplier(java.lang.String methodName) {
       this.methodName = methodName;
     }
 

java-iam/proto-google-iam-v1/src/main/proto/google/iam/v1/iam_policy.proto

@@ -1,4 +1,4 @@
-// Copyright 2019 Google LLC.
+// Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -11,26 +11,29 @@
 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 // See the License for the specific language governing permissions and
 // limitations under the License.
-//
 
 syntax = "proto3";
 
 package google.iam.v1;
 
-import "google/iam/v1/options.proto";
-import "google/iam/v1/policy.proto";
 import "google/api/annotations.proto";
 import "google/api/client.proto";
+import "google/api/field_behavior.proto";
+import "google/api/resource.proto";
+import "google/iam/v1/options.proto";
+import "google/iam/v1/policy.proto";
+import "google/protobuf/field_mask.proto";
 
 option cc_enable_arenas = true;
 option csharp_namespace = "Google.Cloud.Iam.V1";
-option go_package = "google.golang.org/genproto/googleapis/iam/v1;iam";
+option go_package = "cloud.google.com/go/iam/apiv1/iampb;iampb";
 option java_multiple_files = true;
 option java_outer_classname = "IamPolicyProto";
 option java_package = "com.google.iam.v1";
 option php_namespace = "Google\\Cloud\\Iam\\V1";
 
-// ## API Overview
+// API Overview
+//
 //
 // Manages Identity and Access Management (IAM) policies.
 //
@@ -60,6 +63,8 @@ service IAMPolicy {
 
   // Sets the access control policy on the specified resource. Replaces any
   // existing policy.
+  //
+  // Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
   rpc SetIamPolicy(SetIamPolicyRequest) returns (Policy) {
     option (google.api.http) = {
       post: "/v1/{resource=**}:setIamPolicy"
@@ -79,7 +84,7 @@ service IAMPolicy {
 
   // Returns permissions that a caller has on the specified resource.
   // If the resource does not exist, this will return an empty set of
-  // permissions, not a NOT_FOUND error.
+  // permissions, not a `NOT_FOUND` error.
   //
   // Note: This operation is designed to be used for building permission-aware
   // UIs and command-line tools, not for authorization checking. This operation
@@ -96,37 +101,50 @@ service IAMPolicy {
 message SetIamPolicyRequest {
   // REQUIRED: The resource for which the policy is being specified.
   // See the operation documentation for the appropriate value for this field.
-  string resource = 1;
+  string resource = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference).type = "*"];
 
   // REQUIRED: The complete policy to be applied to the `resource`. The size of
   // the policy is limited to a few 10s of KB. An empty policy is a
   // valid policy but certain Cloud Platform services (such as Projects)
   // might reject them.
-  Policy policy = 2;
+  Policy policy = 2 [(google.api.field_behavior) = REQUIRED];
+
+  // OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+  // the fields in the mask will be modified. If no mask is provided, the
+  // following default mask is used:
+  //
+  // `paths: "bindings, etag"`
+  google.protobuf.FieldMask update_mask = 3;
 }
 
 // Request message for `GetIamPolicy` method.
 message GetIamPolicyRequest {
   // REQUIRED: The resource for which the policy is being requested.
   // See the operation documentation for the appropriate value for this field.
-  string resource = 1;
+  string resource = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference).type = "*"];
 
   // OPTIONAL: A `GetPolicyOptions` object for specifying options to
-  // `GetIamPolicy`. This field is only used by Cloud IAM.
+  // `GetIamPolicy`.
   GetPolicyOptions options = 2;
 }
 
 // Request message for `TestIamPermissions` method.
 message TestIamPermissionsRequest {
   // REQUIRED: The resource for which the policy detail is being requested.
   // See the operation documentation for the appropriate value for this field.
-  string resource = 1;
+  string resource = 1[
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference).type = "*"];
 
   // The set of permissions to check for the `resource`. Permissions with
   // wildcards (such as '*' or 'storage.*') are not allowed. For more
   // information see
   // [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
-  repeated string permissions = 2;
+  repeated string permissions = 2 [(google.api.field_behavior) = REQUIRED];
 }
 
 // Response message for `TestIamPermissions` method.