feat: add aws connection support (#33)

PiperOrigin-RevId: 334870265

Source-Author: Google APIs <noreply@google.com>
Source-Date: Thu Oct 1 12:16:35 2020 -0700
Source-Repo: googleapis/googleapis
Source-Sha: aa72330a8d16d281df131e8d37bb1a4bde53401f
Source-Link: googleapis/googleapis@aa72330

protos/google/cloud/bigquery/connection/v1/connection.proto

@@ -230,6 +230,9 @@ message Connection {
   oneof properties {
     // Cloud SQL properties.
     CloudSqlProperties cloud_sql = 4;
+
+    // Amazon Web Services (AWS) properties.
+    AwsProperties aws = 8;
   }
 
   // Output only. The creation timestamp of the connection.
@@ -277,3 +280,29 @@ message CloudSqlCredential {
   // The password for the credential.
   string password = 2;
 }
+
+// Connection properties specific to Amazon Web Services (AWS).
+message AwsProperties {
+  // Authentication method chosen at connection creation.
+  oneof authentication_method {
+    // Authentication using Google owned AWS IAM user's access key to assume
+    // into customer's AWS IAM Role.
+    AwsCrossAccountRole cross_account_role = 2;
+  }
+}
+
+// Authentication method for Amazon Web Services (AWS) that uses Google owned
+// AWS IAM user's access key to assume into customer's AWS IAM Role.
+message AwsCrossAccountRole {
+  // The user’s AWS IAM Role that trusts the Google-owned AWS IAM user
+  // Connection.
+  string iam_role_id = 1;
+
+  // Output only. Google-owned AWS IAM User for a Connection.
+  string iam_user_id = 2 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. A Google-generated id for representing Connection’s identity in AWS.
+  // External Id is also used for preventing the Confused Deputy Problem. See
+  // https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html
+  string external_id = 3 [(google.api.field_behavior) = OUTPUT_ONLY];
+}