From 2ffde77b03427508e1d50add0f461d7ede5ea4b7 Mon Sep 17 00:00:00 2001
From: Anthonios Partheniou <partheniou@google.com>
Date: Tue, 31 Oct 2023 14:30:30 +0000
Subject: [PATCH] build: update README to indicate that source has moved and
 delete all files

---
 .coveragerc                                   |    13 -
 .flake8                                       |    33 -
 .github/.OwlBot.lock.yaml                     |    17 -
 .github/.OwlBot.yaml                          |    26 -
 .github/CODEOWNERS                            |    12 -
 .github/CONTRIBUTING.md                       |    28 -
 .github/ISSUE_TEMPLATE/bug_report.md          |    43 -
 .github/ISSUE_TEMPLATE/feature_request.md     |    18 -
 .github/ISSUE_TEMPLATE/support_request.md     |     7 -
 .github/PULL_REQUEST_TEMPLATE.md              |     7 -
 .github/auto-approve.yml                      |     3 -
 .github/auto-label.yaml                       |    15 -
 .github/header-checker-lint.yml               |    15 -
 .github/release-please.yml                    |    12 -
 .github/release-trigger.yml                   |     1 -
 .github/snippet-bot.yml                       |     0
 .github/sync-repo-settings.yaml               |    14 -
 .github/workflows/docs.yml                    |    38 -
 .github/workflows/lint.yml                    |    25 -
 .github/workflows/unittest.yml                |    57 -
 .gitignore                                    |    64 -
 .kokoro/build.sh                              |    59 -
 .kokoro/continuous/common.cfg                 |    27 -
 .kokoro/continuous/continuous.cfg             |     1 -
 .kokoro/continuous/prerelease-deps.cfg        |     7 -
 .kokoro/docker/docs/Dockerfile                |    83 -
 .kokoro/docs/common.cfg                       |    66 -
 .kokoro/docs/docs-presubmit.cfg               |    28 -
 .kokoro/docs/docs.cfg                         |     1 -
 .kokoro/populate-secrets.sh                   |    43 -
 .kokoro/presubmit/common.cfg                  |    27 -
 .kokoro/presubmit/prerelease-deps.cfg         |     7 -
 .kokoro/presubmit/presubmit.cfg               |     1 -
 .kokoro/publish-docs.sh                       |    62 -
 .kokoro/release.sh                            |    29 -
 .kokoro/release/common.cfg                    |    49 -
 .kokoro/release/release.cfg                   |     1 -
 .kokoro/requirements.in                       |    10 -
 .kokoro/requirements.txt                      |   497 -
 .kokoro/samples/lint/common.cfg               |    34 -
 .kokoro/samples/lint/continuous.cfg           |     6 -
 .kokoro/samples/lint/periodic.cfg             |     6 -
 .kokoro/samples/lint/presubmit.cfg            |     6 -
 .kokoro/samples/python3.10/common.cfg         |    40 -
 .kokoro/samples/python3.10/continuous.cfg     |     6 -
 .kokoro/samples/python3.10/periodic-head.cfg  |    11 -
 .kokoro/samples/python3.10/periodic.cfg       |     6 -
 .kokoro/samples/python3.10/presubmit.cfg      |     6 -
 .kokoro/samples/python3.11/common.cfg         |    40 -
 .kokoro/samples/python3.11/continuous.cfg     |     6 -
 .kokoro/samples/python3.11/periodic-head.cfg  |    11 -
 .kokoro/samples/python3.11/periodic.cfg       |     6 -
 .kokoro/samples/python3.11/presubmit.cfg      |     6 -
 .kokoro/samples/python3.7/common.cfg          |    40 -
 .kokoro/samples/python3.7/continuous.cfg      |     6 -
 .kokoro/samples/python3.7/periodic-head.cfg   |    11 -
 .kokoro/samples/python3.7/periodic.cfg        |     6 -
 .kokoro/samples/python3.7/presubmit.cfg       |     6 -
 .kokoro/samples/python3.8/common.cfg          |    40 -
 .kokoro/samples/python3.8/continuous.cfg      |     6 -
 .kokoro/samples/python3.8/periodic-head.cfg   |    11 -
 .kokoro/samples/python3.8/periodic.cfg        |     6 -
 .kokoro/samples/python3.8/presubmit.cfg       |     6 -
 .kokoro/samples/python3.9/common.cfg          |    40 -
 .kokoro/samples/python3.9/continuous.cfg      |     6 -
 .kokoro/samples/python3.9/periodic-head.cfg   |    11 -
 .kokoro/samples/python3.9/periodic.cfg        |     6 -
 .kokoro/samples/python3.9/presubmit.cfg       |     6 -
 .kokoro/test-samples-against-head.sh          |    26 -
 .kokoro/test-samples-impl.sh                  |   102 -
 .kokoro/test-samples.sh                       |    44 -
 .kokoro/trampoline.sh                         |    28 -
 .kokoro/trampoline_v2.sh                      |   487 -
 .pre-commit-config.yaml                       |    31 -
 .release-please-manifest.json                 |     3 -
 .trampolinerc                                 |    61 -
 CHANGELOG.md                                  |   521 -
 CODE_OF_CONDUCT.md                            |    95 -
 CONTRIBUTING.rst                              |   281 -
 MANIFEST.in                                   |    25 -
 README.rst                                    |     5 +
 UPGRADING.md                                  |   173 -
 docs/README.rst                               |     1 -
 docs/UPGRADING.md                             |     1 -
 docs/_static/custom.css                       |    20 -
 docs/_templates/layout.html                   |    50 -
 docs/changelog.md                             |     1 -
 docs/conf.py                                  |   384 -
 docs/index.rst                                |    34 -
 docs/kms_v1/ekm_service.rst                   |    10 -
 docs/kms_v1/key_management_service.rst        |    10 -
 docs/kms_v1/services_.rst                     |     7 -
 docs/kms_v1/types_.rst                        |     6 -
 docs/multiprocessing.rst                      |     7 -
 google/cloud/kms/__init__.py                  |   169 -
 google/cloud/kms/gapic_version.py             |    16 -
 google/cloud/kms/py.typed                     |     2 -
 google/cloud/kms_v1/__init__.py               |   166 -
 google/cloud/kms_v1/gapic_metadata.json       |   572 -
 google/cloud/kms_v1/gapic_version.py          |    16 -
 google/cloud/kms_v1/py.typed                  |     2 -
 google/cloud/kms_v1/services/__init__.py      |    15 -
 .../kms_v1/services/ekm_service/__init__.py   |    22 -
 .../services/ekm_service/async_client.py      |  1522 --
 .../kms_v1/services/ekm_service/client.py     |  1762 --
 .../kms_v1/services/ekm_service/pagers.py     |   155 -
 .../ekm_service/transports/__init__.py        |    36 -
 .../services/ekm_service/transports/base.py   |   342 -
 .../services/ekm_service/transports/grpc.py   |   560 -
 .../ekm_service/transports/grpc_asyncio.py    |   569 -
 .../services/ekm_service/transports/rest.py   |  1684 --
 .../key_management_service/__init__.py        |    22 -
 .../key_management_service/async_client.py    |  4344 ----
 .../services/key_management_service/client.py |  4437 ----
 .../services/key_management_service/pagers.py |   539 -
 .../transports/__init__.py                    |    38 -
 .../key_management_service/transports/base.py |   845 -
 .../key_management_service/transports/grpc.py |  1226 -
 .../transports/grpc_asyncio.py                |  1257 -
 .../key_management_service/transports/rest.py |  4646 ----
 google/cloud/kms_v1/types/__init__.py         |   152 -
 google/cloud/kms_v1/types/ekm_service.py      |   553 -
 google/cloud/kms_v1/types/resources.py        |  1250 -
 google/cloud/kms_v1/types/service.py          |  2529 --
 kms-v1-py.tar.gz                              |   Bin 65536 -> 0 bytes
 mypy.ini                                      |     3 -
 noxfile.py                                    |   428 -
 owlbot.py                                     |    71 -
 release-please-config.json                    |    24 -
 renovate.json                                 |    12 -
 samples/AUTHORING_GUIDE.md                    |     1 -
 samples/CONTRIBUTING.md                       |     1 -
 samples/attestations/README.rst               |     4 -
 ...ekm_service_create_ekm_connection_async.py |    53 -
 ..._ekm_service_create_ekm_connection_sync.py |    53 -
 ...erated_ekm_service_get_ekm_config_async.py |    52 -
 ...nerated_ekm_service_get_ekm_config_sync.py |    52 -
 ...ed_ekm_service_get_ekm_connection_async.py |    52 -
 ...ted_ekm_service_get_ekm_connection_sync.py |    52 -
 ..._ekm_service_list_ekm_connections_async.py |    53 -
 ...d_ekm_service_list_ekm_connections_sync.py |    53 -
 ...ted_ekm_service_update_ekm_config_async.py |    51 -
 ...ated_ekm_service_update_ekm_config_sync.py |    51 -
 ...ekm_service_update_ekm_connection_async.py |    51 -
 ..._ekm_service_update_ekm_connection_sync.py |    51 -
 ...d_ekm_service_verify_connectivity_async.py |    52 -
 ...ed_ekm_service_verify_connectivity_sync.py |    52 -
 ...gement_service_asymmetric_decrypt_async.py |    53 -
 ...agement_service_asymmetric_decrypt_sync.py |    53 -
 ...anagement_service_asymmetric_sign_async.py |    52 -
 ...management_service_asymmetric_sign_sync.py |    52 -
 ...agement_service_create_crypto_key_async.py |    53 -
 ...nagement_service_create_crypto_key_sync.py |    53 -
 ...service_create_crypto_key_version_async.py |    52 -
 ..._service_create_crypto_key_version_sync.py |    52 -
 ...agement_service_create_import_job_async.py |    58 -
 ...nagement_service_create_import_job_sync.py |    58 -
 ...anagement_service_create_key_ring_async.py |    53 -
 ...management_service_create_key_ring_sync.py |    53 -
 ...ed_key_management_service_decrypt_async.py |    53 -
 ...ted_key_management_service_decrypt_sync.py |    53 -
 ...ervice_destroy_crypto_key_version_async.py |    52 -
 ...service_destroy_crypto_key_version_sync.py |    52 -
 ...ed_key_management_service_encrypt_async.py |    53 -
 ...ted_key_management_service_encrypt_sync.py |    53 -
 ...ent_service_generate_random_bytes_async.py |    51 -
 ...ment_service_generate_random_bytes_sync.py |    51 -
 ...management_service_get_crypto_key_async.py |    52 -
 ..._management_service_get_crypto_key_sync.py |    52 -
 ...nt_service_get_crypto_key_version_async.py |    52 -
 ...ent_service_get_crypto_key_version_sync.py |    52 -
 ...management_service_get_import_job_async.py |    52 -
 ..._management_service_get_import_job_sync.py |    52 -
 ...y_management_service_get_key_ring_async.py |    52 -
 ...ey_management_service_get_key_ring_sync.py |    52 -
 ...management_service_get_public_key_async.py |    52 -
 ..._management_service_get_public_key_sync.py |    52 -
 ...service_import_crypto_key_version_async.py |    55 -
 ..._service_import_crypto_key_version_sync.py |    55 -
 ..._service_list_crypto_key_versions_async.py |    53 -
 ...t_service_list_crypto_key_versions_sync.py |    53 -
 ...nagement_service_list_crypto_keys_async.py |    53 -
 ...anagement_service_list_crypto_keys_sync.py |    53 -
 ...nagement_service_list_import_jobs_async.py |    53 -
 ...anagement_service_list_import_jobs_sync.py |    53 -
 ...management_service_list_key_rings_async.py |    53 -
 ..._management_service_list_key_rings_sync.py |    53 -
 ...d_key_management_service_mac_sign_async.py |    53 -
 ...ed_key_management_service_mac_sign_sync.py |    53 -
 ...key_management_service_mac_verify_async.py |    54 -
 ..._key_management_service_mac_verify_sync.py |    54 -
 ...ey_management_service_raw_decrypt_async.py |    54 -
 ...key_management_service_raw_decrypt_sync.py |    54 -
 ...ey_management_service_raw_encrypt_async.py |    53 -
 ...key_management_service_raw_encrypt_sync.py |    53 -
 ...ervice_restore_crypto_key_version_async.py |    52 -
 ...service_restore_crypto_key_version_sync.py |    52 -
 ...agement_service_update_crypto_key_async.py |    51 -
 ...update_crypto_key_primary_version_async.py |    53 -
 ..._update_crypto_key_primary_version_sync.py |    53 -
 ...nagement_service_update_crypto_key_sync.py |    51 -
 ...service_update_crypto_key_version_async.py |    51 -
 ..._service_update_crypto_key_version_sync.py |    51 -
 .../snippet_metadata_google.cloud.kms.v1.json |  5810 -----
 samples/snippets/README.md                    |     4 -
 scripts/decrypt-secrets.sh                    |    46 -
 scripts/fixup_kms_v1_keywords.py              |   213 -
 scripts/readme-gen/readme_gen.py              |    69 -
 scripts/readme-gen/templates/README.tmpl.rst  |    87 -
 scripts/readme-gen/templates/auth.tmpl.rst    |     9 -
 .../templates/auth_api_key.tmpl.rst           |    14 -
 .../templates/install_deps.tmpl.rst           |    29 -
 .../templates/install_portaudio.tmpl.rst      |    35 -
 setup.cfg                                     |    19 -
 setup.py                                      |    91 -
 testing/.gitignore                            |     3 -
 testing/constraints-3.10.txt                  |     7 -
 testing/constraints-3.11.txt                  |     7 -
 testing/constraints-3.12.txt                  |     7 -
 testing/constraints-3.7.txt                   |    10 -
 testing/constraints-3.8.txt                   |     7 -
 testing/constraints-3.9.txt                   |     7 -
 tests/__init__.py                             |    15 -
 tests/system/test_system.py                   |    32 -
 tests/unit/__init__.py                        |    15 -
 tests/unit/gapic/__init__.py                  |    15 -
 tests/unit/gapic/kms_v1/__init__.py           |    15 -
 tests/unit/gapic/kms_v1/test_ekm_service.py   |  6953 ------
 .../kms_v1/test_key_management_service.py     | 19602 ----------------
 229 files changed, 5 insertions(+), 71048 deletions(-)
 delete mode 100644 .coveragerc
 delete mode 100644 .flake8
 delete mode 100644 .github/.OwlBot.lock.yaml
 delete mode 100644 .github/.OwlBot.yaml
 delete mode 100644 .github/CODEOWNERS
 delete mode 100644 .github/CONTRIBUTING.md
 delete mode 100644 .github/ISSUE_TEMPLATE/bug_report.md
 delete mode 100644 .github/ISSUE_TEMPLATE/feature_request.md
 delete mode 100644 .github/ISSUE_TEMPLATE/support_request.md
 delete mode 100644 .github/PULL_REQUEST_TEMPLATE.md
 delete mode 100644 .github/auto-approve.yml
 delete mode 100644 .github/auto-label.yaml
 delete mode 100644 .github/header-checker-lint.yml
 delete mode 100644 .github/release-please.yml
 delete mode 100644 .github/release-trigger.yml
 delete mode 100644 .github/snippet-bot.yml
 delete mode 100644 .github/sync-repo-settings.yaml
 delete mode 100644 .github/workflows/docs.yml
 delete mode 100644 .github/workflows/lint.yml
 delete mode 100644 .github/workflows/unittest.yml
 delete mode 100644 .gitignore
 delete mode 100755 .kokoro/build.sh
 delete mode 100644 .kokoro/continuous/common.cfg
 delete mode 100644 .kokoro/continuous/continuous.cfg
 delete mode 100644 .kokoro/continuous/prerelease-deps.cfg
 delete mode 100644 .kokoro/docker/docs/Dockerfile
 delete mode 100644 .kokoro/docs/common.cfg
 delete mode 100644 .kokoro/docs/docs-presubmit.cfg
 delete mode 100644 .kokoro/docs/docs.cfg
 delete mode 100755 .kokoro/populate-secrets.sh
 delete mode 100644 .kokoro/presubmit/common.cfg
 delete mode 100644 .kokoro/presubmit/prerelease-deps.cfg
 delete mode 100644 .kokoro/presubmit/presubmit.cfg
 delete mode 100755 .kokoro/publish-docs.sh
 delete mode 100755 .kokoro/release.sh
 delete mode 100644 .kokoro/release/common.cfg
 delete mode 100644 .kokoro/release/release.cfg
 delete mode 100644 .kokoro/requirements.in
 delete mode 100644 .kokoro/requirements.txt
 delete mode 100644 .kokoro/samples/lint/common.cfg
 delete mode 100644 .kokoro/samples/lint/continuous.cfg
 delete mode 100644 .kokoro/samples/lint/periodic.cfg
 delete mode 100644 .kokoro/samples/lint/presubmit.cfg
 delete mode 100644 .kokoro/samples/python3.10/common.cfg
 delete mode 100644 .kokoro/samples/python3.10/continuous.cfg
 delete mode 100644 .kokoro/samples/python3.10/periodic-head.cfg
 delete mode 100644 .kokoro/samples/python3.10/periodic.cfg
 delete mode 100644 .kokoro/samples/python3.10/presubmit.cfg
 delete mode 100644 .kokoro/samples/python3.11/common.cfg
 delete mode 100644 .kokoro/samples/python3.11/continuous.cfg
 delete mode 100644 .kokoro/samples/python3.11/periodic-head.cfg
 delete mode 100644 .kokoro/samples/python3.11/periodic.cfg
 delete mode 100644 .kokoro/samples/python3.11/presubmit.cfg
 delete mode 100644 .kokoro/samples/python3.7/common.cfg
 delete mode 100644 .kokoro/samples/python3.7/continuous.cfg
 delete mode 100644 .kokoro/samples/python3.7/periodic-head.cfg
 delete mode 100644 .kokoro/samples/python3.7/periodic.cfg
 delete mode 100644 .kokoro/samples/python3.7/presubmit.cfg
 delete mode 100644 .kokoro/samples/python3.8/common.cfg
 delete mode 100644 .kokoro/samples/python3.8/continuous.cfg
 delete mode 100644 .kokoro/samples/python3.8/periodic-head.cfg
 delete mode 100644 .kokoro/samples/python3.8/periodic.cfg
 delete mode 100644 .kokoro/samples/python3.8/presubmit.cfg
 delete mode 100644 .kokoro/samples/python3.9/common.cfg
 delete mode 100644 .kokoro/samples/python3.9/continuous.cfg
 delete mode 100644 .kokoro/samples/python3.9/periodic-head.cfg
 delete mode 100644 .kokoro/samples/python3.9/periodic.cfg
 delete mode 100644 .kokoro/samples/python3.9/presubmit.cfg
 delete mode 100755 .kokoro/test-samples-against-head.sh
 delete mode 100755 .kokoro/test-samples-impl.sh
 delete mode 100755 .kokoro/test-samples.sh
 delete mode 100755 .kokoro/trampoline.sh
 delete mode 100755 .kokoro/trampoline_v2.sh
 delete mode 100644 .pre-commit-config.yaml
 delete mode 100644 .release-please-manifest.json
 delete mode 100644 .trampolinerc
 delete mode 100644 CHANGELOG.md
 delete mode 100644 CODE_OF_CONDUCT.md
 delete mode 100644 CONTRIBUTING.rst
 delete mode 100644 MANIFEST.in
 delete mode 100644 UPGRADING.md
 delete mode 120000 docs/README.rst
 delete mode 120000 docs/UPGRADING.md
 delete mode 100644 docs/_static/custom.css
 delete mode 100644 docs/_templates/layout.html
 delete mode 120000 docs/changelog.md
 delete mode 100644 docs/conf.py
 delete mode 100644 docs/index.rst
 delete mode 100644 docs/kms_v1/ekm_service.rst
 delete mode 100644 docs/kms_v1/key_management_service.rst
 delete mode 100644 docs/kms_v1/services_.rst
 delete mode 100644 docs/kms_v1/types_.rst
 delete mode 100644 docs/multiprocessing.rst
 delete mode 100644 google/cloud/kms/__init__.py
 delete mode 100644 google/cloud/kms/gapic_version.py
 delete mode 100644 google/cloud/kms/py.typed
 delete mode 100644 google/cloud/kms_v1/__init__.py
 delete mode 100644 google/cloud/kms_v1/gapic_metadata.json
 delete mode 100644 google/cloud/kms_v1/gapic_version.py
 delete mode 100644 google/cloud/kms_v1/py.typed
 delete mode 100644 google/cloud/kms_v1/services/__init__.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/__init__.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/async_client.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/client.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/pagers.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/transports/__init__.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/transports/base.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/transports/grpc.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/transports/grpc_asyncio.py
 delete mode 100644 google/cloud/kms_v1/services/ekm_service/transports/rest.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/__init__.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/async_client.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/client.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/pagers.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/transports/__init__.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/transports/base.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/transports/grpc.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/transports/grpc_asyncio.py
 delete mode 100644 google/cloud/kms_v1/services/key_management_service/transports/rest.py
 delete mode 100644 google/cloud/kms_v1/types/__init__.py
 delete mode 100644 google/cloud/kms_v1/types/ekm_service.py
 delete mode 100644 google/cloud/kms_v1/types/resources.py
 delete mode 100644 google/cloud/kms_v1/types/service.py
 delete mode 100644 kms-v1-py.tar.gz
 delete mode 100644 mypy.ini
 delete mode 100644 noxfile.py
 delete mode 100644 owlbot.py
 delete mode 100644 release-please-config.json
 delete mode 100644 renovate.json
 delete mode 100644 samples/AUTHORING_GUIDE.md
 delete mode 100644 samples/CONTRIBUTING.md
 delete mode 100644 samples/attestations/README.rst
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_sync.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_async.py
 delete mode 100644 samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_sync.py
 delete mode 100644 samples/generated_samples/snippet_metadata_google.cloud.kms.v1.json
 delete mode 100644 samples/snippets/README.md
 delete mode 100755 scripts/decrypt-secrets.sh
 delete mode 100644 scripts/fixup_kms_v1_keywords.py
 delete mode 100644 scripts/readme-gen/readme_gen.py
 delete mode 100644 scripts/readme-gen/templates/README.tmpl.rst
 delete mode 100644 scripts/readme-gen/templates/auth.tmpl.rst
 delete mode 100644 scripts/readme-gen/templates/auth_api_key.tmpl.rst
 delete mode 100644 scripts/readme-gen/templates/install_deps.tmpl.rst
 delete mode 100644 scripts/readme-gen/templates/install_portaudio.tmpl.rst
 delete mode 100644 setup.cfg
 delete mode 100644 setup.py
 delete mode 100644 testing/.gitignore
 delete mode 100644 testing/constraints-3.10.txt
 delete mode 100644 testing/constraints-3.11.txt
 delete mode 100644 testing/constraints-3.12.txt
 delete mode 100644 testing/constraints-3.7.txt
 delete mode 100644 testing/constraints-3.8.txt
 delete mode 100644 testing/constraints-3.9.txt
 delete mode 100644 tests/__init__.py
 delete mode 100644 tests/system/test_system.py
 delete mode 100644 tests/unit/__init__.py
 delete mode 100644 tests/unit/gapic/__init__.py
 delete mode 100644 tests/unit/gapic/kms_v1/__init__.py
 delete mode 100644 tests/unit/gapic/kms_v1/test_ekm_service.py
 delete mode 100644 tests/unit/gapic/kms_v1/test_key_management_service.py

diff --git a/.coveragerc b/.coveragerc
deleted file mode 100644
index ada4b5e6..00000000
--- a/.coveragerc
+++ /dev/null
@@ -1,13 +0,0 @@
-[run]
-branch = True
-
-[report]
-show_missing = True
-omit =
-    google/cloud/kms/__init__.py
-    google/cloud/kms/gapic_version.py
-exclude_lines =
-    # Re-enable the standard pragma
-    pragma: NO COVER
-    # Ignore debug-only repr
-    def __repr__
diff --git a/.flake8 b/.flake8
deleted file mode 100644
index 87f6e408..00000000
--- a/.flake8
+++ /dev/null
@@ -1,33 +0,0 @@
-# -*- coding: utf-8 -*-
-#
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Generated by synthtool. DO NOT EDIT!
-[flake8]
-ignore = E203, E231, E266, E501, W503
-exclude =
-  # Exclude generated code.
-  **/proto/**
-  **/gapic/**
-  **/services/**
-  **/types/**
-  *_pb2.py
-
-  # Standard linting exemptions.
-  **/.nox/**
-  __pycache__,
-  .git,
-  *.pyc,
-  conf.py
diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml
deleted file mode 100644
index a934f1e0..00000000
--- a/.github/.OwlBot.lock.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-docker:
-  image: gcr.io/cloud-devrel-public-resources/owlbot-python:latest
-  digest: sha256:4f9b3b106ad0beafc2c8a415e3f62c1a0cc23cabea115dbe841b848f581cfe99
-# created: 2023-10-09T14:06:13.397766266Z
diff --git a/.github/.OwlBot.yaml b/.github/.OwlBot.yaml
deleted file mode 100644
index 379f10c8..00000000
--- a/.github/.OwlBot.yaml
+++ /dev/null
@@ -1,26 +0,0 @@
-# Copyright 2021 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-docker:
-  image: gcr.io/cloud-devrel-public-resources/owlbot-python:latest
-
-deep-remove-regex:
-  - /owl-bot-staging
-
-deep-copy-regex:
-  - source: /google/cloud/kms/(v.*)/.*-py/(.*)
-    dest: /owl-bot-staging/$1/$2
-
-begin-after-commit-hash: b06c9034cfcbce180ba732d03be6526e5c8ea1bc
-
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
deleted file mode 100644
index e446644f..00000000
--- a/.github/CODEOWNERS
+++ /dev/null
@@ -1,12 +0,0 @@
-# Code owners file.
-# This file controls who is tagged for review for any given pull request.
-#
-# For syntax help see:
-# https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners#codeowners-syntax
-# Note: This file is autogenerated. To make changes to the codeowner team, please update .repo-metadata.json.
-
-# @googleapis/yoshi-python is the default owner for changes in this repo
-*     @googleapis/yoshi-python
-
-# @googleapis/python-samples-reviewers is the default owner for samples changes
-/samples/   @googleapis/python-samples-reviewers
diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md
deleted file mode 100644
index 939e5341..00000000
--- a/.github/CONTRIBUTING.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# How to Contribute
-
-We'd love to accept your patches and contributions to this project. There are
-just a few small guidelines you need to follow.
-
-## Contributor License Agreement
-
-Contributions to this project must be accompanied by a Contributor License
-Agreement. You (or your employer) retain the copyright to your contribution;
-this simply gives us permission to use and redistribute your contributions as
-part of the project. Head over to <https://cla.developers.google.com/> to see
-your current agreements on file or to sign a new one.
-
-You generally only need to submit a CLA once, so if you've already submitted one
-(even if it was for a different project), you probably don't need to do it
-again.
-
-## Code reviews
-
-All submissions, including submissions by project members, require review. We
-use GitHub pull requests for this purpose. Consult
-[GitHub Help](https://help.github.com/articles/about-pull-requests/) for more
-information on using pull requests.
-
-## Community Guidelines
-
-This project follows [Google's Open Source Community
-Guidelines](https://opensource.google.com/conduct/).
diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
deleted file mode 100644
index 7373dc7a..00000000
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ /dev/null
@@ -1,43 +0,0 @@
----
-name: Bug report
-about: Create a report to help us improve
-
----
-
-Thanks for stopping by to let us know something could be better!
-
-**PLEASE READ**: If you have a support contract with Google, please create an issue in the [support console](https://cloud.google.com/support/) instead of filing on GitHub. This will ensure a timely response.
-
-Please run down the following list and make sure you've tried the usual "quick fixes":
-
-  - Search the issues already opened: https://github.com/googleapis/python-kms/issues
-  - Search StackOverflow: https://stackoverflow.com/questions/tagged/google-cloud-platform+python
-
-If you are still having issues, please be sure to include as much information as possible:
-
-#### Environment details
-
-  - OS type and version:
-  - Python version: `python --version`
-  - pip version: `pip --version`
-  - `google-cloud-kms` version: `pip show google-cloud-kms`
-
-#### Steps to reproduce
-
-  1. ?
-  2. ?
-
-#### Code example
-
-```python
-# example
-```
-
-#### Stack trace
-```
-# example
-```
-
-Making sure to follow these steps will guarantee the quickest resolution possible.
-
-Thanks!
diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md
deleted file mode 100644
index 6365857f..00000000
--- a/.github/ISSUE_TEMPLATE/feature_request.md
+++ /dev/null
@@ -1,18 +0,0 @@
----
-name: Feature request
-about: Suggest an idea for this library
-
----
-
-Thanks for stopping by to let us know something could be better!
-
-**PLEASE READ**: If you have a support contract with Google, please create an issue in the [support console](https://cloud.google.com/support/) instead of filing on GitHub. This will ensure a timely response.
-
- **Is your feature request related to a problem? Please describe.**
-A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
- **Describe the solution you'd like**
-A clear and concise description of what you want to happen.
- **Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
- **Additional context**
-Add any other context or screenshots about the feature request here.
diff --git a/.github/ISSUE_TEMPLATE/support_request.md b/.github/ISSUE_TEMPLATE/support_request.md
deleted file mode 100644
index 99586903..00000000
--- a/.github/ISSUE_TEMPLATE/support_request.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-name: Support request
-about: If you have a support contract with Google, please create an issue in the Google Cloud Support console.
-
----
-
-**PLEASE READ**: If you have a support contract with Google, please create an issue in the [support console](https://cloud.google.com/support/) instead of filing on GitHub. This will ensure a timely response.
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
deleted file mode 100644
index 2a683b50..00000000
--- a/.github/PULL_REQUEST_TEMPLATE.md
+++ /dev/null
@@ -1,7 +0,0 @@
-Thank you for opening a Pull Request! Before submitting your PR, there are a few things you can do to make sure it goes smoothly:
-- [ ] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/python-kms/issues/new/choose) before writing your code!  That way we can discuss the change, evaluate designs, and agree on the general idea
-- [ ] Ensure the tests and linter pass
-- [ ] Code coverage does not decrease (if any source code was changed)
-- [ ] Appropriate docs were updated (if necessary)
-
-Fixes #<issue_number_goes_here> 🦕
diff --git a/.github/auto-approve.yml b/.github/auto-approve.yml
deleted file mode 100644
index 311ebbb8..00000000
--- a/.github/auto-approve.yml
+++ /dev/null
@@ -1,3 +0,0 @@
-# https://github.com/googleapis/repo-automation-bots/tree/main/packages/auto-approve
-processes:
-  - "OwlBotTemplateChanges"
diff --git a/.github/auto-label.yaml b/.github/auto-label.yaml
deleted file mode 100644
index b2016d11..00000000
--- a/.github/auto-label.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-requestsize:
-  enabled: true
diff --git a/.github/header-checker-lint.yml b/.github/header-checker-lint.yml
deleted file mode 100644
index 6fe78aa7..00000000
--- a/.github/header-checker-lint.yml
+++ /dev/null
@@ -1,15 +0,0 @@
-{"allowedCopyrightHolders": ["Google LLC"],
- "allowedLicenses": ["Apache-2.0", "MIT", "BSD-3"],
- "ignoreFiles": ["**/requirements.txt", "**/requirements-test.txt", "**/__init__.py", "samples/**/constraints.txt", "samples/**/constraints-test.txt"],
- "sourceFileExtensions": [
- 	"ts", 
- 	"js", 
- 	"java", 
- 	"sh", 
- 	"Dockerfile", 
- 	"yaml", 
- 	"py",
- 	"html",
- 	"txt"
- ]
-}
\ No newline at end of file
diff --git a/.github/release-please.yml b/.github/release-please.yml
deleted file mode 100644
index fe749ff6..00000000
--- a/.github/release-please.yml
+++ /dev/null
@@ -1,12 +0,0 @@
-releaseType: python
-handleGHRelease: true
-manifest: true
-# NOTE: this section is generated by synthtool.languages.python
-# See https://github.com/googleapis/synthtool/blob/master/synthtool/languages/python.py
-branches:
-- branch: v1
-  handleGHRelease: true
-  releaseType: python
-- branch: v0
-  handleGHRelease: true
-  releaseType: python
diff --git a/.github/release-trigger.yml b/.github/release-trigger.yml
deleted file mode 100644
index d4ca9418..00000000
--- a/.github/release-trigger.yml
+++ /dev/null
@@ -1 +0,0 @@
-enabled: true
diff --git a/.github/snippet-bot.yml b/.github/snippet-bot.yml
deleted file mode 100644
index e69de29b..00000000
diff --git a/.github/sync-repo-settings.yaml b/.github/sync-repo-settings.yaml
deleted file mode 100644
index 37438d33..00000000
--- a/.github/sync-repo-settings.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-# https://github.com/googleapis/repo-automation-bots/tree/main/packages/sync-repo-settings
-# Rules for main branch protection
-branchProtectionRules:
-# Identifies the protection rule pattern. Name of the branch to be protected.
-# Defaults to `main`
-- pattern: main
-  requiresCodeOwnerReviews: true
-  requiresStrictStatusChecks: true
-  requiredStatusCheckContexts:
-    - 'Kokoro'
-    - 'cla/google'
-    - 'Samples - Lint'
-    - 'Samples - Python 3.7'
-    - 'Samples - Python 3.8'
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
deleted file mode 100644
index e97d89e4..00000000
--- a/.github/workflows/docs.yml
+++ /dev/null
@@ -1,38 +0,0 @@
-on:
-  pull_request:
-    branches:
-      - main
-name: docs
-jobs:
-  docs:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v3
-    - name: Setup Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: "3.9"
-    - name: Install nox
-      run: |
-        python -m pip install --upgrade setuptools pip wheel
-        python -m pip install nox
-    - name: Run docs
-      run: |
-        nox -s docs
-  docfx:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v3
-    - name: Setup Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: "3.9"
-    - name: Install nox
-      run: |
-        python -m pip install --upgrade setuptools pip wheel
-        python -m pip install nox
-    - name: Run docfx
-      run: |
-        nox -s docfx
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
deleted file mode 100644
index 16d5a9e9..00000000
--- a/.github/workflows/lint.yml
+++ /dev/null
@@ -1,25 +0,0 @@
-on:
-  pull_request:
-    branches:
-      - main
-name: lint
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v3
-    - name: Setup Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: "3.8"
-    - name: Install nox
-      run: |
-        python -m pip install --upgrade setuptools pip wheel
-        python -m pip install nox
-    - name: Run lint
-      run: |
-        nox -s lint
-    - name: Run lint_setup_py
-      run: |
-        nox -s lint_setup_py
diff --git a/.github/workflows/unittest.yml b/.github/workflows/unittest.yml
deleted file mode 100644
index 8057a769..00000000
--- a/.github/workflows/unittest.yml
+++ /dev/null
@@ -1,57 +0,0 @@
-on:
-  pull_request:
-    branches:
-      - main
-name: unittest
-jobs:
-  unit:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python: ['3.7', '3.8', '3.9', '3.10', '3.11']
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v3
-    - name: Setup Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: ${{ matrix.python }}
-    - name: Install nox
-      run: |
-        python -m pip install --upgrade setuptools pip wheel
-        python -m pip install nox
-    - name: Run unit tests
-      env:
-        COVERAGE_FILE: .coverage-${{ matrix.python }}
-      run: |
-        nox -s unit-${{ matrix.python }}
-    - name: Upload coverage results
-      uses: actions/upload-artifact@v3
-      with:
-        name: coverage-artifacts
-        path: .coverage-${{ matrix.python }}
-
-  cover:
-    runs-on: ubuntu-latest
-    needs:
-        - unit
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v3
-    - name: Setup Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: "3.8"
-    - name: Install coverage
-      run: |
-        python -m pip install --upgrade setuptools pip wheel
-        python -m pip install coverage
-    - name: Download coverage results
-      uses: actions/download-artifact@v3
-      with:
-        name: coverage-artifacts
-        path: .coverage-results/
-    - name: Report coverage results
-      run: |
-        coverage combine .coverage-results/.coverage*
-        coverage report --show-missing --fail-under=100
diff --git a/.gitignore b/.gitignore
deleted file mode 100644
index d083ea1d..00000000
--- a/.gitignore
+++ /dev/null
@@ -1,64 +0,0 @@
-*.py[cod]
-*.sw[op]
-
-# C extensions
-*.so
-
-# Packages
-*.egg
-*.egg-info
-dist
-build
-eggs
-.eggs
-parts
-bin
-var
-sdist
-develop-eggs
-.installed.cfg
-lib
-lib64
-__pycache__
-
-# Installer logs
-pip-log.txt
-
-# Unit test / coverage reports
-.coverage
-.nox
-.cache
-.pytest_cache
-
-
-# Mac
-.DS_Store
-
-# JetBrains
-.idea
-
-# VS Code
-.vscode
-
-# emacs
-*~
-
-# Built documentation
-docs/_build
-bigquery/docs/generated
-docs.metadata
-
-# Virtual environment
-env/
-venv/
-
-# Test logs
-coverage.xml
-*sponge_log.xml
-
-# System test environment variables.
-system_tests/local_test_setup
-
-# Make sure a generated file isn't accidentally committed.
-pylintrc
-pylintrc.test
diff --git a/.kokoro/build.sh b/.kokoro/build.sh
deleted file mode 100755
index 95a84724..00000000
--- a/.kokoro/build.sh
+++ /dev/null
@@ -1,59 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -eo pipefail
-
-if [[ -z "${PROJECT_ROOT:-}" ]]; then
-    PROJECT_ROOT="github/python-kms"
-fi
-
-cd "${PROJECT_ROOT}"
-
-# Disable buffering, so that the logs stream through.
-export PYTHONUNBUFFERED=1
-
-# Debug: show build environment
-env | grep KOKORO
-
-# Setup service account credentials.
-export GOOGLE_APPLICATION_CREDENTIALS=${KOKORO_GFILE_DIR}/service-account.json
-
-# Setup project id.
-export PROJECT_ID=$(cat "${KOKORO_GFILE_DIR}/project-id.json")
-
-# Remove old nox
-python3 -m pip uninstall --yes --quiet nox-automation
-
-# Install nox
-python3 -m pip install --upgrade --quiet nox
-python3 -m nox --version
-
-# If this is a continuous build, send the test log to the FlakyBot.
-# See https://github.com/googleapis/repo-automation-bots/tree/main/packages/flakybot.
-if [[ $KOKORO_BUILD_ARTIFACTS_SUBDIR = *"continuous"* ]]; then
-  cleanup() {
-    chmod +x $KOKORO_GFILE_DIR/linux_amd64/flakybot
-    $KOKORO_GFILE_DIR/linux_amd64/flakybot
-  }
-  trap cleanup EXIT HUP
-fi
-
-# If NOX_SESSION is set, it only runs the specified session,
-# otherwise run all the sessions.
-if [[ -n "${NOX_SESSION:-}" ]]; then
-    python3 -m nox -s ${NOX_SESSION:-}
-else
-    python3 -m nox
-fi
diff --git a/.kokoro/continuous/common.cfg b/.kokoro/continuous/common.cfg
deleted file mode 100644
index 1bcdeee1..00000000
--- a/.kokoro/continuous/common.cfg
+++ /dev/null
@@ -1,27 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Download resources for system tests (service account key, etc.)
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/google-cloud-python"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline.sh"
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-multi"
-}
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/build.sh"
-}
diff --git a/.kokoro/continuous/continuous.cfg b/.kokoro/continuous/continuous.cfg
deleted file mode 100644
index 8f43917d..00000000
--- a/.kokoro/continuous/continuous.cfg
+++ /dev/null
@@ -1 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
\ No newline at end of file
diff --git a/.kokoro/continuous/prerelease-deps.cfg b/.kokoro/continuous/prerelease-deps.cfg
deleted file mode 100644
index 3595fb43..00000000
--- a/.kokoro/continuous/prerelease-deps.cfg
+++ /dev/null
@@ -1,7 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Only run this nox session.
-env_vars: {
-    key: "NOX_SESSION"
-    value: "prerelease_deps"
-}
diff --git a/.kokoro/docker/docs/Dockerfile b/.kokoro/docker/docs/Dockerfile
deleted file mode 100644
index 8e39a2cc..00000000
--- a/.kokoro/docker/docs/Dockerfile
+++ /dev/null
@@ -1,83 +0,0 @@
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-from ubuntu:22.04
-
-ENV DEBIAN_FRONTEND noninteractive
-
-# Ensure local Python is preferred over distribution Python.
-ENV PATH /usr/local/bin:$PATH
-
-# Install dependencies.
-RUN apt-get update \
-  && apt-get install -y --no-install-recommends \
-    apt-transport-https \
-    build-essential \
-    ca-certificates \
-    curl \
-    dirmngr \
-    git \
-    gpg-agent \
-    graphviz \
-    libbz2-dev \
-    libdb5.3-dev \
-    libexpat1-dev \
-    libffi-dev \
-    liblzma-dev \
-    libreadline-dev \
-    libsnappy-dev \
-    libssl-dev \
-    libsqlite3-dev \
-    portaudio19-dev \
-    python3-distutils \
-    redis-server \
-    software-properties-common \
-    ssh \
-    sudo \
-    tcl \
-    tcl-dev \
-    tk \
-    tk-dev \
-    uuid-dev \
-    wget \
-    zlib1g-dev \
-  && add-apt-repository universe \
-  && apt-get update \
-  && apt-get -y install jq \
-  && apt-get clean autoclean \
-  && apt-get autoremove -y \
-  && rm -rf /var/lib/apt/lists/* \
-  && rm -f /var/cache/apt/archives/*.deb
-
-###################### Install python 3.9.13
-
-# Download python 3.9.13
-RUN wget https://www.python.org/ftp/python/3.9.13/Python-3.9.13.tgz
-
-# Extract files
-RUN tar -xvf Python-3.9.13.tgz
-
-# Install python 3.9.13
-RUN ./Python-3.9.13/configure --enable-optimizations
-RUN make altinstall
-
-###################### Install pip
-RUN wget -O /tmp/get-pip.py 'https://bootstrap.pypa.io/get-pip.py' \
-  && python3 /tmp/get-pip.py \
-  && rm /tmp/get-pip.py
-
-# Test pip
-RUN python3 -m pip
-
-CMD ["python3.8"]
diff --git a/.kokoro/docs/common.cfg b/.kokoro/docs/common.cfg
deleted file mode 100644
index 8a379e67..00000000
--- a/.kokoro/docs/common.cfg
+++ /dev/null
@@ -1,66 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline_v2.sh"
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-lib-docs"
-}
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/publish-docs.sh"
-}
-
-env_vars: {
-    key: "STAGING_BUCKET"
-    value: "docs-staging"
-}
-
-env_vars: {
-    key: "V2_STAGING_BUCKET"
-    # Push google cloud library docs to the Cloud RAD bucket `docs-staging-v2`
-    value: "docs-staging-v2"
-}
-
-# It will upload the docker image after successful builds.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE_UPLOAD"
-    value: "true"
-}
-
-# It will always build the docker image.
-env_vars: {
-    key: "TRAMPOLINE_DOCKERFILE"
-    value: ".kokoro/docker/docs/Dockerfile"
-}
-
-# Fetch the token needed for reporting release status to GitHub
-before_action {
-  fetch_keystore {
-    keystore_resource {
-      keystore_config_id: 73713
-      keyname: "yoshi-automation-github-key"
-    }
-  }
-}
-
-before_action {
-  fetch_keystore {
-    keystore_resource {
-      keystore_config_id: 73713
-      keyname: "docuploader_service_account"
-    }
-  }
-}
\ No newline at end of file
diff --git a/.kokoro/docs/docs-presubmit.cfg b/.kokoro/docs/docs-presubmit.cfg
deleted file mode 100644
index f20327db..00000000
--- a/.kokoro/docs/docs-presubmit.cfg
+++ /dev/null
@@ -1,28 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "STAGING_BUCKET"
-    value: "gcloud-python-test"
-}
-
-env_vars: {
-    key: "V2_STAGING_BUCKET"
-    value: "gcloud-python-test"
-}
-
-# We only upload the image in the main `docs` build.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE_UPLOAD"
-    value: "false"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/build.sh"
-}
-
-# Only run this nox session.
-env_vars: {
-    key: "NOX_SESSION"
-    value: "docs docfx"
-}
diff --git a/.kokoro/docs/docs.cfg b/.kokoro/docs/docs.cfg
deleted file mode 100644
index 8f43917d..00000000
--- a/.kokoro/docs/docs.cfg
+++ /dev/null
@@ -1 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
\ No newline at end of file
diff --git a/.kokoro/populate-secrets.sh b/.kokoro/populate-secrets.sh
deleted file mode 100755
index 6f397214..00000000
--- a/.kokoro/populate-secrets.sh
+++ /dev/null
@@ -1,43 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -eo pipefail
-
-function now { date +"%Y-%m-%d %H:%M:%S" | tr -d '\n' ;}
-function msg { println "$*" >&2 ;}
-function println { printf '%s\n' "$(now) $*" ;}
-
-
-# Populates requested secrets set in SECRET_MANAGER_KEYS from service account:
-# kokoro-trampoline@cloud-devrel-kokoro-resources.iam.gserviceaccount.com
-SECRET_LOCATION="${KOKORO_GFILE_DIR}/secret_manager"
-msg "Creating folder on disk for secrets: ${SECRET_LOCATION}"
-mkdir -p ${SECRET_LOCATION}
-for key in $(echo ${SECRET_MANAGER_KEYS} | sed "s/,/ /g")
-do
-  msg "Retrieving secret ${key}"
-  docker run --entrypoint=gcloud \
-    --volume=${KOKORO_GFILE_DIR}:${KOKORO_GFILE_DIR} \
-    gcr.io/google.com/cloudsdktool/cloud-sdk \
-    secrets versions access latest \
-    --project cloud-devrel-kokoro-resources \
-    --secret ${key} > \
-    "${SECRET_LOCATION}/${key}"
-  if [[ $? == 0 ]]; then
-    msg "Secret written to ${SECRET_LOCATION}/${key}"
-  else
-    msg "Error retrieving secret ${key}"
-  fi
-done
diff --git a/.kokoro/presubmit/common.cfg b/.kokoro/presubmit/common.cfg
deleted file mode 100644
index 1bcdeee1..00000000
--- a/.kokoro/presubmit/common.cfg
+++ /dev/null
@@ -1,27 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Download resources for system tests (service account key, etc.)
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/google-cloud-python"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline.sh"
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-multi"
-}
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/build.sh"
-}
diff --git a/.kokoro/presubmit/prerelease-deps.cfg b/.kokoro/presubmit/prerelease-deps.cfg
deleted file mode 100644
index 3595fb43..00000000
--- a/.kokoro/presubmit/prerelease-deps.cfg
+++ /dev/null
@@ -1,7 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Only run this nox session.
-env_vars: {
-    key: "NOX_SESSION"
-    value: "prerelease_deps"
-}
diff --git a/.kokoro/presubmit/presubmit.cfg b/.kokoro/presubmit/presubmit.cfg
deleted file mode 100644
index 8f43917d..00000000
--- a/.kokoro/presubmit/presubmit.cfg
+++ /dev/null
@@ -1 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
\ No newline at end of file
diff --git a/.kokoro/publish-docs.sh b/.kokoro/publish-docs.sh
deleted file mode 100755
index 9eafe0be..00000000
--- a/.kokoro/publish-docs.sh
+++ /dev/null
@@ -1,62 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -eo pipefail
-
-# Disable buffering, so that the logs stream through.
-export PYTHONUNBUFFERED=1
-
-export PATH="${HOME}/.local/bin:${PATH}"
-
-# Install nox
-python3 -m pip install --require-hashes -r .kokoro/requirements.txt
-python3 -m nox --version
-
-# build docs
-nox -s docs
-
-# create metadata
-python3 -m docuploader create-metadata \
-  --name=$(jq --raw-output '.name // empty' .repo-metadata.json) \
-  --version=$(python3 setup.py --version) \
-  --language=$(jq --raw-output '.language // empty' .repo-metadata.json) \
-  --distribution-name=$(python3 setup.py --name) \
-  --product-page=$(jq --raw-output '.product_documentation // empty' .repo-metadata.json) \
-  --github-repository=$(jq --raw-output '.repo // empty' .repo-metadata.json) \
-  --issue-tracker=$(jq --raw-output '.issue_tracker // empty' .repo-metadata.json)
-
-cat docs.metadata
-
-# upload docs
-python3 -m docuploader upload docs/_build/html --metadata-file docs.metadata --staging-bucket "${STAGING_BUCKET}"
-
-
-# docfx yaml files
-nox -s docfx
-
-# create metadata.
-python3 -m docuploader create-metadata \
-  --name=$(jq --raw-output '.name // empty' .repo-metadata.json) \
-  --version=$(python3 setup.py --version) \
-  --language=$(jq --raw-output '.language // empty' .repo-metadata.json) \
-  --distribution-name=$(python3 setup.py --name) \
-  --product-page=$(jq --raw-output '.product_documentation // empty' .repo-metadata.json) \
-  --github-repository=$(jq --raw-output '.repo // empty' .repo-metadata.json) \
-  --issue-tracker=$(jq --raw-output '.issue_tracker // empty' .repo-metadata.json)
-
-cat docs.metadata
-
-# upload docs
-python3 -m docuploader upload docs/_build/html/docfx_yaml --metadata-file docs.metadata --destination-prefix docfx --staging-bucket "${V2_STAGING_BUCKET}"
diff --git a/.kokoro/release.sh b/.kokoro/release.sh
deleted file mode 100755
index 3388bc3f..00000000
--- a/.kokoro/release.sh
+++ /dev/null
@@ -1,29 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -eo pipefail
-
-# Start the releasetool reporter
-python3 -m pip install --require-hashes -r github/python-kms/.kokoro/requirements.txt
-python3 -m releasetool publish-reporter-script > /tmp/publisher-script; source /tmp/publisher-script
-
-# Disable buffering, so that the logs stream through.
-export PYTHONUNBUFFERED=1
-
-# Move into the package, build the distribution and upload.
-TWINE_PASSWORD=$(cat "${KOKORO_KEYSTORE_DIR}/73713_google-cloud-pypi-token-keystore-1")
-cd github/python-kms
-python3 setup.py sdist bdist_wheel
-twine upload --username __token__ --password "${TWINE_PASSWORD}" dist/*
diff --git a/.kokoro/release/common.cfg b/.kokoro/release/common.cfg
deleted file mode 100644
index 5ad599e6..00000000
--- a/.kokoro/release/common.cfg
+++ /dev/null
@@ -1,49 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline.sh"
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-multi"
-}
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/release.sh"
-}
-
-# Fetch PyPI password
-before_action {
-  fetch_keystore {
-    keystore_resource {
-      keystore_config_id: 73713
-      keyname: "google-cloud-pypi-token-keystore-1"
-    }
-  }
-}
-
-# Tokens needed to report release status back to GitHub
-env_vars: {
-  key: "SECRET_MANAGER_KEYS"
-  value: "releasetool-publish-reporter-app,releasetool-publish-reporter-googleapis-installation,releasetool-publish-reporter-pem"
-}
-
-# Store the packages we uploaded to PyPI.  That way, we have a record of exactly
-# what we published, which we can use to generate SBOMs and attestations.
-action {
-  define_artifacts {
-    regex: "github/python-kms/**/*.tar.gz"
-    strip_prefix: "github/python-kms"
-  }
-}
diff --git a/.kokoro/release/release.cfg b/.kokoro/release/release.cfg
deleted file mode 100644
index 8f43917d..00000000
--- a/.kokoro/release/release.cfg
+++ /dev/null
@@ -1 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
\ No newline at end of file
diff --git a/.kokoro/requirements.in b/.kokoro/requirements.in
deleted file mode 100644
index ec867d9f..00000000
--- a/.kokoro/requirements.in
+++ /dev/null
@@ -1,10 +0,0 @@
-gcp-docuploader
-gcp-releasetool>=1.10.5 # required for compatibility with cryptography>=39.x
-importlib-metadata
-typing-extensions
-twine
-wheel
-setuptools
-nox>=2022.11.21 # required to remove dependency on py
-charset-normalizer<3
-click<8.1.0
diff --git a/.kokoro/requirements.txt b/.kokoro/requirements.txt
deleted file mode 100644
index 16170d0c..00000000
--- a/.kokoro/requirements.txt
+++ /dev/null
@@ -1,497 +0,0 @@
-#
-# This file is autogenerated by pip-compile with Python 3.9
-# by the following command:
-#
-#    pip-compile --allow-unsafe --generate-hashes requirements.in
-#
-argcomplete==2.0.0 \
-    --hash=sha256:6372ad78c89d662035101418ae253668445b391755cfe94ea52f1b9d22425b20 \
-    --hash=sha256:cffa11ea77999bb0dd27bb25ff6dc142a6796142f68d45b1a26b11f58724561e
-    # via nox
-attrs==22.1.0 \
-    --hash=sha256:29adc2665447e5191d0e7c568fde78b21f9672d344281d0c6e1ab085429b22b6 \
-    --hash=sha256:86efa402f67bf2df34f51a335487cf46b1ec130d02b8d39fd248abfd30da551c
-    # via gcp-releasetool
-bleach==5.0.1 \
-    --hash=sha256:085f7f33c15bd408dd9b17a4ad77c577db66d76203e5984b1bd59baeee948b2a \
-    --hash=sha256:0d03255c47eb9bd2f26aa9bb7f2107732e7e8fe195ca2f64709fcf3b0a4a085c
-    # via readme-renderer
-cachetools==5.2.0 \
-    --hash=sha256:6a94c6402995a99c3970cc7e4884bb60b4a8639938157eeed436098bf9831757 \
-    --hash=sha256:f9f17d2aec496a9aa6b76f53e3b614c965223c061982d434d160f930c698a9db
-    # via google-auth
-certifi==2023.7.22 \
-    --hash=sha256:539cc1d13202e33ca466e88b2807e29f4c13049d6d87031a3c110744495cb082 \
-    --hash=sha256:92d6037539857d8206b8f6ae472e8b77db8058fec5937a1ef3f54304089edbb9
-    # via requests
-cffi==1.15.1 \
-    --hash=sha256:00a9ed42e88df81ffae7a8ab6d9356b371399b91dbdf0c3cb1e84c03a13aceb5 \
-    --hash=sha256:03425bdae262c76aad70202debd780501fabeaca237cdfddc008987c0e0f59ef \
-    --hash=sha256:04ed324bda3cda42b9b695d51bb7d54b680b9719cfab04227cdd1e04e5de3104 \
-    --hash=sha256:0e2642fe3142e4cc4af0799748233ad6da94c62a8bec3a6648bf8ee68b1c7426 \
-    --hash=sha256:173379135477dc8cac4bc58f45db08ab45d228b3363adb7af79436135d028405 \
-    --hash=sha256:198caafb44239b60e252492445da556afafc7d1e3ab7a1fb3f0584ef6d742375 \
-    --hash=sha256:1e74c6b51a9ed6589199c787bf5f9875612ca4a8a0785fb2d4a84429badaf22a \
-    --hash=sha256:2012c72d854c2d03e45d06ae57f40d78e5770d252f195b93f581acf3ba44496e \
-    --hash=sha256:21157295583fe8943475029ed5abdcf71eb3911894724e360acff1d61c1d54bc \
-    --hash=sha256:2470043b93ff09bf8fb1d46d1cb756ce6132c54826661a32d4e4d132e1977adf \
-    --hash=sha256:285d29981935eb726a4399badae8f0ffdff4f5050eaa6d0cfc3f64b857b77185 \
-    --hash=sha256:30d78fbc8ebf9c92c9b7823ee18eb92f2e6ef79b45ac84db507f52fbe3ec4497 \
-    --hash=sha256:320dab6e7cb2eacdf0e658569d2575c4dad258c0fcc794f46215e1e39f90f2c3 \
-    --hash=sha256:33ab79603146aace82c2427da5ca6e58f2b3f2fb5da893ceac0c42218a40be35 \
-    --hash=sha256:3548db281cd7d2561c9ad9984681c95f7b0e38881201e157833a2342c30d5e8c \
-    --hash=sha256:3799aecf2e17cf585d977b780ce79ff0dc9b78d799fc694221ce814c2c19db83 \
-    --hash=sha256:39d39875251ca8f612b6f33e6b1195af86d1b3e60086068be9cc053aa4376e21 \
-    --hash=sha256:3b926aa83d1edb5aa5b427b4053dc420ec295a08e40911296b9eb1b6170f6cca \
-    --hash=sha256:3bcde07039e586f91b45c88f8583ea7cf7a0770df3a1649627bf598332cb6984 \
-    --hash=sha256:3d08afd128ddaa624a48cf2b859afef385b720bb4b43df214f85616922e6a5ac \
-    --hash=sha256:3eb6971dcff08619f8d91607cfc726518b6fa2a9eba42856be181c6d0d9515fd \
-    --hash=sha256:40f4774f5a9d4f5e344f31a32b5096977b5d48560c5592e2f3d2c4374bd543ee \
-    --hash=sha256:4289fc34b2f5316fbb762d75362931e351941fa95fa18789191b33fc4cf9504a \
-    --hash=sha256:470c103ae716238bbe698d67ad020e1db9d9dba34fa5a899b5e21577e6d52ed2 \
-    --hash=sha256:4f2c9f67e9821cad2e5f480bc8d83b8742896f1242dba247911072d4fa94c192 \
-    --hash=sha256:50a74364d85fd319352182ef59c5c790484a336f6db772c1a9231f1c3ed0cbd7 \
-    --hash=sha256:54a2db7b78338edd780e7ef7f9f6c442500fb0d41a5a4ea24fff1c929d5af585 \
-    --hash=sha256:5635bd9cb9731e6d4a1132a498dd34f764034a8ce60cef4f5319c0541159392f \
-    --hash=sha256:59c0b02d0a6c384d453fece7566d1c7e6b7bae4fc5874ef2ef46d56776d61c9e \
-    --hash=sha256:5d598b938678ebf3c67377cdd45e09d431369c3b1a5b331058c338e201f12b27 \
-    --hash=sha256:5df2768244d19ab7f60546d0c7c63ce1581f7af8b5de3eb3004b9b6fc8a9f84b \
-    --hash=sha256:5ef34d190326c3b1f822a5b7a45f6c4535e2f47ed06fec77d3d799c450b2651e \
-    --hash=sha256:6975a3fac6bc83c4a65c9f9fcab9e47019a11d3d2cf7f3c0d03431bf145a941e \
-    --hash=sha256:6c9a799e985904922a4d207a94eae35c78ebae90e128f0c4e521ce339396be9d \
-    --hash=sha256:70df4e3b545a17496c9b3f41f5115e69a4f2e77e94e1d2a8e1070bc0c38c8a3c \
-    --hash=sha256:7473e861101c9e72452f9bf8acb984947aa1661a7704553a9f6e4baa5ba64415 \
-    --hash=sha256:8102eaf27e1e448db915d08afa8b41d6c7ca7a04b7d73af6514df10a3e74bd82 \
-    --hash=sha256:87c450779d0914f2861b8526e035c5e6da0a3199d8f1add1a665e1cbc6fc6d02 \
-    --hash=sha256:8b7ee99e510d7b66cdb6c593f21c043c248537a32e0bedf02e01e9553a172314 \
-    --hash=sha256:91fc98adde3d7881af9b59ed0294046f3806221863722ba7d8d120c575314325 \
-    --hash=sha256:94411f22c3985acaec6f83c6df553f2dbe17b698cc7f8ae751ff2237d96b9e3c \
-    --hash=sha256:98d85c6a2bef81588d9227dde12db8a7f47f639f4a17c9ae08e773aa9c697bf3 \
-    --hash=sha256:9ad5db27f9cabae298d151c85cf2bad1d359a1b9c686a275df03385758e2f914 \
-    --hash=sha256:a0b71b1b8fbf2b96e41c4d990244165e2c9be83d54962a9a1d118fd8657d2045 \
-    --hash=sha256:a0f100c8912c114ff53e1202d0078b425bee3649ae34d7b070e9697f93c5d52d \
-    --hash=sha256:a591fe9e525846e4d154205572a029f653ada1a78b93697f3b5a8f1f2bc055b9 \
-    --hash=sha256:a5c84c68147988265e60416b57fc83425a78058853509c1b0629c180094904a5 \
-    --hash=sha256:a66d3508133af6e8548451b25058d5812812ec3798c886bf38ed24a98216fab2 \
-    --hash=sha256:a8c4917bd7ad33e8eb21e9a5bbba979b49d9a97acb3a803092cbc1133e20343c \
-    --hash=sha256:b3bbeb01c2b273cca1e1e0c5df57f12dce9a4dd331b4fa1635b8bec26350bde3 \
-    --hash=sha256:cba9d6b9a7d64d4bd46167096fc9d2f835e25d7e4c121fb2ddfc6528fb0413b2 \
-    --hash=sha256:cc4d65aeeaa04136a12677d3dd0b1c0c94dc43abac5860ab33cceb42b801c1e8 \
-    --hash=sha256:ce4bcc037df4fc5e3d184794f27bdaab018943698f4ca31630bc7f84a7b69c6d \
-    --hash=sha256:cec7d9412a9102bdc577382c3929b337320c4c4c4849f2c5cdd14d7368c5562d \
-    --hash=sha256:d400bfb9a37b1351253cb402671cea7e89bdecc294e8016a707f6d1d8ac934f9 \
-    --hash=sha256:d61f4695e6c866a23a21acab0509af1cdfd2c013cf256bbf5b6b5e2695827162 \
-    --hash=sha256:db0fbb9c62743ce59a9ff687eb5f4afbe77e5e8403d6697f7446e5f609976f76 \
-    --hash=sha256:dd86c085fae2efd48ac91dd7ccffcfc0571387fe1193d33b6394db7ef31fe2a4 \
-    --hash=sha256:e00b098126fd45523dd056d2efba6c5a63b71ffe9f2bbe1a4fe1716e1d0c331e \
-    --hash=sha256:e229a521186c75c8ad9490854fd8bbdd9a0c9aa3a524326b55be83b54d4e0ad9 \
-    --hash=sha256:e263d77ee3dd201c3a142934a086a4450861778baaeeb45db4591ef65550b0a6 \
-    --hash=sha256:ed9cb427ba5504c1dc15ede7d516b84757c3e3d7868ccc85121d9310d27eed0b \
-    --hash=sha256:fa6693661a4c91757f4412306191b6dc88c1703f780c8234035eac011922bc01 \
-    --hash=sha256:fcd131dd944808b5bdb38e6f5b53013c5aa4f334c5cad0c72742f6eba4b73db0
-    # via cryptography
-charset-normalizer==2.1.1 \
-    --hash=sha256:5a3d016c7c547f69d6f81fb0db9449ce888b418b5b9952cc5e6e66843e9dd845 \
-    --hash=sha256:83e9a75d1911279afd89352c68b45348559d1fc0506b054b346651b5e7fee29f
-    # via
-    #   -r requirements.in
-    #   requests
-click==8.0.4 \
-    --hash=sha256:6a7a62563bbfabfda3a38f3023a1db4a35978c0abd76f6c9605ecd6554d6d9b1 \
-    --hash=sha256:8458d7b1287c5fb128c90e23381cf99dcde74beaf6c7ff6384ce84d6fe090adb
-    # via
-    #   -r requirements.in
-    #   gcp-docuploader
-    #   gcp-releasetool
-colorlog==6.7.0 \
-    --hash=sha256:0d33ca236784a1ba3ff9c532d4964126d8a2c44f1f0cb1d2b0728196f512f662 \
-    --hash=sha256:bd94bd21c1e13fac7bd3153f4bc3a7dc0eb0974b8bc2fdf1a989e474f6e582e5
-    # via
-    #   gcp-docuploader
-    #   nox
-commonmark==0.9.1 \
-    --hash=sha256:452f9dc859be7f06631ddcb328b6919c67984aca654e5fefb3914d54691aed60 \
-    --hash=sha256:da2f38c92590f83de410ba1a3cbceafbc74fee9def35f9251ba9a971d6d66fd9
-    # via rich
-cryptography==41.0.4 \
-    --hash=sha256:004b6ccc95943f6a9ad3142cfabcc769d7ee38a3f60fb0dddbfb431f818c3a67 \
-    --hash=sha256:047c4603aeb4bbd8db2756e38f5b8bd7e94318c047cfe4efeb5d715e08b49311 \
-    --hash=sha256:0d9409894f495d465fe6fda92cb70e8323e9648af912d5b9141d616df40a87b8 \
-    --hash=sha256:23a25c09dfd0d9f28da2352503b23e086f8e78096b9fd585d1d14eca01613e13 \
-    --hash=sha256:2ed09183922d66c4ec5fdaa59b4d14e105c084dd0febd27452de8f6f74704143 \
-    --hash=sha256:35c00f637cd0b9d5b6c6bd11b6c3359194a8eba9c46d4e875a3660e3b400005f \
-    --hash=sha256:37480760ae08065437e6573d14be973112c9e6dcaf5f11d00147ee74f37a3829 \
-    --hash=sha256:3b224890962a2d7b57cf5eeb16ccaafba6083f7b811829f00476309bce2fe0fd \
-    --hash=sha256:5a0f09cefded00e648a127048119f77bc2b2ec61e736660b5789e638f43cc397 \
-    --hash=sha256:5b72205a360f3b6176485a333256b9bcd48700fc755fef51c8e7e67c4b63e3ac \
-    --hash=sha256:7e53db173370dea832190870e975a1e09c86a879b613948f09eb49324218c14d \
-    --hash=sha256:7febc3094125fc126a7f6fb1f420d0da639f3f32cb15c8ff0dc3997c4549f51a \
-    --hash=sha256:80907d3faa55dc5434a16579952ac6da800935cd98d14dbd62f6f042c7f5e839 \
-    --hash=sha256:86defa8d248c3fa029da68ce61fe735432b047e32179883bdb1e79ed9bb8195e \
-    --hash=sha256:8ac4f9ead4bbd0bc8ab2d318f97d85147167a488be0e08814a37eb2f439d5cf6 \
-    --hash=sha256:93530900d14c37a46ce3d6c9e6fd35dbe5f5601bf6b3a5c325c7bffc030344d9 \
-    --hash=sha256:9eeb77214afae972a00dee47382d2591abe77bdae166bda672fb1e24702a3860 \
-    --hash=sha256:b5f4dfe950ff0479f1f00eda09c18798d4f49b98f4e2006d644b3301682ebdca \
-    --hash=sha256:c3391bd8e6de35f6f1140e50aaeb3e2b3d6a9012536ca23ab0d9c35ec18c8a91 \
-    --hash=sha256:c880eba5175f4307129784eca96f4e70b88e57aa3f680aeba3bab0e980b0f37d \
-    --hash=sha256:cecfefa17042941f94ab54f769c8ce0fe14beff2694e9ac684176a2535bf9714 \
-    --hash=sha256:e40211b4923ba5a6dc9769eab704bdb3fbb58d56c5b336d30996c24fcf12aadb \
-    --hash=sha256:efc8ad4e6fc4f1752ebfb58aefece8b4e3c4cae940b0994d43649bdfce8d0d4f
-    # via
-    #   gcp-releasetool
-    #   secretstorage
-distlib==0.3.6 \
-    --hash=sha256:14bad2d9b04d3a36127ac97f30b12a19268f211063d8f8ee4f47108896e11b46 \
-    --hash=sha256:f35c4b692542ca110de7ef0bea44d73981caeb34ca0b9b6b2e6d7790dda8f80e
-    # via virtualenv
-docutils==0.19 \
-    --hash=sha256:33995a6753c30b7f577febfc2c50411fec6aac7f7ffeb7c4cfe5991072dcf9e6 \
-    --hash=sha256:5e1de4d849fee02c63b040a4a3fd567f4ab104defd8a5511fbbc24a8a017efbc
-    # via readme-renderer
-filelock==3.8.0 \
-    --hash=sha256:55447caa666f2198c5b6b13a26d2084d26fa5b115c00d065664b2124680c4edc \
-    --hash=sha256:617eb4e5eedc82fc5f47b6d61e4d11cb837c56cb4544e39081099fa17ad109d4
-    # via virtualenv
-gcp-docuploader==0.6.4 \
-    --hash=sha256:01486419e24633af78fd0167db74a2763974765ee8078ca6eb6964d0ebd388af \
-    --hash=sha256:70861190c123d907b3b067da896265ead2eeb9263969d6955c9e0bb091b5ccbf
-    # via -r requirements.in
-gcp-releasetool==1.10.5 \
-    --hash=sha256:174b7b102d704b254f2a26a3eda2c684fd3543320ec239baf771542a2e58e109 \
-    --hash=sha256:e29d29927fe2ca493105a82958c6873bb2b90d503acac56be2c229e74de0eec9
-    # via -r requirements.in
-google-api-core==2.10.2 \
-    --hash=sha256:10c06f7739fe57781f87523375e8e1a3a4674bf6392cd6131a3222182b971320 \
-    --hash=sha256:34f24bd1d5f72a8c4519773d99ca6bf080a6c4e041b4e9f024fe230191dda62e
-    # via
-    #   google-cloud-core
-    #   google-cloud-storage
-google-auth==2.14.1 \
-    --hash=sha256:ccaa901f31ad5cbb562615eb8b664b3dd0bf5404a67618e642307f00613eda4d \
-    --hash=sha256:f5d8701633bebc12e0deea4df8abd8aff31c28b355360597f7f2ee60f2e4d016
-    # via
-    #   gcp-releasetool
-    #   google-api-core
-    #   google-cloud-core
-    #   google-cloud-storage
-google-cloud-core==2.3.2 \
-    --hash=sha256:8417acf6466be2fa85123441696c4badda48db314c607cf1e5d543fa8bdc22fe \
-    --hash=sha256:b9529ee7047fd8d4bf4a2182de619154240df17fbe60ead399078c1ae152af9a
-    # via google-cloud-storage
-google-cloud-storage==2.6.0 \
-    --hash=sha256:104ca28ae61243b637f2f01455cc8a05e8f15a2a18ced96cb587241cdd3820f5 \
-    --hash=sha256:4ad0415ff61abdd8bb2ae81c1f8f7ec7d91a1011613f2db87c614c550f97bfe9
-    # via gcp-docuploader
-google-crc32c==1.5.0 \
-    --hash=sha256:024894d9d3cfbc5943f8f230e23950cd4906b2fe004c72e29b209420a1e6b05a \
-    --hash=sha256:02c65b9817512edc6a4ae7c7e987fea799d2e0ee40c53ec573a692bee24de876 \
-    --hash=sha256:02ebb8bf46c13e36998aeaad1de9b48f4caf545e91d14041270d9dca767b780c \
-    --hash=sha256:07eb3c611ce363c51a933bf6bd7f8e3878a51d124acfc89452a75120bc436289 \
-    --hash=sha256:1034d91442ead5a95b5aaef90dbfaca8633b0247d1e41621d1e9f9db88c36298 \
-    --hash=sha256:116a7c3c616dd14a3de8c64a965828b197e5f2d121fedd2f8c5585c547e87b02 \
-    --hash=sha256:19e0a019d2c4dcc5e598cd4a4bc7b008546b0358bd322537c74ad47a5386884f \
-    --hash=sha256:1c7abdac90433b09bad6c43a43af253e688c9cfc1c86d332aed13f9a7c7f65e2 \
-    --hash=sha256:1e986b206dae4476f41bcec1faa057851f3889503a70e1bdb2378d406223994a \
-    --hash=sha256:272d3892a1e1a2dbc39cc5cde96834c236d5327e2122d3aaa19f6614531bb6eb \
-    --hash=sha256:278d2ed7c16cfc075c91378c4f47924c0625f5fc84b2d50d921b18b7975bd210 \
-    --hash=sha256:2ad40e31093a4af319dadf503b2467ccdc8f67c72e4bcba97f8c10cb078207b5 \
-    --hash=sha256:2e920d506ec85eb4ba50cd4228c2bec05642894d4c73c59b3a2fe20346bd00ee \
-    --hash=sha256:3359fc442a743e870f4588fcf5dcbc1bf929df1fad8fb9905cd94e5edb02e84c \
-    --hash=sha256:37933ec6e693e51a5b07505bd05de57eee12f3e8c32b07da7e73669398e6630a \
-    --hash=sha256:398af5e3ba9cf768787eef45c803ff9614cc3e22a5b2f7d7ae116df8b11e3314 \
-    --hash=sha256:3b747a674c20a67343cb61d43fdd9207ce5da6a99f629c6e2541aa0e89215bcd \
-    --hash=sha256:461665ff58895f508e2866824a47bdee72497b091c730071f2b7575d5762ab65 \
-    --hash=sha256:4c6fdd4fccbec90cc8a01fc00773fcd5fa28db683c116ee3cb35cd5da9ef6c37 \
-    --hash=sha256:5829b792bf5822fd0a6f6eb34c5f81dd074f01d570ed7f36aa101d6fc7a0a6e4 \
-    --hash=sha256:596d1f98fc70232fcb6590c439f43b350cb762fb5d61ce7b0e9db4539654cc13 \
-    --hash=sha256:5ae44e10a8e3407dbe138984f21e536583f2bba1be9491239f942c2464ac0894 \
-    --hash=sha256:635f5d4dd18758a1fbd1049a8e8d2fee4ffed124462d837d1a02a0e009c3ab31 \
-    --hash=sha256:64e52e2b3970bd891309c113b54cf0e4384762c934d5ae56e283f9a0afcd953e \
-    --hash=sha256:66741ef4ee08ea0b2cc3c86916ab66b6aef03768525627fd6a1b34968b4e3709 \
-    --hash=sha256:67b741654b851abafb7bc625b6d1cdd520a379074e64b6a128e3b688c3c04740 \
-    --hash=sha256:6ac08d24c1f16bd2bf5eca8eaf8304812f44af5cfe5062006ec676e7e1d50afc \
-    --hash=sha256:6f998db4e71b645350b9ac28a2167e6632c239963ca9da411523bb439c5c514d \
-    --hash=sha256:72218785ce41b9cfd2fc1d6a017dc1ff7acfc4c17d01053265c41a2c0cc39b8c \
-    --hash=sha256:74dea7751d98034887dbd821b7aae3e1d36eda111d6ca36c206c44478035709c \
-    --hash=sha256:759ce4851a4bb15ecabae28f4d2e18983c244eddd767f560165563bf9aefbc8d \
-    --hash=sha256:77e2fd3057c9d78e225fa0a2160f96b64a824de17840351b26825b0848022906 \
-    --hash=sha256:7c074fece789b5034b9b1404a1f8208fc2d4c6ce9decdd16e8220c5a793e6f61 \
-    --hash=sha256:7c42c70cd1d362284289c6273adda4c6af8039a8ae12dc451dcd61cdabb8ab57 \
-    --hash=sha256:7f57f14606cd1dd0f0de396e1e53824c371e9544a822648cd76c034d209b559c \
-    --hash=sha256:83c681c526a3439b5cf94f7420471705bbf96262f49a6fe546a6db5f687a3d4a \
-    --hash=sha256:8485b340a6a9e76c62a7dce3c98e5f102c9219f4cfbf896a00cf48caf078d438 \
-    --hash=sha256:84e6e8cd997930fc66d5bb4fde61e2b62ba19d62b7abd7a69920406f9ecca946 \
-    --hash=sha256:89284716bc6a5a415d4eaa11b1726d2d60a0cd12aadf5439828353662ede9dd7 \
-    --hash=sha256:8b87e1a59c38f275c0e3676fc2ab6d59eccecfd460be267ac360cc31f7bcde96 \
-    --hash=sha256:8f24ed114432de109aa9fd317278518a5af2d31ac2ea6b952b2f7782b43da091 \
-    --hash=sha256:98cb4d057f285bd80d8778ebc4fde6b4d509ac3f331758fb1528b733215443ae \
-    --hash=sha256:998679bf62b7fb599d2878aa3ed06b9ce688b8974893e7223c60db155f26bd8d \
-    --hash=sha256:9ba053c5f50430a3fcfd36f75aff9caeba0440b2d076afdb79a318d6ca245f88 \
-    --hash=sha256:9c99616c853bb585301df6de07ca2cadad344fd1ada6d62bb30aec05219c45d2 \
-    --hash=sha256:a1fd716e7a01f8e717490fbe2e431d2905ab8aa598b9b12f8d10abebb36b04dd \
-    --hash=sha256:a2355cba1f4ad8b6988a4ca3feed5bff33f6af2d7f134852cf279c2aebfde541 \
-    --hash=sha256:b1f8133c9a275df5613a451e73f36c2aea4fe13c5c8997e22cf355ebd7bd0728 \
-    --hash=sha256:b8667b48e7a7ef66afba2c81e1094ef526388d35b873966d8a9a447974ed9178 \
-    --hash=sha256:ba1eb1843304b1e5537e1fca632fa894d6f6deca8d6389636ee5b4797affb968 \
-    --hash=sha256:be82c3c8cfb15b30f36768797a640e800513793d6ae1724aaaafe5bf86f8f346 \
-    --hash=sha256:c02ec1c5856179f171e032a31d6f8bf84e5a75c45c33b2e20a3de353b266ebd8 \
-    --hash=sha256:c672d99a345849301784604bfeaeba4db0c7aae50b95be04dd651fd2a7310b93 \
-    --hash=sha256:c6c777a480337ac14f38564ac88ae82d4cd238bf293f0a22295b66eb89ffced7 \
-    --hash=sha256:cae0274952c079886567f3f4f685bcaf5708f0a23a5f5216fdab71f81a6c0273 \
-    --hash=sha256:cd67cf24a553339d5062eff51013780a00d6f97a39ca062781d06b3a73b15462 \
-    --hash=sha256:d3515f198eaa2f0ed49f8819d5732d70698c3fa37384146079b3799b97667a94 \
-    --hash=sha256:d5280312b9af0976231f9e317c20e4a61cd2f9629b7bfea6a693d1878a264ebd \
-    --hash=sha256:de06adc872bcd8c2a4e0dc51250e9e65ef2ca91be023b9d13ebd67c2ba552e1e \
-    --hash=sha256:e1674e4307fa3024fc897ca774e9c7562c957af85df55efe2988ed9056dc4e57 \
-    --hash=sha256:e2096eddb4e7c7bdae4bd69ad364e55e07b8316653234a56552d9c988bd2d61b \
-    --hash=sha256:e560628513ed34759456a416bf86b54b2476c59144a9138165c9a1575801d0d9 \
-    --hash=sha256:edfedb64740750e1a3b16152620220f51d58ff1b4abceb339ca92e934775c27a \
-    --hash=sha256:f13cae8cc389a440def0c8c52057f37359014ccbc9dc1f0827936bcd367c6100 \
-    --hash=sha256:f314013e7dcd5cf45ab1945d92e713eec788166262ae8deb2cfacd53def27325 \
-    --hash=sha256:f583edb943cf2e09c60441b910d6a20b4d9d626c75a36c8fcac01a6c96c01183 \
-    --hash=sha256:fd8536e902db7e365f49e7d9029283403974ccf29b13fc7028b97e2295b33556 \
-    --hash=sha256:fe70e325aa68fa4b5edf7d1a4b6f691eb04bbccac0ace68e34820d283b5f80d4
-    # via google-resumable-media
-google-resumable-media==2.4.0 \
-    --hash=sha256:2aa004c16d295c8f6c33b2b4788ba59d366677c0a25ae7382436cb30f776deaa \
-    --hash=sha256:8d5518502f92b9ecc84ac46779bd4f09694ecb3ba38a3e7ca737a86d15cbca1f
-    # via google-cloud-storage
-googleapis-common-protos==1.57.0 \
-    --hash=sha256:27a849d6205838fb6cc3c1c21cb9800707a661bb21c6ce7fb13e99eb1f8a0c46 \
-    --hash=sha256:a9f4a1d7f6d9809657b7f1316a1aa527f6664891531bcfcc13b6696e685f443c
-    # via google-api-core
-idna==3.4 \
-    --hash=sha256:814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4 \
-    --hash=sha256:90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2
-    # via requests
-importlib-metadata==5.0.0 \
-    --hash=sha256:da31db32b304314d044d3c12c79bd59e307889b287ad12ff387b3500835fc2ab \
-    --hash=sha256:ddb0e35065e8938f867ed4928d0ae5bf2a53b7773871bfe6bcc7e4fcdc7dea43
-    # via
-    #   -r requirements.in
-    #   keyring
-    #   twine
-jaraco-classes==3.2.3 \
-    --hash=sha256:2353de3288bc6b82120752201c6b1c1a14b058267fa424ed5ce5984e3b922158 \
-    --hash=sha256:89559fa5c1d3c34eff6f631ad80bb21f378dbcbb35dd161fd2c6b93f5be2f98a
-    # via keyring
-jeepney==0.8.0 \
-    --hash=sha256:5efe48d255973902f6badc3ce55e2aa6c5c3b3bc642059ef3a91247bcfcc5806 \
-    --hash=sha256:c0a454ad016ca575060802ee4d590dd912e35c122fa04e70306de3d076cce755
-    # via
-    #   keyring
-    #   secretstorage
-jinja2==3.1.2 \
-    --hash=sha256:31351a702a408a9e7595a8fc6150fc3f43bb6bf7e319770cbc0db9df9437e852 \
-    --hash=sha256:6088930bfe239f0e6710546ab9c19c9ef35e29792895fed6e6e31a023a182a61
-    # via gcp-releasetool
-keyring==23.11.0 \
-    --hash=sha256:3dd30011d555f1345dec2c262f0153f2f0ca6bca041fb1dc4588349bb4c0ac1e \
-    --hash=sha256:ad192263e2cdd5f12875dedc2da13534359a7e760e77f8d04b50968a821c2361
-    # via
-    #   gcp-releasetool
-    #   twine
-markupsafe==2.1.1 \
-    --hash=sha256:0212a68688482dc52b2d45013df70d169f542b7394fc744c02a57374a4207003 \
-    --hash=sha256:089cf3dbf0cd6c100f02945abeb18484bd1ee57a079aefd52cffd17fba910b88 \
-    --hash=sha256:10c1bfff05d95783da83491be968e8fe789263689c02724e0c691933c52994f5 \
-    --hash=sha256:33b74d289bd2f5e527beadcaa3f401e0df0a89927c1559c8566c066fa4248ab7 \
-    --hash=sha256:3799351e2336dc91ea70b034983ee71cf2f9533cdff7c14c90ea126bfd95d65a \
-    --hash=sha256:3ce11ee3f23f79dbd06fb3d63e2f6af7b12db1d46932fe7bd8afa259a5996603 \
-    --hash=sha256:421be9fbf0ffe9ffd7a378aafebbf6f4602d564d34be190fc19a193232fd12b1 \
-    --hash=sha256:43093fb83d8343aac0b1baa75516da6092f58f41200907ef92448ecab8825135 \
-    --hash=sha256:46d00d6cfecdde84d40e572d63735ef81423ad31184100411e6e3388d405e247 \
-    --hash=sha256:4a33dea2b688b3190ee12bd7cfa29d39c9ed176bda40bfa11099a3ce5d3a7ac6 \
-    --hash=sha256:4b9fe39a2ccc108a4accc2676e77da025ce383c108593d65cc909add5c3bd601 \
-    --hash=sha256:56442863ed2b06d19c37f94d999035e15ee982988920e12a5b4ba29b62ad1f77 \
-    --hash=sha256:671cd1187ed5e62818414afe79ed29da836dde67166a9fac6d435873c44fdd02 \
-    --hash=sha256:694deca8d702d5db21ec83983ce0bb4b26a578e71fbdbd4fdcd387daa90e4d5e \
-    --hash=sha256:6a074d34ee7a5ce3effbc526b7083ec9731bb3cbf921bbe1d3005d4d2bdb3a63 \
-    --hash=sha256:6d0072fea50feec76a4c418096652f2c3238eaa014b2f94aeb1d56a66b41403f \
-    --hash=sha256:6fbf47b5d3728c6aea2abb0589b5d30459e369baa772e0f37a0320185e87c980 \
-    --hash=sha256:7f91197cc9e48f989d12e4e6fbc46495c446636dfc81b9ccf50bb0ec74b91d4b \
-    --hash=sha256:86b1f75c4e7c2ac2ccdaec2b9022845dbb81880ca318bb7a0a01fbf7813e3812 \
-    --hash=sha256:8dc1c72a69aa7e082593c4a203dcf94ddb74bb5c8a731e4e1eb68d031e8498ff \
-    --hash=sha256:8e3dcf21f367459434c18e71b2a9532d96547aef8a871872a5bd69a715c15f96 \
-    --hash=sha256:8e576a51ad59e4bfaac456023a78f6b5e6e7651dcd383bcc3e18d06f9b55d6d1 \
-    --hash=sha256:96e37a3dc86e80bf81758c152fe66dbf60ed5eca3d26305edf01892257049925 \
-    --hash=sha256:97a68e6ada378df82bc9f16b800ab77cbf4b2fada0081794318520138c088e4a \
-    --hash=sha256:99a2a507ed3ac881b975a2976d59f38c19386d128e7a9a18b7df6fff1fd4c1d6 \
-    --hash=sha256:a49907dd8420c5685cfa064a1335b6754b74541bbb3706c259c02ed65b644b3e \
-    --hash=sha256:b09bf97215625a311f669476f44b8b318b075847b49316d3e28c08e41a7a573f \
-    --hash=sha256:b7bd98b796e2b6553da7225aeb61f447f80a1ca64f41d83612e6139ca5213aa4 \
-    --hash=sha256:b87db4360013327109564f0e591bd2a3b318547bcef31b468a92ee504d07ae4f \
-    --hash=sha256:bcb3ed405ed3222f9904899563d6fc492ff75cce56cba05e32eff40e6acbeaa3 \
-    --hash=sha256:d4306c36ca495956b6d568d276ac11fdd9c30a36f1b6eb928070dc5360b22e1c \
-    --hash=sha256:d5ee4f386140395a2c818d149221149c54849dfcfcb9f1debfe07a8b8bd63f9a \
-    --hash=sha256:dda30ba7e87fbbb7eab1ec9f58678558fd9a6b8b853530e176eabd064da81417 \
-    --hash=sha256:e04e26803c9c3851c931eac40c695602c6295b8d432cbe78609649ad9bd2da8a \
-    --hash=sha256:e1c0b87e09fa55a220f058d1d49d3fb8df88fbfab58558f1198e08c1e1de842a \
-    --hash=sha256:e72591e9ecd94d7feb70c1cbd7be7b3ebea3f548870aa91e2732960fa4d57a37 \
-    --hash=sha256:e8c843bbcda3a2f1e3c2ab25913c80a3c5376cd00c6e8c4a86a89a28c8dc5452 \
-    --hash=sha256:efc1913fd2ca4f334418481c7e595c00aad186563bbc1ec76067848c7ca0a933 \
-    --hash=sha256:f121a1420d4e173a5d96e47e9a0c0dcff965afdf1626d28de1460815f7c4ee7a \
-    --hash=sha256:fc7b548b17d238737688817ab67deebb30e8073c95749d55538ed473130ec0c7
-    # via jinja2
-more-itertools==9.0.0 \
-    --hash=sha256:250e83d7e81d0c87ca6bd942e6aeab8cc9daa6096d12c5308f3f92fa5e5c1f41 \
-    --hash=sha256:5a6257e40878ef0520b1803990e3e22303a41b5714006c32a3fd8304b26ea1ab
-    # via jaraco-classes
-nox==2022.11.21 \
-    --hash=sha256:0e41a990e290e274cb205a976c4c97ee3c5234441a8132c8c3fd9ea3c22149eb \
-    --hash=sha256:e21c31de0711d1274ca585a2c5fde36b1aa962005ba8e9322bf5eeed16dcd684
-    # via -r requirements.in
-packaging==21.3 \
-    --hash=sha256:dd47c42927d89ab911e606518907cc2d3a1f38bbd026385970643f9c5b8ecfeb \
-    --hash=sha256:ef103e05f519cdc783ae24ea4e2e0f508a9c99b2d4969652eed6a2e1ea5bd522
-    # via
-    #   gcp-releasetool
-    #   nox
-pkginfo==1.8.3 \
-    --hash=sha256:848865108ec99d4901b2f7e84058b6e7660aae8ae10164e015a6dcf5b242a594 \
-    --hash=sha256:a84da4318dd86f870a9447a8c98340aa06216bfc6f2b7bdc4b8766984ae1867c
-    # via twine
-platformdirs==2.5.4 \
-    --hash=sha256:1006647646d80f16130f052404c6b901e80ee4ed6bef6792e1f238a8969106f7 \
-    --hash=sha256:af0276409f9a02373d540bf8480021a048711d572745aef4b7842dad245eba10
-    # via virtualenv
-protobuf==3.20.3 \
-    --hash=sha256:03038ac1cfbc41aa21f6afcbcd357281d7521b4157926f30ebecc8d4ea59dcb7 \
-    --hash=sha256:28545383d61f55b57cf4df63eebd9827754fd2dc25f80c5253f9184235db242c \
-    --hash=sha256:2e3427429c9cffebf259491be0af70189607f365c2f41c7c3764af6f337105f2 \
-    --hash=sha256:398a9e0c3eaceb34ec1aee71894ca3299605fa8e761544934378bbc6c97de23b \
-    --hash=sha256:44246bab5dd4b7fbd3c0c80b6f16686808fab0e4aca819ade6e8d294a29c7050 \
-    --hash=sha256:447d43819997825d4e71bf5769d869b968ce96848b6479397e29fc24c4a5dfe9 \
-    --hash=sha256:67a3598f0a2dcbc58d02dd1928544e7d88f764b47d4a286202913f0b2801c2e7 \
-    --hash=sha256:74480f79a023f90dc6e18febbf7b8bac7508420f2006fabd512013c0c238f454 \
-    --hash=sha256:819559cafa1a373b7096a482b504ae8a857c89593cf3a25af743ac9ecbd23480 \
-    --hash=sha256:899dc660cd599d7352d6f10d83c95df430a38b410c1b66b407a6b29265d66469 \
-    --hash=sha256:8c0c984a1b8fef4086329ff8dd19ac77576b384079247c770f29cc8ce3afa06c \
-    --hash=sha256:9aae4406ea63d825636cc11ffb34ad3379335803216ee3a856787bcf5ccc751e \
-    --hash=sha256:a7ca6d488aa8ff7f329d4c545b2dbad8ac31464f1d8b1c87ad1346717731e4db \
-    --hash=sha256:b6cc7ba72a8850621bfec987cb72623e703b7fe2b9127a161ce61e61558ad905 \
-    --hash=sha256:bf01b5720be110540be4286e791db73f84a2b721072a3711efff6c324cdf074b \
-    --hash=sha256:c02ce36ec760252242a33967d51c289fd0e1c0e6e5cc9397e2279177716add86 \
-    --hash=sha256:d9e4432ff660d67d775c66ac42a67cf2453c27cb4d738fc22cb53b5d84c135d4 \
-    --hash=sha256:daa564862dd0d39c00f8086f88700fdbe8bc717e993a21e90711acfed02f2402 \
-    --hash=sha256:de78575669dddf6099a8a0f46a27e82a1783c557ccc38ee620ed8cc96d3be7d7 \
-    --hash=sha256:e64857f395505ebf3d2569935506ae0dfc4a15cb80dc25261176c784662cdcc4 \
-    --hash=sha256:f4bd856d702e5b0d96a00ec6b307b0f51c1982c2bf9c0052cf9019e9a544ba99 \
-    --hash=sha256:f4c42102bc82a51108e449cbb32b19b180022941c727bac0cfd50170341f16ee
-    # via
-    #   gcp-docuploader
-    #   gcp-releasetool
-    #   google-api-core
-    #   googleapis-common-protos
-pyasn1==0.4.8 \
-    --hash=sha256:39c7e2ec30515947ff4e87fb6f456dfc6e84857d34be479c9d4a4ba4bf46aa5d \
-    --hash=sha256:aef77c9fb94a3ac588e87841208bdec464471d9871bd5050a287cc9a475cd0ba
-    # via
-    #   pyasn1-modules
-    #   rsa
-pyasn1-modules==0.2.8 \
-    --hash=sha256:905f84c712230b2c592c19470d3ca8d552de726050d1d1716282a1f6146be65e \
-    --hash=sha256:a50b808ffeb97cb3601dd25981f6b016cbb3d31fbf57a8b8a87428e6158d0c74
-    # via google-auth
-pycparser==2.21 \
-    --hash=sha256:8ee45429555515e1f6b185e78100aea234072576aa43ab53aefcae078162fca9 \
-    --hash=sha256:e644fdec12f7872f86c58ff790da456218b10f863970249516d60a5eaca77206
-    # via cffi
-pygments==2.15.0 \
-    --hash=sha256:77a3299119af881904cd5ecd1ac6a66214b6e9bed1f2db16993b54adede64094 \
-    --hash=sha256:f7e36cffc4c517fbc252861b9a6e4644ca0e5abadf9a113c72d1358ad09b9500
-    # via
-    #   readme-renderer
-    #   rich
-pyjwt==2.6.0 \
-    --hash=sha256:69285c7e31fc44f68a1feb309e948e0df53259d579295e6cfe2b1792329f05fd \
-    --hash=sha256:d83c3d892a77bbb74d3e1a2cfa90afaadb60945205d1095d9221f04466f64c14
-    # via gcp-releasetool
-pyparsing==3.0.9 \
-    --hash=sha256:2b020ecf7d21b687f219b71ecad3631f644a47f01403fa1d1036b0c6416d70fb \
-    --hash=sha256:5026bae9a10eeaefb61dab2f09052b9f4307d44aee4eda64b309723d8d206bbc
-    # via packaging
-pyperclip==1.8.2 \
-    --hash=sha256:105254a8b04934f0bc84e9c24eb360a591aaf6535c9def5f29d92af107a9bf57
-    # via gcp-releasetool
-python-dateutil==2.8.2 \
-    --hash=sha256:0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86 \
-    --hash=sha256:961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9
-    # via gcp-releasetool
-readme-renderer==37.3 \
-    --hash=sha256:cd653186dfc73055656f090f227f5cb22a046d7f71a841dfa305f55c9a513273 \
-    --hash=sha256:f67a16caedfa71eef48a31b39708637a6f4664c4394801a7b0d6432d13907343
-    # via twine
-requests==2.31.0 \
-    --hash=sha256:58cd2187c01e70e6e26505bca751777aa9f2ee0b7f4300988b709f44e013003f \
-    --hash=sha256:942c5a758f98d790eaed1a29cb6eefc7ffb0d1cf7af05c3d2791656dbd6ad1e1
-    # via
-    #   gcp-releasetool
-    #   google-api-core
-    #   google-cloud-storage
-    #   requests-toolbelt
-    #   twine
-requests-toolbelt==0.10.1 \
-    --hash=sha256:18565aa58116d9951ac39baa288d3adb5b3ff975c4f25eee78555d89e8f247f7 \
-    --hash=sha256:62e09f7ff5ccbda92772a29f394a49c3ad6cb181d568b1337626b2abb628a63d
-    # via twine
-rfc3986==2.0.0 \
-    --hash=sha256:50b1502b60e289cb37883f3dfd34532b8873c7de9f49bb546641ce9cbd256ebd \
-    --hash=sha256:97aacf9dbd4bfd829baad6e6309fa6573aaf1be3f6fa735c8ab05e46cecb261c
-    # via twine
-rich==12.6.0 \
-    --hash=sha256:a4eb26484f2c82589bd9a17c73d32a010b1e29d89f1604cd9bf3a2097b81bb5e \
-    --hash=sha256:ba3a3775974105c221d31141f2c116f4fd65c5ceb0698657a11e9f295ec93fd0
-    # via twine
-rsa==4.9 \
-    --hash=sha256:90260d9058e514786967344d0ef75fa8727eed8a7d2e43ce9f4bcf1b536174f7 \
-    --hash=sha256:e38464a49c6c85d7f1351b0126661487a7e0a14a50f1675ec50eb34d4f20ef21
-    # via google-auth
-secretstorage==3.3.3 \
-    --hash=sha256:2403533ef369eca6d2ba81718576c5e0f564d5cca1b58f73a8b23e7d4eeebd77 \
-    --hash=sha256:f356e6628222568e3af06f2eba8df495efa13b3b63081dafd4f7d9a7b7bc9f99
-    # via keyring
-six==1.16.0 \
-    --hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
-    --hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254
-    # via
-    #   bleach
-    #   gcp-docuploader
-    #   google-auth
-    #   python-dateutil
-twine==4.0.1 \
-    --hash=sha256:42026c18e394eac3e06693ee52010baa5313e4811d5a11050e7d48436cf41b9e \
-    --hash=sha256:96b1cf12f7ae611a4a40b6ae8e9570215daff0611828f5fe1f37a16255ab24a0
-    # via -r requirements.in
-typing-extensions==4.4.0 \
-    --hash=sha256:1511434bb92bf8dd198c12b1cc812e800d4181cfcb867674e0f8279cc93087aa \
-    --hash=sha256:16fa4864408f655d35ec496218b85f79b3437c829e93320c7c9215ccfd92489e
-    # via -r requirements.in
-urllib3==1.26.18 \
-    --hash=sha256:34b97092d7e0a3a8cf7cd10e386f401b3737364026c45e622aa02903dffe0f07 \
-    --hash=sha256:f8ecc1bba5667413457c529ab955bf8c67b45db799d159066261719e328580a0
-    # via
-    #   requests
-    #   twine
-virtualenv==20.16.7 \
-    --hash=sha256:8691e3ff9387f743e00f6bb20f70121f5e4f596cae754531f2b3b3a1b1ac696e \
-    --hash=sha256:efd66b00386fdb7dbe4822d172303f40cd05e50e01740b19ea42425cbe653e29
-    # via nox
-webencodings==0.5.1 \
-    --hash=sha256:a0af1213f3c2226497a97e2b3aa01a7e4bee4f403f95be16fc9acd2947514a78 \
-    --hash=sha256:b36a1c245f2d304965eb4e0a82848379241dc04b865afcc4aab16748587e1923
-    # via bleach
-wheel==0.38.4 \
-    --hash=sha256:965f5259b566725405b05e7cf774052044b1ed30119b5d586b2703aafe8719ac \
-    --hash=sha256:b60533f3f5d530e971d6737ca6d58681ee434818fab630c83a734bb10c083ce8
-    # via -r requirements.in
-zipp==3.10.0 \
-    --hash=sha256:4fcb6f278987a6605757302a6e40e896257570d11c51628968ccb2a47e80c6c1 \
-    --hash=sha256:7a7262fd930bd3e36c50b9a64897aec3fafff3dfdeec9623ae22b40e93f99bb8
-    # via importlib-metadata
-
-# The following packages are considered to be unsafe in a requirements file:
-setuptools==65.5.1 \
-    --hash=sha256:d0b9a8433464d5800cbe05094acf5c6d52a91bfac9b52bcfc4d41382be5d5d31 \
-    --hash=sha256:e197a19aa8ec9722928f2206f8de752def0e4c9fc6953527360d1c36d94ddb2f
-    # via -r requirements.in
diff --git a/.kokoro/samples/lint/common.cfg b/.kokoro/samples/lint/common.cfg
deleted file mode 100644
index 772f108a..00000000
--- a/.kokoro/samples/lint/common.cfg
+++ /dev/null
@@ -1,34 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Specify which tests to run
-env_vars: {
-    key: "RUN_TESTS_SESSION"
-    value: "lint"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples.sh"
-}
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-samples-testing-docker"
-}
-
-# Download secrets for samples
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/python-docs-samples"
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline_v2.sh"
\ No newline at end of file
diff --git a/.kokoro/samples/lint/continuous.cfg b/.kokoro/samples/lint/continuous.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/lint/continuous.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/lint/periodic.cfg b/.kokoro/samples/lint/periodic.cfg
deleted file mode 100644
index 50fec964..00000000
--- a/.kokoro/samples/lint/periodic.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "False"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/lint/presubmit.cfg b/.kokoro/samples/lint/presubmit.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/lint/presubmit.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.10/common.cfg b/.kokoro/samples/python3.10/common.cfg
deleted file mode 100644
index 0909848a..00000000
--- a/.kokoro/samples/python3.10/common.cfg
+++ /dev/null
@@ -1,40 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Specify which tests to run
-env_vars: {
-    key: "RUN_TESTS_SESSION"
-    value: "py-3.10"
-}
-
-# Declare build specific Cloud project.
-env_vars: {
-    key: "BUILD_SPECIFIC_GCLOUD_PROJECT"
-    value: "python-docs-samples-tests-310"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples.sh"
-}
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-samples-testing-docker"
-}
-
-# Download secrets for samples
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/python-docs-samples"
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline_v2.sh"
\ No newline at end of file
diff --git a/.kokoro/samples/python3.10/continuous.cfg b/.kokoro/samples/python3.10/continuous.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.10/continuous.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.10/periodic-head.cfg b/.kokoro/samples/python3.10/periodic-head.cfg
deleted file mode 100644
index 336f0f9a..00000000
--- a/.kokoro/samples/python3.10/periodic-head.cfg
+++ /dev/null
@@ -1,11 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples-against-head.sh"
-}
diff --git a/.kokoro/samples/python3.10/periodic.cfg b/.kokoro/samples/python3.10/periodic.cfg
deleted file mode 100644
index 71cd1e59..00000000
--- a/.kokoro/samples/python3.10/periodic.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "False"
-}
diff --git a/.kokoro/samples/python3.10/presubmit.cfg b/.kokoro/samples/python3.10/presubmit.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.10/presubmit.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.11/common.cfg b/.kokoro/samples/python3.11/common.cfg
deleted file mode 100644
index b77d4919..00000000
--- a/.kokoro/samples/python3.11/common.cfg
+++ /dev/null
@@ -1,40 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Specify which tests to run
-env_vars: {
-    key: "RUN_TESTS_SESSION"
-    value: "py-3.11"
-}
-
-# Declare build specific Cloud project.
-env_vars: {
-    key: "BUILD_SPECIFIC_GCLOUD_PROJECT"
-    value: "python-docs-samples-tests-311"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples.sh"
-}
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-samples-testing-docker"
-}
-
-# Download secrets for samples
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/python-docs-samples"
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline_v2.sh"
\ No newline at end of file
diff --git a/.kokoro/samples/python3.11/continuous.cfg b/.kokoro/samples/python3.11/continuous.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.11/continuous.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.11/periodic-head.cfg b/.kokoro/samples/python3.11/periodic-head.cfg
deleted file mode 100644
index 336f0f9a..00000000
--- a/.kokoro/samples/python3.11/periodic-head.cfg
+++ /dev/null
@@ -1,11 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples-against-head.sh"
-}
diff --git a/.kokoro/samples/python3.11/periodic.cfg b/.kokoro/samples/python3.11/periodic.cfg
deleted file mode 100644
index 71cd1e59..00000000
--- a/.kokoro/samples/python3.11/periodic.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "False"
-}
diff --git a/.kokoro/samples/python3.11/presubmit.cfg b/.kokoro/samples/python3.11/presubmit.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.11/presubmit.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.7/common.cfg b/.kokoro/samples/python3.7/common.cfg
deleted file mode 100644
index 23fc608f..00000000
--- a/.kokoro/samples/python3.7/common.cfg
+++ /dev/null
@@ -1,40 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Specify which tests to run
-env_vars: {
-    key: "RUN_TESTS_SESSION"
-    value: "py-3.7"
-}
-
-# Declare build specific Cloud project.
-env_vars: {
-    key: "BUILD_SPECIFIC_GCLOUD_PROJECT"
-    value: "python-docs-samples-tests-py37"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples.sh"
-}
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-samples-testing-docker"
-}
-
-# Download secrets for samples
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/python-docs-samples"
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline_v2.sh"
\ No newline at end of file
diff --git a/.kokoro/samples/python3.7/continuous.cfg b/.kokoro/samples/python3.7/continuous.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.7/continuous.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.7/periodic-head.cfg b/.kokoro/samples/python3.7/periodic-head.cfg
deleted file mode 100644
index 336f0f9a..00000000
--- a/.kokoro/samples/python3.7/periodic-head.cfg
+++ /dev/null
@@ -1,11 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples-against-head.sh"
-}
diff --git a/.kokoro/samples/python3.7/periodic.cfg b/.kokoro/samples/python3.7/periodic.cfg
deleted file mode 100644
index 71cd1e59..00000000
--- a/.kokoro/samples/python3.7/periodic.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "False"
-}
diff --git a/.kokoro/samples/python3.7/presubmit.cfg b/.kokoro/samples/python3.7/presubmit.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.7/presubmit.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.8/common.cfg b/.kokoro/samples/python3.8/common.cfg
deleted file mode 100644
index a55f11c0..00000000
--- a/.kokoro/samples/python3.8/common.cfg
+++ /dev/null
@@ -1,40 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Specify which tests to run
-env_vars: {
-    key: "RUN_TESTS_SESSION"
-    value: "py-3.8"
-}
-
-# Declare build specific Cloud project.
-env_vars: {
-    key: "BUILD_SPECIFIC_GCLOUD_PROJECT"
-    value: "python-docs-samples-tests-py38"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples.sh"
-}
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-samples-testing-docker"
-}
-
-# Download secrets for samples
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/python-docs-samples"
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline_v2.sh"
\ No newline at end of file
diff --git a/.kokoro/samples/python3.8/continuous.cfg b/.kokoro/samples/python3.8/continuous.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.8/continuous.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.8/periodic-head.cfg b/.kokoro/samples/python3.8/periodic-head.cfg
deleted file mode 100644
index 336f0f9a..00000000
--- a/.kokoro/samples/python3.8/periodic-head.cfg
+++ /dev/null
@@ -1,11 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples-against-head.sh"
-}
diff --git a/.kokoro/samples/python3.8/periodic.cfg b/.kokoro/samples/python3.8/periodic.cfg
deleted file mode 100644
index 71cd1e59..00000000
--- a/.kokoro/samples/python3.8/periodic.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "False"
-}
diff --git a/.kokoro/samples/python3.8/presubmit.cfg b/.kokoro/samples/python3.8/presubmit.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.8/presubmit.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.9/common.cfg b/.kokoro/samples/python3.9/common.cfg
deleted file mode 100644
index 422f848a..00000000
--- a/.kokoro/samples/python3.9/common.cfg
+++ /dev/null
@@ -1,40 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-# Build logs will be here
-action {
-  define_artifacts {
-    regex: "**/*sponge_log.xml"
-  }
-}
-
-# Specify which tests to run
-env_vars: {
-    key: "RUN_TESTS_SESSION"
-    value: "py-3.9"
-}
-
-# Declare build specific Cloud project.
-env_vars: {
-    key: "BUILD_SPECIFIC_GCLOUD_PROJECT"
-    value: "python-docs-samples-tests-py39"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples.sh"
-}
-
-# Configure the docker image for kokoro-trampoline.
-env_vars: {
-    key: "TRAMPOLINE_IMAGE"
-    value: "gcr.io/cloud-devrel-kokoro-resources/python-samples-testing-docker"
-}
-
-# Download secrets for samples
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/python-docs-samples"
-
-# Download trampoline resources.
-gfile_resources: "/bigstore/cloud-devrel-kokoro-resources/trampoline"
-
-# Use the trampoline script to run in docker.
-build_file: "python-kms/.kokoro/trampoline_v2.sh"
\ No newline at end of file
diff --git a/.kokoro/samples/python3.9/continuous.cfg b/.kokoro/samples/python3.9/continuous.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.9/continuous.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/samples/python3.9/periodic-head.cfg b/.kokoro/samples/python3.9/periodic-head.cfg
deleted file mode 100644
index 336f0f9a..00000000
--- a/.kokoro/samples/python3.9/periodic-head.cfg
+++ /dev/null
@@ -1,11 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
-
-env_vars: {
-    key: "TRAMPOLINE_BUILD_FILE"
-    value: "github/python-kms/.kokoro/test-samples-against-head.sh"
-}
diff --git a/.kokoro/samples/python3.9/periodic.cfg b/.kokoro/samples/python3.9/periodic.cfg
deleted file mode 100644
index 71cd1e59..00000000
--- a/.kokoro/samples/python3.9/periodic.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "False"
-}
diff --git a/.kokoro/samples/python3.9/presubmit.cfg b/.kokoro/samples/python3.9/presubmit.cfg
deleted file mode 100644
index a1c8d975..00000000
--- a/.kokoro/samples/python3.9/presubmit.cfg
+++ /dev/null
@@ -1,6 +0,0 @@
-# Format: //devtools/kokoro/config/proto/build.proto
-
-env_vars: {
-    key: "INSTALL_LIBRARY_FROM_SOURCE"
-    value: "True"
-}
\ No newline at end of file
diff --git a/.kokoro/test-samples-against-head.sh b/.kokoro/test-samples-against-head.sh
deleted file mode 100755
index 63ac41df..00000000
--- a/.kokoro/test-samples-against-head.sh
+++ /dev/null
@@ -1,26 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# A customized test runner for samples.
-#
-# For periodic builds, you can specify this file for testing against head.
-
-# `-e` enables the script to automatically fail when a command fails
-# `-o pipefail` sets the exit code to the rightmost comment to exit with a non-zero
-set -eo pipefail
-# Enables `**` to include files nested inside sub-folders
-shopt -s globstar
-
-exec .kokoro/test-samples-impl.sh
diff --git a/.kokoro/test-samples-impl.sh b/.kokoro/test-samples-impl.sh
deleted file mode 100755
index 5a0f5fab..00000000
--- a/.kokoro/test-samples-impl.sh
+++ /dev/null
@@ -1,102 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-# `-e` enables the script to automatically fail when a command fails
-# `-o pipefail` sets the exit code to the rightmost comment to exit with a non-zero
-set -eo pipefail
-# Enables `**` to include files nested inside sub-folders
-shopt -s globstar
-
-# Exit early if samples don't exist
-if ! find samples -name 'requirements.txt' | grep -q .; then
-  echo "No tests run. './samples/**/requirements.txt' not found"
-  exit 0
-fi
-
-# Disable buffering, so that the logs stream through.
-export PYTHONUNBUFFERED=1
-
-# Debug: show build environment
-env | grep KOKORO
-
-# Install nox
-python3.9 -m pip install --upgrade --quiet nox
-
-# Use secrets acessor service account to get secrets
-if [[ -f "${KOKORO_GFILE_DIR}/secrets_viewer_service_account.json" ]]; then
-    gcloud auth activate-service-account \
-	   --key-file="${KOKORO_GFILE_DIR}/secrets_viewer_service_account.json" \
-	   --project="cloud-devrel-kokoro-resources"
-fi
-
-# This script will create 3 files:
-# - testing/test-env.sh
-# - testing/service-account.json
-# - testing/client-secrets.json
-./scripts/decrypt-secrets.sh
-
-source ./testing/test-env.sh
-export GOOGLE_APPLICATION_CREDENTIALS=$(pwd)/testing/service-account.json
-
-# For cloud-run session, we activate the service account for gcloud sdk.
-gcloud auth activate-service-account \
-       --key-file "${GOOGLE_APPLICATION_CREDENTIALS}"
-
-export GOOGLE_CLIENT_SECRETS=$(pwd)/testing/client-secrets.json
-
-echo -e "\n******************** TESTING PROJECTS ********************"
-
-# Switch to 'fail at end' to allow all tests to complete before exiting.
-set +e
-# Use RTN to return a non-zero value if the test fails.
-RTN=0
-ROOT=$(pwd)
-# Find all requirements.txt in the samples directory (may break on whitespace).
-for file in samples/**/requirements.txt; do
-    cd "$ROOT"
-    # Navigate to the project folder.
-    file=$(dirname "$file")
-    cd "$file"
-
-    echo "------------------------------------------------------------"
-    echo "- testing $file"
-    echo "------------------------------------------------------------"
-
-    # Use nox to execute the tests for the project.
-    python3.9 -m nox -s "$RUN_TESTS_SESSION"
-    EXIT=$?
-
-    # If this is a periodic build, send the test log to the FlakyBot.
-    # See https://github.com/googleapis/repo-automation-bots/tree/main/packages/flakybot.
-    if [[ $KOKORO_BUILD_ARTIFACTS_SUBDIR = *"periodic"* ]]; then
-      chmod +x $KOKORO_GFILE_DIR/linux_amd64/flakybot
-      $KOKORO_GFILE_DIR/linux_amd64/flakybot
-    fi
-
-    if [[ $EXIT -ne 0 ]]; then
-      RTN=1
-      echo -e "\n Testing failed: Nox returned a non-zero exit code. \n"
-    else
-      echo -e "\n Testing completed.\n"
-    fi
-
-done
-cd "$ROOT"
-
-# Workaround for Kokoro permissions issue: delete secrets
-rm testing/{test-env.sh,client-secrets.json,service-account.json}
-
-exit "$RTN"
diff --git a/.kokoro/test-samples.sh b/.kokoro/test-samples.sh
deleted file mode 100755
index 50b35a48..00000000
--- a/.kokoro/test-samples.sh
+++ /dev/null
@@ -1,44 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# The default test runner for samples.
-#
-# For periodic builds, we rewinds the repo to the latest release, and
-# run test-samples-impl.sh.
-
-# `-e` enables the script to automatically fail when a command fails
-# `-o pipefail` sets the exit code to the rightmost comment to exit with a non-zero
-set -eo pipefail
-# Enables `**` to include files nested inside sub-folders
-shopt -s globstar
-
-# Run periodic samples tests at latest release
-if [[ $KOKORO_BUILD_ARTIFACTS_SUBDIR = *"periodic"* ]]; then
-    # preserving the test runner implementation.
-    cp .kokoro/test-samples-impl.sh "${TMPDIR}/test-samples-impl.sh"
-    echo "--- IMPORTANT IMPORTANT IMPORTANT ---"
-    echo "Now we rewind the repo back to the latest release..."
-    LATEST_RELEASE=$(git describe --abbrev=0 --tags)
-    git checkout $LATEST_RELEASE
-    echo "The current head is: "
-    echo $(git rev-parse --verify HEAD)
-    echo "--- IMPORTANT IMPORTANT IMPORTANT ---"
-    # move back the test runner implementation if there's no file.
-    if [ ! -f .kokoro/test-samples-impl.sh ]; then
-	cp "${TMPDIR}/test-samples-impl.sh" .kokoro/test-samples-impl.sh
-    fi
-fi
-
-exec .kokoro/test-samples-impl.sh
diff --git a/.kokoro/trampoline.sh b/.kokoro/trampoline.sh
deleted file mode 100755
index d85b1f26..00000000
--- a/.kokoro/trampoline.sh
+++ /dev/null
@@ -1,28 +0,0 @@
-#!/bin/bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -eo pipefail
-
-# Always run the cleanup script, regardless of the success of bouncing into
-# the container.
-function cleanup() {
-    chmod +x ${KOKORO_GFILE_DIR}/trampoline_cleanup.sh
-    ${KOKORO_GFILE_DIR}/trampoline_cleanup.sh
-    echo "cleanup";
-}
-trap cleanup EXIT
-
-$(dirname $0)/populate-secrets.sh # Secret Manager secrets.
-python3 "${KOKORO_GFILE_DIR}/trampoline_v1.py"
\ No newline at end of file
diff --git a/.kokoro/trampoline_v2.sh b/.kokoro/trampoline_v2.sh
deleted file mode 100755
index 59a7cf3a..00000000
--- a/.kokoro/trampoline_v2.sh
+++ /dev/null
@@ -1,487 +0,0 @@
-#!/usr/bin/env bash
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# trampoline_v2.sh
-#
-# This script does 3 things.
-#
-# 1. Prepare the Docker image for the test
-# 2. Run the Docker with appropriate flags to run the test
-# 3. Upload the newly built Docker image
-#
-# in a way that is somewhat compatible with trampoline_v1.
-#
-# To run this script, first download few files from gcs to /dev/shm.
-# (/dev/shm is passed into the container as KOKORO_GFILE_DIR).
-#
-# gsutil cp gs://cloud-devrel-kokoro-resources/python-docs-samples/secrets_viewer_service_account.json /dev/shm
-# gsutil cp gs://cloud-devrel-kokoro-resources/python-docs-samples/automl_secrets.txt /dev/shm
-#
-# Then run the script.
-# .kokoro/trampoline_v2.sh
-#
-# These environment variables are required:
-# TRAMPOLINE_IMAGE: The docker image to use.
-# TRAMPOLINE_DOCKERFILE: The location of the Dockerfile.
-#
-# You can optionally change these environment variables:
-# TRAMPOLINE_IMAGE_UPLOAD:
-#     (true|false): Whether to upload the Docker image after the
-#                   successful builds.
-# TRAMPOLINE_BUILD_FILE: The script to run in the docker container.
-# TRAMPOLINE_WORKSPACE: The workspace path in the docker container.
-#                       Defaults to /workspace.
-# Potentially there are some repo specific envvars in .trampolinerc in
-# the project root.
-
-
-set -euo pipefail
-
-TRAMPOLINE_VERSION="2.0.5"
-
-if command -v tput >/dev/null && [[ -n "${TERM:-}" ]]; then
-  readonly IO_COLOR_RED="$(tput setaf 1)"
-  readonly IO_COLOR_GREEN="$(tput setaf 2)"
-  readonly IO_COLOR_YELLOW="$(tput setaf 3)"
-  readonly IO_COLOR_RESET="$(tput sgr0)"
-else
-  readonly IO_COLOR_RED=""
-  readonly IO_COLOR_GREEN=""
-  readonly IO_COLOR_YELLOW=""
-  readonly IO_COLOR_RESET=""
-fi
-
-function function_exists {
-    [ $(LC_ALL=C type -t $1)"" == "function" ]
-}
-
-# Logs a message using the given color. The first argument must be one
-# of the IO_COLOR_* variables defined above, such as
-# "${IO_COLOR_YELLOW}". The remaining arguments will be logged in the
-# given color. The log message will also have an RFC-3339 timestamp
-# prepended (in UTC). You can disable the color output by setting
-# TERM=vt100.
-function log_impl() {
-    local color="$1"
-    shift
-    local timestamp="$(date -u "+%Y-%m-%dT%H:%M:%SZ")"
-    echo "================================================================"
-    echo "${color}${timestamp}:" "$@" "${IO_COLOR_RESET}"
-    echo "================================================================"
-}
-
-# Logs the given message with normal coloring and a timestamp.
-function log() {
-  log_impl "${IO_COLOR_RESET}" "$@"
-}
-
-# Logs the given message in green with a timestamp.
-function log_green() {
-  log_impl "${IO_COLOR_GREEN}" "$@"
-}
-
-# Logs the given message in yellow with a timestamp.
-function log_yellow() {
-  log_impl "${IO_COLOR_YELLOW}" "$@"
-}
-
-# Logs the given message in red with a timestamp.
-function log_red() {
-  log_impl "${IO_COLOR_RED}" "$@"
-}
-
-readonly tmpdir=$(mktemp -d -t ci-XXXXXXXX)
-readonly tmphome="${tmpdir}/h"
-mkdir -p "${tmphome}"
-
-function cleanup() {
-    rm -rf "${tmpdir}"
-}
-trap cleanup EXIT
-
-RUNNING_IN_CI="${RUNNING_IN_CI:-false}"
-
-# The workspace in the container, defaults to /workspace.
-TRAMPOLINE_WORKSPACE="${TRAMPOLINE_WORKSPACE:-/workspace}"
-
-pass_down_envvars=(
-    # TRAMPOLINE_V2 variables.
-    # Tells scripts whether they are running as part of CI or not.
-    "RUNNING_IN_CI"
-    # Indicates which CI system we're in.
-    "TRAMPOLINE_CI"
-    # Indicates the version of the script.
-    "TRAMPOLINE_VERSION"
-)
-
-log_yellow "Building with Trampoline ${TRAMPOLINE_VERSION}"
-
-# Detect which CI systems we're in. If we're in any of the CI systems
-# we support, `RUNNING_IN_CI` will be true and `TRAMPOLINE_CI` will be
-# the name of the CI system. Both envvars will be passing down to the
-# container for telling which CI system we're in.
-if [[ -n "${KOKORO_BUILD_ID:-}" ]]; then
-    # descriptive env var for indicating it's on CI.
-    RUNNING_IN_CI="true"
-    TRAMPOLINE_CI="kokoro"
-    if [[ "${TRAMPOLINE_USE_LEGACY_SERVICE_ACCOUNT:-}" == "true" ]]; then
-	if [[ ! -f "${KOKORO_GFILE_DIR}/kokoro-trampoline.service-account.json" ]]; then
-	    log_red "${KOKORO_GFILE_DIR}/kokoro-trampoline.service-account.json does not exist. Did you forget to mount cloud-devrel-kokoro-resources/trampoline? Aborting."
-	    exit 1
-	fi
-	# This service account will be activated later.
-	TRAMPOLINE_SERVICE_ACCOUNT="${KOKORO_GFILE_DIR}/kokoro-trampoline.service-account.json"
-    else
-	if [[ "${TRAMPOLINE_VERBOSE:-}" == "true" ]]; then
-	    gcloud auth list
-	fi
-	log_yellow "Configuring Container Registry access"
-	gcloud auth configure-docker --quiet
-    fi
-    pass_down_envvars+=(
-	# KOKORO dynamic variables.
-	"KOKORO_BUILD_NUMBER"
-	"KOKORO_BUILD_ID"
-	"KOKORO_JOB_NAME"
-	"KOKORO_GIT_COMMIT"
-	"KOKORO_GITHUB_COMMIT"
-	"KOKORO_GITHUB_PULL_REQUEST_NUMBER"
-	"KOKORO_GITHUB_PULL_REQUEST_COMMIT"
-	# For FlakyBot
-	"KOKORO_GITHUB_COMMIT_URL"
-	"KOKORO_GITHUB_PULL_REQUEST_URL"
-    )
-elif [[ "${TRAVIS:-}" == "true" ]]; then
-    RUNNING_IN_CI="true"
-    TRAMPOLINE_CI="travis"
-    pass_down_envvars+=(
-	"TRAVIS_BRANCH"
-	"TRAVIS_BUILD_ID"
-	"TRAVIS_BUILD_NUMBER"
-	"TRAVIS_BUILD_WEB_URL"
-	"TRAVIS_COMMIT"
-	"TRAVIS_COMMIT_MESSAGE"
-	"TRAVIS_COMMIT_RANGE"
-	"TRAVIS_JOB_NAME"
-	"TRAVIS_JOB_NUMBER"
-	"TRAVIS_JOB_WEB_URL"
-	"TRAVIS_PULL_REQUEST"
-	"TRAVIS_PULL_REQUEST_BRANCH"
-	"TRAVIS_PULL_REQUEST_SHA"
-	"TRAVIS_PULL_REQUEST_SLUG"
-	"TRAVIS_REPO_SLUG"
-	"TRAVIS_SECURE_ENV_VARS"
-	"TRAVIS_TAG"
-    )
-elif [[ -n "${GITHUB_RUN_ID:-}" ]]; then
-    RUNNING_IN_CI="true"
-    TRAMPOLINE_CI="github-workflow"
-    pass_down_envvars+=(
-	"GITHUB_WORKFLOW"
-	"GITHUB_RUN_ID"
-	"GITHUB_RUN_NUMBER"
-	"GITHUB_ACTION"
-	"GITHUB_ACTIONS"
-	"GITHUB_ACTOR"
-	"GITHUB_REPOSITORY"
-	"GITHUB_EVENT_NAME"
-	"GITHUB_EVENT_PATH"
-	"GITHUB_SHA"
-	"GITHUB_REF"
-	"GITHUB_HEAD_REF"
-	"GITHUB_BASE_REF"
-    )
-elif [[ "${CIRCLECI:-}" == "true" ]]; then
-    RUNNING_IN_CI="true"
-    TRAMPOLINE_CI="circleci"
-    pass_down_envvars+=(
-	"CIRCLE_BRANCH"
-	"CIRCLE_BUILD_NUM"
-	"CIRCLE_BUILD_URL"
-	"CIRCLE_COMPARE_URL"
-	"CIRCLE_JOB"
-	"CIRCLE_NODE_INDEX"
-	"CIRCLE_NODE_TOTAL"
-	"CIRCLE_PREVIOUS_BUILD_NUM"
-	"CIRCLE_PROJECT_REPONAME"
-	"CIRCLE_PROJECT_USERNAME"
-	"CIRCLE_REPOSITORY_URL"
-	"CIRCLE_SHA1"
-	"CIRCLE_STAGE"
-	"CIRCLE_USERNAME"
-	"CIRCLE_WORKFLOW_ID"
-	"CIRCLE_WORKFLOW_JOB_ID"
-	"CIRCLE_WORKFLOW_UPSTREAM_JOB_IDS"
-	"CIRCLE_WORKFLOW_WORKSPACE_ID"
-    )
-fi
-
-# Configure the service account for pulling the docker image.
-function repo_root() {
-    local dir="$1"
-    while [[ ! -d "${dir}/.git" ]]; do
-	dir="$(dirname "$dir")"
-    done
-    echo "${dir}"
-}
-
-# Detect the project root. In CI builds, we assume the script is in
-# the git tree and traverse from there, otherwise, traverse from `pwd`
-# to find `.git` directory.
-if [[ "${RUNNING_IN_CI:-}" == "true" ]]; then
-    PROGRAM_PATH="$(realpath "$0")"
-    PROGRAM_DIR="$(dirname "${PROGRAM_PATH}")"
-    PROJECT_ROOT="$(repo_root "${PROGRAM_DIR}")"
-else
-    PROJECT_ROOT="$(repo_root $(pwd))"
-fi
-
-log_yellow "Changing to the project root: ${PROJECT_ROOT}."
-cd "${PROJECT_ROOT}"
-
-# To support relative path for `TRAMPOLINE_SERVICE_ACCOUNT`, we need
-# to use this environment variable in `PROJECT_ROOT`.
-if [[ -n "${TRAMPOLINE_SERVICE_ACCOUNT:-}" ]]; then
-
-    mkdir -p "${tmpdir}/gcloud"
-    gcloud_config_dir="${tmpdir}/gcloud"
-
-    log_yellow "Using isolated gcloud config: ${gcloud_config_dir}."
-    export CLOUDSDK_CONFIG="${gcloud_config_dir}"
-
-    log_yellow "Using ${TRAMPOLINE_SERVICE_ACCOUNT} for authentication."
-    gcloud auth activate-service-account \
-	   --key-file "${TRAMPOLINE_SERVICE_ACCOUNT}"
-    log_yellow "Configuring Container Registry access"
-    gcloud auth configure-docker --quiet
-fi
-
-required_envvars=(
-    # The basic trampoline configurations.
-    "TRAMPOLINE_IMAGE"
-    "TRAMPOLINE_BUILD_FILE"
-)
-
-if [[ -f "${PROJECT_ROOT}/.trampolinerc" ]]; then
-    source "${PROJECT_ROOT}/.trampolinerc"
-fi
-
-log_yellow "Checking environment variables."
-for e in "${required_envvars[@]}"
-do
-    if [[ -z "${!e:-}" ]]; then
-	log "Missing ${e} env var. Aborting."
-	exit 1
-    fi
-done
-
-# We want to support legacy style TRAMPOLINE_BUILD_FILE used with V1
-# script: e.g. "github/repo-name/.kokoro/run_tests.sh"
-TRAMPOLINE_BUILD_FILE="${TRAMPOLINE_BUILD_FILE#github/*/}"
-log_yellow "Using TRAMPOLINE_BUILD_FILE: ${TRAMPOLINE_BUILD_FILE}"
-
-# ignore error on docker operations and test execution
-set +e
-
-log_yellow "Preparing Docker image."
-# We only download the docker image in CI builds.
-if [[ "${RUNNING_IN_CI:-}" == "true" ]]; then
-    # Download the docker image specified by `TRAMPOLINE_IMAGE`
-
-    # We may want to add --max-concurrent-downloads flag.
-
-    log_yellow "Start pulling the Docker image: ${TRAMPOLINE_IMAGE}."
-    if docker pull "${TRAMPOLINE_IMAGE}"; then
-	log_green "Finished pulling the Docker image: ${TRAMPOLINE_IMAGE}."
-	has_image="true"
-    else
-	log_red "Failed pulling the Docker image: ${TRAMPOLINE_IMAGE}."
-	has_image="false"
-    fi
-else
-    # For local run, check if we have the image.
-    if docker images "${TRAMPOLINE_IMAGE}:latest" | grep "${TRAMPOLINE_IMAGE}"; then
-	has_image="true"
-    else
-	has_image="false"
-    fi
-fi
-
-
-# The default user for a Docker container has uid 0 (root). To avoid
-# creating root-owned files in the build directory we tell docker to
-# use the current user ID.
-user_uid="$(id -u)"
-user_gid="$(id -g)"
-user_name="$(id -un)"
-
-# To allow docker in docker, we add the user to the docker group in
-# the host os.
-docker_gid=$(cut -d: -f3 < <(getent group docker))
-
-update_cache="false"
-if [[ "${TRAMPOLINE_DOCKERFILE:-none}" != "none" ]]; then
-    # Build the Docker image from the source.
-    context_dir=$(dirname "${TRAMPOLINE_DOCKERFILE}")
-    docker_build_flags=(
-	"-f" "${TRAMPOLINE_DOCKERFILE}"
-	"-t" "${TRAMPOLINE_IMAGE}"
-	"--build-arg" "UID=${user_uid}"
-	"--build-arg" "USERNAME=${user_name}"
-    )
-    if [[ "${has_image}" == "true" ]]; then
-	docker_build_flags+=("--cache-from" "${TRAMPOLINE_IMAGE}")
-    fi
-
-    log_yellow "Start building the docker image."
-    if [[ "${TRAMPOLINE_VERBOSE:-false}" == "true" ]]; then
-	echo "docker build" "${docker_build_flags[@]}" "${context_dir}"
-    fi
-
-    # ON CI systems, we want to suppress docker build logs, only
-    # output the logs when it fails.
-    if [[ "${RUNNING_IN_CI:-}" == "true" ]]; then
-	if docker build "${docker_build_flags[@]}" "${context_dir}" \
-		  > "${tmpdir}/docker_build.log" 2>&1; then
-	    if [[ "${TRAMPOLINE_VERBOSE:-}" == "true" ]]; then
-		cat "${tmpdir}/docker_build.log"
-	    fi
-
-	    log_green "Finished building the docker image."
-	    update_cache="true"
-	else
-	    log_red "Failed to build the Docker image, aborting."
-	    log_yellow "Dumping the build logs:"
-	    cat "${tmpdir}/docker_build.log"
-	    exit 1
-	fi
-    else
-	if docker build "${docker_build_flags[@]}" "${context_dir}"; then
-	    log_green "Finished building the docker image."
-	    update_cache="true"
-	else
-	    log_red "Failed to build the Docker image, aborting."
-	    exit 1
-	fi
-    fi
-else
-    if [[ "${has_image}" != "true" ]]; then
-	log_red "We do not have ${TRAMPOLINE_IMAGE} locally, aborting."
-	exit 1
-    fi
-fi
-
-# We use an array for the flags so they are easier to document.
-docker_flags=(
-    # Remove the container after it exists.
-    "--rm"
-
-    # Use the host network.
-    "--network=host"
-
-    # Run in priviledged mode. We are not using docker for sandboxing or
-    # isolation, just for packaging our dev tools.
-    "--privileged"
-
-    # Run the docker script with the user id. Because the docker image gets to
-    # write in ${PWD} you typically want this to be your user id.
-    # To allow docker in docker, we need to use docker gid on the host.
-    "--user" "${user_uid}:${docker_gid}"
-
-    # Pass down the USER.
-    "--env" "USER=${user_name}"
-
-    # Mount the project directory inside the Docker container.
-    "--volume" "${PROJECT_ROOT}:${TRAMPOLINE_WORKSPACE}"
-    "--workdir" "${TRAMPOLINE_WORKSPACE}"
-    "--env" "PROJECT_ROOT=${TRAMPOLINE_WORKSPACE}"
-
-    # Mount the temporary home directory.
-    "--volume" "${tmphome}:/h"
-    "--env" "HOME=/h"
-
-    # Allow docker in docker.
-    "--volume" "/var/run/docker.sock:/var/run/docker.sock"
-
-    # Mount the /tmp so that docker in docker can mount the files
-    # there correctly.
-    "--volume" "/tmp:/tmp"
-    # Pass down the KOKORO_GFILE_DIR and KOKORO_KEYSTORE_DIR
-    # TODO(tmatsuo): This part is not portable.
-    "--env" "TRAMPOLINE_SECRET_DIR=/secrets"
-    "--volume" "${KOKORO_GFILE_DIR:-/dev/shm}:/secrets/gfile"
-    "--env" "KOKORO_GFILE_DIR=/secrets/gfile"
-    "--volume" "${KOKORO_KEYSTORE_DIR:-/dev/shm}:/secrets/keystore"
-    "--env" "KOKORO_KEYSTORE_DIR=/secrets/keystore"
-)
-
-# Add an option for nicer output if the build gets a tty.
-if [[ -t 0 ]]; then
-    docker_flags+=("-it")
-fi
-
-# Passing down env vars
-for e in "${pass_down_envvars[@]}"
-do
-    if [[ -n "${!e:-}" ]]; then
-	docker_flags+=("--env" "${e}=${!e}")
-    fi
-done
-
-# If arguments are given, all arguments will become the commands run
-# in the container, otherwise run TRAMPOLINE_BUILD_FILE.
-if [[ $# -ge 1 ]]; then
-    log_yellow "Running the given commands '" "${@:1}" "' in the container."
-    readonly commands=("${@:1}")
-    if [[ "${TRAMPOLINE_VERBOSE:-}" == "true" ]]; then
-	echo docker run "${docker_flags[@]}" "${TRAMPOLINE_IMAGE}" "${commands[@]}"
-    fi
-    docker run "${docker_flags[@]}" "${TRAMPOLINE_IMAGE}" "${commands[@]}"
-else
-    log_yellow "Running the tests in a Docker container."
-    docker_flags+=("--entrypoint=${TRAMPOLINE_BUILD_FILE}")
-    if [[ "${TRAMPOLINE_VERBOSE:-}" == "true" ]]; then
-	echo docker run "${docker_flags[@]}" "${TRAMPOLINE_IMAGE}"
-    fi
-    docker run "${docker_flags[@]}" "${TRAMPOLINE_IMAGE}"
-fi
-
-
-test_retval=$?
-
-if [[ ${test_retval} -eq 0 ]]; then
-    log_green "Build finished with ${test_retval}"
-else
-    log_red "Build finished with ${test_retval}"
-fi
-
-# Only upload it when the test passes.
-if [[ "${update_cache}" == "true" ]] && \
-       [[ $test_retval == 0 ]] && \
-       [[ "${TRAMPOLINE_IMAGE_UPLOAD:-false}" == "true" ]]; then
-    log_yellow "Uploading the Docker image."
-    if docker push "${TRAMPOLINE_IMAGE}"; then
-	log_green "Finished uploading the Docker image."
-    else
-	log_red "Failed uploading the Docker image."
-    fi
-    # Call trampoline_after_upload_hook if it's defined.
-    if function_exists trampoline_after_upload_hook; then
-	trampoline_after_upload_hook
-    fi
-
-fi
-
-exit "${test_retval}"
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
deleted file mode 100644
index 6a8e1695..00000000
--- a/.pre-commit-config.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# See https://pre-commit.com for more information
-# See https://pre-commit.com/hooks.html for more hooks
-repos:
--   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.0.1
-    hooks:
-    -   id: trailing-whitespace
-    -   id: end-of-file-fixer
-    -   id: check-yaml
--   repo: https://github.com/psf/black
-    rev: 23.7.0
-    hooks:
-    - id: black
--   repo: https://github.com/pycqa/flake8
-    rev: 6.1.0
-    hooks:
-    - id: flake8
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
deleted file mode 100644
index 13905991..00000000
--- a/.release-please-manifest.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  ".": "2.19.2"
-}
diff --git a/.trampolinerc b/.trampolinerc
deleted file mode 100644
index a7dfeb42..00000000
--- a/.trampolinerc
+++ /dev/null
@@ -1,61 +0,0 @@
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Add required env vars here.
-required_envvars+=(
-)
-
-# Add env vars which are passed down into the container here.
-pass_down_envvars+=(
-    "NOX_SESSION"
-    ###############
-    # Docs builds
-    ###############
-    "STAGING_BUCKET"
-    "V2_STAGING_BUCKET"
-    ##################
-    # Samples builds
-    ##################
-    "INSTALL_LIBRARY_FROM_SOURCE"
-    "RUN_TESTS_SESSION"
-    "BUILD_SPECIFIC_GCLOUD_PROJECT"
-    # Target directories.
-    "RUN_TESTS_DIRS"
-    # The nox session to run.
-    "RUN_TESTS_SESSION"
-)
-
-# Prevent unintentional override on the default image.
-if [[ "${TRAMPOLINE_IMAGE_UPLOAD:-false}" == "true" ]] && \
-   [[ -z "${TRAMPOLINE_IMAGE:-}" ]]; then
-   echo "Please set TRAMPOLINE_IMAGE if you want to upload the Docker image."
-   exit 1
-fi
-
-# Define the default value if it makes sense.
-if [[ -z "${TRAMPOLINE_IMAGE_UPLOAD:-}" ]]; then
-    TRAMPOLINE_IMAGE_UPLOAD=""
-fi
-
-if [[ -z "${TRAMPOLINE_IMAGE:-}" ]]; then
-    TRAMPOLINE_IMAGE=""
-fi
-
-if [[ -z "${TRAMPOLINE_DOCKERFILE:-}" ]]; then
-    TRAMPOLINE_DOCKERFILE=""
-fi
-
-if [[ -z "${TRAMPOLINE_BUILD_FILE:-}" ]]; then
-    TRAMPOLINE_BUILD_FILE=""
-fi
diff --git a/CHANGELOG.md b/CHANGELOG.md
deleted file mode 100644
index 48b679e4..00000000
--- a/CHANGELOG.md
+++ /dev/null
@@ -1,521 +0,0 @@
-# Changelog
-
-[PyPI History][1]
-
-[1]: https://pypi.org/project/google-cloud-kms/#history
-
-## [2.19.2](https://github.com/googleapis/python-kms/compare/v2.19.1...v2.19.2) (2023-10-09)
-
-
-### Documentation
-
-* Minor formatting ([#416](https://github.com/googleapis/python-kms/issues/416)) ([0a09d11](https://github.com/googleapis/python-kms/commit/0a09d118e680e4d90df6df65548bc5740952df2d))
-
-## [2.19.1](https://github.com/googleapis/python-kms/compare/v2.19.0...v2.19.1) (2023-08-02)
-
-
-### Documentation
-
-* Minor formatting ([#411](https://github.com/googleapis/python-kms/issues/411)) ([ea4717c](https://github.com/googleapis/python-kms/commit/ea4717c2a89d90c23146b5a769cb07389e7d3872))
-
-## [2.19.0](https://github.com/googleapis/python-kms/compare/v2.18.0...v2.19.0) (2023-07-21)
-
-
-### Features
-
-* Add interoperable symmetric encryption system ([#403](https://github.com/googleapis/python-kms/issues/403)) ([39ad43d](https://github.com/googleapis/python-kms/commit/39ad43dcfbc09265087ea8b7b55117b3d2b1b99c))
-
-## [2.18.0](https://github.com/googleapis/python-kms/compare/v2.17.0...v2.18.0) (2023-07-04)
-
-
-### Features
-
-* Add interoperable symmetric encryption system ([#396](https://github.com/googleapis/python-kms/issues/396)) ([57141c2](https://github.com/googleapis/python-kms/commit/57141c20066600e7203bb7c2035800fe3c9dc2c7))
-
-
-### Bug Fixes
-
-* Add async context manager return types ([#398](https://github.com/googleapis/python-kms/issues/398)) ([cb7c193](https://github.com/googleapis/python-kms/commit/cb7c1930c9749d967556ec79ccdef3ae6fb8296d))
-
-## [2.17.0](https://github.com/googleapis/python-kms/compare/v2.16.1...v2.17.0) (2023-05-12)
-
-
-### Features
-
-* Added VerifyConnectivity RPC ([#388](https://github.com/googleapis/python-kms/issues/388)) ([b265bd7](https://github.com/googleapis/python-kms/commit/b265bd79502619a86ec179e19495df0b377b992b))
-
-## [2.16.1](https://github.com/googleapis/python-kms/compare/v2.16.0...v2.16.1) (2023-03-28)
-
-
-### Documentation
-
-* Publish the API comment changes related to supporting different hash functions/values for ECDSA signing ([#386](https://github.com/googleapis/python-kms/issues/386)) ([c45e891](https://github.com/googleapis/python-kms/commit/c45e8914fe198abf5767727103fb1832cca645dc))
-
-## [2.16.0](https://github.com/googleapis/python-kms/compare/v2.15.0...v2.16.0) (2023-03-23)
-
-
-### Features
-
-* Add support for Coordinated External Keys ([#382](https://github.com/googleapis/python-kms/issues/382)) ([3f68192](https://github.com/googleapis/python-kms/commit/3f681923dee66e30eed91bf5a19485dea19e524e))
-
-
-### Documentation
-
-* Fix formatting of request arg in docstring ([#385](https://github.com/googleapis/python-kms/issues/385)) ([94d33c2](https://github.com/googleapis/python-kms/commit/94d33c206d7a06265933359074b61aab94f6be8e))
-
-## [2.15.0](https://github.com/googleapis/python-kms/compare/v2.14.1...v2.15.0) (2023-02-21)
-
-
-### Features
-
-* Enable "rest" transport in Python for services supporting numeric enums ([#377](https://github.com/googleapis/python-kms/issues/377)) ([ae74545](https://github.com/googleapis/python-kms/commit/ae745452faea7f02ac7c4c0264b24dec2be787ee))
-
-## [2.14.1](https://github.com/googleapis/python-kms/compare/v2.14.0...v2.14.1) (2023-01-20)
-
-
-### Bug Fixes
-
-* Add context manager return types ([8137467](https://github.com/googleapis/python-kms/commit/81374671d9cf5b88c35555b089b2abd8d2e613a0))
-
-
-### Documentation
-
-* Add documentation for enums ([8137467](https://github.com/googleapis/python-kms/commit/81374671d9cf5b88c35555b089b2abd8d2e613a0))
-
-## [2.14.0](https://github.com/googleapis/python-kms/compare/v2.13.0...v2.14.0) (2023-01-10)
-
-
-### Features
-
-* Add support for python 3.11 ([#368](https://github.com/googleapis/python-kms/issues/368)) ([753aff8](https://github.com/googleapis/python-kms/commit/753aff8ee7747372e2b1d4170f436ab367eefc2a))
-
-## [2.13.0](https://github.com/googleapis/python-kms/compare/v2.12.3...v2.13.0) (2022-12-14)
-
-
-### Features
-
-* Add SHA-2 import methods ([6311278](https://github.com/googleapis/python-kms/commit/6311278a4aa3413751ba789cde6e6741a69b7791))
-* Add support for `google.cloud.kms.__version__` ([6311278](https://github.com/googleapis/python-kms/commit/6311278a4aa3413751ba789cde6e6741a69b7791))
-* Add support for additional HMAC algorithms ([6311278](https://github.com/googleapis/python-kms/commit/6311278a4aa3413751ba789cde6e6741a69b7791))
-* Add typing to proto.Message based class attributes ([6311278](https://github.com/googleapis/python-kms/commit/6311278a4aa3413751ba789cde6e6741a69b7791))
-
-
-### Bug Fixes
-
-* Add dict typing for client_options ([6311278](https://github.com/googleapis/python-kms/commit/6311278a4aa3413751ba789cde6e6741a69b7791))
-* **deps:** Require google-api-core &gt;=1.34.0, >=2.11.0  ([dbe2f96](https://github.com/googleapis/python-kms/commit/dbe2f9697ec5183302c7c870d30165f0b436df20))
-* Drop usage of pkg_resources ([dbe2f96](https://github.com/googleapis/python-kms/commit/dbe2f9697ec5183302c7c870d30165f0b436df20))
-* Fix timeout default values ([dbe2f96](https://github.com/googleapis/python-kms/commit/dbe2f9697ec5183302c7c870d30165f0b436df20))
-
-
-### Documentation
-
-* **samples:** Snippetgen handling of repeated enum field ([6311278](https://github.com/googleapis/python-kms/commit/6311278a4aa3413751ba789cde6e6741a69b7791))
-* **samples:** Snippetgen should call await on the operation coroutine before calling result ([dbe2f96](https://github.com/googleapis/python-kms/commit/dbe2f9697ec5183302c7c870d30165f0b436df20))
-
-## [2.12.3](https://github.com/googleapis/python-kms/compare/v2.12.2...v2.12.3) (2022-10-07)
-
-
-### Bug Fixes
-
-* **deps:** Allow protobuf 3.19.5 ([#350](https://github.com/googleapis/python-kms/issues/350)) ([cfdad0a](https://github.com/googleapis/python-kms/commit/cfdad0ac9cdacb174595dcce89e8ad160d42b009))
-
-## [2.12.2](https://github.com/googleapis/python-kms/compare/v2.12.1...v2.12.2) (2022-10-03)
-
-
-### Bug Fixes
-
-* **deps:** Require protobuf >= 3.20.2 ([#347](https://github.com/googleapis/python-kms/issues/347)) ([9287a76](https://github.com/googleapis/python-kms/commit/9287a76ec0632caff5b2de429fffadf5ded4e348))
-
-## [2.12.1](https://github.com/googleapis/python-kms/compare/v2.12.0...v2.12.1) (2022-08-11)
-
-
-### Bug Fixes
-
-* **deps:** allow protobuf < 5.0.0 ([#322](https://github.com/googleapis/python-kms/issues/322)) ([229e0f5](https://github.com/googleapis/python-kms/commit/229e0f5825732b41d0fcbae7208065465b4ac200))
-* **deps:** require proto-plus >= 1.22.0 ([229e0f5](https://github.com/googleapis/python-kms/commit/229e0f5825732b41d0fcbae7208065465b4ac200))
-
-## [2.12.0](https://github.com/googleapis/python-kms/compare/v2.11.2...v2.12.0) (2022-07-14)
-
-
-### Features
-
-* add audience parameter ([06a4096](https://github.com/googleapis/python-kms/commit/06a4096a61c8b2ed14ccbf88f386203e2c8dc54e))
-
-
-### Bug Fixes
-
-* **deps:** require google-api-core>=1.32.0,>=2.8.0 ([#315](https://github.com/googleapis/python-kms/issues/315)) ([82ab556](https://github.com/googleapis/python-kms/commit/82ab556b8aec33d75e99c151f01b7e2c4aa6a719))
-* require python 3.7+ ([#313](https://github.com/googleapis/python-kms/issues/313)) ([28d244f](https://github.com/googleapis/python-kms/commit/28d244f1347337f9294a9c3445df426c28b7d1d3))
-
-## [2.11.2](https://github.com/googleapis/python-kms/compare/v2.11.1...v2.11.2) (2022-06-03)
-
-
-### Bug Fixes
-
-* **deps:** require protobuf <4.0.0dev ([#299](https://github.com/googleapis/python-kms/issues/299)) ([45b97e8](https://github.com/googleapis/python-kms/commit/45b97e8cd0443c090c28b348af1e3ccddf2dbf29))
-
-
-### Documentation
-
-* fix changelog header to consistent size ([#298](https://github.com/googleapis/python-kms/issues/298)) ([d3f7a5b](https://github.com/googleapis/python-kms/commit/d3f7a5b9abe6828f84d45df570845d3be16f5411))
-
-## [2.11.1](https://github.com/googleapis/python-kms/compare/v2.11.0...v2.11.1) (2022-03-05)
-
-
-### Bug Fixes
-
-* **deps:** require google-api-core>=1.31.5, >=2.3.2 ([#247](https://github.com/googleapis/python-kms/issues/247)) ([ef54503](https://github.com/googleapis/python-kms/commit/ef54503efc02d178e1294f3550693208082d256f))
-* **deps:** require proto-plus>=1.15.0 ([ef54503](https://github.com/googleapis/python-kms/commit/ef54503efc02d178e1294f3550693208082d256f))
-
-
-### Documentation
-
-* add generated snippets ([#236](https://github.com/googleapis/python-kms/issues/236)) ([314485f](https://github.com/googleapis/python-kms/commit/314485f55904eb9e914380b627d3a80fc65712b3))
-* **samples:** updated var name to avoid shadowing built-in ([#238](https://github.com/googleapis/python-kms/issues/238)) ([5bbf2c3](https://github.com/googleapis/python-kms/commit/5bbf2c36b99c5f547cda5806f803d06cef17c627))
-
-## [2.11.0](https://github.com/googleapis/python-kms/compare/v2.10.1...v2.11.0) (2022-02-03)
-
-
-### Features
-
-* add a new EkmService API ([#233](https://github.com/googleapis/python-kms/issues/233)) ([eb532f5](https://github.com/googleapis/python-kms/commit/eb532f5c84907c12356e549c694c0210e5ad585b))
-* add api key support ([#230](https://github.com/googleapis/python-kms/issues/230)) ([fdf62ae](https://github.com/googleapis/python-kms/commit/fdf62ae3b3209a1215e0f2f2440add1f01d40907))
-
-
-### Bug Fixes
-
-* resolve DuplicateCredentialArgs error when using credentials_file ([97f7ea5](https://github.com/googleapis/python-kms/commit/97f7ea50a30d1dc1133d7703e6bd90ad209f75a1))
-
-
-### Documentation
-
-* **samples:** fix typo in verify_asymmetric_ec.py ([#227](https://github.com/googleapis/python-kms/issues/227)) ([3817d73](https://github.com/googleapis/python-kms/commit/3817d7390fddebd137c99865455f0ae145dbcf63))
-
-## [2.10.1](https://www.github.com/googleapis/python-kms/compare/v2.10.0...v2.10.1) (2021-11-01)
-
-
-### Bug Fixes
-
-* **deps:** drop packaging dependency ([6d7b8c1](https://www.github.com/googleapis/python-kms/commit/6d7b8c1043e59f3749c58b032f3fe800293c03f5))
-* **deps:** require google-api-core >= 1.28.0 ([6d7b8c1](https://www.github.com/googleapis/python-kms/commit/6d7b8c1043e59f3749c58b032f3fe800293c03f5))
-
-
-### Documentation
-
-* list oneofs in docstring ([6d7b8c1](https://www.github.com/googleapis/python-kms/commit/6d7b8c1043e59f3749c58b032f3fe800293c03f5))
-
-## [2.10.0](https://www.github.com/googleapis/python-kms/compare/v2.9.0...v2.10.0) (2021-10-18)
-
-
-### Features
-
-* add support for Raw PKCS[#1](https://www.github.com/googleapis/python-kms/issues/1) signing keys ([#195](https://www.github.com/googleapis/python-kms/issues/195)) ([9c4f997](https://www.github.com/googleapis/python-kms/commit/9c4f997d09e9a83141eda767cd2bb63a0bf58a37))
-
-## [2.9.0](https://www.github.com/googleapis/python-kms/compare/v2.8.0...v2.9.0) (2021-10-08)
-
-
-### Features
-
-* add context manager support in client ([#190](https://www.github.com/googleapis/python-kms/issues/190)) ([6707e79](https://www.github.com/googleapis/python-kms/commit/6707e7950f9ebcedaa22d2e1d12aa0af6e35581d))
-
-## [2.8.0](https://www.github.com/googleapis/python-kms/compare/v2.7.0...v2.8.0) (2021-09-30)
-
-
-### Features
-
-* add RPC retry information for MacSign, MacVerify, and GenerateRandomBytes ([#186](https://www.github.com/googleapis/python-kms/issues/186)) ([62591c8](https://www.github.com/googleapis/python-kms/commit/62591c8ead85c33fa5a5c4cc7c2a26779cbd1075))
-
-## [2.7.0](https://www.github.com/googleapis/python-kms/compare/v2.6.1...v2.7.0) (2021-09-30)
-
-
-### Features
-
-* add OAEP+SHA1 to the list of supported algorithms ([#181](https://www.github.com/googleapis/python-kms/issues/181)) ([65b2c97](https://www.github.com/googleapis/python-kms/commit/65b2c975d2635cd562a0e4b7ff8f1989643929ee))
-
-
-### Bug Fixes
-
-* improper types in pagers generation ([8ff7501](https://www.github.com/googleapis/python-kms/commit/8ff75018aeacd87bd00abb4a12a130f3e28604f5))
-
-## [2.6.1](https://www.github.com/googleapis/python-kms/compare/v2.6.0...v2.6.1) (2021-09-24)
-
-
-### Bug Fixes
-
-* add 'dict' annotation type to 'request' ([728e5e0](https://www.github.com/googleapis/python-kms/commit/728e5e08738e4954c3f1f9eecda5c1d1753501c3))
-
-## [2.6.0](https://www.github.com/googleapis/python-kms/compare/v2.5.0...v2.6.0) (2021-08-30)
-
-
-### Features
-
-* add support for Key Reimport ([#167](https://www.github.com/googleapis/python-kms/issues/167)) ([1aaaea9](https://www.github.com/googleapis/python-kms/commit/1aaaea9405109a2f226f3d6a9631eb5f110349ab))
-
-
-### Documentation
-
-* **kms:** add samples for new hmac and rng apis ([#161](https://www.github.com/googleapis/python-kms/issues/161)) ([558b740](https://www.github.com/googleapis/python-kms/commit/558b740f0491311ebcaf3c62d7117ec15883150a))
-
-## [2.5.0](https://www.github.com/googleapis/python-kms/compare/v2.4.3...v2.5.0) (2021-08-07)
-
-
-### Features
-
-* add support for HMAC, Variable Key Destruction, and GenerateRandom ([#157](https://www.github.com/googleapis/python-kms/issues/157)) ([4b7c9f9](https://www.github.com/googleapis/python-kms/commit/4b7c9f96a73fba8b825f8c7cfabc748728c0eb62))
-
-## [2.4.3](https://www.github.com/googleapis/python-kms/compare/v2.4.2...v2.4.3) (2021-07-29)
-
-
-### Documentation
-
-* update README for attestation verification scripts ([#151](https://www.github.com/googleapis/python-kms/issues/151)) ([a1a111d](https://www.github.com/googleapis/python-kms/commit/a1a111d67017b89235c18455512658514ce65140))
-
-## [2.4.2](https://www.github.com/googleapis/python-kms/compare/v2.4.1...v2.4.2) (2021-07-28)
-
-
-### Bug Fixes
-
-* enable self signed jwt for grpc ([#149](https://www.github.com/googleapis/python-kms/issues/149)) ([211fe79](https://www.github.com/googleapis/python-kms/commit/211fe797d8847675390af67691d7296bbf150a02))
-
-
-### Documentation
-
-* add Samples section to CONTRIBUTING.rst ([#144](https://www.github.com/googleapis/python-kms/issues/144)) ([88fee3a](https://www.github.com/googleapis/python-kms/commit/88fee3ab24acca72d2bade56e471d60cc893d97f))
-
-
-### Miscellaneous Chores
-
-* release as 2.4.2 ([#150](https://www.github.com/googleapis/python-kms/issues/150)) ([6663190](https://www.github.com/googleapis/python-kms/commit/66631903dc8c32eea1af0bd0265893e6bdffd55f))
-
-## [2.4.1](https://www.github.com/googleapis/python-kms/compare/v2.4.0...v2.4.1) (2021-07-20)
-
-
-### Bug Fixes
-
-* **deps:** pin 'google-{api,cloud}-core', 'google-auth' to allow 2.x versions ([#143](https://www.github.com/googleapis/python-kms/issues/143)) ([c1f33e1](https://www.github.com/googleapis/python-kms/commit/c1f33e1844dfe2bca4b03d9ad29195381b5c0fd8))
-
-## [2.4.0](https://www.github.com/googleapis/python-kms/compare/v2.3.0...v2.4.0) (2021-07-12)
-
-
-### Features
-
-* add always_use_jwt_access ([#129](https://www.github.com/googleapis/python-kms/issues/129)) ([cfa0802](https://www.github.com/googleapis/python-kms/commit/cfa08022db3e096e2414418b63482606af8d46cb))
-
-
-### Bug Fixes
-
-* disable always_use_jwt_access ([#133](https://www.github.com/googleapis/python-kms/issues/133)) ([8007b81](https://www.github.com/googleapis/python-kms/commit/8007b810f11ebf49cd24edd77867abac174841e9))
-
-
-### Documentation
-
-* Include verify_attestation_chains.py help text to attestations README ([#134](https://www.github.com/googleapis/python-kms/issues/134)) ([2f2bb49](https://www.github.com/googleapis/python-kms/commit/2f2bb49adca244031d584ffbb27e32585e64ed42))
-* omit mention of Python 2.7 in 'CONTRIBUTING.rst' ([#1127](https://www.github.com/googleapis/python-kms/issues/1127)) ([#124](https://www.github.com/googleapis/python-kms/issues/124)) ([5c3e273](https://www.github.com/googleapis/python-kms/commit/5c3e27391c4771b4a03c87e21a5260ed8d61b9c4)), closes [#1126](https://www.github.com/googleapis/python-kms/issues/1126)
-
-## [2.3.0](https://www.github.com/googleapis/python-kms/compare/v2.2.0...v2.3.0) (2021-06-14)
-
-
-### Features
-
-* add `from_service_account_info` ([6d115ce](https://www.github.com/googleapis/python-kms/commit/6d115ce1902e4306ba3e1d80de64a2424e47ef52))
-* add common resource path helpers ([#74](https://www.github.com/googleapis/python-kms/issues/74)) ([6d115ce](https://www.github.com/googleapis/python-kms/commit/6d115ce1902e4306ba3e1d80de64a2424e47ef52))
-* add ECDSA secp256k1 to the list of supported algorithms ([#120](https://www.github.com/googleapis/python-kms/issues/120)) ([65a453f](https://www.github.com/googleapis/python-kms/commit/65a453f3a2adb71ea82a96d769d748ad0dc721b4))
-* add script to verify attestations with certificate chains ([#99](https://www.github.com/googleapis/python-kms/issues/99)) ([7b0799f](https://www.github.com/googleapis/python-kms/commit/7b0799f4e1b52b359862e97ea2b89befafe92713))
-* expose client transport ([6d115ce](https://www.github.com/googleapis/python-kms/commit/6d115ce1902e4306ba3e1d80de64a2424e47ef52))
-
-
-### Bug Fixes
-
-* **deps:** add packaging requirement ([#114](https://www.github.com/googleapis/python-kms/issues/114)) ([a6a894f](https://www.github.com/googleapis/python-kms/commit/a6a894f0c49fb1774d74aa26441e7525f0c0d138))
-* fix retryable errors ([6d115ce](https://www.github.com/googleapis/python-kms/commit/6d115ce1902e4306ba3e1d80de64a2424e47ef52))
-* remove grpc send/recv limits ([6d115ce](https://www.github.com/googleapis/python-kms/commit/6d115ce1902e4306ba3e1d80de64a2424e47ef52))
-* use correct retry deadline ([6d115ce](https://www.github.com/googleapis/python-kms/commit/6d115ce1902e4306ba3e1d80de64a2424e47ef52))
-
-## [2.2.0](https://www.github.com/googleapis/python-kms/compare/v2.1.0...v2.2.0) (2020-09-16)
-
-
-### Features
-
-* regenerate client lib to pick up new mtls env ([#55](https://www.github.com/googleapis/python-kms/issues/55)) ([4d62c19](https://www.github.com/googleapis/python-kms/commit/4d62c19d2f0f7c597214f2b39dfecb85f9d75a58))
-
-
-### Documentation
-
-* add crypto_key_path_path method rename to UPGRADING.md ([#45](https://www.github.com/googleapis/python-kms/issues/45)) ([81db5d9](https://www.github.com/googleapis/python-kms/commit/81db5d90112092772b83aec57e2358088ed88e0d)), closes [#43](https://www.github.com/googleapis/python-kms/issues/43)
-
-## [2.1.0](https://www.github.com/googleapis/python-kms/compare/v2.0.1...v2.1.0) (2020-08-27)
-
-
-### Features
-
-* accept custom client_info ([#41](https://www.github.com/googleapis/python-kms/issues/41)) ([6688e80](https://www.github.com/googleapis/python-kms/commit/6688e80aa4db74980d4a6194519c814a22cde177))
-
-## [2.0.1](https://www.github.com/googleapis/python-kms/compare/v2.0.0...v2.0.1) (2020-08-24)
-
-
-### Bug Fixes
-
-* add system test back ([#39](https://www.github.com/googleapis/python-kms/issues/39)) ([fc5a720](https://www.github.com/googleapis/python-kms/commit/fc5a720d93ba41cd2616c7c9c8012d9a3e8f4a9c))
-
-
-### Documentation
-
-* Generate using new common.py_samples() synthtool functionality ([#35](https://www.github.com/googleapis/python-kms/issues/35)) ([90097bc](https://www.github.com/googleapis/python-kms/commit/90097bca7660f148f36e009f70d108404efa5308))
-
-## [2.0.0](https://www.github.com/googleapis/python-kms/compare/v1.4.0...v2.0.0) (2020-07-30)
-
-
-### ⚠ BREAKING CHANGES
-
-* migrate to microgenerator. (#16)
-
-### Features
-
-* migrate to microgenerator. See [Migration Guide](https://github.com/googleapis/python-kms/blob/release-v2.0.0/UPGRADING.md). ([#16](https://www.github.com/googleapis/python-kms/issues/16)) ([605f757](https://www.github.com/googleapis/python-kms/commit/605f7577a9a9f1a2b39fa69da7e250b5f70e945e))
-
-
-## [1.4.0](https://www.github.com/googleapis/python-kms/compare/v1.3.0...v1.4.0) (2020-04-14)
-
-
-### Features
-
-* add support for external key manager (via synth) ([#8](https://www.github.com/googleapis/python-kms/issues/8)) ([4077fc8](https://www.github.com/googleapis/python-kms/commit/4077fc89943cc09d489d44c05efcf9cab61cdbaf))
-
-## [1.3.0](https://www.github.com/googleapis/python-kms/compare/v1.2.1...v1.3.0) (2020-02-12)
-
-
-### Features
-
-* **kms:** add `ProtectionLevel.External` enum; standardize use of 'optional' and 'required' in docstrings (via synth) ([#10070](https://www.github.com/googleapis/python-kms/issues/10070)) ([add232f](https://www.github.com/googleapis/python-kms/commit/add232fb657505264300ff37b07dc47fcdbbeede))
-* **kms:** undeprecate resource name helper methods, add 2.7 deprecation warning (via synth) ([#10045](https://www.github.com/googleapis/python-kms/issues/10045)) ([23dca59](https://www.github.com/googleapis/python-kms/commit/23dca598dbfef86460d1a16e5a4386ab2714cfd3))
-
-
-### Bug Fixes
-
-* **kms:** deprecate resource name helper methods (via synth) ([#9836](https://www.github.com/googleapis/python-kms/issues/9836)) ([a3eca00](https://www.github.com/googleapis/python-kms/commit/a3eca000de2518080e4a960be731fb2be08c90da))
-
-## 1.2.1
-
-08-12-2019 13:44 PDT
-
-
-### Implementation Changes
-- Remove send/recv msg size limit (via synth). ([#8959](https://github.com/googleapis/google-cloud-python/pull/8959))
-
-### Documentation
-- Fix links to googleapis.dev ([#8998](https://github.com/googleapis/google-cloud-python/pull/8998))
-- Update intersphinx mapping for requests. ([#8805](https://github.com/googleapis/google-cloud-python/pull/8805))
-
-## 1.2.0
-
-07-24-2019 16:42 PDT
-
-
-### Implementation Changes
-- Accomodate new location of 'IAMPolicyStub' (via synth). ([#8679](https://github.com/googleapis/google-cloud-python/pull/8679))
-
-### New Features
-- Add 'options_' argument to client's 'get_iam_policy'; pin black version (via synth). ([#8656](https://github.com/googleapis/google-cloud-python/pull/8656))
-- Add 'client_options' support, update list method docstrings (via synth). ([#8514](https://github.com/googleapis/google-cloud-python/pull/8514))
-
-### Dependencies
-- Bump minimum version for google-api-core to 1.14.0. ([#8709](https://github.com/googleapis/google-cloud-python/pull/8709))
-- Update pin for 'grpc-google-iam-v1' to 0.12.3+. ([#8647](https://github.com/googleapis/google-cloud-python/pull/8647))
-
-### Documentation
-- Link to googleapis.dev documentation in READMEs. ([#8705](https://github.com/googleapis/google-cloud-python/pull/8705))
-- Add compatibility check badges to READMEs. ([#8288](https://github.com/googleapis/google-cloud-python/pull/8288))
-
-## 1.1.0
-
-06-27-2019 12:32 PDT
-
-### Implementation Changes
-- Allow kwargs to be passed to create_channel (via synth). ([#8395](https://github.com/googleapis/google-cloud-python/pull/8395))
-- Add empty lines (via synth). ([#8062](https://github.com/googleapis/google-cloud-python/pull/8062))
-- Remove classifier for Python 3.4 for end-of-life. ([#7535](https://github.com/googleapis/google-cloud-python/pull/7535))
-
-### New Features
-- Add ability to create keys via import, add crypto algorithms (via synth).  ([#8356](https://github.com/googleapis/google-cloud-python/pull/8356))
-- Retry idempotent codes for Encyrpt, Decrypt, Asymmetric Decrypt, Asymmetric Sign (via synth). ([#7715](https://github.com/googleapis/google-cloud-python/pull/7715))
-- Add CAVIUM_V2_COMPRESSED option to KeyOperationAttestation (via synth). ([#7396](https://github.com/googleapis/google-cloud-python/pull/7396))
-
-### Documentation
-- Update docstrings. ([#7868](https://github.com/googleapis/google-cloud-python/pull/7868))
-- Update information in READMEs to indicate KMS is GA. ([#7840](https://github.com/googleapis/google-cloud-python/pull/7840))
-
-### Internal / Testing Changes
-- Add docs job to publish to googleapis.dev. ([#8464](https://github.com/googleapis/google-cloud-python/pull/8464))
-- Add disclaimer to auto-generated template files (via synth). ([#8318](https://github.com/googleapis/google-cloud-python/pull/8318))
-- Suppress checking 'cov-fail-under' in nox default session (via synth).  ([#8245](https://github.com/googleapis/google-cloud-python/pull/8245))
-- Fix coverage in 'types.py'; blacken 'noxfile.py' / 'setup.py' (via synth). ([#8157](https://github.com/googleapis/google-cloud-python/pull/8157))
-- Add nox session `docs`, reorder methods (via synth). ([#7775](https://github.com/googleapis/google-cloud-python/pull/7775))
-- Copy lintified proto files (via synth). ([#7449](https://github.com/googleapis/google-cloud-python/pull/7449))
-
-## 1.0.0
-
-02-13-2019 10:53 PST
-
-### Implementation Changes
-- Remove unused message exports. ([#7270](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/7270))
-- Pick up stub docstring fix in GAPIC generator. ([#6974](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/6974))
-
-### Documentation
-- Updated client library documentation URLs. ([#7307](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/7307))
-
-### Internal / Testing Changes
-- Add KMS system test ([#7304](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/7304))
-- Add protos as an artifact to library ([#7205](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/7205))
-- Update copyright headers
-- Protoc-generated serialization update. ([#7086](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/7086))
-
-## 0.2.1
-
-12-18-2018 09:24 PST
-
-
-### Implementation Changes
-- Import `iam.policy` from `google.api_core`. ([#6741](https://github.com/googleapis/google-cloud-python/pull/6741))
-- Pick up changes in GAPIC generator. ([#6499](https://github.com/googleapis/google-cloud-python/pull/6499))
-- Fix `client_info` bug, update docstrings. ([#6414](https://github.com/googleapis/google-cloud-python/pull/6414))
-
-### Dependencies
-- Bump minimum `api_core` version for all GAPIC libs to 1.4.1. ([#6391](https://github.com/googleapis/google-cloud-python/pull/6391))
-- Update IAM version in dependencies ([#6362](https://github.com/googleapis/google-cloud-python/pull/6362))
-- Avoid broken 'google-common-apis 1.5.4' release. ([#6355](https://github.com/googleapis/google-cloud-python/pull/6355))
-
-### Documentation
-- Document Python 2 deprecation ([#6910](https://github.com/googleapis/google-cloud-python/pull/6910))
-- Normalize use of support level badges ([#6159](https://github.com/googleapis/google-cloud-python/pull/6159))
-
-### Internal / Testing Changes
-- Update noxfile.
-- Blacken all gen'd libs ([#6792](https://github.com/googleapis/google-cloud-python/pull/6792))
-- Omit local deps ([#6701](https://github.com/googleapis/google-cloud-python/pull/6701))
-- Run black at end of synth.py ([#6698](https://github.com/googleapis/google-cloud-python/pull/6698))
-- Run Black on Generated libraries ([#6666](https://github.com/googleapis/google-cloud-python/pull/6666))
-- Add templates for flake8, coveragerc, noxfile, and black. ([#6642](https://github.com/googleapis/google-cloud-python/pull/6642))
-- Add synth metadata. ([#6569](https://github.com/googleapis/google-cloud-python/pull/6569))
-- Add 'mock' to unit test dependencies for autogen libs. ([#6402](https://github.com/googleapis/google-cloud-python/pull/6402))
-- Add / fix badges for PyPI / versions. ([#6158](https://github.com/googleapis/google-cloud-python/pull/6158))
-- Don't update nox in 'kms/synth.py'. ([#6233](https://github.com/googleapis/google-cloud-python/pull/6233))
-- Use new Nox ([#6175](https://github.com/googleapis/google-cloud-python/pull/6175))
-- Don't scribble on setup.py harder. ([#6064](https://github.com/googleapis/google-cloud-python/pull/6064))
-- Harmonize / DRY 'README.rst' / 'docs/index.rst'. ([#6021](https://github.com/googleapis/google-cloud-python/pull/6021))
-- Exclude 'setup.py' from synth. ([#6038](https://github.com/googleapis/google-cloud-python/pull/6038))
-
-## 0.2.0
-
-### Documentation
-- Docs: Replace links to `/stable/` with `/latest/`. ([#5901](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/5901))
-
-### Internal / Testing Changes
-- Re-generate library using kms/synth.py ([#5977](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/5977))
-- Re-generate library using kms/synth.py ([#5951](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/5951))
-- Remove synth fix for replacing `iam_policy_pb2_grpc` ([#5755](https://github.com/GoogleCloudPlatform/google-cloud-python/pull/5755))
-
-## 0.1.0
-
-### New Features
-- KMS v1
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
deleted file mode 100644
index 039f4368..00000000
--- a/CODE_OF_CONDUCT.md
+++ /dev/null
@@ -1,95 +0,0 @@
-<!-- # Generated by synthtool. DO NOT EDIT! !-->
-# Code of Conduct
-
-## Our Pledge
-
-In the interest of fostering an open and welcoming environment, we as
-contributors and maintainers pledge to making participation in our project and
-our community a harassment-free experience for everyone, regardless of age, body
-size, disability, ethnicity, gender identity and expression, level of
-experience, education, socio-economic status, nationality, personal appearance,
-race, religion, or sexual identity and orientation.
-
-## Our Standards
-
-Examples of behavior that contributes to creating a positive environment
-include:
-
-*   Using welcoming and inclusive language
-*   Being respectful of differing viewpoints and experiences
-*   Gracefully accepting constructive criticism
-*   Focusing on what is best for the community
-*   Showing empathy towards other community members
-
-Examples of unacceptable behavior by participants include:
-
-*   The use of sexualized language or imagery and unwelcome sexual attention or
-    advances
-*   Trolling, insulting/derogatory comments, and personal or political attacks
-*   Public or private harassment
-*   Publishing others' private information, such as a physical or electronic
-    address, without explicit permission
-*   Other conduct which could reasonably be considered inappropriate in a
-    professional setting
-
-## Our Responsibilities
-
-Project maintainers are responsible for clarifying the standards of acceptable
-behavior and are expected to take appropriate and fair corrective action in
-response to any instances of unacceptable behavior.
-
-Project maintainers have the right and responsibility to remove, edit, or reject
-comments, commits, code, wiki edits, issues, and other contributions that are
-not aligned to this Code of Conduct, or to ban temporarily or permanently any
-contributor for other behaviors that they deem inappropriate, threatening,
-offensive, or harmful.
-
-## Scope
-
-This Code of Conduct applies both within project spaces and in public spaces
-when an individual is representing the project or its community. Examples of
-representing a project or community include using an official project e-mail
-address, posting via an official social media account, or acting as an appointed
-representative at an online or offline event. Representation of a project may be
-further defined and clarified by project maintainers.
-
-This Code of Conduct also applies outside the project spaces when the Project
-Steward has a reasonable belief that an individual's behavior may have a
-negative impact on the project or its community.
-
-## Conflict Resolution
-
-We do not believe that all conflict is bad; healthy debate and disagreement
-often yield positive results. However, it is never okay to be disrespectful or
-to engage in behavior that violates the project’s code of conduct.
-
-If you see someone violating the code of conduct, you are encouraged to address
-the behavior directly with those involved. Many issues can be resolved quickly
-and easily, and this gives people more control over the outcome of their
-dispute. If you are unable to resolve the matter for any reason, or if the
-behavior is threatening or harassing, report it. We are dedicated to providing
-an environment where participants feel welcome and safe.
-
-
-Reports should be directed to *googleapis-stewards@google.com*, the
-Project Steward(s) for *Google Cloud Client Libraries*. It is the Project Steward’s duty to
-receive and address reported violations of the code of conduct. They will then
-work with a committee consisting of representatives from the Open Source
-Programs Office and the Google Open Source Strategy team. If for any reason you
-are uncomfortable reaching out to the Project Steward, please email
-opensource@google.com.
-
-We will investigate every complaint, but you may not receive a direct response.
-We will use our discretion in determining when and how to follow up on reported
-incidents, which may range from not taking action to permanent expulsion from
-the project and project-sponsored spaces. We will notify the accused of the
-report and provide them an opportunity to discuss it before any action is taken.
-The identity of the reporter will be omitted from the details of the report
-supplied to the accused. In potentially harmful situations, such as ongoing
-harassment or threats to anyone's safety, we may take action without notice.
-
-## Attribution
-
-This Code of Conduct is adapted from the Contributor Covenant, version 1.4,
-available at
-https://www.contributor-covenant.org/version/1/4/code-of-conduct.html
\ No newline at end of file
diff --git a/CONTRIBUTING.rst b/CONTRIBUTING.rst
deleted file mode 100644
index 3efb2380..00000000
--- a/CONTRIBUTING.rst
+++ /dev/null
@@ -1,281 +0,0 @@
-.. Generated by synthtool. DO NOT EDIT!
-############
-Contributing
-############
-
-#. **Please sign one of the contributor license agreements below.**
-#. Fork the repo, develop and test your code changes, add docs.
-#. Make sure that your commit messages clearly describe the changes.
-#. Send a pull request. (Please Read: `Faster Pull Request Reviews`_)
-
-.. _Faster Pull Request Reviews: https://github.com/kubernetes/community/blob/master/contributors/guide/pull-requests.md#best-practices-for-faster-reviews
-
-.. contents:: Here are some guidelines for hacking on the Google Cloud Client libraries.
-
-***************
-Adding Features
-***************
-
-In order to add a feature:
-
-- The feature must be documented in both the API and narrative
-  documentation.
-
-- The feature must work fully on the following CPython versions:
-  3.7, 3.8, 3.9, 3.10 and 3.11 on both UNIX and Windows.
-
-- The feature must not add unnecessary dependencies (where
-  "unnecessary" is of course subjective, but new dependencies should
-  be discussed).
-
-****************************
-Using a Development Checkout
-****************************
-
-You'll have to create a development environment using a Git checkout:
-
-- While logged into your GitHub account, navigate to the
-  ``python-kms`` `repo`_ on GitHub.
-
-- Fork and clone the ``python-kms`` repository to your GitHub account by
-  clicking the "Fork" button.
-
-- Clone your fork of ``python-kms`` from your GitHub account to your local
-  computer, substituting your account username and specifying the destination
-  as ``hack-on-python-kms``.  E.g.::
-
-   $ cd ${HOME}
-   $ git clone git@github.com:USERNAME/python-kms.git hack-on-python-kms
-   $ cd hack-on-python-kms
-   # Configure remotes such that you can pull changes from the googleapis/python-kms
-   # repository into your local repository.
-   $ git remote add upstream git@github.com:googleapis/python-kms.git
-   # fetch and merge changes from upstream into main
-   $ git fetch upstream
-   $ git merge upstream/main
-
-Now your local repo is set up such that you will push changes to your GitHub
-repo, from which you can submit a pull request.
-
-To work on the codebase and run the tests, we recommend using ``nox``,
-but you can also use a ``virtualenv`` of your own creation.
-
-.. _repo: https://github.com/googleapis/python-kms
-
-Using ``nox``
-=============
-
-We use `nox <https://nox.readthedocs.io/en/latest/>`__ to instrument our tests.
-
-- To test your changes, run unit tests with ``nox``::
-    $ nox -s unit
-
-- To run a single unit test::
-
-    $ nox -s unit-3.11 -- -k <name of test>
-
-
-  .. note::
-
-    The unit tests and system tests are described in the
-    ``noxfile.py`` files in each directory.
-
-.. nox: https://pypi.org/project/nox/
-
-*****************************************
-I'm getting weird errors... Can you help?
-*****************************************
-
-If the error mentions ``Python.h`` not being found,
-install ``python-dev`` and try again.
-On Debian/Ubuntu::
-
-  $ sudo apt-get install python-dev
-
-************
-Coding Style
-************
-- We use the automatic code formatter ``black``. You can run it using
-  the nox session ``blacken``. This will eliminate many lint errors. Run via::
-
-   $ nox -s blacken
-
-- PEP8 compliance is required, with exceptions defined in the linter configuration.
-  If you have ``nox`` installed, you can test that you have not introduced
-  any non-compliant code via::
-
-   $ nox -s lint
-
-- In order to make ``nox -s lint`` run faster, you can set some environment
-  variables::
-
-   export GOOGLE_CLOUD_TESTING_REMOTE="upstream"
-   export GOOGLE_CLOUD_TESTING_BRANCH="main"
-
-  By doing this, you are specifying the location of the most up-to-date
-  version of ``python-kms``. The
-  remote name ``upstream`` should point to the official ``googleapis``
-  checkout and the branch should be the default branch on that remote (``main``).
-
-- This repository contains configuration for the
-  `pre-commit <https://pre-commit.com/>`__ tool, which automates checking
-  our linters during a commit.  If you have it installed on your ``$PATH``,
-  you can enable enforcing those checks via:
-
-.. code-block:: bash
-
-   $ pre-commit install
-   pre-commit installed at .git/hooks/pre-commit
-
-Exceptions to PEP8:
-
-- Many unit tests use a helper method, ``_call_fut`` ("FUT" is short for
-  "Function-Under-Test"), which is PEP8-incompliant, but more readable.
-  Some also use a local variable, ``MUT`` (short for "Module-Under-Test").
-
-********************
-Running System Tests
-********************
-
-- To run system tests, you can execute::
-
-   # Run all system tests
-   $ nox -s system
-
-   # Run a single system test
-   $ nox -s system-3.8 -- -k <name of test>
-
-
-  .. note::
-
-      System tests are only configured to run under Python 3.8.
-      For expediency, we do not run them in older versions of Python 3.
-
-  This alone will not run the tests. You'll need to change some local
-  auth settings and change some configuration in your project to
-  run all the tests.
-
-- System tests will be run against an actual project. You should use local credentials from gcloud when possible. See `Best practices for application authentication <https://cloud.google.com/docs/authentication/best-practices-applications#local_development_and_testing_with_the>`__. Some tests require a service account. For those tests see `Authenticating as a service account <https://cloud.google.com/docs/authentication/production>`__.
-
-*************
-Test Coverage
-*************
-
-- The codebase *must* have 100% test statement coverage after each commit.
-  You can test coverage via ``nox -s cover``.
-
-******************************************************
-Documentation Coverage and Building HTML Documentation
-******************************************************
-
-If you fix a bug, and the bug requires an API or behavior modification, all
-documentation in this package which references that API or behavior must be
-changed to reflect the bug fix, ideally in the same commit that fixes the bug
-or adds the feature.
-
-Build the docs via:
-
-   $ nox -s docs
-
-*************************
-Samples and code snippets
-*************************
-
-Code samples and snippets live in the `samples/` catalogue. Feel free to
-provide more examples, but make sure to write tests for those examples.
-Each folder containing example code requires its own `noxfile.py` script
-which automates testing. If you decide to create a new folder, you can
-base it on the `samples/snippets` folder (providing `noxfile.py` and
-the requirements files).
-
-The tests will run against a real Google Cloud Project, so you should
-configure them just like the System Tests.
-
-- To run sample tests, you can execute::
-
-   # Run all tests in a folder
-   $ cd samples/snippets
-   $ nox -s py-3.8
-
-   # Run a single sample test
-   $ cd samples/snippets
-   $ nox -s py-3.8 -- -k <name of test>
-
-********************************************
-Note About ``README`` as it pertains to PyPI
-********************************************
-
-The `description on PyPI`_ for the project comes directly from the
-``README``. Due to the reStructuredText (``rst``) parser used by
-PyPI, relative links which will work on GitHub (e.g. ``CONTRIBUTING.rst``
-instead of
-``https://github.com/googleapis/python-kms/blob/main/CONTRIBUTING.rst``)
-may cause problems creating links or rendering the description.
-
-.. _description on PyPI: https://pypi.org/project/google-cloud-kms
-
-
-*************************
-Supported Python Versions
-*************************
-
-We support:
-
--  `Python 3.7`_
--  `Python 3.8`_
--  `Python 3.9`_
--  `Python 3.10`_
--  `Python 3.11`_
-
-.. _Python 3.7: https://docs.python.org/3.7/
-.. _Python 3.8: https://docs.python.org/3.8/
-.. _Python 3.9: https://docs.python.org/3.9/
-.. _Python 3.10: https://docs.python.org/3.10/
-.. _Python 3.11: https://docs.python.org/3.11/
-
-
-Supported versions can be found in our ``noxfile.py`` `config`_.
-
-.. _config: https://github.com/googleapis/python-kms/blob/main/noxfile.py
-
-
-We also explicitly decided to support Python 3 beginning with version 3.7.
-Reasons for this include:
-
--  Encouraging use of newest versions of Python 3
--  Taking the lead of `prominent`_ open-source `projects`_
--  `Unicode literal support`_ which allows for a cleaner codebase that
-   works in both Python 2 and Python 3
-
-.. _prominent: https://docs.djangoproject.com/en/1.9/faq/install/#what-python-version-can-i-use-with-django
-.. _projects: http://flask.pocoo.org/docs/0.10/python3/
-.. _Unicode literal support: https://www.python.org/dev/peps/pep-0414/
-
-**********
-Versioning
-**********
-
-This library follows `Semantic Versioning`_.
-
-.. _Semantic Versioning: http://semver.org/
-
-Some packages are currently in major version zero (``0.y.z``), which means that
-anything may change at any time and the public API should not be considered
-stable.
-
-******************************
-Contributor License Agreements
-******************************
-
-Before we can accept your pull requests you'll need to sign a Contributor
-License Agreement (CLA):
-
-- **If you are an individual writing original source code** and **you own the
-  intellectual property**, then you'll need to sign an
-  `individual CLA <https://developers.google.com/open-source/cla/individual>`__.
-- **If you work for a company that wants to allow you to contribute your work**,
-  then you'll need to sign a
-  `corporate CLA <https://developers.google.com/open-source/cla/corporate>`__.
-
-You can sign these electronically (just scroll to the bottom). After that,
-we'll be able to accept your pull requests.
diff --git a/MANIFEST.in b/MANIFEST.in
deleted file mode 100644
index e0a66705..00000000
--- a/MANIFEST.in
+++ /dev/null
@@ -1,25 +0,0 @@
-# -*- coding: utf-8 -*-
-#
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Generated by synthtool. DO NOT EDIT!
-include README.rst LICENSE
-recursive-include google *.json *.proto py.typed
-recursive-include tests *
-global-exclude *.py[co]
-global-exclude __pycache__
-
-# Exclude scripts for samples readmegen
-prune scripts/readme-gen
diff --git a/README.rst b/README.rst
index e96ae336..558abc64 100644
--- a/README.rst
+++ b/README.rst
@@ -1,3 +1,8 @@
+:**NOTE**: **This github repository is archived. The repository contents and history have moved to** `google-cloud-python`_.
+
+.. _google-cloud-python: https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-kms
+
+
 Python Client for Google Cloud Key Management Service API
 =========================================================
 
diff --git a/UPGRADING.md b/UPGRADING.md
deleted file mode 100644
index 2162b463..00000000
--- a/UPGRADING.md
+++ /dev/null
@@ -1,173 +0,0 @@
-# 2.0.0 Migration Guide
-
-The 2.0 release of the `google-cloud-kms` client is a significant upgrade based on a [next-gen code generator](https://github.com/googleapis/gapic-generator-python), and includes substantial interface changes. Existing code written for earlier versions of this library will likely require updates to use this version. This document describes the changes that have been made, and what you need to do to update your usage.
-
-If you experience issues or have questions, please file an [issue](https://github.com/googleapis/python-kms/issues).
-
-## Supported Python Versions
-
-> **WARNING**: Breaking change
-
-The 2.0.0 release requires Python 3.6+.
-
-
-## Method Calls
-
-> **WARNING**: Breaking change
-
-Methods expect request objects. We provide a script that will convert most common use cases.
-
-* Install the library with `libcst`.
-
-```py
-python3 -m pip install google-cloud-kms[libcst]
-```
-
-* The script `fixup_kms_v1_keywords.py` is shipped with the library. It expects
-an input directory (with the code to convert) and an empty destination directory.
-
-```sh
-$ fixup_kms_v1_keywords.py --input-directory .samples/ --output-directory samples/
-```
-
-**Before:**
-```py
- from google.cloud import kms
-
-client = kms.KeyManagementServiceClient()
-location_name = client.location_path(project_id, location_id)
-key_ring = {}
-
-created_key_ring = client.create_key_ring(location_name, id, key_ring)
-```
-
-
-**After:**
-```py
-from google.cloud import kms
-
-client = kms.KeyManagementServiceClient()
-location_name = f'projects/{project_id}/locations/{location_id}'
-key_ring = {}
-
-created_key_ring = client.create_key_ring(request={'parent': location_name, 'key_ring_id': id, 'key_ring': key_ring})
-```
-
-### More Details
-
-In `google-cloud-kms<2.0.0`, parameters required by the API were positional parameters and optional parameters were keyword parameters.
-
-**Before:**
-```py
-    def create_key_ring(
-        self,
-        parent,
-        key_ring_id,
-        key_ring,
-        retry=google.api_core.gapic_v1.method.DEFAULT,
-        timeout=google.api_core.gapic_v1.method.DEFAULT,
-        metadata=None,
-    ):
-```
-
-In the 2.0.0 release, all methods have a single positional parameter `request`. Method docstrings indicate whether a parameter is required or optional.
-
-Some methods have additional keyword only parameters. The available parameters depend on the `google.api.method_signature` annotation specified by the API producer.
-
-
-**After:**
-```py
-    def create_key_ring(
-        self,
-        request: service.CreateKeyRingRequest = None,
-        *,
-        parent: str = None,
-        key_ring_id: str = None,
-        key_ring: resources.KeyRing = None,
-        retry: retries.Retry = gapic_v1.method.DEFAULT,
-        timeout: float = None,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.KeyRing:
-```
-
-> **NOTE:** The `request` parameter and flattened keyword parameters for the API are mutually exclusive.
-> Passing both will result in an error.
-
-
-Both of these calls are valid:
-
-```py
-response = client.create_key_ring(
-    request={
-        "parent": parent,
-        "key_ring_id": key_ring_id,
-        "key_ring": key_ring
-    }
-)
-```
-
-```py
-response = client.create_key_ring(
-    parent=parent,
-    key_ring_id=key_ring_id,
-    key_ring=key_ring
-)
-```
-
-This call is invalid because it mixes `request` with a keyword argument `key_ring`. Executing this code
-will result in an error.
-
-```py
-response = client.create_key_ring(
-    request={
-        "parent": parent,
-        "key_ring_id": key_ring_id,
-    },
-    key_ring=key_ring
-)
-```
-
-
-
-## Enums and Types
-
-
-> **WARNING**: Breaking change
-
-The submodules `enums` and `types` have been removed.
-
-**Before:**
-```py
-
- from google.cloud import kms
-
-purpose = kms.enums.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN
-key_ring = kms.types.KeyRing()
-```
-
-
-**After:**
-```py
-from google.cloud import kms
-
-purpose = kms.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN
-key_ring = kms.KeyRing()
-```
-
-## Resource Path Helper Methods
-
-The resource path helper method `location_path` has been removed. Please construct
-this path manually.
-
-```py
-project = 'my-project'
-location = 'us-east1'
-
-location_path = f'projects/{project}/locations/{location}'
-```
-
-The resource path helper method `crypto_key_path_path` has been renamed to `crypto_key_path`.
-
-```py
-name = client.crypto_key_path('PROJECT_ID', 'LOCATION_ID', 'KEY_RING_ID', 'CRYPTO_KEY_ID')
-```
diff --git a/docs/README.rst b/docs/README.rst
deleted file mode 120000
index 89a01069..00000000
--- a/docs/README.rst
+++ /dev/null
@@ -1 +0,0 @@
-../README.rst
\ No newline at end of file
diff --git a/docs/UPGRADING.md b/docs/UPGRADING.md
deleted file mode 120000
index 01097c8c..00000000
--- a/docs/UPGRADING.md
+++ /dev/null
@@ -1 +0,0 @@
-../UPGRADING.md
\ No newline at end of file
diff --git a/docs/_static/custom.css b/docs/_static/custom.css
deleted file mode 100644
index b0a29546..00000000
--- a/docs/_static/custom.css
+++ /dev/null
@@ -1,20 +0,0 @@
-div#python2-eol {
-	border-color: red;
-	border-width: medium;
-}
-
-/* Ensure minimum width for 'Parameters' / 'Returns' column */
-dl.field-list > dt {
-    min-width: 100px
-}
-
-/* Insert space between methods for readability */
-dl.method {
-	padding-top: 10px;
-	padding-bottom: 10px
-}
-
-/* Insert empty space between classes */
-dl.class {
-	padding-bottom: 50px
-}
diff --git a/docs/_templates/layout.html b/docs/_templates/layout.html
deleted file mode 100644
index 6316a537..00000000
--- a/docs/_templates/layout.html
+++ /dev/null
@@ -1,50 +0,0 @@
-
-{% extends "!layout.html" %}
-{%- block content %}
-{%- if theme_fixed_sidebar|lower == 'true' %}
-  <div class="document">
-    {{ sidebar() }}
-    {%- block document %}
-      <div class="documentwrapper">
-      {%- if render_sidebar %}
-        <div class="bodywrapper">
-      {%- endif %}
-
-          {%- block relbar_top %}
-            {%- if theme_show_relbar_top|tobool %}
-              <div class="related top">
-                &nbsp;
-                {{- rellink_markup () }}
-              </div>
-            {%- endif %}
-          {% endblock %}
-
-          <div class="body" role="main">
-          	<div class="admonition" id="python2-eol"> 
-          	 As of January 1, 2020 this library no longer supports Python 2 on the latest released version. 
-          	 Library versions released prior to that date will continue to be available. For more information please
-          	 visit <a href="https://cloud.google.com/python/docs/python2-sunset/">Python 2 support on Google Cloud</a>.
-          	</div>
-            {% block body %} {% endblock %}
-          </div>
-
-          {%- block relbar_bottom %}
-            {%- if theme_show_relbar_bottom|tobool %}
-              <div class="related bottom">
-                &nbsp;
-                {{- rellink_markup () }}
-              </div>
-            {%- endif %}
-          {% endblock %}
-
-      {%- if render_sidebar %}
-        </div>
-      {%- endif %}
-      </div>
-    {%- endblock %}
-    <div class="clearer"></div>
-  </div>
-{%- else %}
-{{ super() }}
-{%- endif %}
-{%- endblock %}
diff --git a/docs/changelog.md b/docs/changelog.md
deleted file mode 120000
index 04c99a55..00000000
--- a/docs/changelog.md
+++ /dev/null
@@ -1 +0,0 @@
-../CHANGELOG.md
\ No newline at end of file
diff --git a/docs/conf.py b/docs/conf.py
deleted file mode 100644
index 0a708c0e..00000000
--- a/docs/conf.py
+++ /dev/null
@@ -1,384 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# google-cloud-kms documentation build configuration file
-#
-# This file is execfile()d with the current directory set to its
-# containing dir.
-#
-# Note that not all possible configuration values are present in this
-# autogenerated file.
-#
-# All configuration values have a default; values that are commented out
-# serve to show the default.
-
-import os
-import shlex
-import sys
-
-# If extensions (or modules to document with autodoc) are in another directory,
-# add these directories to sys.path here. If the directory is relative to the
-# documentation root, use os.path.abspath to make it absolute, like shown here.
-sys.path.insert(0, os.path.abspath(".."))
-
-# For plugins that can not read conf.py.
-# See also: https://github.com/docascode/sphinx-docfx-yaml/issues/85
-sys.path.insert(0, os.path.abspath("."))
-
-__version__ = ""
-
-# -- General configuration ------------------------------------------------
-
-# If your documentation needs a minimal Sphinx version, state it here.
-needs_sphinx = "1.5.5"
-
-# Add any Sphinx extension module names here, as strings. They can be
-# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
-# ones.
-extensions = [
-    "sphinx.ext.autodoc",
-    "sphinx.ext.autosummary",
-    "sphinx.ext.intersphinx",
-    "sphinx.ext.coverage",
-    "sphinx.ext.doctest",
-    "sphinx.ext.napoleon",
-    "sphinx.ext.todo",
-    "sphinx.ext.viewcode",
-    "recommonmark",
-]
-
-# autodoc/autosummary flags
-autoclass_content = "both"
-autodoc_default_options = {"members": True}
-autosummary_generate = True
-
-
-# Add any paths that contain templates here, relative to this directory.
-templates_path = ["_templates"]
-
-# The suffix(es) of source filenames.
-# You can specify multiple suffix as a list of string:
-# source_suffix = ['.rst', '.md']
-source_suffix = [".rst", ".md"]
-
-# The encoding of source files.
-# source_encoding = 'utf-8-sig'
-
-# The root toctree document.
-root_doc = "index"
-
-# General information about the project.
-project = "google-cloud-kms"
-copyright = "2019, Google"
-author = "Google APIs"
-
-# The version info for the project you're documenting, acts as replacement for
-# |version| and |release|, also used in various other places throughout the
-# built documents.
-#
-# The full version, including alpha/beta/rc tags.
-release = __version__
-# The short X.Y version.
-version = ".".join(release.split(".")[0:2])
-
-# The language for content autogenerated by Sphinx. Refer to documentation
-# for a list of supported languages.
-#
-# This is also used if you do content translation via gettext catalogs.
-# Usually you set "language" from the command line for these cases.
-language = None
-
-# There are two options for replacing |today|: either, you set today to some
-# non-false value, then it is used:
-# today = ''
-# Else, today_fmt is used as the format for a strftime call.
-# today_fmt = '%B %d, %Y'
-
-# List of patterns, relative to source directory, that match files and
-# directories to ignore when looking for source files.
-exclude_patterns = [
-    "_build",
-    "**/.nox/**/*",
-    "samples/AUTHORING_GUIDE.md",
-    "samples/CONTRIBUTING.md",
-    "samples/snippets/README.rst",
-]
-
-# The reST default role (used for this markup: `text`) to use for all
-# documents.
-# default_role = None
-
-# If true, '()' will be appended to :func: etc. cross-reference text.
-# add_function_parentheses = True
-
-# If true, the current module name will be prepended to all description
-# unit titles (such as .. function::).
-# add_module_names = True
-
-# If true, sectionauthor and moduleauthor directives will be shown in the
-# output. They are ignored by default.
-# show_authors = False
-
-# The name of the Pygments (syntax highlighting) style to use.
-pygments_style = "sphinx"
-
-# A list of ignored prefixes for module index sorting.
-# modindex_common_prefix = []
-
-# If true, keep warnings as "system message" paragraphs in the built documents.
-# keep_warnings = False
-
-# If true, `todo` and `todoList` produce output, else they produce nothing.
-todo_include_todos = True
-
-
-# -- Options for HTML output ----------------------------------------------
-
-# The theme to use for HTML and HTML Help pages.  See the documentation for
-# a list of builtin themes.
-html_theme = "alabaster"
-
-# Theme options are theme-specific and customize the look and feel of a theme
-# further.  For a list of options available for each theme, see the
-# documentation.
-html_theme_options = {
-    "description": "Google Cloud Client Libraries for google-cloud-kms",
-    "github_user": "googleapis",
-    "github_repo": "python-kms",
-    "github_banner": True,
-    "font_family": "'Roboto', Georgia, sans",
-    "head_font_family": "'Roboto', Georgia, serif",
-    "code_font_family": "'Roboto Mono', 'Consolas', monospace",
-}
-
-# Add any paths that contain custom themes here, relative to this directory.
-# html_theme_path = []
-
-# The name for this set of Sphinx documents.  If None, it defaults to
-# "<project> v<release> documentation".
-# html_title = None
-
-# A shorter title for the navigation bar.  Default is the same as html_title.
-# html_short_title = None
-
-# The name of an image file (relative to this directory) to place at the top
-# of the sidebar.
-# html_logo = None
-
-# The name of an image file (within the static path) to use as favicon of the
-# docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
-# pixels large.
-# html_favicon = None
-
-# Add any paths that contain custom static files (such as style sheets) here,
-# relative to this directory. They are copied after the builtin static files,
-# so a file named "default.css" will overwrite the builtin "default.css".
-html_static_path = ["_static"]
-
-# Add any extra paths that contain custom files (such as robots.txt or
-# .htaccess) here, relative to this directory. These files are copied
-# directly to the root of the documentation.
-# html_extra_path = []
-
-# If not '', a 'Last updated on:' timestamp is inserted at every page bottom,
-# using the given strftime format.
-# html_last_updated_fmt = '%b %d, %Y'
-
-# If true, SmartyPants will be used to convert quotes and dashes to
-# typographically correct entities.
-# html_use_smartypants = True
-
-# Custom sidebar templates, maps document names to template names.
-# html_sidebars = {}
-
-# Additional templates that should be rendered to pages, maps page names to
-# template names.
-# html_additional_pages = {}
-
-# If false, no module index is generated.
-# html_domain_indices = True
-
-# If false, no index is generated.
-# html_use_index = True
-
-# If true, the index is split into individual pages for each letter.
-# html_split_index = False
-
-# If true, links to the reST sources are added to the pages.
-# html_show_sourcelink = True
-
-# If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
-# html_show_sphinx = True
-
-# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
-# html_show_copyright = True
-
-# If true, an OpenSearch description file will be output, and all pages will
-# contain a <link> tag referring to it.  The value of this option must be the
-# base URL from which the finished HTML is served.
-# html_use_opensearch = ''
-
-# This is the file name suffix for HTML files (e.g. ".xhtml").
-# html_file_suffix = None
-
-# Language to be used for generating the HTML full-text search index.
-# Sphinx supports the following languages:
-#   'da', 'de', 'en', 'es', 'fi', 'fr', 'hu', 'it', 'ja'
-#   'nl', 'no', 'pt', 'ro', 'ru', 'sv', 'tr'
-# html_search_language = 'en'
-
-# A dictionary with options for the search language support, empty by default.
-# Now only 'ja' uses this config value
-# html_search_options = {'type': 'default'}
-
-# The name of a javascript file (relative to the configuration directory) that
-# implements a search results scorer. If empty, the default will be used.
-# html_search_scorer = 'scorer.js'
-
-# Output file base name for HTML help builder.
-htmlhelp_basename = "google-cloud-kms-doc"
-
-# -- Options for warnings ------------------------------------------------------
-
-
-suppress_warnings = [
-    # Temporarily suppress this to avoid "more than one target found for
-    # cross-reference" warning, which are intractable for us to avoid while in
-    # a mono-repo.
-    # See https://github.com/sphinx-doc/sphinx/blob
-    # /2a65ffeef5c107c19084fabdd706cdff3f52d93c/sphinx/domains/python.py#L843
-    "ref.python"
-]
-
-# -- Options for LaTeX output ---------------------------------------------
-
-latex_elements = {
-    # The paper size ('letterpaper' or 'a4paper').
-    #'papersize': 'letterpaper',
-    # The font size ('10pt', '11pt' or '12pt').
-    #'pointsize': '10pt',
-    # Additional stuff for the LaTeX preamble.
-    #'preamble': '',
-    # Latex figure (float) alignment
-    #'figure_align': 'htbp',
-}
-
-# Grouping the document tree into LaTeX files. List of tuples
-# (source start file, target name, title,
-#  author, documentclass [howto, manual, or own class]).
-latex_documents = [
-    (
-        root_doc,
-        "google-cloud-kms.tex",
-        "google-cloud-kms Documentation",
-        author,
-        "manual",
-    )
-]
-
-# The name of an image file (relative to this directory) to place at the top of
-# the title page.
-# latex_logo = None
-
-# For "manual" documents, if this is true, then toplevel headings are parts,
-# not chapters.
-# latex_use_parts = False
-
-# If true, show page references after internal links.
-# latex_show_pagerefs = False
-
-# If true, show URL addresses after external links.
-# latex_show_urls = False
-
-# Documents to append as an appendix to all manuals.
-# latex_appendices = []
-
-# If false, no module index is generated.
-# latex_domain_indices = True
-
-
-# -- Options for manual page output ---------------------------------------
-
-# One entry per manual page. List of tuples
-# (source start file, name, description, authors, manual section).
-man_pages = [
-    (
-        root_doc,
-        "google-cloud-kms",
-        "google-cloud-kms Documentation",
-        [author],
-        1,
-    )
-]
-
-# If true, show URL addresses after external links.
-# man_show_urls = False
-
-
-# -- Options for Texinfo output -------------------------------------------
-
-# Grouping the document tree into Texinfo files. List of tuples
-# (source start file, target name, title, author,
-#  dir menu entry, description, category)
-texinfo_documents = [
-    (
-        root_doc,
-        "google-cloud-kms",
-        "google-cloud-kms Documentation",
-        author,
-        "google-cloud-kms",
-        "google-cloud-kms Library",
-        "APIs",
-    )
-]
-
-# Documents to append as an appendix to all manuals.
-# texinfo_appendices = []
-
-# If false, no module index is generated.
-# texinfo_domain_indices = True
-
-# How to display URL addresses: 'footnote', 'no', or 'inline'.
-# texinfo_show_urls = 'footnote'
-
-# If true, do not generate a @detailmenu in the "Top" node's menu.
-# texinfo_no_detailmenu = False
-
-
-# Example configuration for intersphinx: refer to the Python standard library.
-intersphinx_mapping = {
-    "python": ("https://python.readthedocs.org/en/latest/", None),
-    "google-auth": ("https://googleapis.dev/python/google-auth/latest/", None),
-    "google.api_core": (
-        "https://googleapis.dev/python/google-api-core/latest/",
-        None,
-    ),
-    "grpc": ("https://grpc.github.io/grpc/python/", None),
-    "proto-plus": ("https://proto-plus-python.readthedocs.io/en/latest/", None),
-    "protobuf": ("https://googleapis.dev/python/protobuf/latest/", None),
-}
-
-
-# Napoleon settings
-napoleon_google_docstring = True
-napoleon_numpy_docstring = True
-napoleon_include_private_with_doc = False
-napoleon_include_special_with_doc = True
-napoleon_use_admonition_for_examples = False
-napoleon_use_admonition_for_notes = False
-napoleon_use_admonition_for_references = False
-napoleon_use_ivar = False
-napoleon_use_param = True
-napoleon_use_rtype = True
diff --git a/docs/index.rst b/docs/index.rst
deleted file mode 100644
index 1cfea1f3..00000000
--- a/docs/index.rst
+++ /dev/null
@@ -1,34 +0,0 @@
-.. include:: README.rst
-
-.. include:: multiprocessing.rst
-
-
-API Reference
--------------
-.. toctree::
-    :maxdepth: 2
-
-    kms_v1/services_
-    kms_v1/types_
-
-
-Migration Guide
----------------
-
-See the guide below for instructions on migrating to the latest version.
-
-.. toctree::
-    :maxdepth: 2
-
-    UPGRADING
-
-
-Changelog
----------
-
-For a list of all ``google-cloud-kms`` releases:
-
-.. toctree::
-    :maxdepth: 2
-
-    changelog
diff --git a/docs/kms_v1/ekm_service.rst b/docs/kms_v1/ekm_service.rst
deleted file mode 100644
index 82f6e2a4..00000000
--- a/docs/kms_v1/ekm_service.rst
+++ /dev/null
@@ -1,10 +0,0 @@
-EkmService
-----------------------------
-
-.. automodule:: google.cloud.kms_v1.services.ekm_service
-    :members:
-    :inherited-members:
-
-.. automodule:: google.cloud.kms_v1.services.ekm_service.pagers
-    :members:
-    :inherited-members:
diff --git a/docs/kms_v1/key_management_service.rst b/docs/kms_v1/key_management_service.rst
deleted file mode 100644
index b34ce028..00000000
--- a/docs/kms_v1/key_management_service.rst
+++ /dev/null
@@ -1,10 +0,0 @@
-KeyManagementService
---------------------------------------
-
-.. automodule:: google.cloud.kms_v1.services.key_management_service
-    :members:
-    :inherited-members:
-
-.. automodule:: google.cloud.kms_v1.services.key_management_service.pagers
-    :members:
-    :inherited-members:
diff --git a/docs/kms_v1/services_.rst b/docs/kms_v1/services_.rst
deleted file mode 100644
index 141ddfe4..00000000
--- a/docs/kms_v1/services_.rst
+++ /dev/null
@@ -1,7 +0,0 @@
-Services for Google Cloud Kms v1 API
-====================================
-.. toctree::
-    :maxdepth: 2
-
-    ekm_service
-    key_management_service
diff --git a/docs/kms_v1/types_.rst b/docs/kms_v1/types_.rst
deleted file mode 100644
index c78ef915..00000000
--- a/docs/kms_v1/types_.rst
+++ /dev/null
@@ -1,6 +0,0 @@
-Types for Google Cloud Kms v1 API
-=================================
-
-.. automodule:: google.cloud.kms_v1.types
-    :members:
-    :show-inheritance:
diff --git a/docs/multiprocessing.rst b/docs/multiprocessing.rst
deleted file mode 100644
index 536d17b2..00000000
--- a/docs/multiprocessing.rst
+++ /dev/null
@@ -1,7 +0,0 @@
-.. note::
-
-   Because this client uses :mod:`grpc` library, it is safe to
-   share instances across threads. In multiprocessing scenarios, the best
-   practice is to create client instances *after* the invocation of
-   :func:`os.fork` by :class:`multiprocessing.pool.Pool` or
-   :class:`multiprocessing.Process`.
diff --git a/google/cloud/kms/__init__.py b/google/cloud/kms/__init__.py
deleted file mode 100644
index db476025..00000000
--- a/google/cloud/kms/__init__.py
+++ /dev/null
@@ -1,169 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from google.cloud.kms import gapic_version as package_version
-
-__version__ = package_version.__version__
-
-
-from google.cloud.kms_v1.services.ekm_service.async_client import EkmServiceAsyncClient
-from google.cloud.kms_v1.services.ekm_service.client import EkmServiceClient
-from google.cloud.kms_v1.services.key_management_service.async_client import (
-    KeyManagementServiceAsyncClient,
-)
-from google.cloud.kms_v1.services.key_management_service.client import (
-    KeyManagementServiceClient,
-)
-from google.cloud.kms_v1.types.ekm_service import (
-    Certificate,
-    CreateEkmConnectionRequest,
-    EkmConfig,
-    EkmConnection,
-    GetEkmConfigRequest,
-    GetEkmConnectionRequest,
-    ListEkmConnectionsRequest,
-    ListEkmConnectionsResponse,
-    UpdateEkmConfigRequest,
-    UpdateEkmConnectionRequest,
-    VerifyConnectivityRequest,
-    VerifyConnectivityResponse,
-)
-from google.cloud.kms_v1.types.resources import (
-    CryptoKey,
-    CryptoKeyVersion,
-    CryptoKeyVersionTemplate,
-    ExternalProtectionLevelOptions,
-    ImportJob,
-    KeyOperationAttestation,
-    KeyRing,
-    ProtectionLevel,
-    PublicKey,
-)
-from google.cloud.kms_v1.types.service import (
-    AsymmetricDecryptRequest,
-    AsymmetricDecryptResponse,
-    AsymmetricSignRequest,
-    AsymmetricSignResponse,
-    CreateCryptoKeyRequest,
-    CreateCryptoKeyVersionRequest,
-    CreateImportJobRequest,
-    CreateKeyRingRequest,
-    DecryptRequest,
-    DecryptResponse,
-    DestroyCryptoKeyVersionRequest,
-    Digest,
-    EncryptRequest,
-    EncryptResponse,
-    GenerateRandomBytesRequest,
-    GenerateRandomBytesResponse,
-    GetCryptoKeyRequest,
-    GetCryptoKeyVersionRequest,
-    GetImportJobRequest,
-    GetKeyRingRequest,
-    GetPublicKeyRequest,
-    ImportCryptoKeyVersionRequest,
-    ListCryptoKeysRequest,
-    ListCryptoKeysResponse,
-    ListCryptoKeyVersionsRequest,
-    ListCryptoKeyVersionsResponse,
-    ListImportJobsRequest,
-    ListImportJobsResponse,
-    ListKeyRingsRequest,
-    ListKeyRingsResponse,
-    LocationMetadata,
-    MacSignRequest,
-    MacSignResponse,
-    MacVerifyRequest,
-    MacVerifyResponse,
-    RawDecryptRequest,
-    RawDecryptResponse,
-    RawEncryptRequest,
-    RawEncryptResponse,
-    RestoreCryptoKeyVersionRequest,
-    UpdateCryptoKeyPrimaryVersionRequest,
-    UpdateCryptoKeyRequest,
-    UpdateCryptoKeyVersionRequest,
-)
-
-__all__ = (
-    "EkmServiceClient",
-    "EkmServiceAsyncClient",
-    "KeyManagementServiceClient",
-    "KeyManagementServiceAsyncClient",
-    "Certificate",
-    "CreateEkmConnectionRequest",
-    "EkmConfig",
-    "EkmConnection",
-    "GetEkmConfigRequest",
-    "GetEkmConnectionRequest",
-    "ListEkmConnectionsRequest",
-    "ListEkmConnectionsResponse",
-    "UpdateEkmConfigRequest",
-    "UpdateEkmConnectionRequest",
-    "VerifyConnectivityRequest",
-    "VerifyConnectivityResponse",
-    "CryptoKey",
-    "CryptoKeyVersion",
-    "CryptoKeyVersionTemplate",
-    "ExternalProtectionLevelOptions",
-    "ImportJob",
-    "KeyOperationAttestation",
-    "KeyRing",
-    "PublicKey",
-    "ProtectionLevel",
-    "AsymmetricDecryptRequest",
-    "AsymmetricDecryptResponse",
-    "AsymmetricSignRequest",
-    "AsymmetricSignResponse",
-    "CreateCryptoKeyRequest",
-    "CreateCryptoKeyVersionRequest",
-    "CreateImportJobRequest",
-    "CreateKeyRingRequest",
-    "DecryptRequest",
-    "DecryptResponse",
-    "DestroyCryptoKeyVersionRequest",
-    "Digest",
-    "EncryptRequest",
-    "EncryptResponse",
-    "GenerateRandomBytesRequest",
-    "GenerateRandomBytesResponse",
-    "GetCryptoKeyRequest",
-    "GetCryptoKeyVersionRequest",
-    "GetImportJobRequest",
-    "GetKeyRingRequest",
-    "GetPublicKeyRequest",
-    "ImportCryptoKeyVersionRequest",
-    "ListCryptoKeysRequest",
-    "ListCryptoKeysResponse",
-    "ListCryptoKeyVersionsRequest",
-    "ListCryptoKeyVersionsResponse",
-    "ListImportJobsRequest",
-    "ListImportJobsResponse",
-    "ListKeyRingsRequest",
-    "ListKeyRingsResponse",
-    "LocationMetadata",
-    "MacSignRequest",
-    "MacSignResponse",
-    "MacVerifyRequest",
-    "MacVerifyResponse",
-    "RawDecryptRequest",
-    "RawDecryptResponse",
-    "RawEncryptRequest",
-    "RawEncryptResponse",
-    "RestoreCryptoKeyVersionRequest",
-    "UpdateCryptoKeyPrimaryVersionRequest",
-    "UpdateCryptoKeyRequest",
-    "UpdateCryptoKeyVersionRequest",
-)
diff --git a/google/cloud/kms/gapic_version.py b/google/cloud/kms/gapic_version.py
deleted file mode 100644
index 72b71f9c..00000000
--- a/google/cloud/kms/gapic_version.py
+++ /dev/null
@@ -1,16 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2022 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-__version__ = "2.19.2"  # {x-release-please-version}
diff --git a/google/cloud/kms/py.typed b/google/cloud/kms/py.typed
deleted file mode 100644
index 3720b5f2..00000000
--- a/google/cloud/kms/py.typed
+++ /dev/null
@@ -1,2 +0,0 @@
-# Marker file for PEP 561.
-# The google-cloud-kms package uses inline types.
diff --git a/google/cloud/kms_v1/__init__.py b/google/cloud/kms_v1/__init__.py
deleted file mode 100644
index c9d8d679..00000000
--- a/google/cloud/kms_v1/__init__.py
+++ /dev/null
@@ -1,166 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from google.cloud.kms_v1 import gapic_version as package_version
-
-__version__ = package_version.__version__
-
-
-from .services.ekm_service import EkmServiceAsyncClient, EkmServiceClient
-from .services.key_management_service import (
-    KeyManagementServiceAsyncClient,
-    KeyManagementServiceClient,
-)
-from .types.ekm_service import (
-    Certificate,
-    CreateEkmConnectionRequest,
-    EkmConfig,
-    EkmConnection,
-    GetEkmConfigRequest,
-    GetEkmConnectionRequest,
-    ListEkmConnectionsRequest,
-    ListEkmConnectionsResponse,
-    UpdateEkmConfigRequest,
-    UpdateEkmConnectionRequest,
-    VerifyConnectivityRequest,
-    VerifyConnectivityResponse,
-)
-from .types.resources import (
-    CryptoKey,
-    CryptoKeyVersion,
-    CryptoKeyVersionTemplate,
-    ExternalProtectionLevelOptions,
-    ImportJob,
-    KeyOperationAttestation,
-    KeyRing,
-    ProtectionLevel,
-    PublicKey,
-)
-from .types.service import (
-    AsymmetricDecryptRequest,
-    AsymmetricDecryptResponse,
-    AsymmetricSignRequest,
-    AsymmetricSignResponse,
-    CreateCryptoKeyRequest,
-    CreateCryptoKeyVersionRequest,
-    CreateImportJobRequest,
-    CreateKeyRingRequest,
-    DecryptRequest,
-    DecryptResponse,
-    DestroyCryptoKeyVersionRequest,
-    Digest,
-    EncryptRequest,
-    EncryptResponse,
-    GenerateRandomBytesRequest,
-    GenerateRandomBytesResponse,
-    GetCryptoKeyRequest,
-    GetCryptoKeyVersionRequest,
-    GetImportJobRequest,
-    GetKeyRingRequest,
-    GetPublicKeyRequest,
-    ImportCryptoKeyVersionRequest,
-    ListCryptoKeysRequest,
-    ListCryptoKeysResponse,
-    ListCryptoKeyVersionsRequest,
-    ListCryptoKeyVersionsResponse,
-    ListImportJobsRequest,
-    ListImportJobsResponse,
-    ListKeyRingsRequest,
-    ListKeyRingsResponse,
-    LocationMetadata,
-    MacSignRequest,
-    MacSignResponse,
-    MacVerifyRequest,
-    MacVerifyResponse,
-    RawDecryptRequest,
-    RawDecryptResponse,
-    RawEncryptRequest,
-    RawEncryptResponse,
-    RestoreCryptoKeyVersionRequest,
-    UpdateCryptoKeyPrimaryVersionRequest,
-    UpdateCryptoKeyRequest,
-    UpdateCryptoKeyVersionRequest,
-)
-
-__all__ = (
-    "EkmServiceAsyncClient",
-    "KeyManagementServiceAsyncClient",
-    "AsymmetricDecryptRequest",
-    "AsymmetricDecryptResponse",
-    "AsymmetricSignRequest",
-    "AsymmetricSignResponse",
-    "Certificate",
-    "CreateCryptoKeyRequest",
-    "CreateCryptoKeyVersionRequest",
-    "CreateEkmConnectionRequest",
-    "CreateImportJobRequest",
-    "CreateKeyRingRequest",
-    "CryptoKey",
-    "CryptoKeyVersion",
-    "CryptoKeyVersionTemplate",
-    "DecryptRequest",
-    "DecryptResponse",
-    "DestroyCryptoKeyVersionRequest",
-    "Digest",
-    "EkmConfig",
-    "EkmConnection",
-    "EkmServiceClient",
-    "EncryptRequest",
-    "EncryptResponse",
-    "ExternalProtectionLevelOptions",
-    "GenerateRandomBytesRequest",
-    "GenerateRandomBytesResponse",
-    "GetCryptoKeyRequest",
-    "GetCryptoKeyVersionRequest",
-    "GetEkmConfigRequest",
-    "GetEkmConnectionRequest",
-    "GetImportJobRequest",
-    "GetKeyRingRequest",
-    "GetPublicKeyRequest",
-    "ImportCryptoKeyVersionRequest",
-    "ImportJob",
-    "KeyManagementServiceClient",
-    "KeyOperationAttestation",
-    "KeyRing",
-    "ListCryptoKeyVersionsRequest",
-    "ListCryptoKeyVersionsResponse",
-    "ListCryptoKeysRequest",
-    "ListCryptoKeysResponse",
-    "ListEkmConnectionsRequest",
-    "ListEkmConnectionsResponse",
-    "ListImportJobsRequest",
-    "ListImportJobsResponse",
-    "ListKeyRingsRequest",
-    "ListKeyRingsResponse",
-    "LocationMetadata",
-    "MacSignRequest",
-    "MacSignResponse",
-    "MacVerifyRequest",
-    "MacVerifyResponse",
-    "ProtectionLevel",
-    "PublicKey",
-    "RawDecryptRequest",
-    "RawDecryptResponse",
-    "RawEncryptRequest",
-    "RawEncryptResponse",
-    "RestoreCryptoKeyVersionRequest",
-    "UpdateCryptoKeyPrimaryVersionRequest",
-    "UpdateCryptoKeyRequest",
-    "UpdateCryptoKeyVersionRequest",
-    "UpdateEkmConfigRequest",
-    "UpdateEkmConnectionRequest",
-    "VerifyConnectivityRequest",
-    "VerifyConnectivityResponse",
-)
diff --git a/google/cloud/kms_v1/gapic_metadata.json b/google/cloud/kms_v1/gapic_metadata.json
deleted file mode 100644
index f9f964fa..00000000
--- a/google/cloud/kms_v1/gapic_metadata.json
+++ /dev/null
@@ -1,572 +0,0 @@
- {
-  "comment": "This file maps proto services/RPCs to the corresponding library clients/methods",
-  "language": "python",
-  "libraryPackage": "google.cloud.kms_v1",
-  "protoPackage": "google.cloud.kms.v1",
-  "schema": "1.0",
-  "services": {
-    "EkmService": {
-      "clients": {
-        "grpc": {
-          "libraryClient": "EkmServiceClient",
-          "rpcs": {
-            "CreateEkmConnection": {
-              "methods": [
-                "create_ekm_connection"
-              ]
-            },
-            "GetEkmConfig": {
-              "methods": [
-                "get_ekm_config"
-              ]
-            },
-            "GetEkmConnection": {
-              "methods": [
-                "get_ekm_connection"
-              ]
-            },
-            "ListEkmConnections": {
-              "methods": [
-                "list_ekm_connections"
-              ]
-            },
-            "UpdateEkmConfig": {
-              "methods": [
-                "update_ekm_config"
-              ]
-            },
-            "UpdateEkmConnection": {
-              "methods": [
-                "update_ekm_connection"
-              ]
-            },
-            "VerifyConnectivity": {
-              "methods": [
-                "verify_connectivity"
-              ]
-            }
-          }
-        },
-        "grpc-async": {
-          "libraryClient": "EkmServiceAsyncClient",
-          "rpcs": {
-            "CreateEkmConnection": {
-              "methods": [
-                "create_ekm_connection"
-              ]
-            },
-            "GetEkmConfig": {
-              "methods": [
-                "get_ekm_config"
-              ]
-            },
-            "GetEkmConnection": {
-              "methods": [
-                "get_ekm_connection"
-              ]
-            },
-            "ListEkmConnections": {
-              "methods": [
-                "list_ekm_connections"
-              ]
-            },
-            "UpdateEkmConfig": {
-              "methods": [
-                "update_ekm_config"
-              ]
-            },
-            "UpdateEkmConnection": {
-              "methods": [
-                "update_ekm_connection"
-              ]
-            },
-            "VerifyConnectivity": {
-              "methods": [
-                "verify_connectivity"
-              ]
-            }
-          }
-        },
-        "rest": {
-          "libraryClient": "EkmServiceClient",
-          "rpcs": {
-            "CreateEkmConnection": {
-              "methods": [
-                "create_ekm_connection"
-              ]
-            },
-            "GetEkmConfig": {
-              "methods": [
-                "get_ekm_config"
-              ]
-            },
-            "GetEkmConnection": {
-              "methods": [
-                "get_ekm_connection"
-              ]
-            },
-            "ListEkmConnections": {
-              "methods": [
-                "list_ekm_connections"
-              ]
-            },
-            "UpdateEkmConfig": {
-              "methods": [
-                "update_ekm_config"
-              ]
-            },
-            "UpdateEkmConnection": {
-              "methods": [
-                "update_ekm_connection"
-              ]
-            },
-            "VerifyConnectivity": {
-              "methods": [
-                "verify_connectivity"
-              ]
-            }
-          }
-        }
-      }
-    },
-    "KeyManagementService": {
-      "clients": {
-        "grpc": {
-          "libraryClient": "KeyManagementServiceClient",
-          "rpcs": {
-            "AsymmetricDecrypt": {
-              "methods": [
-                "asymmetric_decrypt"
-              ]
-            },
-            "AsymmetricSign": {
-              "methods": [
-                "asymmetric_sign"
-              ]
-            },
-            "CreateCryptoKey": {
-              "methods": [
-                "create_crypto_key"
-              ]
-            },
-            "CreateCryptoKeyVersion": {
-              "methods": [
-                "create_crypto_key_version"
-              ]
-            },
-            "CreateImportJob": {
-              "methods": [
-                "create_import_job"
-              ]
-            },
-            "CreateKeyRing": {
-              "methods": [
-                "create_key_ring"
-              ]
-            },
-            "Decrypt": {
-              "methods": [
-                "decrypt"
-              ]
-            },
-            "DestroyCryptoKeyVersion": {
-              "methods": [
-                "destroy_crypto_key_version"
-              ]
-            },
-            "Encrypt": {
-              "methods": [
-                "encrypt"
-              ]
-            },
-            "GenerateRandomBytes": {
-              "methods": [
-                "generate_random_bytes"
-              ]
-            },
-            "GetCryptoKey": {
-              "methods": [
-                "get_crypto_key"
-              ]
-            },
-            "GetCryptoKeyVersion": {
-              "methods": [
-                "get_crypto_key_version"
-              ]
-            },
-            "GetImportJob": {
-              "methods": [
-                "get_import_job"
-              ]
-            },
-            "GetKeyRing": {
-              "methods": [
-                "get_key_ring"
-              ]
-            },
-            "GetPublicKey": {
-              "methods": [
-                "get_public_key"
-              ]
-            },
-            "ImportCryptoKeyVersion": {
-              "methods": [
-                "import_crypto_key_version"
-              ]
-            },
-            "ListCryptoKeyVersions": {
-              "methods": [
-                "list_crypto_key_versions"
-              ]
-            },
-            "ListCryptoKeys": {
-              "methods": [
-                "list_crypto_keys"
-              ]
-            },
-            "ListImportJobs": {
-              "methods": [
-                "list_import_jobs"
-              ]
-            },
-            "ListKeyRings": {
-              "methods": [
-                "list_key_rings"
-              ]
-            },
-            "MacSign": {
-              "methods": [
-                "mac_sign"
-              ]
-            },
-            "MacVerify": {
-              "methods": [
-                "mac_verify"
-              ]
-            },
-            "RawDecrypt": {
-              "methods": [
-                "raw_decrypt"
-              ]
-            },
-            "RawEncrypt": {
-              "methods": [
-                "raw_encrypt"
-              ]
-            },
-            "RestoreCryptoKeyVersion": {
-              "methods": [
-                "restore_crypto_key_version"
-              ]
-            },
-            "UpdateCryptoKey": {
-              "methods": [
-                "update_crypto_key"
-              ]
-            },
-            "UpdateCryptoKeyPrimaryVersion": {
-              "methods": [
-                "update_crypto_key_primary_version"
-              ]
-            },
-            "UpdateCryptoKeyVersion": {
-              "methods": [
-                "update_crypto_key_version"
-              ]
-            }
-          }
-        },
-        "grpc-async": {
-          "libraryClient": "KeyManagementServiceAsyncClient",
-          "rpcs": {
-            "AsymmetricDecrypt": {
-              "methods": [
-                "asymmetric_decrypt"
-              ]
-            },
-            "AsymmetricSign": {
-              "methods": [
-                "asymmetric_sign"
-              ]
-            },
-            "CreateCryptoKey": {
-              "methods": [
-                "create_crypto_key"
-              ]
-            },
-            "CreateCryptoKeyVersion": {
-              "methods": [
-                "create_crypto_key_version"
-              ]
-            },
-            "CreateImportJob": {
-              "methods": [
-                "create_import_job"
-              ]
-            },
-            "CreateKeyRing": {
-              "methods": [
-                "create_key_ring"
-              ]
-            },
-            "Decrypt": {
-              "methods": [
-                "decrypt"
-              ]
-            },
-            "DestroyCryptoKeyVersion": {
-              "methods": [
-                "destroy_crypto_key_version"
-              ]
-            },
-            "Encrypt": {
-              "methods": [
-                "encrypt"
-              ]
-            },
-            "GenerateRandomBytes": {
-              "methods": [
-                "generate_random_bytes"
-              ]
-            },
-            "GetCryptoKey": {
-              "methods": [
-                "get_crypto_key"
-              ]
-            },
-            "GetCryptoKeyVersion": {
-              "methods": [
-                "get_crypto_key_version"
-              ]
-            },
-            "GetImportJob": {
-              "methods": [
-                "get_import_job"
-              ]
-            },
-            "GetKeyRing": {
-              "methods": [
-                "get_key_ring"
-              ]
-            },
-            "GetPublicKey": {
-              "methods": [
-                "get_public_key"
-              ]
-            },
-            "ImportCryptoKeyVersion": {
-              "methods": [
-                "import_crypto_key_version"
-              ]
-            },
-            "ListCryptoKeyVersions": {
-              "methods": [
-                "list_crypto_key_versions"
-              ]
-            },
-            "ListCryptoKeys": {
-              "methods": [
-                "list_crypto_keys"
-              ]
-            },
-            "ListImportJobs": {
-              "methods": [
-                "list_import_jobs"
-              ]
-            },
-            "ListKeyRings": {
-              "methods": [
-                "list_key_rings"
-              ]
-            },
-            "MacSign": {
-              "methods": [
-                "mac_sign"
-              ]
-            },
-            "MacVerify": {
-              "methods": [
-                "mac_verify"
-              ]
-            },
-            "RawDecrypt": {
-              "methods": [
-                "raw_decrypt"
-              ]
-            },
-            "RawEncrypt": {
-              "methods": [
-                "raw_encrypt"
-              ]
-            },
-            "RestoreCryptoKeyVersion": {
-              "methods": [
-                "restore_crypto_key_version"
-              ]
-            },
-            "UpdateCryptoKey": {
-              "methods": [
-                "update_crypto_key"
-              ]
-            },
-            "UpdateCryptoKeyPrimaryVersion": {
-              "methods": [
-                "update_crypto_key_primary_version"
-              ]
-            },
-            "UpdateCryptoKeyVersion": {
-              "methods": [
-                "update_crypto_key_version"
-              ]
-            }
-          }
-        },
-        "rest": {
-          "libraryClient": "KeyManagementServiceClient",
-          "rpcs": {
-            "AsymmetricDecrypt": {
-              "methods": [
-                "asymmetric_decrypt"
-              ]
-            },
-            "AsymmetricSign": {
-              "methods": [
-                "asymmetric_sign"
-              ]
-            },
-            "CreateCryptoKey": {
-              "methods": [
-                "create_crypto_key"
-              ]
-            },
-            "CreateCryptoKeyVersion": {
-              "methods": [
-                "create_crypto_key_version"
-              ]
-            },
-            "CreateImportJob": {
-              "methods": [
-                "create_import_job"
-              ]
-            },
-            "CreateKeyRing": {
-              "methods": [
-                "create_key_ring"
-              ]
-            },
-            "Decrypt": {
-              "methods": [
-                "decrypt"
-              ]
-            },
-            "DestroyCryptoKeyVersion": {
-              "methods": [
-                "destroy_crypto_key_version"
-              ]
-            },
-            "Encrypt": {
-              "methods": [
-                "encrypt"
-              ]
-            },
-            "GenerateRandomBytes": {
-              "methods": [
-                "generate_random_bytes"
-              ]
-            },
-            "GetCryptoKey": {
-              "methods": [
-                "get_crypto_key"
-              ]
-            },
-            "GetCryptoKeyVersion": {
-              "methods": [
-                "get_crypto_key_version"
-              ]
-            },
-            "GetImportJob": {
-              "methods": [
-                "get_import_job"
-              ]
-            },
-            "GetKeyRing": {
-              "methods": [
-                "get_key_ring"
-              ]
-            },
-            "GetPublicKey": {
-              "methods": [
-                "get_public_key"
-              ]
-            },
-            "ImportCryptoKeyVersion": {
-              "methods": [
-                "import_crypto_key_version"
-              ]
-            },
-            "ListCryptoKeyVersions": {
-              "methods": [
-                "list_crypto_key_versions"
-              ]
-            },
-            "ListCryptoKeys": {
-              "methods": [
-                "list_crypto_keys"
-              ]
-            },
-            "ListImportJobs": {
-              "methods": [
-                "list_import_jobs"
-              ]
-            },
-            "ListKeyRings": {
-              "methods": [
-                "list_key_rings"
-              ]
-            },
-            "MacSign": {
-              "methods": [
-                "mac_sign"
-              ]
-            },
-            "MacVerify": {
-              "methods": [
-                "mac_verify"
-              ]
-            },
-            "RawDecrypt": {
-              "methods": [
-                "raw_decrypt"
-              ]
-            },
-            "RawEncrypt": {
-              "methods": [
-                "raw_encrypt"
-              ]
-            },
-            "RestoreCryptoKeyVersion": {
-              "methods": [
-                "restore_crypto_key_version"
-              ]
-            },
-            "UpdateCryptoKey": {
-              "methods": [
-                "update_crypto_key"
-              ]
-            },
-            "UpdateCryptoKeyPrimaryVersion": {
-              "methods": [
-                "update_crypto_key_primary_version"
-              ]
-            },
-            "UpdateCryptoKeyVersion": {
-              "methods": [
-                "update_crypto_key_version"
-              ]
-            }
-          }
-        }
-      }
-    }
-  }
-}
diff --git a/google/cloud/kms_v1/gapic_version.py b/google/cloud/kms_v1/gapic_version.py
deleted file mode 100644
index 72b71f9c..00000000
--- a/google/cloud/kms_v1/gapic_version.py
+++ /dev/null
@@ -1,16 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2022 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-__version__ = "2.19.2"  # {x-release-please-version}
diff --git a/google/cloud/kms_v1/py.typed b/google/cloud/kms_v1/py.typed
deleted file mode 100644
index 3720b5f2..00000000
--- a/google/cloud/kms_v1/py.typed
+++ /dev/null
@@ -1,2 +0,0 @@
-# Marker file for PEP 561.
-# The google-cloud-kms package uses inline types.
diff --git a/google/cloud/kms_v1/services/__init__.py b/google/cloud/kms_v1/services/__init__.py
deleted file mode 100644
index 89a37dc9..00000000
--- a/google/cloud/kms_v1/services/__init__.py
+++ /dev/null
@@ -1,15 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
diff --git a/google/cloud/kms_v1/services/ekm_service/__init__.py b/google/cloud/kms_v1/services/ekm_service/__init__.py
deleted file mode 100644
index 0deda15d..00000000
--- a/google/cloud/kms_v1/services/ekm_service/__init__.py
+++ /dev/null
@@ -1,22 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from .async_client import EkmServiceAsyncClient
-from .client import EkmServiceClient
-
-__all__ = (
-    "EkmServiceClient",
-    "EkmServiceAsyncClient",
-)
diff --git a/google/cloud/kms_v1/services/ekm_service/async_client.py b/google/cloud/kms_v1/services/ekm_service/async_client.py
deleted file mode 100644
index 2f229685..00000000
--- a/google/cloud/kms_v1/services/ekm_service/async_client.py
+++ /dev/null
@@ -1,1522 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from collections import OrderedDict
-import functools
-import re
-from typing import (
-    Dict,
-    Mapping,
-    MutableMapping,
-    MutableSequence,
-    Optional,
-    Sequence,
-    Tuple,
-    Type,
-    Union,
-)
-
-from google.api_core import exceptions as core_exceptions
-from google.api_core import gapic_v1
-from google.api_core import retry as retries
-from google.api_core.client_options import ClientOptions
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.oauth2 import service_account  # type: ignore
-
-from google.cloud.kms_v1 import gapic_version as package_version
-
-try:
-    OptionalRetry = Union[retries.Retry, gapic_v1.method._MethodDefault]
-except AttributeError:  # pragma: NO COVER
-    OptionalRetry = Union[retries.Retry, object]  # type: ignore
-
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import timestamp_pb2  # type: ignore
-
-from google.cloud.kms_v1.services.ekm_service import pagers
-from google.cloud.kms_v1.types import ekm_service
-
-from .client import EkmServiceClient
-from .transports.base import DEFAULT_CLIENT_INFO, EkmServiceTransport
-from .transports.grpc_asyncio import EkmServiceGrpcAsyncIOTransport
-
-
-class EkmServiceAsyncClient:
-    """Google Cloud Key Management EKM Service
-
-    Manages external cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [EkmConnection][google.cloud.kms.v1.EkmConnection]
-    """
-
-    _client: EkmServiceClient
-
-    DEFAULT_ENDPOINT = EkmServiceClient.DEFAULT_ENDPOINT
-    DEFAULT_MTLS_ENDPOINT = EkmServiceClient.DEFAULT_MTLS_ENDPOINT
-
-    ekm_config_path = staticmethod(EkmServiceClient.ekm_config_path)
-    parse_ekm_config_path = staticmethod(EkmServiceClient.parse_ekm_config_path)
-    ekm_connection_path = staticmethod(EkmServiceClient.ekm_connection_path)
-    parse_ekm_connection_path = staticmethod(EkmServiceClient.parse_ekm_connection_path)
-    service_path = staticmethod(EkmServiceClient.service_path)
-    parse_service_path = staticmethod(EkmServiceClient.parse_service_path)
-    common_billing_account_path = staticmethod(
-        EkmServiceClient.common_billing_account_path
-    )
-    parse_common_billing_account_path = staticmethod(
-        EkmServiceClient.parse_common_billing_account_path
-    )
-    common_folder_path = staticmethod(EkmServiceClient.common_folder_path)
-    parse_common_folder_path = staticmethod(EkmServiceClient.parse_common_folder_path)
-    common_organization_path = staticmethod(EkmServiceClient.common_organization_path)
-    parse_common_organization_path = staticmethod(
-        EkmServiceClient.parse_common_organization_path
-    )
-    common_project_path = staticmethod(EkmServiceClient.common_project_path)
-    parse_common_project_path = staticmethod(EkmServiceClient.parse_common_project_path)
-    common_location_path = staticmethod(EkmServiceClient.common_location_path)
-    parse_common_location_path = staticmethod(
-        EkmServiceClient.parse_common_location_path
-    )
-
-    @classmethod
-    def from_service_account_info(cls, info: dict, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            info.
-
-        Args:
-            info (dict): The service account private key info.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            EkmServiceAsyncClient: The constructed client.
-        """
-        return EkmServiceClient.from_service_account_info.__func__(EkmServiceAsyncClient, info, *args, **kwargs)  # type: ignore
-
-    @classmethod
-    def from_service_account_file(cls, filename: str, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            file.
-
-        Args:
-            filename (str): The path to the service account private key json
-                file.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            EkmServiceAsyncClient: The constructed client.
-        """
-        return EkmServiceClient.from_service_account_file.__func__(EkmServiceAsyncClient, filename, *args, **kwargs)  # type: ignore
-
-    from_service_account_json = from_service_account_file
-
-    @classmethod
-    def get_mtls_endpoint_and_cert_source(
-        cls, client_options: Optional[ClientOptions] = None
-    ):
-        """Return the API endpoint and client cert source for mutual TLS.
-
-        The client cert source is determined in the following order:
-        (1) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is not "true", the
-        client cert source is None.
-        (2) if `client_options.client_cert_source` is provided, use the provided one; if the
-        default client cert source exists, use the default one; otherwise the client cert
-        source is None.
-
-        The API endpoint is determined in the following order:
-        (1) if `client_options.api_endpoint` if provided, use the provided one.
-        (2) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is "always", use the
-        default mTLS endpoint; if the environment variable is "never", use the default API
-        endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise
-        use the default API endpoint.
-
-        More details can be found at https://google.aip.dev/auth/4114.
-
-        Args:
-            client_options (google.api_core.client_options.ClientOptions): Custom options for the
-                client. Only the `api_endpoint` and `client_cert_source` properties may be used
-                in this method.
-
-        Returns:
-            Tuple[str, Callable[[], Tuple[bytes, bytes]]]: returns the API endpoint and the
-                client cert source to use.
-
-        Raises:
-            google.auth.exceptions.MutualTLSChannelError: If any errors happen.
-        """
-        return EkmServiceClient.get_mtls_endpoint_and_cert_source(client_options)  # type: ignore
-
-    @property
-    def transport(self) -> EkmServiceTransport:
-        """Returns the transport used by the client instance.
-
-        Returns:
-            EkmServiceTransport: The transport used by the client instance.
-        """
-        return self._client.transport
-
-    get_transport_class = functools.partial(
-        type(EkmServiceClient).get_transport_class, type(EkmServiceClient)
-    )
-
-    def __init__(
-        self,
-        *,
-        credentials: Optional[ga_credentials.Credentials] = None,
-        transport: Union[str, EkmServiceTransport] = "grpc_asyncio",
-        client_options: Optional[ClientOptions] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-    ) -> None:
-        """Instantiates the ekm service client.
-
-        Args:
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-            transport (Union[str, ~.EkmServiceTransport]): The
-                transport to use. If set to None, a transport is chosen
-                automatically.
-            client_options (ClientOptions): Custom options for the client. It
-                won't take effect if a ``transport`` instance is provided.
-                (1) The ``api_endpoint`` property can be used to override the
-                default endpoint provided by the client. GOOGLE_API_USE_MTLS_ENDPOINT
-                environment variable can also be used to override the endpoint:
-                "always" (always use the default mTLS endpoint), "never" (always
-                use the default regular endpoint) and "auto" (auto switch to the
-                default mTLS endpoint if client certificate is present, this is
-                the default value). However, the ``api_endpoint`` property takes
-                precedence if provided.
-                (2) If GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable
-                is "true", then the ``client_cert_source`` property can be used
-                to provide client certificate for mutual TLS transport. If
-                not provided, the default SSL client certificate will be used if
-                present. If GOOGLE_API_USE_CLIENT_CERTIFICATE is "false" or not
-                set, no client certificate will be used.
-
-        Raises:
-            google.auth.exceptions.MutualTlsChannelError: If mutual TLS transport
-                creation failed for any reason.
-        """
-        self._client = EkmServiceClient(
-            credentials=credentials,
-            transport=transport,
-            client_options=client_options,
-            client_info=client_info,
-        )
-
-    async def list_ekm_connections(
-        self,
-        request: Optional[Union[ekm_service.ListEkmConnectionsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListEkmConnectionsAsyncPager:
-        r"""Lists [EkmConnections][google.cloud.kms.v1.EkmConnection].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_list_ekm_connections():
-                # Create a client
-                client = kms_v1.EkmServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListEkmConnectionsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_ekm_connections(request=request)
-
-                # Handle the response
-                async for response in page_result:
-                    print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.ListEkmConnectionsRequest, dict]]):
-                The request object. Request message for
-                [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-            parent (:class:`str`):
-                Required. The resource name of the location associated
-                with the
-                [EkmConnections][google.cloud.kms.v1.EkmConnection] to
-                list, in the format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.ekm_service.pagers.ListEkmConnectionsAsyncPager:
-                Response message for
-                   [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = ekm_service.ListEkmConnectionsRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.list_ekm_connections,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__aiter__` convenience method.
-        response = pagers.ListEkmConnectionsAsyncPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_ekm_connection(
-        self,
-        request: Optional[Union[ekm_service.GetEkmConnectionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConnection:
-        r"""Returns metadata for a given
-        [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_get_ekm_connection():
-                # Create a client
-                client = kms_v1.EkmServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetEkmConnectionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.get_ekm_connection(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GetEkmConnectionRequest, dict]]):
-                The request object. Request message for
-                [EkmService.GetEkmConnection][google.cloud.kms.v1.EkmService.GetEkmConnection].
-            name (:class:`str`):
-                Required. The
-                [name][google.cloud.kms.v1.EkmConnection.name] of the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConnection:
-                An [EkmConnection][google.cloud.kms.v1.EkmConnection] represents an
-                   individual EKM connection. It can be used for
-                   creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                   and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                   as well as performing cryptographic operations using
-                   keys created within the
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = ekm_service.GetEkmConnectionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_ekm_connection,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def create_ekm_connection(
-        self,
-        request: Optional[Union[ekm_service.CreateEkmConnectionRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        ekm_connection_id: Optional[str] = None,
-        ekm_connection: Optional[ekm_service.EkmConnection] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConnection:
-        r"""Creates a new [EkmConnection][google.cloud.kms.v1.EkmConnection]
-        in a given Project and Location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_create_ekm_connection():
-                # Create a client
-                client = kms_v1.EkmServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateEkmConnectionRequest(
-                    parent="parent_value",
-                    ekm_connection_id="ekm_connection_id_value",
-                )
-
-                # Make the request
-                response = await client.create_ekm_connection(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.CreateEkmConnectionRequest, dict]]):
-                The request object. Request message for
-                [EkmService.CreateEkmConnection][google.cloud.kms.v1.EkmService.CreateEkmConnection].
-            parent (:class:`str`):
-                Required. The resource name of the location associated
-                with the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection], in
-                the format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ekm_connection_id (:class:`str`):
-                Required. It must be unique within a location and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``.
-
-                This corresponds to the ``ekm_connection_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ekm_connection (:class:`google.cloud.kms_v1.types.EkmConnection`):
-                Required. An
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] with
-                initial field values.
-
-                This corresponds to the ``ekm_connection`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConnection:
-                An [EkmConnection][google.cloud.kms.v1.EkmConnection] represents an
-                   individual EKM connection. It can be used for
-                   creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                   and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                   as well as performing cryptographic operations using
-                   keys created within the
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, ekm_connection_id, ekm_connection])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = ekm_service.CreateEkmConnectionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-        if ekm_connection_id is not None:
-            request.ekm_connection_id = ekm_connection_id
-        if ekm_connection is not None:
-            request.ekm_connection = ekm_connection
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.create_ekm_connection,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def update_ekm_connection(
-        self,
-        request: Optional[Union[ekm_service.UpdateEkmConnectionRequest, dict]] = None,
-        *,
-        ekm_connection: Optional[ekm_service.EkmConnection] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConnection:
-        r"""Updates an [EkmConnection][google.cloud.kms.v1.EkmConnection]'s
-        metadata.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_update_ekm_connection():
-                # Create a client
-                client = kms_v1.EkmServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateEkmConnectionRequest(
-                )
-
-                # Make the request
-                response = await client.update_ekm_connection(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.UpdateEkmConnectionRequest, dict]]):
-                The request object. Request message for
-                [EkmService.UpdateEkmConnection][google.cloud.kms.v1.EkmService.UpdateEkmConnection].
-            ekm_connection (:class:`google.cloud.kms_v1.types.EkmConnection`):
-                Required.
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] with
-                updated values.
-
-                This corresponds to the ``ekm_connection`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (:class:`google.protobuf.field_mask_pb2.FieldMask`):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConnection:
-                An [EkmConnection][google.cloud.kms.v1.EkmConnection] represents an
-                   individual EKM connection. It can be used for
-                   creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                   and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                   as well as performing cryptographic operations using
-                   keys created within the
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([ekm_connection, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = ekm_service.UpdateEkmConnectionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if ekm_connection is not None:
-            request.ekm_connection = ekm_connection
-        if update_mask is not None:
-            request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.update_ekm_connection,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("ekm_connection.name", request.ekm_connection.name),)
-            ),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_ekm_config(
-        self,
-        request: Optional[Union[ekm_service.GetEkmConfigRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConfig:
-        r"""Returns the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_get_ekm_config():
-                # Create a client
-                client = kms_v1.EkmServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetEkmConfigRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.get_ekm_config(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GetEkmConfigRequest, dict]]):
-                The request object. Request message for
-                [EkmService.GetEkmConfig][google.cloud.kms.v1.EkmService.GetEkmConfig].
-            name (:class:`str`):
-                Required. The [name][google.cloud.kms.v1.EkmConfig.name]
-                of the [EkmConfig][google.cloud.kms.v1.EkmConfig] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConfig:
-                An [EkmConfig][google.cloud.kms.v1.EkmConfig] is a singleton resource that
-                   represents configuration parameters that apply to all
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC]
-                   in a given project and location.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = ekm_service.GetEkmConfigRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_ekm_config,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def update_ekm_config(
-        self,
-        request: Optional[Union[ekm_service.UpdateEkmConfigRequest, dict]] = None,
-        *,
-        ekm_config: Optional[ekm_service.EkmConfig] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConfig:
-        r"""Updates the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_update_ekm_config():
-                # Create a client
-                client = kms_v1.EkmServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateEkmConfigRequest(
-                )
-
-                # Make the request
-                response = await client.update_ekm_config(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.UpdateEkmConfigRequest, dict]]):
-                The request object. Request message for
-                [EkmService.UpdateEkmConfig][google.cloud.kms.v1.EkmService.UpdateEkmConfig].
-            ekm_config (:class:`google.cloud.kms_v1.types.EkmConfig`):
-                Required. [EkmConfig][google.cloud.kms.v1.EkmConfig]
-                with updated values.
-
-                This corresponds to the ``ekm_config`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (:class:`google.protobuf.field_mask_pb2.FieldMask`):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConfig:
-                An [EkmConfig][google.cloud.kms.v1.EkmConfig] is a singleton resource that
-                   represents configuration parameters that apply to all
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC]
-                   in a given project and location.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([ekm_config, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = ekm_service.UpdateEkmConfigRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if ekm_config is not None:
-            request.ekm_config = ekm_config
-        if update_mask is not None:
-            request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.update_ekm_config,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("ekm_config.name", request.ekm_config.name),)
-            ),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def verify_connectivity(
-        self,
-        request: Optional[Union[ekm_service.VerifyConnectivityRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.VerifyConnectivityResponse:
-        r"""Verifies that Cloud KMS can successfully connect to the external
-        key manager specified by an
-        [EkmConnection][google.cloud.kms.v1.EkmConnection]. If there is
-        an error connecting to the EKM, this method returns a
-        FAILED_PRECONDITION status containing structured information as
-        described at
-        https://cloud.google.com/kms/docs/reference/ekm_errors.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_verify_connectivity():
-                # Create a client
-                client = kms_v1.EkmServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.VerifyConnectivityRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.verify_connectivity(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.VerifyConnectivityRequest, dict]]):
-                The request object. Request message for
-                [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-            name (:class:`str`):
-                Required. The
-                [name][google.cloud.kms.v1.EkmConnection.name] of the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] to
-                verify.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.VerifyConnectivityResponse:
-                Response message for
-                   [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = ekm_service.VerifyConnectivityRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.verify_connectivity,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_location(
-        self,
-        request: Optional[locations_pb2.GetLocationRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.Location:
-        r"""Gets information about a location.
-
-        Args:
-            request (:class:`~.location_pb2.GetLocationRequest`):
-                The request object. Request message for
-                `GetLocation` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.Location:
-                Location object.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.GetLocationRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._client._transport.get_location,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def list_locations(
-        self,
-        request: Optional[locations_pb2.ListLocationsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.ListLocationsResponse:
-        r"""Lists information about the supported locations for this service.
-
-        Args:
-            request (:class:`~.location_pb2.ListLocationsRequest`):
-                The request object. Request message for
-                `ListLocations` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.ListLocationsResponse:
-                Response message for ``ListLocations`` method.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.ListLocationsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._client._transport.list_locations,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def set_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.SetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Sets the IAM access control policy on the specified function.
-
-        Replaces any existing policy.
-
-        Args:
-            request (:class:`~.policy_pb2.SetIamPolicyRequest`):
-                The request object. Request message for `SetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.SetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.set_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.GetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Gets the IAM access control policy for a function.
-
-        Returns an empty policy if the function exists and does
-        not have a policy set.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.GetIamPolicyRequest`):
-                The request object. Request message for `GetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.GetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def test_iam_permissions(
-        self,
-        request: Optional[iam_policy_pb2.TestIamPermissionsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> iam_policy_pb2.TestIamPermissionsResponse:
-        r"""Tests the specified permissions against the IAM access control
-            policy for a function.
-
-        If the function does not exist, this will
-        return an empty set of permissions, not a NOT_FOUND error.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.TestIamPermissionsRequest`):
-                The request object. Request message for
-                `TestIamPermissions` method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~iam_policy_pb2.PolicyTestIamPermissionsResponse:
-                Response message for ``TestIamPermissions`` method.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.TestIamPermissionsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.test_iam_permissions,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def __aenter__(self) -> "EkmServiceAsyncClient":
-        return self
-
-    async def __aexit__(self, exc_type, exc, tb):
-        await self.transport.close()
-
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=package_version.__version__
-)
-
-
-__all__ = ("EkmServiceAsyncClient",)
diff --git a/google/cloud/kms_v1/services/ekm_service/client.py b/google/cloud/kms_v1/services/ekm_service/client.py
deleted file mode 100644
index 0fa9df2b..00000000
--- a/google/cloud/kms_v1/services/ekm_service/client.py
+++ /dev/null
@@ -1,1762 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from collections import OrderedDict
-import os
-import re
-from typing import (
-    Dict,
-    Mapping,
-    MutableMapping,
-    MutableSequence,
-    Optional,
-    Sequence,
-    Tuple,
-    Type,
-    Union,
-    cast,
-)
-
-from google.api_core import client_options as client_options_lib
-from google.api_core import exceptions as core_exceptions
-from google.api_core import gapic_v1
-from google.api_core import retry as retries
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.exceptions import MutualTLSChannelError  # type: ignore
-from google.auth.transport import mtls  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.oauth2 import service_account  # type: ignore
-
-from google.cloud.kms_v1 import gapic_version as package_version
-
-try:
-    OptionalRetry = Union[retries.Retry, gapic_v1.method._MethodDefault]
-except AttributeError:  # pragma: NO COVER
-    OptionalRetry = Union[retries.Retry, object]  # type: ignore
-
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import timestamp_pb2  # type: ignore
-
-from google.cloud.kms_v1.services.ekm_service import pagers
-from google.cloud.kms_v1.types import ekm_service
-
-from .transports.base import DEFAULT_CLIENT_INFO, EkmServiceTransport
-from .transports.grpc import EkmServiceGrpcTransport
-from .transports.grpc_asyncio import EkmServiceGrpcAsyncIOTransport
-from .transports.rest import EkmServiceRestTransport
-
-
-class EkmServiceClientMeta(type):
-    """Metaclass for the EkmService client.
-
-    This provides class-level methods for building and retrieving
-    support objects (e.g. transport) without polluting the client instance
-    objects.
-    """
-
-    _transport_registry = OrderedDict()  # type: Dict[str, Type[EkmServiceTransport]]
-    _transport_registry["grpc"] = EkmServiceGrpcTransport
-    _transport_registry["grpc_asyncio"] = EkmServiceGrpcAsyncIOTransport
-    _transport_registry["rest"] = EkmServiceRestTransport
-
-    def get_transport_class(
-        cls,
-        label: Optional[str] = None,
-    ) -> Type[EkmServiceTransport]:
-        """Returns an appropriate transport class.
-
-        Args:
-            label: The name of the desired transport. If none is
-                provided, then the first transport in the registry is used.
-
-        Returns:
-            The transport class to use.
-        """
-        # If a specific transport is requested, return that one.
-        if label:
-            return cls._transport_registry[label]
-
-        # No transport is requested; return the default (that is, the first one
-        # in the dictionary).
-        return next(iter(cls._transport_registry.values()))
-
-
-class EkmServiceClient(metaclass=EkmServiceClientMeta):
-    """Google Cloud Key Management EKM Service
-
-    Manages external cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [EkmConnection][google.cloud.kms.v1.EkmConnection]
-    """
-
-    @staticmethod
-    def _get_default_mtls_endpoint(api_endpoint):
-        """Converts api endpoint to mTLS endpoint.
-
-        Convert "*.sandbox.googleapis.com" and "*.googleapis.com" to
-        "*.mtls.sandbox.googleapis.com" and "*.mtls.googleapis.com" respectively.
-        Args:
-            api_endpoint (Optional[str]): the api endpoint to convert.
-        Returns:
-            str: converted mTLS api endpoint.
-        """
-        if not api_endpoint:
-            return api_endpoint
-
-        mtls_endpoint_re = re.compile(
-            r"(?P<name>[^.]+)(?P<mtls>\.mtls)?(?P<sandbox>\.sandbox)?(?P<googledomain>\.googleapis\.com)?"
-        )
-
-        m = mtls_endpoint_re.match(api_endpoint)
-        name, mtls, sandbox, googledomain = m.groups()
-        if mtls or not googledomain:
-            return api_endpoint
-
-        if sandbox:
-            return api_endpoint.replace(
-                "sandbox.googleapis.com", "mtls.sandbox.googleapis.com"
-            )
-
-        return api_endpoint.replace(".googleapis.com", ".mtls.googleapis.com")
-
-    DEFAULT_ENDPOINT = "cloudkms.googleapis.com"
-    DEFAULT_MTLS_ENDPOINT = _get_default_mtls_endpoint.__func__(  # type: ignore
-        DEFAULT_ENDPOINT
-    )
-
-    @classmethod
-    def from_service_account_info(cls, info: dict, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            info.
-
-        Args:
-            info (dict): The service account private key info.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            EkmServiceClient: The constructed client.
-        """
-        credentials = service_account.Credentials.from_service_account_info(info)
-        kwargs["credentials"] = credentials
-        return cls(*args, **kwargs)
-
-    @classmethod
-    def from_service_account_file(cls, filename: str, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            file.
-
-        Args:
-            filename (str): The path to the service account private key json
-                file.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            EkmServiceClient: The constructed client.
-        """
-        credentials = service_account.Credentials.from_service_account_file(filename)
-        kwargs["credentials"] = credentials
-        return cls(*args, **kwargs)
-
-    from_service_account_json = from_service_account_file
-
-    @property
-    def transport(self) -> EkmServiceTransport:
-        """Returns the transport used by the client instance.
-
-        Returns:
-            EkmServiceTransport: The transport used by the client
-                instance.
-        """
-        return self._transport
-
-    @staticmethod
-    def ekm_config_path(
-        project: str,
-        location: str,
-    ) -> str:
-        """Returns a fully-qualified ekm_config string."""
-        return "projects/{project}/locations/{location}/ekmConfig".format(
-            project=project,
-            location=location,
-        )
-
-    @staticmethod
-    def parse_ekm_config_path(path: str) -> Dict[str, str]:
-        """Parses a ekm_config path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/ekmConfig$", path
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def ekm_connection_path(
-        project: str,
-        location: str,
-        ekm_connection: str,
-    ) -> str:
-        """Returns a fully-qualified ekm_connection string."""
-        return "projects/{project}/locations/{location}/ekmConnections/{ekm_connection}".format(
-            project=project,
-            location=location,
-            ekm_connection=ekm_connection,
-        )
-
-    @staticmethod
-    def parse_ekm_connection_path(path: str) -> Dict[str, str]:
-        """Parses a ekm_connection path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/ekmConnections/(?P<ekm_connection>.+?)$",
-            path,
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def service_path(
-        project: str,
-        location: str,
-        namespace: str,
-        service: str,
-    ) -> str:
-        """Returns a fully-qualified service string."""
-        return "projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}".format(
-            project=project,
-            location=location,
-            namespace=namespace,
-            service=service,
-        )
-
-    @staticmethod
-    def parse_service_path(path: str) -> Dict[str, str]:
-        """Parses a service path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/namespaces/(?P<namespace>.+?)/services/(?P<service>.+?)$",
-            path,
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_billing_account_path(
-        billing_account: str,
-    ) -> str:
-        """Returns a fully-qualified billing_account string."""
-        return "billingAccounts/{billing_account}".format(
-            billing_account=billing_account,
-        )
-
-    @staticmethod
-    def parse_common_billing_account_path(path: str) -> Dict[str, str]:
-        """Parse a billing_account path into its component segments."""
-        m = re.match(r"^billingAccounts/(?P<billing_account>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_folder_path(
-        folder: str,
-    ) -> str:
-        """Returns a fully-qualified folder string."""
-        return "folders/{folder}".format(
-            folder=folder,
-        )
-
-    @staticmethod
-    def parse_common_folder_path(path: str) -> Dict[str, str]:
-        """Parse a folder path into its component segments."""
-        m = re.match(r"^folders/(?P<folder>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_organization_path(
-        organization: str,
-    ) -> str:
-        """Returns a fully-qualified organization string."""
-        return "organizations/{organization}".format(
-            organization=organization,
-        )
-
-    @staticmethod
-    def parse_common_organization_path(path: str) -> Dict[str, str]:
-        """Parse a organization path into its component segments."""
-        m = re.match(r"^organizations/(?P<organization>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_project_path(
-        project: str,
-    ) -> str:
-        """Returns a fully-qualified project string."""
-        return "projects/{project}".format(
-            project=project,
-        )
-
-    @staticmethod
-    def parse_common_project_path(path: str) -> Dict[str, str]:
-        """Parse a project path into its component segments."""
-        m = re.match(r"^projects/(?P<project>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_location_path(
-        project: str,
-        location: str,
-    ) -> str:
-        """Returns a fully-qualified location string."""
-        return "projects/{project}/locations/{location}".format(
-            project=project,
-            location=location,
-        )
-
-    @staticmethod
-    def parse_common_location_path(path: str) -> Dict[str, str]:
-        """Parse a location path into its component segments."""
-        m = re.match(r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @classmethod
-    def get_mtls_endpoint_and_cert_source(
-        cls, client_options: Optional[client_options_lib.ClientOptions] = None
-    ):
-        """Return the API endpoint and client cert source for mutual TLS.
-
-        The client cert source is determined in the following order:
-        (1) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is not "true", the
-        client cert source is None.
-        (2) if `client_options.client_cert_source` is provided, use the provided one; if the
-        default client cert source exists, use the default one; otherwise the client cert
-        source is None.
-
-        The API endpoint is determined in the following order:
-        (1) if `client_options.api_endpoint` if provided, use the provided one.
-        (2) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is "always", use the
-        default mTLS endpoint; if the environment variable is "never", use the default API
-        endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise
-        use the default API endpoint.
-
-        More details can be found at https://google.aip.dev/auth/4114.
-
-        Args:
-            client_options (google.api_core.client_options.ClientOptions): Custom options for the
-                client. Only the `api_endpoint` and `client_cert_source` properties may be used
-                in this method.
-
-        Returns:
-            Tuple[str, Callable[[], Tuple[bytes, bytes]]]: returns the API endpoint and the
-                client cert source to use.
-
-        Raises:
-            google.auth.exceptions.MutualTLSChannelError: If any errors happen.
-        """
-        if client_options is None:
-            client_options = client_options_lib.ClientOptions()
-        use_client_cert = os.getenv("GOOGLE_API_USE_CLIENT_CERTIFICATE", "false")
-        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")
-        if use_client_cert not in ("true", "false"):
-            raise ValueError(
-                "Environment variable `GOOGLE_API_USE_CLIENT_CERTIFICATE` must be either `true` or `false`"
-            )
-        if use_mtls_endpoint not in ("auto", "never", "always"):
-            raise MutualTLSChannelError(
-                "Environment variable `GOOGLE_API_USE_MTLS_ENDPOINT` must be `never`, `auto` or `always`"
-            )
-
-        # Figure out the client cert source to use.
-        client_cert_source = None
-        if use_client_cert == "true":
-            if client_options.client_cert_source:
-                client_cert_source = client_options.client_cert_source
-            elif mtls.has_default_client_cert_source():
-                client_cert_source = mtls.default_client_cert_source()
-
-        # Figure out which api endpoint to use.
-        if client_options.api_endpoint is not None:
-            api_endpoint = client_options.api_endpoint
-        elif use_mtls_endpoint == "always" or (
-            use_mtls_endpoint == "auto" and client_cert_source
-        ):
-            api_endpoint = cls.DEFAULT_MTLS_ENDPOINT
-        else:
-            api_endpoint = cls.DEFAULT_ENDPOINT
-
-        return api_endpoint, client_cert_source
-
-    def __init__(
-        self,
-        *,
-        credentials: Optional[ga_credentials.Credentials] = None,
-        transport: Optional[Union[str, EkmServiceTransport]] = None,
-        client_options: Optional[Union[client_options_lib.ClientOptions, dict]] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-    ) -> None:
-        """Instantiates the ekm service client.
-
-        Args:
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-            transport (Union[str, EkmServiceTransport]): The
-                transport to use. If set to None, a transport is chosen
-                automatically.
-            client_options (Optional[Union[google.api_core.client_options.ClientOptions, dict]]): Custom options for the
-                client. It won't take effect if a ``transport`` instance is provided.
-                (1) The ``api_endpoint`` property can be used to override the
-                default endpoint provided by the client. GOOGLE_API_USE_MTLS_ENDPOINT
-                environment variable can also be used to override the endpoint:
-                "always" (always use the default mTLS endpoint), "never" (always
-                use the default regular endpoint) and "auto" (auto switch to the
-                default mTLS endpoint if client certificate is present, this is
-                the default value). However, the ``api_endpoint`` property takes
-                precedence if provided.
-                (2) If GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable
-                is "true", then the ``client_cert_source`` property can be used
-                to provide client certificate for mutual TLS transport. If
-                not provided, the default SSL client certificate will be used if
-                present. If GOOGLE_API_USE_CLIENT_CERTIFICATE is "false" or not
-                set, no client certificate will be used.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-
-        Raises:
-            google.auth.exceptions.MutualTLSChannelError: If mutual TLS transport
-                creation failed for any reason.
-        """
-        if isinstance(client_options, dict):
-            client_options = client_options_lib.from_dict(client_options)
-        if client_options is None:
-            client_options = client_options_lib.ClientOptions()
-        client_options = cast(client_options_lib.ClientOptions, client_options)
-
-        api_endpoint, client_cert_source_func = self.get_mtls_endpoint_and_cert_source(
-            client_options
-        )
-
-        api_key_value = getattr(client_options, "api_key", None)
-        if api_key_value and credentials:
-            raise ValueError(
-                "client_options.api_key and credentials are mutually exclusive"
-            )
-
-        # Save or instantiate the transport.
-        # Ordinarily, we provide the transport, but allowing a custom transport
-        # instance provides an extensibility point for unusual situations.
-        if isinstance(transport, EkmServiceTransport):
-            # transport is a EkmServiceTransport instance.
-            if credentials or client_options.credentials_file or api_key_value:
-                raise ValueError(
-                    "When providing a transport instance, "
-                    "provide its credentials directly."
-                )
-            if client_options.scopes:
-                raise ValueError(
-                    "When providing a transport instance, provide its scopes "
-                    "directly."
-                )
-            self._transport = transport
-        else:
-            import google.auth._default  # type: ignore
-
-            if api_key_value and hasattr(
-                google.auth._default, "get_api_key_credentials"
-            ):
-                credentials = google.auth._default.get_api_key_credentials(
-                    api_key_value
-                )
-
-            Transport = type(self).get_transport_class(transport)
-            self._transport = Transport(
-                credentials=credentials,
-                credentials_file=client_options.credentials_file,
-                host=api_endpoint,
-                scopes=client_options.scopes,
-                client_cert_source_for_mtls=client_cert_source_func,
-                quota_project_id=client_options.quota_project_id,
-                client_info=client_info,
-                always_use_jwt_access=True,
-                api_audience=client_options.api_audience,
-            )
-
-    def list_ekm_connections(
-        self,
-        request: Optional[Union[ekm_service.ListEkmConnectionsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListEkmConnectionsPager:
-        r"""Lists [EkmConnections][google.cloud.kms.v1.EkmConnection].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_list_ekm_connections():
-                # Create a client
-                client = kms_v1.EkmServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListEkmConnectionsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_ekm_connections(request=request)
-
-                # Handle the response
-                for response in page_result:
-                    print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.ListEkmConnectionsRequest, dict]):
-                The request object. Request message for
-                [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-            parent (str):
-                Required. The resource name of the location associated
-                with the
-                [EkmConnections][google.cloud.kms.v1.EkmConnection] to
-                list, in the format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.ekm_service.pagers.ListEkmConnectionsPager:
-                Response message for
-                   [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a ekm_service.ListEkmConnectionsRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, ekm_service.ListEkmConnectionsRequest):
-            request = ekm_service.ListEkmConnectionsRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.list_ekm_connections]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__iter__` convenience method.
-        response = pagers.ListEkmConnectionsPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_ekm_connection(
-        self,
-        request: Optional[Union[ekm_service.GetEkmConnectionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConnection:
-        r"""Returns metadata for a given
-        [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_get_ekm_connection():
-                # Create a client
-                client = kms_v1.EkmServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetEkmConnectionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.get_ekm_connection(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GetEkmConnectionRequest, dict]):
-                The request object. Request message for
-                [EkmService.GetEkmConnection][google.cloud.kms.v1.EkmService.GetEkmConnection].
-            name (str):
-                Required. The
-                [name][google.cloud.kms.v1.EkmConnection.name] of the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConnection:
-                An [EkmConnection][google.cloud.kms.v1.EkmConnection] represents an
-                   individual EKM connection. It can be used for
-                   creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                   and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                   as well as performing cryptographic operations using
-                   keys created within the
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a ekm_service.GetEkmConnectionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, ekm_service.GetEkmConnectionRequest):
-            request = ekm_service.GetEkmConnectionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.get_ekm_connection]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def create_ekm_connection(
-        self,
-        request: Optional[Union[ekm_service.CreateEkmConnectionRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        ekm_connection_id: Optional[str] = None,
-        ekm_connection: Optional[ekm_service.EkmConnection] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConnection:
-        r"""Creates a new [EkmConnection][google.cloud.kms.v1.EkmConnection]
-        in a given Project and Location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_create_ekm_connection():
-                # Create a client
-                client = kms_v1.EkmServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateEkmConnectionRequest(
-                    parent="parent_value",
-                    ekm_connection_id="ekm_connection_id_value",
-                )
-
-                # Make the request
-                response = client.create_ekm_connection(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.CreateEkmConnectionRequest, dict]):
-                The request object. Request message for
-                [EkmService.CreateEkmConnection][google.cloud.kms.v1.EkmService.CreateEkmConnection].
-            parent (str):
-                Required. The resource name of the location associated
-                with the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection], in
-                the format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ekm_connection_id (str):
-                Required. It must be unique within a location and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``.
-
-                This corresponds to the ``ekm_connection_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ekm_connection (google.cloud.kms_v1.types.EkmConnection):
-                Required. An
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] with
-                initial field values.
-
-                This corresponds to the ``ekm_connection`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConnection:
-                An [EkmConnection][google.cloud.kms.v1.EkmConnection] represents an
-                   individual EKM connection. It can be used for
-                   creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                   and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                   as well as performing cryptographic operations using
-                   keys created within the
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, ekm_connection_id, ekm_connection])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a ekm_service.CreateEkmConnectionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, ekm_service.CreateEkmConnectionRequest):
-            request = ekm_service.CreateEkmConnectionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-            if ekm_connection_id is not None:
-                request.ekm_connection_id = ekm_connection_id
-            if ekm_connection is not None:
-                request.ekm_connection = ekm_connection
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.create_ekm_connection]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def update_ekm_connection(
-        self,
-        request: Optional[Union[ekm_service.UpdateEkmConnectionRequest, dict]] = None,
-        *,
-        ekm_connection: Optional[ekm_service.EkmConnection] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConnection:
-        r"""Updates an [EkmConnection][google.cloud.kms.v1.EkmConnection]'s
-        metadata.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_update_ekm_connection():
-                # Create a client
-                client = kms_v1.EkmServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateEkmConnectionRequest(
-                )
-
-                # Make the request
-                response = client.update_ekm_connection(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.UpdateEkmConnectionRequest, dict]):
-                The request object. Request message for
-                [EkmService.UpdateEkmConnection][google.cloud.kms.v1.EkmService.UpdateEkmConnection].
-            ekm_connection (google.cloud.kms_v1.types.EkmConnection):
-                Required.
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] with
-                updated values.
-
-                This corresponds to the ``ekm_connection`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (google.protobuf.field_mask_pb2.FieldMask):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConnection:
-                An [EkmConnection][google.cloud.kms.v1.EkmConnection] represents an
-                   individual EKM connection. It can be used for
-                   creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                   and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                   as well as performing cryptographic operations using
-                   keys created within the
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([ekm_connection, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a ekm_service.UpdateEkmConnectionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, ekm_service.UpdateEkmConnectionRequest):
-            request = ekm_service.UpdateEkmConnectionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if ekm_connection is not None:
-                request.ekm_connection = ekm_connection
-            if update_mask is not None:
-                request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.update_ekm_connection]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("ekm_connection.name", request.ekm_connection.name),)
-            ),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_ekm_config(
-        self,
-        request: Optional[Union[ekm_service.GetEkmConfigRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConfig:
-        r"""Returns the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_get_ekm_config():
-                # Create a client
-                client = kms_v1.EkmServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetEkmConfigRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.get_ekm_config(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GetEkmConfigRequest, dict]):
-                The request object. Request message for
-                [EkmService.GetEkmConfig][google.cloud.kms.v1.EkmService.GetEkmConfig].
-            name (str):
-                Required. The [name][google.cloud.kms.v1.EkmConfig.name]
-                of the [EkmConfig][google.cloud.kms.v1.EkmConfig] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConfig:
-                An [EkmConfig][google.cloud.kms.v1.EkmConfig] is a singleton resource that
-                   represents configuration parameters that apply to all
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC]
-                   in a given project and location.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a ekm_service.GetEkmConfigRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, ekm_service.GetEkmConfigRequest):
-            request = ekm_service.GetEkmConfigRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.get_ekm_config]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def update_ekm_config(
-        self,
-        request: Optional[Union[ekm_service.UpdateEkmConfigRequest, dict]] = None,
-        *,
-        ekm_config: Optional[ekm_service.EkmConfig] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.EkmConfig:
-        r"""Updates the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_update_ekm_config():
-                # Create a client
-                client = kms_v1.EkmServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateEkmConfigRequest(
-                )
-
-                # Make the request
-                response = client.update_ekm_config(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.UpdateEkmConfigRequest, dict]):
-                The request object. Request message for
-                [EkmService.UpdateEkmConfig][google.cloud.kms.v1.EkmService.UpdateEkmConfig].
-            ekm_config (google.cloud.kms_v1.types.EkmConfig):
-                Required. [EkmConfig][google.cloud.kms.v1.EkmConfig]
-                with updated values.
-
-                This corresponds to the ``ekm_config`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (google.protobuf.field_mask_pb2.FieldMask):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EkmConfig:
-                An [EkmConfig][google.cloud.kms.v1.EkmConfig] is a singleton resource that
-                   represents configuration parameters that apply to all
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   with a
-                   [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                   of
-                   [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC]
-                   in a given project and location.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([ekm_config, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a ekm_service.UpdateEkmConfigRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, ekm_service.UpdateEkmConfigRequest):
-            request = ekm_service.UpdateEkmConfigRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if ekm_config is not None:
-                request.ekm_config = ekm_config
-            if update_mask is not None:
-                request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.update_ekm_config]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("ekm_config.name", request.ekm_config.name),)
-            ),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def verify_connectivity(
-        self,
-        request: Optional[Union[ekm_service.VerifyConnectivityRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> ekm_service.VerifyConnectivityResponse:
-        r"""Verifies that Cloud KMS can successfully connect to the external
-        key manager specified by an
-        [EkmConnection][google.cloud.kms.v1.EkmConnection]. If there is
-        an error connecting to the EKM, this method returns a
-        FAILED_PRECONDITION status containing structured information as
-        described at
-        https://cloud.google.com/kms/docs/reference/ekm_errors.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_verify_connectivity():
-                # Create a client
-                client = kms_v1.EkmServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.VerifyConnectivityRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.verify_connectivity(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.VerifyConnectivityRequest, dict]):
-                The request object. Request message for
-                [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-            name (str):
-                Required. The
-                [name][google.cloud.kms.v1.EkmConnection.name] of the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection] to
-                verify.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.VerifyConnectivityResponse:
-                Response message for
-                   [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a ekm_service.VerifyConnectivityRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, ekm_service.VerifyConnectivityRequest):
-            request = ekm_service.VerifyConnectivityRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.verify_connectivity]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def __enter__(self) -> "EkmServiceClient":
-        return self
-
-    def __exit__(self, type, value, traceback):
-        """Releases underlying transport's resources.
-
-        .. warning::
-            ONLY use as a context manager if the transport is NOT shared
-            with other clients! Exiting the with block will CLOSE the transport
-            and may cause errors in other clients!
-        """
-        self.transport.close()
-
-    def get_location(
-        self,
-        request: Optional[locations_pb2.GetLocationRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.Location:
-        r"""Gets information about a location.
-
-        Args:
-            request (:class:`~.location_pb2.GetLocationRequest`):
-                The request object. Request message for
-                `GetLocation` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.Location:
-                Location object.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.GetLocationRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.get_location,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def list_locations(
-        self,
-        request: Optional[locations_pb2.ListLocationsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.ListLocationsResponse:
-        r"""Lists information about the supported locations for this service.
-
-        Args:
-            request (:class:`~.location_pb2.ListLocationsRequest`):
-                The request object. Request message for
-                `ListLocations` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.ListLocationsResponse:
-                Response message for ``ListLocations`` method.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.ListLocationsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.list_locations,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def set_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.SetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Sets the IAM access control policy on the specified function.
-
-        Replaces any existing policy.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.SetIamPolicyRequest`):
-                The request object. Request message for `SetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.SetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.set_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.GetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Gets the IAM access control policy for a function.
-
-        Returns an empty policy if the function exists and does not have a
-        policy set.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.GetIamPolicyRequest`):
-                The request object. Request message for `GetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if
-                any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.GetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.get_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def test_iam_permissions(
-        self,
-        request: Optional[iam_policy_pb2.TestIamPermissionsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> iam_policy_pb2.TestIamPermissionsResponse:
-        r"""Tests the specified IAM permissions against the IAM access control
-            policy for a function.
-
-        If the function does not exist, this will return an empty set
-        of permissions, not a NOT_FOUND error.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.TestIamPermissionsRequest`):
-                The request object. Request message for
-                `TestIamPermissions` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.iam_policy_pb2.TestIamPermissionsResponse:
-                Response message for ``TestIamPermissions`` method.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.TestIamPermissionsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.test_iam_permissions,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=package_version.__version__
-)
-
-
-__all__ = ("EkmServiceClient",)
diff --git a/google/cloud/kms_v1/services/ekm_service/pagers.py b/google/cloud/kms_v1/services/ekm_service/pagers.py
deleted file mode 100644
index 9e4bef3e..00000000
--- a/google/cloud/kms_v1/services/ekm_service/pagers.py
+++ /dev/null
@@ -1,155 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from typing import (
-    Any,
-    AsyncIterator,
-    Awaitable,
-    Callable,
-    Iterator,
-    Optional,
-    Sequence,
-    Tuple,
-)
-
-from google.cloud.kms_v1.types import ekm_service
-
-
-class ListEkmConnectionsPager:
-    """A pager for iterating through ``list_ekm_connections`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListEkmConnectionsResponse` object, and
-    provides an ``__iter__`` method to iterate through its
-    ``ekm_connections`` field.
-
-    If there are more pages, the ``__iter__`` method will make additional
-    ``ListEkmConnections`` requests and continue to iterate
-    through the ``ekm_connections`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListEkmConnectionsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., ekm_service.ListEkmConnectionsResponse],
-        request: ekm_service.ListEkmConnectionsRequest,
-        response: ekm_service.ListEkmConnectionsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiate the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListEkmConnectionsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListEkmConnectionsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = ekm_service.ListEkmConnectionsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    def pages(self) -> Iterator[ekm_service.ListEkmConnectionsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __iter__(self) -> Iterator[ekm_service.EkmConnection]:
-        for page in self.pages:
-            yield from page.ekm_connections
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListEkmConnectionsAsyncPager:
-    """A pager for iterating through ``list_ekm_connections`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListEkmConnectionsResponse` object, and
-    provides an ``__aiter__`` method to iterate through its
-    ``ekm_connections`` field.
-
-    If there are more pages, the ``__aiter__`` method will make additional
-    ``ListEkmConnections`` requests and continue to iterate
-    through the ``ekm_connections`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListEkmConnectionsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., Awaitable[ekm_service.ListEkmConnectionsResponse]],
-        request: ekm_service.ListEkmConnectionsRequest,
-        response: ekm_service.ListEkmConnectionsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiates the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListEkmConnectionsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListEkmConnectionsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = ekm_service.ListEkmConnectionsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    async def pages(self) -> AsyncIterator[ekm_service.ListEkmConnectionsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = await self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __aiter__(self) -> AsyncIterator[ekm_service.EkmConnection]:
-        async def async_generator():
-            async for page in self.pages:
-                for response in page.ekm_connections:
-                    yield response
-
-        return async_generator()
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
diff --git a/google/cloud/kms_v1/services/ekm_service/transports/__init__.py b/google/cloud/kms_v1/services/ekm_service/transports/__init__.py
deleted file mode 100644
index 68f4e3cb..00000000
--- a/google/cloud/kms_v1/services/ekm_service/transports/__init__.py
+++ /dev/null
@@ -1,36 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from collections import OrderedDict
-from typing import Dict, Type
-
-from .base import EkmServiceTransport
-from .grpc import EkmServiceGrpcTransport
-from .grpc_asyncio import EkmServiceGrpcAsyncIOTransport
-from .rest import EkmServiceRestInterceptor, EkmServiceRestTransport
-
-# Compile a registry of transports.
-_transport_registry = OrderedDict()  # type: Dict[str, Type[EkmServiceTransport]]
-_transport_registry["grpc"] = EkmServiceGrpcTransport
-_transport_registry["grpc_asyncio"] = EkmServiceGrpcAsyncIOTransport
-_transport_registry["rest"] = EkmServiceRestTransport
-
-__all__ = (
-    "EkmServiceTransport",
-    "EkmServiceGrpcTransport",
-    "EkmServiceGrpcAsyncIOTransport",
-    "EkmServiceRestTransport",
-    "EkmServiceRestInterceptor",
-)
diff --git a/google/cloud/kms_v1/services/ekm_service/transports/base.py b/google/cloud/kms_v1/services/ekm_service/transports/base.py
deleted file mode 100644
index 5896be0d..00000000
--- a/google/cloud/kms_v1/services/ekm_service/transports/base.py
+++ /dev/null
@@ -1,342 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-import abc
-from typing import Awaitable, Callable, Dict, Optional, Sequence, Union
-
-import google.api_core
-from google.api_core import exceptions as core_exceptions
-from google.api_core import gapic_v1
-from google.api_core import retry as retries
-import google.auth  # type: ignore
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.oauth2 import service_account  # type: ignore
-
-from google.cloud.kms_v1 import gapic_version as package_version
-from google.cloud.kms_v1.types import ekm_service
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=package_version.__version__
-)
-
-
-class EkmServiceTransport(abc.ABC):
-    """Abstract transport class for EkmService."""
-
-    AUTH_SCOPES = (
-        "https://www.googleapis.com/auth/cloud-platform",
-        "https://www.googleapis.com/auth/cloudkms",
-    )
-
-    DEFAULT_HOST: str = "cloudkms.googleapis.com"
-
-    def __init__(
-        self,
-        *,
-        host: str = DEFAULT_HOST,
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        api_audience: Optional[str] = None,
-        **kwargs,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
-            scopes (Optional[Sequence[str]]): A list of scopes.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-        """
-
-        scopes_kwargs = {"scopes": scopes, "default_scopes": self.AUTH_SCOPES}
-
-        # Save the scopes.
-        self._scopes = scopes
-
-        # If no credentials are provided, then determine the appropriate
-        # defaults.
-        if credentials and credentials_file:
-            raise core_exceptions.DuplicateCredentialArgs(
-                "'credentials_file' and 'credentials' are mutually exclusive"
-            )
-
-        if credentials_file is not None:
-            credentials, _ = google.auth.load_credentials_from_file(
-                credentials_file, **scopes_kwargs, quota_project_id=quota_project_id
-            )
-        elif credentials is None:
-            credentials, _ = google.auth.default(
-                **scopes_kwargs, quota_project_id=quota_project_id
-            )
-            # Don't apply audience if the credentials file passed from user.
-            if hasattr(credentials, "with_gdch_audience"):
-                credentials = credentials.with_gdch_audience(
-                    api_audience if api_audience else host
-                )
-
-        # If the credentials are service account credentials, then always try to use self signed JWT.
-        if (
-            always_use_jwt_access
-            and isinstance(credentials, service_account.Credentials)
-            and hasattr(service_account.Credentials, "with_always_use_jwt_access")
-        ):
-            credentials = credentials.with_always_use_jwt_access(True)
-
-        # Save the credentials.
-        self._credentials = credentials
-
-        # Save the hostname. Default to port 443 (HTTPS) if none is specified.
-        if ":" not in host:
-            host += ":443"
-        self._host = host
-
-    def _prep_wrapped_messages(self, client_info):
-        # Precompute the wrapped methods.
-        self._wrapped_methods = {
-            self.list_ekm_connections: gapic_v1.method.wrap_method(
-                self.list_ekm_connections,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.get_ekm_connection: gapic_v1.method.wrap_method(
-                self.get_ekm_connection,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.create_ekm_connection: gapic_v1.method.wrap_method(
-                self.create_ekm_connection,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.update_ekm_connection: gapic_v1.method.wrap_method(
-                self.update_ekm_connection,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.get_ekm_config: gapic_v1.method.wrap_method(
-                self.get_ekm_config,
-                default_timeout=None,
-                client_info=client_info,
-            ),
-            self.update_ekm_config: gapic_v1.method.wrap_method(
-                self.update_ekm_config,
-                default_timeout=None,
-                client_info=client_info,
-            ),
-            self.verify_connectivity: gapic_v1.method.wrap_method(
-                self.verify_connectivity,
-                default_timeout=None,
-                client_info=client_info,
-            ),
-        }
-
-    def close(self):
-        """Closes resources associated with the transport.
-
-        .. warning::
-             Only call this method if the transport is NOT shared
-             with other clients - this may cause errors in other clients!
-        """
-        raise NotImplementedError()
-
-    @property
-    def list_ekm_connections(
-        self,
-    ) -> Callable[
-        [ekm_service.ListEkmConnectionsRequest],
-        Union[
-            ekm_service.ListEkmConnectionsResponse,
-            Awaitable[ekm_service.ListEkmConnectionsResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_ekm_connection(
-        self,
-    ) -> Callable[
-        [ekm_service.GetEkmConnectionRequest],
-        Union[ekm_service.EkmConnection, Awaitable[ekm_service.EkmConnection]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def create_ekm_connection(
-        self,
-    ) -> Callable[
-        [ekm_service.CreateEkmConnectionRequest],
-        Union[ekm_service.EkmConnection, Awaitable[ekm_service.EkmConnection]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def update_ekm_connection(
-        self,
-    ) -> Callable[
-        [ekm_service.UpdateEkmConnectionRequest],
-        Union[ekm_service.EkmConnection, Awaitable[ekm_service.EkmConnection]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_ekm_config(
-        self,
-    ) -> Callable[
-        [ekm_service.GetEkmConfigRequest],
-        Union[ekm_service.EkmConfig, Awaitable[ekm_service.EkmConfig]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def update_ekm_config(
-        self,
-    ) -> Callable[
-        [ekm_service.UpdateEkmConfigRequest],
-        Union[ekm_service.EkmConfig, Awaitable[ekm_service.EkmConfig]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def verify_connectivity(
-        self,
-    ) -> Callable[
-        [ekm_service.VerifyConnectivityRequest],
-        Union[
-            ekm_service.VerifyConnectivityResponse,
-            Awaitable[ekm_service.VerifyConnectivityResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_location(
-        self,
-    ) -> Callable[
-        [locations_pb2.GetLocationRequest],
-        Union[locations_pb2.Location, Awaitable[locations_pb2.Location]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def list_locations(
-        self,
-    ) -> Callable[
-        [locations_pb2.ListLocationsRequest],
-        Union[
-            locations_pb2.ListLocationsResponse,
-            Awaitable[locations_pb2.ListLocationsResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def set_iam_policy(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.SetIamPolicyRequest],
-        Union[policy_pb2.Policy, Awaitable[policy_pb2.Policy]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_iam_policy(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.GetIamPolicyRequest],
-        Union[policy_pb2.Policy, Awaitable[policy_pb2.Policy]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def test_iam_permissions(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.TestIamPermissionsRequest],
-        Union[
-            iam_policy_pb2.TestIamPermissionsResponse,
-            Awaitable[iam_policy_pb2.TestIamPermissionsResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def kind(self) -> str:
-        raise NotImplementedError()
-
-
-__all__ = ("EkmServiceTransport",)
diff --git a/google/cloud/kms_v1/services/ekm_service/transports/grpc.py b/google/cloud/kms_v1/services/ekm_service/transports/grpc.py
deleted file mode 100644
index ab907abf..00000000
--- a/google/cloud/kms_v1/services/ekm_service/transports/grpc.py
+++ /dev/null
@@ -1,560 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from typing import Callable, Dict, Optional, Sequence, Tuple, Union
-import warnings
-
-from google.api_core import gapic_v1, grpc_helpers
-import google.auth  # type: ignore
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-import grpc  # type: ignore
-
-from google.cloud.kms_v1.types import ekm_service
-
-from .base import DEFAULT_CLIENT_INFO, EkmServiceTransport
-
-
-class EkmServiceGrpcTransport(EkmServiceTransport):
-    """gRPC backend transport for EkmService.
-
-    Google Cloud Key Management EKM Service
-
-    Manages external cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [EkmConnection][google.cloud.kms.v1.EkmConnection]
-
-    This class defines the same methods as the primary client, so the
-    primary client can load the underlying transport implementation
-    and call it.
-
-    It sends protocol buffers over the wire using gRPC (which is built on
-    top of HTTP/2); the ``grpcio`` package must be installed.
-    """
-
-    _stubs: Dict[str, Callable]
-
-    def __init__(
-        self,
-        *,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        channel: Optional[grpc.Channel] = None,
-        api_mtls_endpoint: Optional[str] = None,
-        client_cert_source: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        ssl_channel_credentials: Optional[grpc.ChannelCredentials] = None,
-        client_cert_source_for_mtls: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        api_audience: Optional[str] = None,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-                This argument is ignored if ``channel`` is provided.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional(Sequence[str])): A list of scopes. This argument is
-                ignored if ``channel`` is provided.
-            channel (Optional[grpc.Channel]): A ``Channel`` instance through
-                which to make calls.
-            api_mtls_endpoint (Optional[str]): Deprecated. The mutual TLS endpoint.
-                If provided, it overrides the ``host`` argument and tries to create
-                a mutual TLS channel with client SSL credentials from
-                ``client_cert_source`` or application default SSL credentials.
-            client_cert_source (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                Deprecated. A callback to provide client SSL certificate bytes and
-                private key bytes, both in PEM format. It is ignored if
-                ``api_mtls_endpoint`` is None.
-            ssl_channel_credentials (grpc.ChannelCredentials): SSL credentials
-                for the grpc channel. It is ignored if ``channel`` is provided.
-            client_cert_source_for_mtls (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                A callback to provide client certificate bytes and private key bytes,
-                both in PEM format. It is used to configure a mutual TLS channel. It is
-                ignored if ``channel`` or ``ssl_channel_credentials`` is provided.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-
-        Raises:
-          google.auth.exceptions.MutualTLSChannelError: If mutual TLS transport
-              creation failed for any reason.
-          google.api_core.exceptions.DuplicateCredentialArgs: If both ``credentials``
-              and ``credentials_file`` are passed.
-        """
-        self._grpc_channel = None
-        self._ssl_channel_credentials = ssl_channel_credentials
-        self._stubs: Dict[str, Callable] = {}
-
-        if api_mtls_endpoint:
-            warnings.warn("api_mtls_endpoint is deprecated", DeprecationWarning)
-        if client_cert_source:
-            warnings.warn("client_cert_source is deprecated", DeprecationWarning)
-
-        if channel:
-            # Ignore credentials if a channel was passed.
-            credentials = False
-            # If a channel was explicitly provided, set it.
-            self._grpc_channel = channel
-            self._ssl_channel_credentials = None
-
-        else:
-            if api_mtls_endpoint:
-                host = api_mtls_endpoint
-
-                # Create SSL credentials with client_cert_source or application
-                # default SSL credentials.
-                if client_cert_source:
-                    cert, key = client_cert_source()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-                else:
-                    self._ssl_channel_credentials = SslCredentials().ssl_credentials
-
-            else:
-                if client_cert_source_for_mtls and not ssl_channel_credentials:
-                    cert, key = client_cert_source_for_mtls()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-
-        # The base transport sets the host, credentials and scopes
-        super().__init__(
-            host=host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            scopes=scopes,
-            quota_project_id=quota_project_id,
-            client_info=client_info,
-            always_use_jwt_access=always_use_jwt_access,
-            api_audience=api_audience,
-        )
-
-        if not self._grpc_channel:
-            self._grpc_channel = type(self).create_channel(
-                self._host,
-                # use the credentials which are saved
-                credentials=self._credentials,
-                # Set ``credentials_file`` to ``None`` here as
-                # the credentials that we saved earlier should be used.
-                credentials_file=None,
-                scopes=self._scopes,
-                ssl_credentials=self._ssl_channel_credentials,
-                quota_project_id=quota_project_id,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-
-        # Wrap messages. This must be done after self._grpc_channel exists
-        self._prep_wrapped_messages(client_info)
-
-    @classmethod
-    def create_channel(
-        cls,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        quota_project_id: Optional[str] = None,
-        **kwargs,
-    ) -> grpc.Channel:
-        """Create and return a gRPC channel object.
-        Args:
-            host (Optional[str]): The host for the channel to use.
-            credentials (Optional[~.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify this application to the service. If
-                none are specified, the client will attempt to ascertain
-                the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
-            scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
-                service. These are only used when credentials are not specified and
-                are passed to :func:`google.auth.default`.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            kwargs (Optional[dict]): Keyword arguments, which are passed to the
-                channel creation.
-        Returns:
-            grpc.Channel: A gRPC channel object.
-
-        Raises:
-            google.api_core.exceptions.DuplicateCredentialArgs: If both ``credentials``
-              and ``credentials_file`` are passed.
-        """
-
-        return grpc_helpers.create_channel(
-            host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            quota_project_id=quota_project_id,
-            default_scopes=cls.AUTH_SCOPES,
-            scopes=scopes,
-            default_host=cls.DEFAULT_HOST,
-            **kwargs,
-        )
-
-    @property
-    def grpc_channel(self) -> grpc.Channel:
-        """Return the channel designed to connect to this service."""
-        return self._grpc_channel
-
-    @property
-    def list_ekm_connections(
-        self,
-    ) -> Callable[
-        [ekm_service.ListEkmConnectionsRequest], ekm_service.ListEkmConnectionsResponse
-    ]:
-        r"""Return a callable for the list ekm connections method over gRPC.
-
-        Lists [EkmConnections][google.cloud.kms.v1.EkmConnection].
-
-        Returns:
-            Callable[[~.ListEkmConnectionsRequest],
-                    ~.ListEkmConnectionsResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_ekm_connections" not in self._stubs:
-            self._stubs["list_ekm_connections"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/ListEkmConnections",
-                request_serializer=ekm_service.ListEkmConnectionsRequest.serialize,
-                response_deserializer=ekm_service.ListEkmConnectionsResponse.deserialize,
-            )
-        return self._stubs["list_ekm_connections"]
-
-    @property
-    def get_ekm_connection(
-        self,
-    ) -> Callable[[ekm_service.GetEkmConnectionRequest], ekm_service.EkmConnection]:
-        r"""Return a callable for the get ekm connection method over gRPC.
-
-        Returns metadata for a given
-        [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        Returns:
-            Callable[[~.GetEkmConnectionRequest],
-                    ~.EkmConnection]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_ekm_connection" not in self._stubs:
-            self._stubs["get_ekm_connection"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/GetEkmConnection",
-                request_serializer=ekm_service.GetEkmConnectionRequest.serialize,
-                response_deserializer=ekm_service.EkmConnection.deserialize,
-            )
-        return self._stubs["get_ekm_connection"]
-
-    @property
-    def create_ekm_connection(
-        self,
-    ) -> Callable[[ekm_service.CreateEkmConnectionRequest], ekm_service.EkmConnection]:
-        r"""Return a callable for the create ekm connection method over gRPC.
-
-        Creates a new [EkmConnection][google.cloud.kms.v1.EkmConnection]
-        in a given Project and Location.
-
-        Returns:
-            Callable[[~.CreateEkmConnectionRequest],
-                    ~.EkmConnection]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_ekm_connection" not in self._stubs:
-            self._stubs["create_ekm_connection"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/CreateEkmConnection",
-                request_serializer=ekm_service.CreateEkmConnectionRequest.serialize,
-                response_deserializer=ekm_service.EkmConnection.deserialize,
-            )
-        return self._stubs["create_ekm_connection"]
-
-    @property
-    def update_ekm_connection(
-        self,
-    ) -> Callable[[ekm_service.UpdateEkmConnectionRequest], ekm_service.EkmConnection]:
-        r"""Return a callable for the update ekm connection method over gRPC.
-
-        Updates an [EkmConnection][google.cloud.kms.v1.EkmConnection]'s
-        metadata.
-
-        Returns:
-            Callable[[~.UpdateEkmConnectionRequest],
-                    ~.EkmConnection]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_ekm_connection" not in self._stubs:
-            self._stubs["update_ekm_connection"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/UpdateEkmConnection",
-                request_serializer=ekm_service.UpdateEkmConnectionRequest.serialize,
-                response_deserializer=ekm_service.EkmConnection.deserialize,
-            )
-        return self._stubs["update_ekm_connection"]
-
-    @property
-    def get_ekm_config(
-        self,
-    ) -> Callable[[ekm_service.GetEkmConfigRequest], ekm_service.EkmConfig]:
-        r"""Return a callable for the get ekm config method over gRPC.
-
-        Returns the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        Returns:
-            Callable[[~.GetEkmConfigRequest],
-                    ~.EkmConfig]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_ekm_config" not in self._stubs:
-            self._stubs["get_ekm_config"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/GetEkmConfig",
-                request_serializer=ekm_service.GetEkmConfigRequest.serialize,
-                response_deserializer=ekm_service.EkmConfig.deserialize,
-            )
-        return self._stubs["get_ekm_config"]
-
-    @property
-    def update_ekm_config(
-        self,
-    ) -> Callable[[ekm_service.UpdateEkmConfigRequest], ekm_service.EkmConfig]:
-        r"""Return a callable for the update ekm config method over gRPC.
-
-        Updates the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        Returns:
-            Callable[[~.UpdateEkmConfigRequest],
-                    ~.EkmConfig]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_ekm_config" not in self._stubs:
-            self._stubs["update_ekm_config"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/UpdateEkmConfig",
-                request_serializer=ekm_service.UpdateEkmConfigRequest.serialize,
-                response_deserializer=ekm_service.EkmConfig.deserialize,
-            )
-        return self._stubs["update_ekm_config"]
-
-    @property
-    def verify_connectivity(
-        self,
-    ) -> Callable[
-        [ekm_service.VerifyConnectivityRequest], ekm_service.VerifyConnectivityResponse
-    ]:
-        r"""Return a callable for the verify connectivity method over gRPC.
-
-        Verifies that Cloud KMS can successfully connect to the external
-        key manager specified by an
-        [EkmConnection][google.cloud.kms.v1.EkmConnection]. If there is
-        an error connecting to the EKM, this method returns a
-        FAILED_PRECONDITION status containing structured information as
-        described at
-        https://cloud.google.com/kms/docs/reference/ekm_errors.
-
-        Returns:
-            Callable[[~.VerifyConnectivityRequest],
-                    ~.VerifyConnectivityResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "verify_connectivity" not in self._stubs:
-            self._stubs["verify_connectivity"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/VerifyConnectivity",
-                request_serializer=ekm_service.VerifyConnectivityRequest.serialize,
-                response_deserializer=ekm_service.VerifyConnectivityResponse.deserialize,
-            )
-        return self._stubs["verify_connectivity"]
-
-    @property
-    def set_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.SetIamPolicyRequest], policy_pb2.Policy]:
-        r"""Return a callable for the set iam policy method over gRPC.
-        Sets the IAM access control policy on the specified
-        function. Replaces any existing policy.
-        Returns:
-            Callable[[~.SetIamPolicyRequest],
-                    ~.Policy]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "set_iam_policy" not in self._stubs:
-            self._stubs["set_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/SetIamPolicy",
-                request_serializer=iam_policy_pb2.SetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["set_iam_policy"]
-
-    @property
-    def get_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.GetIamPolicyRequest], policy_pb2.Policy]:
-        r"""Return a callable for the get iam policy method over gRPC.
-        Gets the IAM access control policy for a function.
-        Returns an empty policy if the function exists and does
-        not have a policy set.
-        Returns:
-            Callable[[~.GetIamPolicyRequest],
-                    ~.Policy]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_iam_policy" not in self._stubs:
-            self._stubs["get_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/GetIamPolicy",
-                request_serializer=iam_policy_pb2.GetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["get_iam_policy"]
-
-    @property
-    def test_iam_permissions(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.TestIamPermissionsRequest],
-        iam_policy_pb2.TestIamPermissionsResponse,
-    ]:
-        r"""Return a callable for the test iam permissions method over gRPC.
-        Tests the specified permissions against the IAM access control
-        policy for a function. If the function does not exist, this will
-        return an empty set of permissions, not a NOT_FOUND error.
-        Returns:
-            Callable[[~.TestIamPermissionsRequest],
-                    ~.TestIamPermissionsResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "test_iam_permissions" not in self._stubs:
-            self._stubs["test_iam_permissions"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/TestIamPermissions",
-                request_serializer=iam_policy_pb2.TestIamPermissionsRequest.SerializeToString,
-                response_deserializer=iam_policy_pb2.TestIamPermissionsResponse.FromString,
-            )
-        return self._stubs["test_iam_permissions"]
-
-    def close(self):
-        self.grpc_channel.close()
-
-    @property
-    def list_locations(
-        self,
-    ) -> Callable[
-        [locations_pb2.ListLocationsRequest], locations_pb2.ListLocationsResponse
-    ]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_locations" not in self._stubs:
-            self._stubs["list_locations"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/ListLocations",
-                request_serializer=locations_pb2.ListLocationsRequest.SerializeToString,
-                response_deserializer=locations_pb2.ListLocationsResponse.FromString,
-            )
-        return self._stubs["list_locations"]
-
-    @property
-    def get_location(
-        self,
-    ) -> Callable[[locations_pb2.GetLocationRequest], locations_pb2.Location]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_location" not in self._stubs:
-            self._stubs["get_location"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/GetLocation",
-                request_serializer=locations_pb2.GetLocationRequest.SerializeToString,
-                response_deserializer=locations_pb2.Location.FromString,
-            )
-        return self._stubs["get_location"]
-
-    @property
-    def kind(self) -> str:
-        return "grpc"
-
-
-__all__ = ("EkmServiceGrpcTransport",)
diff --git a/google/cloud/kms_v1/services/ekm_service/transports/grpc_asyncio.py b/google/cloud/kms_v1/services/ekm_service/transports/grpc_asyncio.py
deleted file mode 100644
index 19555bd4..00000000
--- a/google/cloud/kms_v1/services/ekm_service/transports/grpc_asyncio.py
+++ /dev/null
@@ -1,569 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from typing import Awaitable, Callable, Dict, Optional, Sequence, Tuple, Union
-import warnings
-
-from google.api_core import gapic_v1, grpc_helpers_async
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-import grpc  # type: ignore
-from grpc.experimental import aio  # type: ignore
-
-from google.cloud.kms_v1.types import ekm_service
-
-from .base import DEFAULT_CLIENT_INFO, EkmServiceTransport
-from .grpc import EkmServiceGrpcTransport
-
-
-class EkmServiceGrpcAsyncIOTransport(EkmServiceTransport):
-    """gRPC AsyncIO backend transport for EkmService.
-
-    Google Cloud Key Management EKM Service
-
-    Manages external cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [EkmConnection][google.cloud.kms.v1.EkmConnection]
-
-    This class defines the same methods as the primary client, so the
-    primary client can load the underlying transport implementation
-    and call it.
-
-    It sends protocol buffers over the wire using gRPC (which is built on
-    top of HTTP/2); the ``grpcio`` package must be installed.
-    """
-
-    _grpc_channel: aio.Channel
-    _stubs: Dict[str, Callable] = {}
-
-    @classmethod
-    def create_channel(
-        cls,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        quota_project_id: Optional[str] = None,
-        **kwargs,
-    ) -> aio.Channel:
-        """Create and return a gRPC AsyncIO channel object.
-        Args:
-            host (Optional[str]): The host for the channel to use.
-            credentials (Optional[~.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify this application to the service. If
-                none are specified, the client will attempt to ascertain
-                the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
-                service. These are only used when credentials are not specified and
-                are passed to :func:`google.auth.default`.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            kwargs (Optional[dict]): Keyword arguments, which are passed to the
-                channel creation.
-        Returns:
-            aio.Channel: A gRPC AsyncIO channel object.
-        """
-
-        return grpc_helpers_async.create_channel(
-            host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            quota_project_id=quota_project_id,
-            default_scopes=cls.AUTH_SCOPES,
-            scopes=scopes,
-            default_host=cls.DEFAULT_HOST,
-            **kwargs,
-        )
-
-    def __init__(
-        self,
-        *,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        channel: Optional[aio.Channel] = None,
-        api_mtls_endpoint: Optional[str] = None,
-        client_cert_source: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        ssl_channel_credentials: Optional[grpc.ChannelCredentials] = None,
-        client_cert_source_for_mtls: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        api_audience: Optional[str] = None,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-                This argument is ignored if ``channel`` is provided.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
-                service. These are only used when credentials are not specified and
-                are passed to :func:`google.auth.default`.
-            channel (Optional[aio.Channel]): A ``Channel`` instance through
-                which to make calls.
-            api_mtls_endpoint (Optional[str]): Deprecated. The mutual TLS endpoint.
-                If provided, it overrides the ``host`` argument and tries to create
-                a mutual TLS channel with client SSL credentials from
-                ``client_cert_source`` or application default SSL credentials.
-            client_cert_source (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                Deprecated. A callback to provide client SSL certificate bytes and
-                private key bytes, both in PEM format. It is ignored if
-                ``api_mtls_endpoint`` is None.
-            ssl_channel_credentials (grpc.ChannelCredentials): SSL credentials
-                for the grpc channel. It is ignored if ``channel`` is provided.
-            client_cert_source_for_mtls (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                A callback to provide client certificate bytes and private key bytes,
-                both in PEM format. It is used to configure a mutual TLS channel. It is
-                ignored if ``channel`` or ``ssl_channel_credentials`` is provided.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-
-        Raises:
-            google.auth.exceptions.MutualTlsChannelError: If mutual TLS transport
-              creation failed for any reason.
-          google.api_core.exceptions.DuplicateCredentialArgs: If both ``credentials``
-              and ``credentials_file`` are passed.
-        """
-        self._grpc_channel = None
-        self._ssl_channel_credentials = ssl_channel_credentials
-        self._stubs: Dict[str, Callable] = {}
-
-        if api_mtls_endpoint:
-            warnings.warn("api_mtls_endpoint is deprecated", DeprecationWarning)
-        if client_cert_source:
-            warnings.warn("client_cert_source is deprecated", DeprecationWarning)
-
-        if channel:
-            # Ignore credentials if a channel was passed.
-            credentials = False
-            # If a channel was explicitly provided, set it.
-            self._grpc_channel = channel
-            self._ssl_channel_credentials = None
-        else:
-            if api_mtls_endpoint:
-                host = api_mtls_endpoint
-
-                # Create SSL credentials with client_cert_source or application
-                # default SSL credentials.
-                if client_cert_source:
-                    cert, key = client_cert_source()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-                else:
-                    self._ssl_channel_credentials = SslCredentials().ssl_credentials
-
-            else:
-                if client_cert_source_for_mtls and not ssl_channel_credentials:
-                    cert, key = client_cert_source_for_mtls()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-
-        # The base transport sets the host, credentials and scopes
-        super().__init__(
-            host=host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            scopes=scopes,
-            quota_project_id=quota_project_id,
-            client_info=client_info,
-            always_use_jwt_access=always_use_jwt_access,
-            api_audience=api_audience,
-        )
-
-        if not self._grpc_channel:
-            self._grpc_channel = type(self).create_channel(
-                self._host,
-                # use the credentials which are saved
-                credentials=self._credentials,
-                # Set ``credentials_file`` to ``None`` here as
-                # the credentials that we saved earlier should be used.
-                credentials_file=None,
-                scopes=self._scopes,
-                ssl_credentials=self._ssl_channel_credentials,
-                quota_project_id=quota_project_id,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-
-        # Wrap messages. This must be done after self._grpc_channel exists
-        self._prep_wrapped_messages(client_info)
-
-    @property
-    def grpc_channel(self) -> aio.Channel:
-        """Create the channel designed to connect to this service.
-
-        This property caches on the instance; repeated calls return
-        the same channel.
-        """
-        # Return the channel from cache.
-        return self._grpc_channel
-
-    @property
-    def list_ekm_connections(
-        self,
-    ) -> Callable[
-        [ekm_service.ListEkmConnectionsRequest],
-        Awaitable[ekm_service.ListEkmConnectionsResponse],
-    ]:
-        r"""Return a callable for the list ekm connections method over gRPC.
-
-        Lists [EkmConnections][google.cloud.kms.v1.EkmConnection].
-
-        Returns:
-            Callable[[~.ListEkmConnectionsRequest],
-                    Awaitable[~.ListEkmConnectionsResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_ekm_connections" not in self._stubs:
-            self._stubs["list_ekm_connections"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/ListEkmConnections",
-                request_serializer=ekm_service.ListEkmConnectionsRequest.serialize,
-                response_deserializer=ekm_service.ListEkmConnectionsResponse.deserialize,
-            )
-        return self._stubs["list_ekm_connections"]
-
-    @property
-    def get_ekm_connection(
-        self,
-    ) -> Callable[
-        [ekm_service.GetEkmConnectionRequest], Awaitable[ekm_service.EkmConnection]
-    ]:
-        r"""Return a callable for the get ekm connection method over gRPC.
-
-        Returns metadata for a given
-        [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        Returns:
-            Callable[[~.GetEkmConnectionRequest],
-                    Awaitable[~.EkmConnection]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_ekm_connection" not in self._stubs:
-            self._stubs["get_ekm_connection"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/GetEkmConnection",
-                request_serializer=ekm_service.GetEkmConnectionRequest.serialize,
-                response_deserializer=ekm_service.EkmConnection.deserialize,
-            )
-        return self._stubs["get_ekm_connection"]
-
-    @property
-    def create_ekm_connection(
-        self,
-    ) -> Callable[
-        [ekm_service.CreateEkmConnectionRequest], Awaitable[ekm_service.EkmConnection]
-    ]:
-        r"""Return a callable for the create ekm connection method over gRPC.
-
-        Creates a new [EkmConnection][google.cloud.kms.v1.EkmConnection]
-        in a given Project and Location.
-
-        Returns:
-            Callable[[~.CreateEkmConnectionRequest],
-                    Awaitable[~.EkmConnection]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_ekm_connection" not in self._stubs:
-            self._stubs["create_ekm_connection"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/CreateEkmConnection",
-                request_serializer=ekm_service.CreateEkmConnectionRequest.serialize,
-                response_deserializer=ekm_service.EkmConnection.deserialize,
-            )
-        return self._stubs["create_ekm_connection"]
-
-    @property
-    def update_ekm_connection(
-        self,
-    ) -> Callable[
-        [ekm_service.UpdateEkmConnectionRequest], Awaitable[ekm_service.EkmConnection]
-    ]:
-        r"""Return a callable for the update ekm connection method over gRPC.
-
-        Updates an [EkmConnection][google.cloud.kms.v1.EkmConnection]'s
-        metadata.
-
-        Returns:
-            Callable[[~.UpdateEkmConnectionRequest],
-                    Awaitable[~.EkmConnection]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_ekm_connection" not in self._stubs:
-            self._stubs["update_ekm_connection"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/UpdateEkmConnection",
-                request_serializer=ekm_service.UpdateEkmConnectionRequest.serialize,
-                response_deserializer=ekm_service.EkmConnection.deserialize,
-            )
-        return self._stubs["update_ekm_connection"]
-
-    @property
-    def get_ekm_config(
-        self,
-    ) -> Callable[[ekm_service.GetEkmConfigRequest], Awaitable[ekm_service.EkmConfig]]:
-        r"""Return a callable for the get ekm config method over gRPC.
-
-        Returns the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        Returns:
-            Callable[[~.GetEkmConfigRequest],
-                    Awaitable[~.EkmConfig]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_ekm_config" not in self._stubs:
-            self._stubs["get_ekm_config"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/GetEkmConfig",
-                request_serializer=ekm_service.GetEkmConfigRequest.serialize,
-                response_deserializer=ekm_service.EkmConfig.deserialize,
-            )
-        return self._stubs["get_ekm_config"]
-
-    @property
-    def update_ekm_config(
-        self,
-    ) -> Callable[
-        [ekm_service.UpdateEkmConfigRequest], Awaitable[ekm_service.EkmConfig]
-    ]:
-        r"""Return a callable for the update ekm config method over gRPC.
-
-        Updates the [EkmConfig][google.cloud.kms.v1.EkmConfig] singleton
-        resource for a given project and location.
-
-        Returns:
-            Callable[[~.UpdateEkmConfigRequest],
-                    Awaitable[~.EkmConfig]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_ekm_config" not in self._stubs:
-            self._stubs["update_ekm_config"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/UpdateEkmConfig",
-                request_serializer=ekm_service.UpdateEkmConfigRequest.serialize,
-                response_deserializer=ekm_service.EkmConfig.deserialize,
-            )
-        return self._stubs["update_ekm_config"]
-
-    @property
-    def verify_connectivity(
-        self,
-    ) -> Callable[
-        [ekm_service.VerifyConnectivityRequest],
-        Awaitable[ekm_service.VerifyConnectivityResponse],
-    ]:
-        r"""Return a callable for the verify connectivity method over gRPC.
-
-        Verifies that Cloud KMS can successfully connect to the external
-        key manager specified by an
-        [EkmConnection][google.cloud.kms.v1.EkmConnection]. If there is
-        an error connecting to the EKM, this method returns a
-        FAILED_PRECONDITION status containing structured information as
-        described at
-        https://cloud.google.com/kms/docs/reference/ekm_errors.
-
-        Returns:
-            Callable[[~.VerifyConnectivityRequest],
-                    Awaitable[~.VerifyConnectivityResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "verify_connectivity" not in self._stubs:
-            self._stubs["verify_connectivity"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.EkmService/VerifyConnectivity",
-                request_serializer=ekm_service.VerifyConnectivityRequest.serialize,
-                response_deserializer=ekm_service.VerifyConnectivityResponse.deserialize,
-            )
-        return self._stubs["verify_connectivity"]
-
-    @property
-    def set_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.SetIamPolicyRequest], Awaitable[policy_pb2.Policy]]:
-        r"""Return a callable for the set iam policy method over gRPC.
-        Sets the IAM access control policy on the specified
-        function. Replaces any existing policy.
-        Returns:
-            Callable[[~.SetIamPolicyRequest],
-                    Awaitable[~.Policy]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "set_iam_policy" not in self._stubs:
-            self._stubs["set_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/SetIamPolicy",
-                request_serializer=iam_policy_pb2.SetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["set_iam_policy"]
-
-    @property
-    def get_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.GetIamPolicyRequest], Awaitable[policy_pb2.Policy]]:
-        r"""Return a callable for the get iam policy method over gRPC.
-        Gets the IAM access control policy for a function.
-        Returns an empty policy if the function exists and does
-        not have a policy set.
-        Returns:
-            Callable[[~.GetIamPolicyRequest],
-                    Awaitable[~.Policy]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_iam_policy" not in self._stubs:
-            self._stubs["get_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/GetIamPolicy",
-                request_serializer=iam_policy_pb2.GetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["get_iam_policy"]
-
-    @property
-    def test_iam_permissions(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.TestIamPermissionsRequest],
-        Awaitable[iam_policy_pb2.TestIamPermissionsResponse],
-    ]:
-        r"""Return a callable for the test iam permissions method over gRPC.
-        Tests the specified permissions against the IAM access control
-        policy for a function. If the function does not exist, this will
-        return an empty set of permissions, not a NOT_FOUND error.
-        Returns:
-            Callable[[~.TestIamPermissionsRequest],
-                    Awaitable[~.TestIamPermissionsResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "test_iam_permissions" not in self._stubs:
-            self._stubs["test_iam_permissions"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/TestIamPermissions",
-                request_serializer=iam_policy_pb2.TestIamPermissionsRequest.SerializeToString,
-                response_deserializer=iam_policy_pb2.TestIamPermissionsResponse.FromString,
-            )
-        return self._stubs["test_iam_permissions"]
-
-    def close(self):
-        return self.grpc_channel.close()
-
-    @property
-    def list_locations(
-        self,
-    ) -> Callable[
-        [locations_pb2.ListLocationsRequest], locations_pb2.ListLocationsResponse
-    ]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_locations" not in self._stubs:
-            self._stubs["list_locations"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/ListLocations",
-                request_serializer=locations_pb2.ListLocationsRequest.SerializeToString,
-                response_deserializer=locations_pb2.ListLocationsResponse.FromString,
-            )
-        return self._stubs["list_locations"]
-
-    @property
-    def get_location(
-        self,
-    ) -> Callable[[locations_pb2.GetLocationRequest], locations_pb2.Location]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_location" not in self._stubs:
-            self._stubs["get_location"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/GetLocation",
-                request_serializer=locations_pb2.GetLocationRequest.SerializeToString,
-                response_deserializer=locations_pb2.Location.FromString,
-            )
-        return self._stubs["get_location"]
-
-
-__all__ = ("EkmServiceGrpcAsyncIOTransport",)
diff --git a/google/cloud/kms_v1/services/ekm_service/transports/rest.py b/google/cloud/kms_v1/services/ekm_service/transports/rest.py
deleted file mode 100644
index 564dd369..00000000
--- a/google/cloud/kms_v1/services/ekm_service/transports/rest.py
+++ /dev/null
@@ -1,1684 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-import dataclasses
-import json  # type: ignore
-import re
-from typing import Any, Callable, Dict, List, Optional, Sequence, Tuple, Union
-import warnings
-
-from google.api_core import gapic_v1, path_template, rest_helpers, rest_streaming
-from google.api_core import exceptions as core_exceptions
-from google.api_core import retry as retries
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.auth.transport.requests import AuthorizedSession  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.protobuf import json_format
-import grpc  # type: ignore
-from requests import __version__ as requests_version
-
-try:
-    OptionalRetry = Union[retries.Retry, gapic_v1.method._MethodDefault]
-except AttributeError:  # pragma: NO COVER
-    OptionalRetry = Union[retries.Retry, object]  # type: ignore
-
-
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-
-from google.cloud.kms_v1.types import ekm_service
-
-from .base import DEFAULT_CLIENT_INFO as BASE_DEFAULT_CLIENT_INFO
-from .base import EkmServiceTransport
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=BASE_DEFAULT_CLIENT_INFO.gapic_version,
-    grpc_version=None,
-    rest_version=requests_version,
-)
-
-
-class EkmServiceRestInterceptor:
-    """Interceptor for EkmService.
-
-    Interceptors are used to manipulate requests, request metadata, and responses
-    in arbitrary ways.
-    Example use cases include:
-    * Logging
-    * Verifying requests according to service or custom semantics
-    * Stripping extraneous information from responses
-
-    These use cases and more can be enabled by injecting an
-    instance of a custom subclass when constructing the EkmServiceRestTransport.
-
-    .. code-block:: python
-        class MyCustomEkmServiceInterceptor(EkmServiceRestInterceptor):
-            def pre_create_ekm_connection(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_create_ekm_connection(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_get_ekm_config(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_get_ekm_config(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_get_ekm_connection(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_get_ekm_connection(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_list_ekm_connections(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_list_ekm_connections(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_update_ekm_config(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_update_ekm_config(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_update_ekm_connection(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_update_ekm_connection(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_verify_connectivity(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_verify_connectivity(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-        transport = EkmServiceRestTransport(interceptor=MyCustomEkmServiceInterceptor())
-        client = EkmServiceClient(transport=transport)
-
-
-    """
-
-    def pre_create_ekm_connection(
-        self,
-        request: ekm_service.CreateEkmConnectionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[ekm_service.CreateEkmConnectionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for create_ekm_connection
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_create_ekm_connection(
-        self, response: ekm_service.EkmConnection
-    ) -> ekm_service.EkmConnection:
-        """Post-rpc interceptor for create_ekm_connection
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_ekm_config(
-        self,
-        request: ekm_service.GetEkmConfigRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[ekm_service.GetEkmConfigRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_ekm_config
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_get_ekm_config(
-        self, response: ekm_service.EkmConfig
-    ) -> ekm_service.EkmConfig:
-        """Post-rpc interceptor for get_ekm_config
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_ekm_connection(
-        self,
-        request: ekm_service.GetEkmConnectionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[ekm_service.GetEkmConnectionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_ekm_connection
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_get_ekm_connection(
-        self, response: ekm_service.EkmConnection
-    ) -> ekm_service.EkmConnection:
-        """Post-rpc interceptor for get_ekm_connection
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_list_ekm_connections(
-        self,
-        request: ekm_service.ListEkmConnectionsRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[ekm_service.ListEkmConnectionsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for list_ekm_connections
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_list_ekm_connections(
-        self, response: ekm_service.ListEkmConnectionsResponse
-    ) -> ekm_service.ListEkmConnectionsResponse:
-        """Post-rpc interceptor for list_ekm_connections
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_update_ekm_config(
-        self,
-        request: ekm_service.UpdateEkmConfigRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[ekm_service.UpdateEkmConfigRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for update_ekm_config
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_update_ekm_config(
-        self, response: ekm_service.EkmConfig
-    ) -> ekm_service.EkmConfig:
-        """Post-rpc interceptor for update_ekm_config
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_update_ekm_connection(
-        self,
-        request: ekm_service.UpdateEkmConnectionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[ekm_service.UpdateEkmConnectionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for update_ekm_connection
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_update_ekm_connection(
-        self, response: ekm_service.EkmConnection
-    ) -> ekm_service.EkmConnection:
-        """Post-rpc interceptor for update_ekm_connection
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_verify_connectivity(
-        self,
-        request: ekm_service.VerifyConnectivityRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[ekm_service.VerifyConnectivityRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for verify_connectivity
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_verify_connectivity(
-        self, response: ekm_service.VerifyConnectivityResponse
-    ) -> ekm_service.VerifyConnectivityResponse:
-        """Post-rpc interceptor for verify_connectivity
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_location(
-        self,
-        request: locations_pb2.GetLocationRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[locations_pb2.GetLocationRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_location
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_get_location(
-        self, response: locations_pb2.Location
-    ) -> locations_pb2.Location:
-        """Post-rpc interceptor for get_location
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_list_locations(
-        self,
-        request: locations_pb2.ListLocationsRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[locations_pb2.ListLocationsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for list_locations
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_list_locations(
-        self, response: locations_pb2.ListLocationsResponse
-    ) -> locations_pb2.ListLocationsResponse:
-        """Post-rpc interceptor for list_locations
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_iam_policy(
-        self,
-        request: iam_policy_pb2.GetIamPolicyRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[iam_policy_pb2.GetIamPolicyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_iam_policy
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_get_iam_policy(self, response: policy_pb2.Policy) -> policy_pb2.Policy:
-        """Post-rpc interceptor for get_iam_policy
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_set_iam_policy(
-        self,
-        request: iam_policy_pb2.SetIamPolicyRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[iam_policy_pb2.SetIamPolicyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for set_iam_policy
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_set_iam_policy(self, response: policy_pb2.Policy) -> policy_pb2.Policy:
-        """Post-rpc interceptor for set_iam_policy
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_test_iam_permissions(
-        self,
-        request: iam_policy_pb2.TestIamPermissionsRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[iam_policy_pb2.TestIamPermissionsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for test_iam_permissions
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the EkmService server.
-        """
-        return request, metadata
-
-    def post_test_iam_permissions(
-        self, response: iam_policy_pb2.TestIamPermissionsResponse
-    ) -> iam_policy_pb2.TestIamPermissionsResponse:
-        """Post-rpc interceptor for test_iam_permissions
-
-        Override in a subclass to manipulate the response
-        after it is returned by the EkmService server but before
-        it is returned to user code.
-        """
-        return response
-
-
-@dataclasses.dataclass
-class EkmServiceRestStub:
-    _session: AuthorizedSession
-    _host: str
-    _interceptor: EkmServiceRestInterceptor
-
-
-class EkmServiceRestTransport(EkmServiceTransport):
-    """REST backend transport for EkmService.
-
-    Google Cloud Key Management EKM Service
-
-    Manages external cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [EkmConnection][google.cloud.kms.v1.EkmConnection]
-
-    This class defines the same methods as the primary client, so the
-    primary client can load the underlying transport implementation
-    and call it.
-
-    It sends JSON representations of protocol buffers over HTTP/1.1
-
-    """
-
-    def __init__(
-        self,
-        *,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        client_cert_source_for_mtls: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        url_scheme: str = "https",
-        interceptor: Optional[EkmServiceRestInterceptor] = None,
-        api_audience: Optional[str] = None,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional(Sequence[str])): A list of scopes. This argument is
-                ignored if ``channel`` is provided.
-            client_cert_source_for_mtls (Callable[[], Tuple[bytes, bytes]]): Client
-                certificate to configure mutual TLS HTTP channel. It is ignored
-                if ``channel`` is provided.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you are developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-            url_scheme: the protocol scheme for the API endpoint.  Normally
-                "https", but for testing or local servers,
-                "http" can be specified.
-        """
-        # Run the base constructor
-        # TODO(yon-mg): resolve other ctor params i.e. scopes, quota, etc.
-        # TODO: When custom host (api_endpoint) is set, `scopes` must *also* be set on the
-        # credentials object
-        maybe_url_match = re.match("^(?P<scheme>http(?:s)?://)?(?P<host>.*)$", host)
-        if maybe_url_match is None:
-            raise ValueError(
-                f"Unexpected hostname structure: {host}"
-            )  # pragma: NO COVER
-
-        url_match_items = maybe_url_match.groupdict()
-
-        host = f"{url_scheme}://{host}" if not url_match_items["scheme"] else host
-
-        super().__init__(
-            host=host,
-            credentials=credentials,
-            client_info=client_info,
-            always_use_jwt_access=always_use_jwt_access,
-            api_audience=api_audience,
-        )
-        self._session = AuthorizedSession(
-            self._credentials, default_host=self.DEFAULT_HOST
-        )
-        if client_cert_source_for_mtls:
-            self._session.configure_mtls_channel(client_cert_source_for_mtls)
-        self._interceptor = interceptor or EkmServiceRestInterceptor()
-        self._prep_wrapped_messages(client_info)
-
-    class _CreateEkmConnection(EkmServiceRestStub):
-        def __hash__(self):
-            return hash("CreateEkmConnection")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "ekmConnectionId": "",
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: ekm_service.CreateEkmConnectionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> ekm_service.EkmConnection:
-            r"""Call the create ekm connection method over HTTP.
-
-            Args:
-                request (~.ekm_service.CreateEkmConnectionRequest):
-                    The request object. Request message for
-                [EkmService.CreateEkmConnection][google.cloud.kms.v1.EkmService.CreateEkmConnection].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.ekm_service.EkmConnection:
-                    An [EkmConnection][google.cloud.kms.v1.EkmConnection]
-                represents an individual EKM connection. It can be used
-                for creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                and
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                with a
-                [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                of
-                [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                as well as performing cryptographic operations using
-                keys created within the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{parent=projects/*/locations/*}/ekmConnections",
-                    "body": "ekm_connection",
-                },
-            ]
-            request, metadata = self._interceptor.pre_create_ekm_connection(
-                request, metadata
-            )
-            pb_request = ekm_service.CreateEkmConnectionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = ekm_service.EkmConnection()
-            pb_resp = ekm_service.EkmConnection.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_create_ekm_connection(resp)
-            return resp
-
-    class _GetEkmConfig(EkmServiceRestStub):
-        def __hash__(self):
-            return hash("GetEkmConfig")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: ekm_service.GetEkmConfigRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> ekm_service.EkmConfig:
-            r"""Call the get ekm config method over HTTP.
-
-            Args:
-                request (~.ekm_service.GetEkmConfigRequest):
-                    The request object. Request message for
-                [EkmService.GetEkmConfig][google.cloud.kms.v1.EkmService.GetEkmConfig].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.ekm_service.EkmConfig:
-                    An [EkmConfig][google.cloud.kms.v1.EkmConfig] is a
-                singleton resource that represents configuration
-                parameters that apply to all
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                with a
-                [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                of
-                [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC]
-                in a given project and location.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/ekmConfig}",
-                },
-            ]
-            request, metadata = self._interceptor.pre_get_ekm_config(request, metadata)
-            pb_request = ekm_service.GetEkmConfigRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = ekm_service.EkmConfig()
-            pb_resp = ekm_service.EkmConfig.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_get_ekm_config(resp)
-            return resp
-
-    class _GetEkmConnection(EkmServiceRestStub):
-        def __hash__(self):
-            return hash("GetEkmConnection")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: ekm_service.GetEkmConnectionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> ekm_service.EkmConnection:
-            r"""Call the get ekm connection method over HTTP.
-
-            Args:
-                request (~.ekm_service.GetEkmConnectionRequest):
-                    The request object. Request message for
-                [EkmService.GetEkmConnection][google.cloud.kms.v1.EkmService.GetEkmConnection].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.ekm_service.EkmConnection:
-                    An [EkmConnection][google.cloud.kms.v1.EkmConnection]
-                represents an individual EKM connection. It can be used
-                for creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                and
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                with a
-                [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                of
-                [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                as well as performing cryptographic operations using
-                keys created within the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/ekmConnections/*}",
-                },
-            ]
-            request, metadata = self._interceptor.pre_get_ekm_connection(
-                request, metadata
-            )
-            pb_request = ekm_service.GetEkmConnectionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = ekm_service.EkmConnection()
-            pb_resp = ekm_service.EkmConnection.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_get_ekm_connection(resp)
-            return resp
-
-    class _ListEkmConnections(EkmServiceRestStub):
-        def __hash__(self):
-            return hash("ListEkmConnections")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: ekm_service.ListEkmConnectionsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> ekm_service.ListEkmConnectionsResponse:
-            r"""Call the list ekm connections method over HTTP.
-
-            Args:
-                request (~.ekm_service.ListEkmConnectionsRequest):
-                    The request object. Request message for
-                [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.ekm_service.ListEkmConnectionsResponse:
-                    Response message for
-                [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{parent=projects/*/locations/*}/ekmConnections",
-                },
-            ]
-            request, metadata = self._interceptor.pre_list_ekm_connections(
-                request, metadata
-            )
-            pb_request = ekm_service.ListEkmConnectionsRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = ekm_service.ListEkmConnectionsResponse()
-            pb_resp = ekm_service.ListEkmConnectionsResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_list_ekm_connections(resp)
-            return resp
-
-    class _UpdateEkmConfig(EkmServiceRestStub):
-        def __hash__(self):
-            return hash("UpdateEkmConfig")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "updateMask": {},
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: ekm_service.UpdateEkmConfigRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> ekm_service.EkmConfig:
-            r"""Call the update ekm config method over HTTP.
-
-            Args:
-                request (~.ekm_service.UpdateEkmConfigRequest):
-                    The request object. Request message for
-                [EkmService.UpdateEkmConfig][google.cloud.kms.v1.EkmService.UpdateEkmConfig].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.ekm_service.EkmConfig:
-                    An [EkmConfig][google.cloud.kms.v1.EkmConfig] is a
-                singleton resource that represents configuration
-                parameters that apply to all
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                with a
-                [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                of
-                [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC]
-                in a given project and location.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "patch",
-                    "uri": "/v1/{ekm_config.name=projects/*/locations/*/ekmConfig}",
-                    "body": "ekm_config",
-                },
-            ]
-            request, metadata = self._interceptor.pre_update_ekm_config(
-                request, metadata
-            )
-            pb_request = ekm_service.UpdateEkmConfigRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = ekm_service.EkmConfig()
-            pb_resp = ekm_service.EkmConfig.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_update_ekm_config(resp)
-            return resp
-
-    class _UpdateEkmConnection(EkmServiceRestStub):
-        def __hash__(self):
-            return hash("UpdateEkmConnection")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "updateMask": {},
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: ekm_service.UpdateEkmConnectionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> ekm_service.EkmConnection:
-            r"""Call the update ekm connection method over HTTP.
-
-            Args:
-                request (~.ekm_service.UpdateEkmConnectionRequest):
-                    The request object. Request message for
-                [EkmService.UpdateEkmConnection][google.cloud.kms.v1.EkmService.UpdateEkmConnection].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.ekm_service.EkmConnection:
-                    An [EkmConnection][google.cloud.kms.v1.EkmConnection]
-                represents an individual EKM connection. It can be used
-                for creating [CryptoKeys][google.cloud.kms.v1.CryptoKey]
-                and
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                with a
-                [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                of
-                [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-                as well as performing cryptographic operations using
-                keys created within the
-                [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "patch",
-                    "uri": "/v1/{ekm_connection.name=projects/*/locations/*/ekmConnections/*}",
-                    "body": "ekm_connection",
-                },
-            ]
-            request, metadata = self._interceptor.pre_update_ekm_connection(
-                request, metadata
-            )
-            pb_request = ekm_service.UpdateEkmConnectionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = ekm_service.EkmConnection()
-            pb_resp = ekm_service.EkmConnection.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_update_ekm_connection(resp)
-            return resp
-
-    class _VerifyConnectivity(EkmServiceRestStub):
-        def __hash__(self):
-            return hash("VerifyConnectivity")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: ekm_service.VerifyConnectivityRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> ekm_service.VerifyConnectivityResponse:
-            r"""Call the verify connectivity method over HTTP.
-
-            Args:
-                request (~.ekm_service.VerifyConnectivityRequest):
-                    The request object. Request message for
-                [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.ekm_service.VerifyConnectivityResponse:
-                    Response message for
-                [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/ekmConnections/*}:verifyConnectivity",
-                },
-            ]
-            request, metadata = self._interceptor.pre_verify_connectivity(
-                request, metadata
-            )
-            pb_request = ekm_service.VerifyConnectivityRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = ekm_service.VerifyConnectivityResponse()
-            pb_resp = ekm_service.VerifyConnectivityResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_verify_connectivity(resp)
-            return resp
-
-    @property
-    def create_ekm_connection(
-        self,
-    ) -> Callable[[ekm_service.CreateEkmConnectionRequest], ekm_service.EkmConnection]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._CreateEkmConnection(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_ekm_config(
-        self,
-    ) -> Callable[[ekm_service.GetEkmConfigRequest], ekm_service.EkmConfig]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GetEkmConfig(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_ekm_connection(
-        self,
-    ) -> Callable[[ekm_service.GetEkmConnectionRequest], ekm_service.EkmConnection]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GetEkmConnection(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def list_ekm_connections(
-        self,
-    ) -> Callable[
-        [ekm_service.ListEkmConnectionsRequest], ekm_service.ListEkmConnectionsResponse
-    ]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._ListEkmConnections(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def update_ekm_config(
-        self,
-    ) -> Callable[[ekm_service.UpdateEkmConfigRequest], ekm_service.EkmConfig]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._UpdateEkmConfig(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def update_ekm_connection(
-        self,
-    ) -> Callable[[ekm_service.UpdateEkmConnectionRequest], ekm_service.EkmConnection]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._UpdateEkmConnection(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def verify_connectivity(
-        self,
-    ) -> Callable[
-        [ekm_service.VerifyConnectivityRequest], ekm_service.VerifyConnectivityResponse
-    ]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._VerifyConnectivity(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_location(self):
-        return self._GetLocation(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _GetLocation(EkmServiceRestStub):
-        def __call__(
-            self,
-            request: locations_pb2.GetLocationRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> locations_pb2.Location:
-            r"""Call the get location method over HTTP.
-
-            Args:
-                request (locations_pb2.GetLocationRequest):
-                    The request object for GetLocation method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                locations_pb2.Location: Response from GetLocation method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*}",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_get_location(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = locations_pb2.Location()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_get_location(resp)
-            return resp
-
-    @property
-    def list_locations(self):
-        return self._ListLocations(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _ListLocations(EkmServiceRestStub):
-        def __call__(
-            self,
-            request: locations_pb2.ListLocationsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> locations_pb2.ListLocationsResponse:
-            r"""Call the list locations method over HTTP.
-
-            Args:
-                request (locations_pb2.ListLocationsRequest):
-                    The request object for ListLocations method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                locations_pb2.ListLocationsResponse: Response from ListLocations method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*}/locations",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_list_locations(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = locations_pb2.ListLocationsResponse()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_list_locations(resp)
-            return resp
-
-    @property
-    def get_iam_policy(self):
-        return self._GetIamPolicy(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _GetIamPolicy(EkmServiceRestStub):
-        def __call__(
-            self,
-            request: iam_policy_pb2.GetIamPolicyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> policy_pb2.Policy:
-            r"""Call the get iam policy method over HTTP.
-
-            Args:
-                request (iam_policy_pb2.GetIamPolicyRequest):
-                    The request object for GetIamPolicy method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                policy_pb2.Policy: Response from GetIamPolicy method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/cryptoKeys/*}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/importJobs/*}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConfig}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConnections/*}:getIamPolicy",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_get_iam_policy(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = policy_pb2.Policy()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_get_iam_policy(resp)
-            return resp
-
-    @property
-    def set_iam_policy(self):
-        return self._SetIamPolicy(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _SetIamPolicy(EkmServiceRestStub):
-        def __call__(
-            self,
-            request: iam_policy_pb2.SetIamPolicyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> policy_pb2.Policy:
-            r"""Call the set iam policy method over HTTP.
-
-            Args:
-                request (iam_policy_pb2.SetIamPolicyRequest):
-                    The request object for SetIamPolicy method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                policy_pb2.Policy: Response from SetIamPolicy method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/cryptoKeys/*}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/importJobs/*}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConfig}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConnections/*}:setIamPolicy",
-                    "body": "*",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_set_iam_policy(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            body = json.dumps(transcoded_request["body"])
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = policy_pb2.Policy()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_set_iam_policy(resp)
-            return resp
-
-    @property
-    def test_iam_permissions(self):
-        return self._TestIamPermissions(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _TestIamPermissions(EkmServiceRestStub):
-        def __call__(
-            self,
-            request: iam_policy_pb2.TestIamPermissionsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> iam_policy_pb2.TestIamPermissionsResponse:
-            r"""Call the test iam permissions method over HTTP.
-
-            Args:
-                request (iam_policy_pb2.TestIamPermissionsRequest):
-                    The request object for TestIamPermissions method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                iam_policy_pb2.TestIamPermissionsResponse: Response from TestIamPermissions method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/cryptoKeys/*}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/importJobs/*}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConfig}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConnections/*}:testIamPermissions",
-                    "body": "*",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_test_iam_permissions(
-                request, metadata
-            )
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            body = json.dumps(transcoded_request["body"])
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = iam_policy_pb2.TestIamPermissionsResponse()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_test_iam_permissions(resp)
-            return resp
-
-    @property
-    def kind(self) -> str:
-        return "rest"
-
-    def close(self):
-        self._session.close()
-
-
-__all__ = ("EkmServiceRestTransport",)
diff --git a/google/cloud/kms_v1/services/key_management_service/__init__.py b/google/cloud/kms_v1/services/key_management_service/__init__.py
deleted file mode 100644
index 22a8bd81..00000000
--- a/google/cloud/kms_v1/services/key_management_service/__init__.py
+++ /dev/null
@@ -1,22 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from .async_client import KeyManagementServiceAsyncClient
-from .client import KeyManagementServiceClient
-
-__all__ = (
-    "KeyManagementServiceClient",
-    "KeyManagementServiceAsyncClient",
-)
diff --git a/google/cloud/kms_v1/services/key_management_service/async_client.py b/google/cloud/kms_v1/services/key_management_service/async_client.py
deleted file mode 100644
index 7ea523e1..00000000
--- a/google/cloud/kms_v1/services/key_management_service/async_client.py
+++ /dev/null
@@ -1,4344 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from collections import OrderedDict
-import functools
-import re
-from typing import (
-    Dict,
-    Mapping,
-    MutableMapping,
-    MutableSequence,
-    Optional,
-    Sequence,
-    Tuple,
-    Type,
-    Union,
-)
-
-from google.api_core import exceptions as core_exceptions
-from google.api_core import gapic_v1
-from google.api_core import retry as retries
-from google.api_core.client_options import ClientOptions
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.oauth2 import service_account  # type: ignore
-
-from google.cloud.kms_v1 import gapic_version as package_version
-
-try:
-    OptionalRetry = Union[retries.Retry, gapic_v1.method._MethodDefault]
-except AttributeError:  # pragma: NO COVER
-    OptionalRetry = Union[retries.Retry, object]  # type: ignore
-
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.protobuf import duration_pb2  # type: ignore
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import timestamp_pb2  # type: ignore
-from google.protobuf import wrappers_pb2  # type: ignore
-
-from google.cloud.kms_v1.services.key_management_service import pagers
-from google.cloud.kms_v1.types import resources, service
-
-from .client import KeyManagementServiceClient
-from .transports.base import DEFAULT_CLIENT_INFO, KeyManagementServiceTransport
-from .transports.grpc_asyncio import KeyManagementServiceGrpcAsyncIOTransport
-
-
-class KeyManagementServiceAsyncClient:
-    """Google Cloud Key Management Service
-
-    Manages cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [KeyRing][google.cloud.kms.v1.KeyRing]
-    -  [CryptoKey][google.cloud.kms.v1.CryptoKey]
-    -  [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-    -  [ImportJob][google.cloud.kms.v1.ImportJob]
-
-    If you are using manual gRPC libraries, see `Using gRPC with Cloud
-    KMS <https://cloud.google.com/kms/docs/grpc>`__.
-    """
-
-    _client: KeyManagementServiceClient
-
-    DEFAULT_ENDPOINT = KeyManagementServiceClient.DEFAULT_ENDPOINT
-    DEFAULT_MTLS_ENDPOINT = KeyManagementServiceClient.DEFAULT_MTLS_ENDPOINT
-
-    crypto_key_path = staticmethod(KeyManagementServiceClient.crypto_key_path)
-    parse_crypto_key_path = staticmethod(
-        KeyManagementServiceClient.parse_crypto_key_path
-    )
-    crypto_key_version_path = staticmethod(
-        KeyManagementServiceClient.crypto_key_version_path
-    )
-    parse_crypto_key_version_path = staticmethod(
-        KeyManagementServiceClient.parse_crypto_key_version_path
-    )
-    import_job_path = staticmethod(KeyManagementServiceClient.import_job_path)
-    parse_import_job_path = staticmethod(
-        KeyManagementServiceClient.parse_import_job_path
-    )
-    key_ring_path = staticmethod(KeyManagementServiceClient.key_ring_path)
-    parse_key_ring_path = staticmethod(KeyManagementServiceClient.parse_key_ring_path)
-    public_key_path = staticmethod(KeyManagementServiceClient.public_key_path)
-    parse_public_key_path = staticmethod(
-        KeyManagementServiceClient.parse_public_key_path
-    )
-    common_billing_account_path = staticmethod(
-        KeyManagementServiceClient.common_billing_account_path
-    )
-    parse_common_billing_account_path = staticmethod(
-        KeyManagementServiceClient.parse_common_billing_account_path
-    )
-    common_folder_path = staticmethod(KeyManagementServiceClient.common_folder_path)
-    parse_common_folder_path = staticmethod(
-        KeyManagementServiceClient.parse_common_folder_path
-    )
-    common_organization_path = staticmethod(
-        KeyManagementServiceClient.common_organization_path
-    )
-    parse_common_organization_path = staticmethod(
-        KeyManagementServiceClient.parse_common_organization_path
-    )
-    common_project_path = staticmethod(KeyManagementServiceClient.common_project_path)
-    parse_common_project_path = staticmethod(
-        KeyManagementServiceClient.parse_common_project_path
-    )
-    common_location_path = staticmethod(KeyManagementServiceClient.common_location_path)
-    parse_common_location_path = staticmethod(
-        KeyManagementServiceClient.parse_common_location_path
-    )
-
-    @classmethod
-    def from_service_account_info(cls, info: dict, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            info.
-
-        Args:
-            info (dict): The service account private key info.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            KeyManagementServiceAsyncClient: The constructed client.
-        """
-        return KeyManagementServiceClient.from_service_account_info.__func__(KeyManagementServiceAsyncClient, info, *args, **kwargs)  # type: ignore
-
-    @classmethod
-    def from_service_account_file(cls, filename: str, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            file.
-
-        Args:
-            filename (str): The path to the service account private key json
-                file.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            KeyManagementServiceAsyncClient: The constructed client.
-        """
-        return KeyManagementServiceClient.from_service_account_file.__func__(KeyManagementServiceAsyncClient, filename, *args, **kwargs)  # type: ignore
-
-    from_service_account_json = from_service_account_file
-
-    @classmethod
-    def get_mtls_endpoint_and_cert_source(
-        cls, client_options: Optional[ClientOptions] = None
-    ):
-        """Return the API endpoint and client cert source for mutual TLS.
-
-        The client cert source is determined in the following order:
-        (1) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is not "true", the
-        client cert source is None.
-        (2) if `client_options.client_cert_source` is provided, use the provided one; if the
-        default client cert source exists, use the default one; otherwise the client cert
-        source is None.
-
-        The API endpoint is determined in the following order:
-        (1) if `client_options.api_endpoint` if provided, use the provided one.
-        (2) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is "always", use the
-        default mTLS endpoint; if the environment variable is "never", use the default API
-        endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise
-        use the default API endpoint.
-
-        More details can be found at https://google.aip.dev/auth/4114.
-
-        Args:
-            client_options (google.api_core.client_options.ClientOptions): Custom options for the
-                client. Only the `api_endpoint` and `client_cert_source` properties may be used
-                in this method.
-
-        Returns:
-            Tuple[str, Callable[[], Tuple[bytes, bytes]]]: returns the API endpoint and the
-                client cert source to use.
-
-        Raises:
-            google.auth.exceptions.MutualTLSChannelError: If any errors happen.
-        """
-        return KeyManagementServiceClient.get_mtls_endpoint_and_cert_source(client_options)  # type: ignore
-
-    @property
-    def transport(self) -> KeyManagementServiceTransport:
-        """Returns the transport used by the client instance.
-
-        Returns:
-            KeyManagementServiceTransport: The transport used by the client instance.
-        """
-        return self._client.transport
-
-    get_transport_class = functools.partial(
-        type(KeyManagementServiceClient).get_transport_class,
-        type(KeyManagementServiceClient),
-    )
-
-    def __init__(
-        self,
-        *,
-        credentials: Optional[ga_credentials.Credentials] = None,
-        transport: Union[str, KeyManagementServiceTransport] = "grpc_asyncio",
-        client_options: Optional[ClientOptions] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-    ) -> None:
-        """Instantiates the key management service client.
-
-        Args:
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-            transport (Union[str, ~.KeyManagementServiceTransport]): The
-                transport to use. If set to None, a transport is chosen
-                automatically.
-            client_options (ClientOptions): Custom options for the client. It
-                won't take effect if a ``transport`` instance is provided.
-                (1) The ``api_endpoint`` property can be used to override the
-                default endpoint provided by the client. GOOGLE_API_USE_MTLS_ENDPOINT
-                environment variable can also be used to override the endpoint:
-                "always" (always use the default mTLS endpoint), "never" (always
-                use the default regular endpoint) and "auto" (auto switch to the
-                default mTLS endpoint if client certificate is present, this is
-                the default value). However, the ``api_endpoint`` property takes
-                precedence if provided.
-                (2) If GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable
-                is "true", then the ``client_cert_source`` property can be used
-                to provide client certificate for mutual TLS transport. If
-                not provided, the default SSL client certificate will be used if
-                present. If GOOGLE_API_USE_CLIENT_CERTIFICATE is "false" or not
-                set, no client certificate will be used.
-
-        Raises:
-            google.auth.exceptions.MutualTlsChannelError: If mutual TLS transport
-                creation failed for any reason.
-        """
-        self._client = KeyManagementServiceClient(
-            credentials=credentials,
-            transport=transport,
-            client_options=client_options,
-            client_info=client_info,
-        )
-
-    async def list_key_rings(
-        self,
-        request: Optional[Union[service.ListKeyRingsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListKeyRingsAsyncPager:
-        r"""Lists [KeyRings][google.cloud.kms.v1.KeyRing].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_list_key_rings():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListKeyRingsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_key_rings(request=request)
-
-                # Handle the response
-                async for response in page_result:
-                    print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.ListKeyRingsRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-            parent (:class:`str`):
-                Required. The resource name of the location associated
-                with the [KeyRings][google.cloud.kms.v1.KeyRing], in the
-                format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListKeyRingsAsyncPager:
-                Response message for
-                   [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.ListKeyRingsRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.list_key_rings,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__aiter__` convenience method.
-        response = pagers.ListKeyRingsAsyncPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def list_crypto_keys(
-        self,
-        request: Optional[Union[service.ListCryptoKeysRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListCryptoKeysAsyncPager:
-        r"""Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_list_crypto_keys():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListCryptoKeysRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_crypto_keys(request=request)
-
-                # Handle the response
-                async for response in page_result:
-                    print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.ListCryptoKeysRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-            parent (:class:`str`):
-                Required. The resource name of the
-                [KeyRing][google.cloud.kms.v1.KeyRing] to list, in the
-                format ``projects/*/locations/*/keyRings/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeysAsyncPager:
-                Response message for
-                   [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.ListCryptoKeysRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.list_crypto_keys,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__aiter__` convenience method.
-        response = pagers.ListCryptoKeysAsyncPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def list_crypto_key_versions(
-        self,
-        request: Optional[Union[service.ListCryptoKeyVersionsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListCryptoKeyVersionsAsyncPager:
-        r"""Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_list_crypto_key_versions():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListCryptoKeyVersionsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_crypto_key_versions(request=request)
-
-                # Handle the response
-                async for response in page_result:
-                    print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.ListCryptoKeyVersionsRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-            parent (:class:`str`):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] to list, in
-                the format
-                ``projects/*/locations/*/keyRings/*/cryptoKeys/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeyVersionsAsyncPager:
-                Response message for
-                   [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.ListCryptoKeyVersionsRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.list_crypto_key_versions,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__aiter__` convenience method.
-        response = pagers.ListCryptoKeyVersionsAsyncPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def list_import_jobs(
-        self,
-        request: Optional[Union[service.ListImportJobsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListImportJobsAsyncPager:
-        r"""Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_list_import_jobs():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListImportJobsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_import_jobs(request=request)
-
-                # Handle the response
-                async for response in page_result:
-                    print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.ListImportJobsRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-            parent (:class:`str`):
-                Required. The resource name of the
-                [KeyRing][google.cloud.kms.v1.KeyRing] to list, in the
-                format ``projects/*/locations/*/keyRings/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListImportJobsAsyncPager:
-                Response message for
-                   [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.ListImportJobsRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.list_import_jobs,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__aiter__` convenience method.
-        response = pagers.ListImportJobsAsyncPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_key_ring(
-        self,
-        request: Optional[Union[service.GetKeyRingRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.KeyRing:
-        r"""Returns metadata for a given
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_get_key_ring():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetKeyRingRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.get_key_ring(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GetKeyRingRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.GetKeyRing][google.cloud.kms.v1.KeyManagementService.GetKeyRing].
-            name (:class:`str`):
-                Required. The [name][google.cloud.kms.v1.KeyRing.name]
-                of the [KeyRing][google.cloud.kms.v1.KeyRing] to get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.KeyRing:
-                A [KeyRing][google.cloud.kms.v1.KeyRing] is a toplevel logical grouping of
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.GetKeyRingRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_key_ring,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_crypto_key(
-        self,
-        request: Optional[Union[service.GetCryptoKeyRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Returns metadata for a given
-        [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
-        [primary][google.cloud.kms.v1.CryptoKey.primary]
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_get_crypto_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetCryptoKeyRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.get_crypto_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GetCryptoKeyRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.GetCryptoKey][google.cloud.kms.v1.KeyManagementService.GetCryptoKey].
-            name (:class:`str`):
-                Required. The [name][google.cloud.kms.v1.CryptoKey.name]
-                of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.GetCryptoKeyRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_crypto_key,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_crypto_key_version(
-        self,
-        request: Optional[Union[service.GetCryptoKeyVersionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Returns metadata for a given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_get_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetCryptoKeyVersionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.get_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GetCryptoKeyVersionRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.GetCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.GetCryptoKeyVersion].
-            name (:class:`str`):
-                Required. The
-                [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.GetCryptoKeyVersionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_crypto_key_version,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_public_key(
-        self,
-        request: Optional[Union[service.GetPublicKeyRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.PublicKey:
-        r"""Returns the public key for the given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN]
-        or
-        [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_get_public_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetPublicKeyRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.get_public_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GetPublicKeyRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-            name (:class:`str`):
-                Required. The
-                [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                public key to get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.PublicKey:
-                The public key for a given
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-                   Obtained via
-                   [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.GetPublicKeyRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_public_key,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_import_job(
-        self,
-        request: Optional[Union[service.GetImportJobRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.ImportJob:
-        r"""Returns metadata for a given
-        [ImportJob][google.cloud.kms.v1.ImportJob].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_get_import_job():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetImportJobRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.get_import_job(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GetImportJobRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.GetImportJob][google.cloud.kms.v1.KeyManagementService.GetImportJob].
-            name (:class:`str`):
-                Required. The [name][google.cloud.kms.v1.ImportJob.name]
-                of the [ImportJob][google.cloud.kms.v1.ImportJob] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.ImportJob:
-                An [ImportJob][google.cloud.kms.v1.ImportJob] can be used to create
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   using pre-existing key material, generated outside of
-                   Cloud KMS.
-
-                   When an [ImportJob][google.cloud.kms.v1.ImportJob] is
-                   created, Cloud KMS will generate a "wrapping key",
-                   which is a public/private key pair. You use the
-                   wrapping key to encrypt (also known as wrap) the
-                   pre-existing key material to protect it during the
-                   import process. The nature of the wrapping key
-                   depends on the choice of
-                   [import_method][google.cloud.kms.v1.ImportJob.import_method].
-                   When the wrapping key generation is complete, the
-                   [state][google.cloud.kms.v1.ImportJob.state] will be
-                   set to
-                   [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE]
-                   and the
-                   [public_key][google.cloud.kms.v1.ImportJob.public_key]
-                   can be fetched. The fetched public key can then be
-                   used to wrap your pre-existing key material.
-
-                   Once the key material is wrapped, it can be imported
-                   into a new
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   in an existing
-                   [CryptoKey][google.cloud.kms.v1.CryptoKey] by calling
-                   [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-                   Multiple
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   can be imported with a single
-                   [ImportJob][google.cloud.kms.v1.ImportJob]. Cloud KMS
-                   uses the private key portion of the wrapping key to
-                   unwrap the key material. Only Cloud KMS has access to
-                   the private key.
-
-                   An [ImportJob][google.cloud.kms.v1.ImportJob] expires
-                   3 days after it is created. Once expired, Cloud KMS
-                   will no longer be able to import or unwrap any key
-                   material that was wrapped with the
-                   [ImportJob][google.cloud.kms.v1.ImportJob]'s public
-                   key.
-
-                   For more information, see [Importing a
-                   key](\ https://cloud.google.com/kms/docs/importing-a-key).
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.GetImportJobRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_import_job,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def create_key_ring(
-        self,
-        request: Optional[Union[service.CreateKeyRingRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        key_ring_id: Optional[str] = None,
-        key_ring: Optional[resources.KeyRing] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.KeyRing:
-        r"""Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given
-        Project and Location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_create_key_ring():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateKeyRingRequest(
-                    parent="parent_value",
-                    key_ring_id="key_ring_id_value",
-                )
-
-                # Make the request
-                response = await client.create_key_ring(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.CreateKeyRingRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.CreateKeyRing][google.cloud.kms.v1.KeyManagementService.CreateKeyRing].
-            parent (:class:`str`):
-                Required. The resource name of the location associated
-                with the [KeyRings][google.cloud.kms.v1.KeyRing], in the
-                format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            key_ring_id (:class:`str`):
-                Required. It must be unique within a location and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``
-
-                This corresponds to the ``key_ring_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            key_ring (:class:`google.cloud.kms_v1.types.KeyRing`):
-                Required. A [KeyRing][google.cloud.kms.v1.KeyRing] with
-                initial field values.
-
-                This corresponds to the ``key_ring`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.KeyRing:
-                A [KeyRing][google.cloud.kms.v1.KeyRing] is a toplevel logical grouping of
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, key_ring_id, key_ring])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.CreateKeyRingRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-        if key_ring_id is not None:
-            request.key_ring_id = key_ring_id
-        if key_ring is not None:
-            request.key_ring = key_ring
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.create_key_ring,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def create_crypto_key(
-        self,
-        request: Optional[Union[service.CreateCryptoKeyRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        crypto_key_id: Optional[str] = None,
-        crypto_key: Optional[resources.CryptoKey] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and
-        [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm]
-        are required.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_create_crypto_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateCryptoKeyRequest(
-                    parent="parent_value",
-                    crypto_key_id="crypto_key_id_value",
-                )
-
-                # Make the request
-                response = await client.create_crypto_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.CreateCryptoKeyRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.CreateCryptoKey][google.cloud.kms.v1.KeyManagementService.CreateCryptoKey].
-            parent (:class:`str`):
-                Required. The [name][google.cloud.kms.v1.KeyRing.name]
-                of the KeyRing associated with the
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key_id (:class:`str`):
-                Required. It must be unique within a KeyRing and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``
-
-                This corresponds to the ``crypto_key_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key (:class:`google.cloud.kms_v1.types.CryptoKey`):
-                Required. A [CryptoKey][google.cloud.kms.v1.CryptoKey]
-                with initial field values.
-
-                This corresponds to the ``crypto_key`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, crypto_key_id, crypto_key])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.CreateCryptoKeyRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-        if crypto_key_id is not None:
-            request.crypto_key_id = crypto_key_id
-        if crypto_key is not None:
-            request.crypto_key = crypto_key
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.create_crypto_key,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def create_crypto_key_version(
-        self,
-        request: Optional[Union[service.CreateCryptoKeyVersionRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        crypto_key_version: Optional[resources.CryptoKeyVersion] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Create a new
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        The server will assign the next sequential id. If unset,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_create_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateCryptoKeyVersionRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                response = await client.create_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.CreateCryptoKeyVersionRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion].
-            parent (:class:`str`):
-                Required. The [name][google.cloud.kms.v1.CryptoKey.name]
-                of the [CryptoKey][google.cloud.kms.v1.CryptoKey]
-                associated with the
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key_version (:class:`google.cloud.kms_v1.types.CryptoKeyVersion`):
-                Required. A
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                with initial field values.
-
-                This corresponds to the ``crypto_key_version`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, crypto_key_version])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.CreateCryptoKeyVersionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-        if crypto_key_version is not None:
-            request.crypto_key_version = crypto_key_version
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.create_crypto_key_version,
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def import_crypto_key_version(
-        self,
-        request: Optional[Union[service.ImportCryptoKeyVersionRequest, dict]] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Import wrapped key material into a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        All requests must specify a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey]. If a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] is
-        additionally specified in the request, key material will be
-        reimported into that version. Otherwise, a new version will be
-        created, and will be assigned the next sequential id within the
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_import_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ImportCryptoKeyVersionRequest(
-                    rsa_aes_wrapped_key=b'rsa_aes_wrapped_key_blob',
-                    parent="parent_value",
-                    algorithm="EXTERNAL_SYMMETRIC_ENCRYPTION",
-                    import_job="import_job_value",
-                )
-
-                # Make the request
-                response = await client.import_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.ImportCryptoKeyVersionRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        request = service.ImportCryptoKeyVersionRequest(request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.import_crypto_key_version,
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def create_import_job(
-        self,
-        request: Optional[Union[service.CreateImportJobRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        import_job_id: Optional[str] = None,
-        import_job: Optional[resources.ImportJob] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.ImportJob:
-        r"""Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method]
-        is required.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_create_import_job():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                import_job = kms_v1.ImportJob()
-                import_job.import_method = "RSA_OAEP_4096_SHA256"
-                import_job.protection_level = "EXTERNAL_VPC"
-
-                request = kms_v1.CreateImportJobRequest(
-                    parent="parent_value",
-                    import_job_id="import_job_id_value",
-                    import_job=import_job,
-                )
-
-                # Make the request
-                response = await client.create_import_job(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.CreateImportJobRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.CreateImportJob][google.cloud.kms.v1.KeyManagementService.CreateImportJob].
-            parent (:class:`str`):
-                Required. The [name][google.cloud.kms.v1.KeyRing.name]
-                of the [KeyRing][google.cloud.kms.v1.KeyRing] associated
-                with the [ImportJobs][google.cloud.kms.v1.ImportJob].
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            import_job_id (:class:`str`):
-                Required. It must be unique within a KeyRing and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``
-
-                This corresponds to the ``import_job_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            import_job (:class:`google.cloud.kms_v1.types.ImportJob`):
-                Required. An [ImportJob][google.cloud.kms.v1.ImportJob]
-                with initial field values.
-
-                This corresponds to the ``import_job`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.ImportJob:
-                An [ImportJob][google.cloud.kms.v1.ImportJob] can be used to create
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   using pre-existing key material, generated outside of
-                   Cloud KMS.
-
-                   When an [ImportJob][google.cloud.kms.v1.ImportJob] is
-                   created, Cloud KMS will generate a "wrapping key",
-                   which is a public/private key pair. You use the
-                   wrapping key to encrypt (also known as wrap) the
-                   pre-existing key material to protect it during the
-                   import process. The nature of the wrapping key
-                   depends on the choice of
-                   [import_method][google.cloud.kms.v1.ImportJob.import_method].
-                   When the wrapping key generation is complete, the
-                   [state][google.cloud.kms.v1.ImportJob.state] will be
-                   set to
-                   [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE]
-                   and the
-                   [public_key][google.cloud.kms.v1.ImportJob.public_key]
-                   can be fetched. The fetched public key can then be
-                   used to wrap your pre-existing key material.
-
-                   Once the key material is wrapped, it can be imported
-                   into a new
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   in an existing
-                   [CryptoKey][google.cloud.kms.v1.CryptoKey] by calling
-                   [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-                   Multiple
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   can be imported with a single
-                   [ImportJob][google.cloud.kms.v1.ImportJob]. Cloud KMS
-                   uses the private key portion of the wrapping key to
-                   unwrap the key material. Only Cloud KMS has access to
-                   the private key.
-
-                   An [ImportJob][google.cloud.kms.v1.ImportJob] expires
-                   3 days after it is created. Once expired, Cloud KMS
-                   will no longer be able to import or unwrap any key
-                   material that was wrapped with the
-                   [ImportJob][google.cloud.kms.v1.ImportJob]'s public
-                   key.
-
-                   For more information, see [Importing a
-                   key](\ https://cloud.google.com/kms/docs/importing-a-key).
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, import_job_id, import_job])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.CreateImportJobRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if parent is not None:
-            request.parent = parent
-        if import_job_id is not None:
-            request.import_job_id = import_job_id
-        if import_job is not None:
-            request.import_job = import_job
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.create_import_job,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def update_crypto_key(
-        self,
-        request: Optional[Union[service.UpdateCryptoKeyRequest, dict]] = None,
-        *,
-        crypto_key: Optional[resources.CryptoKey] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_update_crypto_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateCryptoKeyRequest(
-                )
-
-                # Make the request
-                response = await client.update_crypto_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.UpdateCryptoKeyRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.UpdateCryptoKey][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKey].
-            crypto_key (:class:`google.cloud.kms_v1.types.CryptoKey`):
-                Required. [CryptoKey][google.cloud.kms.v1.CryptoKey]
-                with updated values.
-
-                This corresponds to the ``crypto_key`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (:class:`google.protobuf.field_mask_pb2.FieldMask`):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([crypto_key, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.UpdateCryptoKeyRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if crypto_key is not None:
-            request.crypto_key = crypto_key
-        if update_mask is not None:
-            request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.update_crypto_key,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("crypto_key.name", request.crypto_key.name),)
-            ),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def update_crypto_key_version(
-        self,
-        request: Optional[Union[service.UpdateCryptoKeyVersionRequest, dict]] = None,
-        *,
-        crypto_key_version: Optional[resources.CryptoKeyVersion] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Update a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-        metadata.
-
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] may be
-        changed between
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-        and
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED]
-        using this method. See
-        [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion]
-        and
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        to move between other states.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_update_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateCryptoKeyVersionRequest(
-                )
-
-                # Make the request
-                response = await client.update_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.UpdateCryptoKeyVersionRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.UpdateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyVersion].
-            crypto_key_version (:class:`google.cloud.kms_v1.types.CryptoKeyVersion`):
-                Required.
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                with updated values.
-
-                This corresponds to the ``crypto_key_version`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (:class:`google.protobuf.field_mask_pb2.FieldMask`):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([crypto_key_version, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.UpdateCryptoKeyVersionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if crypto_key_version is not None:
-            request.crypto_key_version = crypto_key_version
-        if update_mask is not None:
-            request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.update_crypto_key_version,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("crypto_key_version.name", request.crypto_key_version.name),)
-            ),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def update_crypto_key_primary_version(
-        self,
-        request: Optional[
-            Union[service.UpdateCryptoKeyPrimaryVersionRequest, dict]
-        ] = None,
-        *,
-        name: Optional[str] = None,
-        crypto_key_version_id: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Update the version of a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-        Returns an error if called on a key whose purpose is not
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_update_crypto_key_primary_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateCryptoKeyPrimaryVersionRequest(
-                    name="name_value",
-                    crypto_key_version_id="crypto_key_version_id_value",
-                )
-
-                # Make the request
-                response = await client.update_crypto_key_primary_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.UpdateCryptoKeyPrimaryVersionRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] to update.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key_version_id (:class:`str`):
-                Required. The id of the child
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use as primary.
-
-                This corresponds to the ``crypto_key_version_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, crypto_key_version_id])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.UpdateCryptoKeyPrimaryVersionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-        if crypto_key_version_id is not None:
-            request.crypto_key_version_id = crypto_key_version_id
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.update_crypto_key_primary_version,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def destroy_crypto_key_version(
-        self,
-        request: Optional[Union[service.DestroyCryptoKeyVersionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Schedule a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for
-        destruction.
-
-        Upon calling this method,
-        [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state]
-        will be set to
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be set to the time
-        [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration]
-        in the future. At that time, the
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will
-        automatically change to
-        [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED],
-        and the key material will be irrevocably destroyed.
-
-        Before the
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        is reached,
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        may be called to reverse the process.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_destroy_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.DestroyCryptoKeyVersionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.destroy_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.DestroyCryptoKeyVersionRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to destroy.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.DestroyCryptoKeyVersionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.destroy_crypto_key_version,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def restore_crypto_key_version(
-        self,
-        request: Optional[Union[service.RestoreCryptoKeyVersionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Restore a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
-        state.
-
-        Upon restoration of the CryptoKeyVersion,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be cleared.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_restore_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.RestoreCryptoKeyVersionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.restore_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.RestoreCryptoKeyVersionRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to restore.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.RestoreCryptoKeyVersionRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.restore_crypto_key_version,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def encrypt(
-        self,
-        request: Optional[Union[service.EncryptRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        plaintext: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.EncryptResponse:
-        r"""Encrypts data, so that it can only be recovered by a call to
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_encrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.EncryptRequest(
-                    name="name_value",
-                    plaintext=b'plaintext_blob',
-                )
-
-                # Make the request
-                response = await client.encrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.EncryptRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] or
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for encryption.
-
-                If a [CryptoKey][google.cloud.kms.v1.CryptoKey] is
-                specified, the server will use its [primary
-                version][google.cloud.kms.v1.CryptoKey.primary].
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            plaintext (:class:`bytes`):
-                Required. The data to encrypt. Must be no larger than
-                64KiB.
-
-                The maximum size depends on the key version's
-                [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-                For
-                [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
-                [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL],
-                and
-                [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC]
-                keys, the plaintext must be no larger than 64KiB. For
-                [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the
-                combined length of the plaintext and
-                additional_authenticated_data fields must be no larger
-                than 8KiB.
-
-                This corresponds to the ``plaintext`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EncryptResponse:
-                Response message for
-                   [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, plaintext])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.EncryptRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-        if plaintext is not None:
-            request.plaintext = plaintext
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.encrypt,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def decrypt(
-        self,
-        request: Optional[Union[service.DecryptRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        ciphertext: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.DecryptResponse:
-        r"""Decrypts data that was protected by
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_decrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.DecryptRequest(
-                    name="name_value",
-                    ciphertext=b'ciphertext_blob',
-                )
-
-                # Make the request
-                response = await client.decrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.DecryptRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] to use for
-                decryption. The server will choose the appropriate
-                version.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ciphertext (:class:`bytes`):
-                Required. The encrypted data originally returned in
-                [EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext].
-
-                This corresponds to the ``ciphertext`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.DecryptResponse:
-                Response message for
-                   [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, ciphertext])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.DecryptRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-        if ciphertext is not None:
-            request.ciphertext = ciphertext
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.decrypt,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def raw_encrypt(
-        self,
-        request: Optional[Union[service.RawEncryptRequest, dict]] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.RawEncryptResponse:
-        r"""Encrypts data using portable cryptographic primitives. Most
-        users should choose
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt] and
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]
-        rather than their raw counterparts. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_raw_encrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.RawEncryptRequest(
-                    name="name_value",
-                    plaintext=b'plaintext_blob',
-                )
-
-                # Make the request
-                response = await client.raw_encrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.RawEncryptRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.RawEncryptResponse:
-                Response message for
-                   [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        request = service.RawEncryptRequest(request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.raw_encrypt,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def raw_decrypt(
-        self,
-        request: Optional[Union[service.RawDecryptRequest, dict]] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.RawDecryptResponse:
-        r"""Decrypts data that was originally encrypted using a raw
-        cryptographic mechanism. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_raw_decrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.RawDecryptRequest(
-                    name="name_value",
-                    ciphertext=b'ciphertext_blob',
-                    initialization_vector=b'initialization_vector_blob',
-                )
-
-                # Make the request
-                response = await client.raw_decrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.RawDecryptRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.RawDecryptResponse:
-                Response message for
-                   [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        request = service.RawDecryptRequest(request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.raw_decrypt,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def asymmetric_sign(
-        self,
-        request: Optional[Union[service.AsymmetricSignRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        digest: Optional[service.Digest] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.AsymmetricSignResponse:
-        r"""Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_SIGN, producing a signature that can be verified with
-        the public key retrieved from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_asymmetric_sign():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.AsymmetricSignRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = await client.asymmetric_sign(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.AsymmetricSignRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for signing.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            digest (:class:`google.cloud.kms_v1.types.Digest`):
-                Optional. The digest of the data to sign. The digest
-                must be produced with the same digest algorithm as
-                specified by the key version's
-                [algorithm][google.cloud.kms.v1.CryptoKeyVersion.algorithm].
-
-                This field may not be supplied if
-                [AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data]
-                is supplied.
-
-                This corresponds to the ``digest`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.AsymmetricSignResponse:
-                Response message for
-                   [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, digest])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.AsymmetricSignRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-        if digest is not None:
-            request.digest = digest
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.asymmetric_sign,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def asymmetric_decrypt(
-        self,
-        request: Optional[Union[service.AsymmetricDecryptRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        ciphertext: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.AsymmetricDecryptResponse:
-        r"""Decrypts data that was encrypted with a public key retrieved
-        from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey]
-        corresponding to a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_DECRYPT.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_asymmetric_decrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.AsymmetricDecryptRequest(
-                    name="name_value",
-                    ciphertext=b'ciphertext_blob',
-                )
-
-                # Make the request
-                response = await client.asymmetric_decrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.AsymmetricDecryptRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for decryption.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ciphertext (:class:`bytes`):
-                Required. The data encrypted with the named
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-                public key using OAEP.
-
-                This corresponds to the ``ciphertext`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.AsymmetricDecryptResponse:
-                Response message for
-                   [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, ciphertext])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.AsymmetricDecryptRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-        if ciphertext is not None:
-            request.ciphertext = ciphertext
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.asymmetric_decrypt,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def mac_sign(
-        self,
-        request: Optional[Union[service.MacSignRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        data: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.MacSignResponse:
-        r"""Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        producing a tag that can be verified by another source with the
-        same key.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_mac_sign():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.MacSignRequest(
-                    name="name_value",
-                    data=b'data_blob',
-                )
-
-                # Make the request
-                response = await client.mac_sign(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.MacSignRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for signing.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            data (:class:`bytes`):
-                Required. The data to sign. The MAC
-                tag is computed over this data field
-                based on the specific algorithm.
-
-                This corresponds to the ``data`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.MacSignResponse:
-                Response message for
-                   [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, data])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.MacSignRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-        if data is not None:
-            request.data = data
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.mac_sign,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def mac_verify(
-        self,
-        request: Optional[Union[service.MacVerifyRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        data: Optional[bytes] = None,
-        mac: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.MacVerifyResponse:
-        r"""Verifies MAC tag using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        and returns a response that indicates whether or not the
-        verification was successful.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_mac_verify():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.MacVerifyRequest(
-                    name="name_value",
-                    data=b'data_blob',
-                    mac=b'mac_blob',
-                )
-
-                # Make the request
-                response = await client.mac_verify(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.MacVerifyRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-            name (:class:`str`):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for verification.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            data (:class:`bytes`):
-                Required. The data used previously as a
-                [MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data]
-                to generate the MAC tag.
-
-                This corresponds to the ``data`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            mac (:class:`bytes`):
-                Required. The signature to verify.
-                This corresponds to the ``mac`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.MacVerifyResponse:
-                Response message for
-                   [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, data, mac])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.MacVerifyRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if name is not None:
-            request.name = name
-        if data is not None:
-            request.data = data
-        if mac is not None:
-            request.mac = mac
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.mac_verify,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def generate_random_bytes(
-        self,
-        request: Optional[Union[service.GenerateRandomBytesRequest, dict]] = None,
-        *,
-        location: Optional[str] = None,
-        length_bytes: Optional[int] = None,
-        protection_level: Optional[resources.ProtectionLevel] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.GenerateRandomBytesResponse:
-        r"""Generate random bytes using the Cloud KMS randomness
-        source in the provided location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            async def sample_generate_random_bytes():
-                # Create a client
-                client = kms_v1.KeyManagementServiceAsyncClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GenerateRandomBytesRequest(
-                )
-
-                # Make the request
-                response = await client.generate_random_bytes(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Optional[Union[google.cloud.kms_v1.types.GenerateRandomBytesRequest, dict]]):
-                The request object. Request message for
-                [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-            location (:class:`str`):
-                The project-specific location in
-                which to generate random bytes. For
-                example,
-                "projects/my-project/locations/us-central1".
-
-                This corresponds to the ``location`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            length_bytes (:class:`int`):
-                The length in bytes of the amount of
-                randomness to retrieve.  Minimum 8
-                bytes, maximum 1024 bytes.
-
-                This corresponds to the ``length_bytes`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            protection_level (:class:`google.cloud.kms_v1.types.ProtectionLevel`):
-                The
-                [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                to use when generating the random data. Currently, only
-                [HSM][google.cloud.kms.v1.ProtectionLevel.HSM]
-                protection level is supported.
-
-                This corresponds to the ``protection_level`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.GenerateRandomBytesResponse:
-                Response message for
-                   [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([location, length_bytes, protection_level])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        request = service.GenerateRandomBytesRequest(request)
-
-        # If we have keyword arguments corresponding to fields on the
-        # request, apply these.
-        if location is not None:
-            request.location = location
-        if length_bytes is not None:
-            request.length_bytes = length_bytes
-        if protection_level is not None:
-            request.protection_level = protection_level
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.generate_random_bytes,
-            default_retry=retries.Retry(
-                initial=0.1,
-                maximum=60.0,
-                multiplier=1.3,
-                predicate=retries.if_exception_type(
-                    core_exceptions.DeadlineExceeded,
-                    core_exceptions.ServiceUnavailable,
-                ),
-                deadline=60.0,
-            ),
-            default_timeout=60.0,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("location", request.location),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_location(
-        self,
-        request: Optional[locations_pb2.GetLocationRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.Location:
-        r"""Gets information about a location.
-
-        Args:
-            request (:class:`~.location_pb2.GetLocationRequest`):
-                The request object. Request message for
-                `GetLocation` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.Location:
-                Location object.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.GetLocationRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._client._transport.get_location,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def list_locations(
-        self,
-        request: Optional[locations_pb2.ListLocationsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.ListLocationsResponse:
-        r"""Lists information about the supported locations for this service.
-
-        Args:
-            request (:class:`~.location_pb2.ListLocationsRequest`):
-                The request object. Request message for
-                `ListLocations` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.ListLocationsResponse:
-                Response message for ``ListLocations`` method.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.ListLocationsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._client._transport.list_locations,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def set_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.SetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Sets the IAM access control policy on the specified function.
-
-        Replaces any existing policy.
-
-        Args:
-            request (:class:`~.policy_pb2.SetIamPolicyRequest`):
-                The request object. Request message for `SetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.SetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.set_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def get_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.GetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Gets the IAM access control policy for a function.
-
-        Returns an empty policy if the function exists and does
-        not have a policy set.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.GetIamPolicyRequest`):
-                The request object. Request message for `GetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.GetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.get_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def test_iam_permissions(
-        self,
-        request: Optional[iam_policy_pb2.TestIamPermissionsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> iam_policy_pb2.TestIamPermissionsResponse:
-        r"""Tests the specified permissions against the IAM access control
-            policy for a function.
-
-        If the function does not exist, this will
-        return an empty set of permissions, not a NOT_FOUND error.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.TestIamPermissionsRequest`):
-                The request object. Request message for
-                `TestIamPermissions` method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~iam_policy_pb2.PolicyTestIamPermissionsResponse:
-                Response message for ``TestIamPermissions`` method.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.TestIamPermissionsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method_async.wrap_method(
-            self._client._transport.test_iam_permissions,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = await rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    async def __aenter__(self) -> "KeyManagementServiceAsyncClient":
-        return self
-
-    async def __aexit__(self, exc_type, exc, tb):
-        await self.transport.close()
-
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=package_version.__version__
-)
-
-
-__all__ = ("KeyManagementServiceAsyncClient",)
diff --git a/google/cloud/kms_v1/services/key_management_service/client.py b/google/cloud/kms_v1/services/key_management_service/client.py
deleted file mode 100644
index f97f6bae..00000000
--- a/google/cloud/kms_v1/services/key_management_service/client.py
+++ /dev/null
@@ -1,4437 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from collections import OrderedDict
-import os
-import re
-from typing import (
-    Dict,
-    Mapping,
-    MutableMapping,
-    MutableSequence,
-    Optional,
-    Sequence,
-    Tuple,
-    Type,
-    Union,
-    cast,
-)
-
-from google.api_core import client_options as client_options_lib
-from google.api_core import exceptions as core_exceptions
-from google.api_core import gapic_v1
-from google.api_core import retry as retries
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.exceptions import MutualTLSChannelError  # type: ignore
-from google.auth.transport import mtls  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.oauth2 import service_account  # type: ignore
-
-from google.cloud.kms_v1 import gapic_version as package_version
-
-try:
-    OptionalRetry = Union[retries.Retry, gapic_v1.method._MethodDefault]
-except AttributeError:  # pragma: NO COVER
-    OptionalRetry = Union[retries.Retry, object]  # type: ignore
-
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.protobuf import duration_pb2  # type: ignore
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import timestamp_pb2  # type: ignore
-from google.protobuf import wrappers_pb2  # type: ignore
-
-from google.cloud.kms_v1.services.key_management_service import pagers
-from google.cloud.kms_v1.types import resources, service
-
-from .transports.base import DEFAULT_CLIENT_INFO, KeyManagementServiceTransport
-from .transports.grpc import KeyManagementServiceGrpcTransport
-from .transports.grpc_asyncio import KeyManagementServiceGrpcAsyncIOTransport
-from .transports.rest import KeyManagementServiceRestTransport
-
-
-class KeyManagementServiceClientMeta(type):
-    """Metaclass for the KeyManagementService client.
-
-    This provides class-level methods for building and retrieving
-    support objects (e.g. transport) without polluting the client instance
-    objects.
-    """
-
-    _transport_registry = (
-        OrderedDict()
-    )  # type: Dict[str, Type[KeyManagementServiceTransport]]
-    _transport_registry["grpc"] = KeyManagementServiceGrpcTransport
-    _transport_registry["grpc_asyncio"] = KeyManagementServiceGrpcAsyncIOTransport
-    _transport_registry["rest"] = KeyManagementServiceRestTransport
-
-    def get_transport_class(
-        cls,
-        label: Optional[str] = None,
-    ) -> Type[KeyManagementServiceTransport]:
-        """Returns an appropriate transport class.
-
-        Args:
-            label: The name of the desired transport. If none is
-                provided, then the first transport in the registry is used.
-
-        Returns:
-            The transport class to use.
-        """
-        # If a specific transport is requested, return that one.
-        if label:
-            return cls._transport_registry[label]
-
-        # No transport is requested; return the default (that is, the first one
-        # in the dictionary).
-        return next(iter(cls._transport_registry.values()))
-
-
-class KeyManagementServiceClient(metaclass=KeyManagementServiceClientMeta):
-    """Google Cloud Key Management Service
-
-    Manages cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [KeyRing][google.cloud.kms.v1.KeyRing]
-    -  [CryptoKey][google.cloud.kms.v1.CryptoKey]
-    -  [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-    -  [ImportJob][google.cloud.kms.v1.ImportJob]
-
-    If you are using manual gRPC libraries, see `Using gRPC with Cloud
-    KMS <https://cloud.google.com/kms/docs/grpc>`__.
-    """
-
-    @staticmethod
-    def _get_default_mtls_endpoint(api_endpoint):
-        """Converts api endpoint to mTLS endpoint.
-
-        Convert "*.sandbox.googleapis.com" and "*.googleapis.com" to
-        "*.mtls.sandbox.googleapis.com" and "*.mtls.googleapis.com" respectively.
-        Args:
-            api_endpoint (Optional[str]): the api endpoint to convert.
-        Returns:
-            str: converted mTLS api endpoint.
-        """
-        if not api_endpoint:
-            return api_endpoint
-
-        mtls_endpoint_re = re.compile(
-            r"(?P<name>[^.]+)(?P<mtls>\.mtls)?(?P<sandbox>\.sandbox)?(?P<googledomain>\.googleapis\.com)?"
-        )
-
-        m = mtls_endpoint_re.match(api_endpoint)
-        name, mtls, sandbox, googledomain = m.groups()
-        if mtls or not googledomain:
-            return api_endpoint
-
-        if sandbox:
-            return api_endpoint.replace(
-                "sandbox.googleapis.com", "mtls.sandbox.googleapis.com"
-            )
-
-        return api_endpoint.replace(".googleapis.com", ".mtls.googleapis.com")
-
-    DEFAULT_ENDPOINT = "cloudkms.googleapis.com"
-    DEFAULT_MTLS_ENDPOINT = _get_default_mtls_endpoint.__func__(  # type: ignore
-        DEFAULT_ENDPOINT
-    )
-
-    @classmethod
-    def from_service_account_info(cls, info: dict, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            info.
-
-        Args:
-            info (dict): The service account private key info.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            KeyManagementServiceClient: The constructed client.
-        """
-        credentials = service_account.Credentials.from_service_account_info(info)
-        kwargs["credentials"] = credentials
-        return cls(*args, **kwargs)
-
-    @classmethod
-    def from_service_account_file(cls, filename: str, *args, **kwargs):
-        """Creates an instance of this client using the provided credentials
-            file.
-
-        Args:
-            filename (str): The path to the service account private key json
-                file.
-            args: Additional arguments to pass to the constructor.
-            kwargs: Additional arguments to pass to the constructor.
-
-        Returns:
-            KeyManagementServiceClient: The constructed client.
-        """
-        credentials = service_account.Credentials.from_service_account_file(filename)
-        kwargs["credentials"] = credentials
-        return cls(*args, **kwargs)
-
-    from_service_account_json = from_service_account_file
-
-    @property
-    def transport(self) -> KeyManagementServiceTransport:
-        """Returns the transport used by the client instance.
-
-        Returns:
-            KeyManagementServiceTransport: The transport used by the client
-                instance.
-        """
-        return self._transport
-
-    @staticmethod
-    def crypto_key_path(
-        project: str,
-        location: str,
-        key_ring: str,
-        crypto_key: str,
-    ) -> str:
-        """Returns a fully-qualified crypto_key string."""
-        return "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}".format(
-            project=project,
-            location=location,
-            key_ring=key_ring,
-            crypto_key=crypto_key,
-        )
-
-    @staticmethod
-    def parse_crypto_key_path(path: str) -> Dict[str, str]:
-        """Parses a crypto_key path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/keyRings/(?P<key_ring>.+?)/cryptoKeys/(?P<crypto_key>.+?)$",
-            path,
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def crypto_key_version_path(
-        project: str,
-        location: str,
-        key_ring: str,
-        crypto_key: str,
-        crypto_key_version: str,
-    ) -> str:
-        """Returns a fully-qualified crypto_key_version string."""
-        return "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}/cryptoKeyVersions/{crypto_key_version}".format(
-            project=project,
-            location=location,
-            key_ring=key_ring,
-            crypto_key=crypto_key,
-            crypto_key_version=crypto_key_version,
-        )
-
-    @staticmethod
-    def parse_crypto_key_version_path(path: str) -> Dict[str, str]:
-        """Parses a crypto_key_version path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/keyRings/(?P<key_ring>.+?)/cryptoKeys/(?P<crypto_key>.+?)/cryptoKeyVersions/(?P<crypto_key_version>.+?)$",
-            path,
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def import_job_path(
-        project: str,
-        location: str,
-        key_ring: str,
-        import_job: str,
-    ) -> str:
-        """Returns a fully-qualified import_job string."""
-        return "projects/{project}/locations/{location}/keyRings/{key_ring}/importJobs/{import_job}".format(
-            project=project,
-            location=location,
-            key_ring=key_ring,
-            import_job=import_job,
-        )
-
-    @staticmethod
-    def parse_import_job_path(path: str) -> Dict[str, str]:
-        """Parses a import_job path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/keyRings/(?P<key_ring>.+?)/importJobs/(?P<import_job>.+?)$",
-            path,
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def key_ring_path(
-        project: str,
-        location: str,
-        key_ring: str,
-    ) -> str:
-        """Returns a fully-qualified key_ring string."""
-        return "projects/{project}/locations/{location}/keyRings/{key_ring}".format(
-            project=project,
-            location=location,
-            key_ring=key_ring,
-        )
-
-    @staticmethod
-    def parse_key_ring_path(path: str) -> Dict[str, str]:
-        """Parses a key_ring path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/keyRings/(?P<key_ring>.+?)$",
-            path,
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def public_key_path(
-        project: str,
-        location: str,
-        key_ring: str,
-        crypto_key: str,
-        crypto_key_version: str,
-    ) -> str:
-        """Returns a fully-qualified public_key string."""
-        return "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}/cryptoKeyVersions/{crypto_key_version}/publicKey".format(
-            project=project,
-            location=location,
-            key_ring=key_ring,
-            crypto_key=crypto_key,
-            crypto_key_version=crypto_key_version,
-        )
-
-    @staticmethod
-    def parse_public_key_path(path: str) -> Dict[str, str]:
-        """Parses a public_key path into its component segments."""
-        m = re.match(
-            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/keyRings/(?P<key_ring>.+?)/cryptoKeys/(?P<crypto_key>.+?)/cryptoKeyVersions/(?P<crypto_key_version>.+?)/publicKey$",
-            path,
-        )
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_billing_account_path(
-        billing_account: str,
-    ) -> str:
-        """Returns a fully-qualified billing_account string."""
-        return "billingAccounts/{billing_account}".format(
-            billing_account=billing_account,
-        )
-
-    @staticmethod
-    def parse_common_billing_account_path(path: str) -> Dict[str, str]:
-        """Parse a billing_account path into its component segments."""
-        m = re.match(r"^billingAccounts/(?P<billing_account>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_folder_path(
-        folder: str,
-    ) -> str:
-        """Returns a fully-qualified folder string."""
-        return "folders/{folder}".format(
-            folder=folder,
-        )
-
-    @staticmethod
-    def parse_common_folder_path(path: str) -> Dict[str, str]:
-        """Parse a folder path into its component segments."""
-        m = re.match(r"^folders/(?P<folder>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_organization_path(
-        organization: str,
-    ) -> str:
-        """Returns a fully-qualified organization string."""
-        return "organizations/{organization}".format(
-            organization=organization,
-        )
-
-    @staticmethod
-    def parse_common_organization_path(path: str) -> Dict[str, str]:
-        """Parse a organization path into its component segments."""
-        m = re.match(r"^organizations/(?P<organization>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_project_path(
-        project: str,
-    ) -> str:
-        """Returns a fully-qualified project string."""
-        return "projects/{project}".format(
-            project=project,
-        )
-
-    @staticmethod
-    def parse_common_project_path(path: str) -> Dict[str, str]:
-        """Parse a project path into its component segments."""
-        m = re.match(r"^projects/(?P<project>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @staticmethod
-    def common_location_path(
-        project: str,
-        location: str,
-    ) -> str:
-        """Returns a fully-qualified location string."""
-        return "projects/{project}/locations/{location}".format(
-            project=project,
-            location=location,
-        )
-
-    @staticmethod
-    def parse_common_location_path(path: str) -> Dict[str, str]:
-        """Parse a location path into its component segments."""
-        m = re.match(r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)$", path)
-        return m.groupdict() if m else {}
-
-    @classmethod
-    def get_mtls_endpoint_and_cert_source(
-        cls, client_options: Optional[client_options_lib.ClientOptions] = None
-    ):
-        """Return the API endpoint and client cert source for mutual TLS.
-
-        The client cert source is determined in the following order:
-        (1) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is not "true", the
-        client cert source is None.
-        (2) if `client_options.client_cert_source` is provided, use the provided one; if the
-        default client cert source exists, use the default one; otherwise the client cert
-        source is None.
-
-        The API endpoint is determined in the following order:
-        (1) if `client_options.api_endpoint` if provided, use the provided one.
-        (2) if `GOOGLE_API_USE_CLIENT_CERTIFICATE` environment variable is "always", use the
-        default mTLS endpoint; if the environment variable is "never", use the default API
-        endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise
-        use the default API endpoint.
-
-        More details can be found at https://google.aip.dev/auth/4114.
-
-        Args:
-            client_options (google.api_core.client_options.ClientOptions): Custom options for the
-                client. Only the `api_endpoint` and `client_cert_source` properties may be used
-                in this method.
-
-        Returns:
-            Tuple[str, Callable[[], Tuple[bytes, bytes]]]: returns the API endpoint and the
-                client cert source to use.
-
-        Raises:
-            google.auth.exceptions.MutualTLSChannelError: If any errors happen.
-        """
-        if client_options is None:
-            client_options = client_options_lib.ClientOptions()
-        use_client_cert = os.getenv("GOOGLE_API_USE_CLIENT_CERTIFICATE", "false")
-        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")
-        if use_client_cert not in ("true", "false"):
-            raise ValueError(
-                "Environment variable `GOOGLE_API_USE_CLIENT_CERTIFICATE` must be either `true` or `false`"
-            )
-        if use_mtls_endpoint not in ("auto", "never", "always"):
-            raise MutualTLSChannelError(
-                "Environment variable `GOOGLE_API_USE_MTLS_ENDPOINT` must be `never`, `auto` or `always`"
-            )
-
-        # Figure out the client cert source to use.
-        client_cert_source = None
-        if use_client_cert == "true":
-            if client_options.client_cert_source:
-                client_cert_source = client_options.client_cert_source
-            elif mtls.has_default_client_cert_source():
-                client_cert_source = mtls.default_client_cert_source()
-
-        # Figure out which api endpoint to use.
-        if client_options.api_endpoint is not None:
-            api_endpoint = client_options.api_endpoint
-        elif use_mtls_endpoint == "always" or (
-            use_mtls_endpoint == "auto" and client_cert_source
-        ):
-            api_endpoint = cls.DEFAULT_MTLS_ENDPOINT
-        else:
-            api_endpoint = cls.DEFAULT_ENDPOINT
-
-        return api_endpoint, client_cert_source
-
-    def __init__(
-        self,
-        *,
-        credentials: Optional[ga_credentials.Credentials] = None,
-        transport: Optional[Union[str, KeyManagementServiceTransport]] = None,
-        client_options: Optional[Union[client_options_lib.ClientOptions, dict]] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-    ) -> None:
-        """Instantiates the key management service client.
-
-        Args:
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-            transport (Union[str, KeyManagementServiceTransport]): The
-                transport to use. If set to None, a transport is chosen
-                automatically.
-            client_options (Optional[Union[google.api_core.client_options.ClientOptions, dict]]): Custom options for the
-                client. It won't take effect if a ``transport`` instance is provided.
-                (1) The ``api_endpoint`` property can be used to override the
-                default endpoint provided by the client. GOOGLE_API_USE_MTLS_ENDPOINT
-                environment variable can also be used to override the endpoint:
-                "always" (always use the default mTLS endpoint), "never" (always
-                use the default regular endpoint) and "auto" (auto switch to the
-                default mTLS endpoint if client certificate is present, this is
-                the default value). However, the ``api_endpoint`` property takes
-                precedence if provided.
-                (2) If GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable
-                is "true", then the ``client_cert_source`` property can be used
-                to provide client certificate for mutual TLS transport. If
-                not provided, the default SSL client certificate will be used if
-                present. If GOOGLE_API_USE_CLIENT_CERTIFICATE is "false" or not
-                set, no client certificate will be used.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-
-        Raises:
-            google.auth.exceptions.MutualTLSChannelError: If mutual TLS transport
-                creation failed for any reason.
-        """
-        if isinstance(client_options, dict):
-            client_options = client_options_lib.from_dict(client_options)
-        if client_options is None:
-            client_options = client_options_lib.ClientOptions()
-        client_options = cast(client_options_lib.ClientOptions, client_options)
-
-        api_endpoint, client_cert_source_func = self.get_mtls_endpoint_and_cert_source(
-            client_options
-        )
-
-        api_key_value = getattr(client_options, "api_key", None)
-        if api_key_value and credentials:
-            raise ValueError(
-                "client_options.api_key and credentials are mutually exclusive"
-            )
-
-        # Save or instantiate the transport.
-        # Ordinarily, we provide the transport, but allowing a custom transport
-        # instance provides an extensibility point for unusual situations.
-        if isinstance(transport, KeyManagementServiceTransport):
-            # transport is a KeyManagementServiceTransport instance.
-            if credentials or client_options.credentials_file or api_key_value:
-                raise ValueError(
-                    "When providing a transport instance, "
-                    "provide its credentials directly."
-                )
-            if client_options.scopes:
-                raise ValueError(
-                    "When providing a transport instance, provide its scopes "
-                    "directly."
-                )
-            self._transport = transport
-        else:
-            import google.auth._default  # type: ignore
-
-            if api_key_value and hasattr(
-                google.auth._default, "get_api_key_credentials"
-            ):
-                credentials = google.auth._default.get_api_key_credentials(
-                    api_key_value
-                )
-
-            Transport = type(self).get_transport_class(transport)
-            self._transport = Transport(
-                credentials=credentials,
-                credentials_file=client_options.credentials_file,
-                host=api_endpoint,
-                scopes=client_options.scopes,
-                client_cert_source_for_mtls=client_cert_source_func,
-                quota_project_id=client_options.quota_project_id,
-                client_info=client_info,
-                always_use_jwt_access=True,
-                api_audience=client_options.api_audience,
-            )
-
-    def list_key_rings(
-        self,
-        request: Optional[Union[service.ListKeyRingsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListKeyRingsPager:
-        r"""Lists [KeyRings][google.cloud.kms.v1.KeyRing].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_list_key_rings():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListKeyRingsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_key_rings(request=request)
-
-                # Handle the response
-                for response in page_result:
-                    print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.ListKeyRingsRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-            parent (str):
-                Required. The resource name of the location associated
-                with the [KeyRings][google.cloud.kms.v1.KeyRing], in the
-                format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListKeyRingsPager:
-                Response message for
-                   [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.ListKeyRingsRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.ListKeyRingsRequest):
-            request = service.ListKeyRingsRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.list_key_rings]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__iter__` convenience method.
-        response = pagers.ListKeyRingsPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def list_crypto_keys(
-        self,
-        request: Optional[Union[service.ListCryptoKeysRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListCryptoKeysPager:
-        r"""Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_list_crypto_keys():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListCryptoKeysRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_crypto_keys(request=request)
-
-                # Handle the response
-                for response in page_result:
-                    print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.ListCryptoKeysRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-            parent (str):
-                Required. The resource name of the
-                [KeyRing][google.cloud.kms.v1.KeyRing] to list, in the
-                format ``projects/*/locations/*/keyRings/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeysPager:
-                Response message for
-                   [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.ListCryptoKeysRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.ListCryptoKeysRequest):
-            request = service.ListCryptoKeysRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.list_crypto_keys]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__iter__` convenience method.
-        response = pagers.ListCryptoKeysPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def list_crypto_key_versions(
-        self,
-        request: Optional[Union[service.ListCryptoKeyVersionsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListCryptoKeyVersionsPager:
-        r"""Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_list_crypto_key_versions():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListCryptoKeyVersionsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_crypto_key_versions(request=request)
-
-                # Handle the response
-                for response in page_result:
-                    print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.ListCryptoKeyVersionsRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-            parent (str):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] to list, in
-                the format
-                ``projects/*/locations/*/keyRings/*/cryptoKeys/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeyVersionsPager:
-                Response message for
-                   [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.ListCryptoKeyVersionsRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.ListCryptoKeyVersionsRequest):
-            request = service.ListCryptoKeyVersionsRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.list_crypto_key_versions]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__iter__` convenience method.
-        response = pagers.ListCryptoKeyVersionsPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def list_import_jobs(
-        self,
-        request: Optional[Union[service.ListImportJobsRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> pagers.ListImportJobsPager:
-        r"""Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_list_import_jobs():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ListImportJobsRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                page_result = client.list_import_jobs(request=request)
-
-                # Handle the response
-                for response in page_result:
-                    print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.ListImportJobsRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-            parent (str):
-                Required. The resource name of the
-                [KeyRing][google.cloud.kms.v1.KeyRing] to list, in the
-                format ``projects/*/locations/*/keyRings/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.services.key_management_service.pagers.ListImportJobsPager:
-                Response message for
-                   [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-
-                Iterating over this object will yield results and
-                resolve additional pages automatically.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.ListImportJobsRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.ListImportJobsRequest):
-            request = service.ListImportJobsRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.list_import_jobs]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # This method is paged; wrap the response in a pager, which provides
-        # an `__iter__` convenience method.
-        response = pagers.ListImportJobsPager(
-            method=rpc,
-            request=request,
-            response=response,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_key_ring(
-        self,
-        request: Optional[Union[service.GetKeyRingRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.KeyRing:
-        r"""Returns metadata for a given
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_get_key_ring():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetKeyRingRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.get_key_ring(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GetKeyRingRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.GetKeyRing][google.cloud.kms.v1.KeyManagementService.GetKeyRing].
-            name (str):
-                Required. The [name][google.cloud.kms.v1.KeyRing.name]
-                of the [KeyRing][google.cloud.kms.v1.KeyRing] to get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.KeyRing:
-                A [KeyRing][google.cloud.kms.v1.KeyRing] is a toplevel logical grouping of
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.GetKeyRingRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.GetKeyRingRequest):
-            request = service.GetKeyRingRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.get_key_ring]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_crypto_key(
-        self,
-        request: Optional[Union[service.GetCryptoKeyRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Returns metadata for a given
-        [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
-        [primary][google.cloud.kms.v1.CryptoKey.primary]
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_get_crypto_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetCryptoKeyRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.get_crypto_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GetCryptoKeyRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.GetCryptoKey][google.cloud.kms.v1.KeyManagementService.GetCryptoKey].
-            name (str):
-                Required. The [name][google.cloud.kms.v1.CryptoKey.name]
-                of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.GetCryptoKeyRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.GetCryptoKeyRequest):
-            request = service.GetCryptoKeyRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.get_crypto_key]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_crypto_key_version(
-        self,
-        request: Optional[Union[service.GetCryptoKeyVersionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Returns metadata for a given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_get_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetCryptoKeyVersionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.get_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GetCryptoKeyVersionRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.GetCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.GetCryptoKeyVersion].
-            name (str):
-                Required. The
-                [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.GetCryptoKeyVersionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.GetCryptoKeyVersionRequest):
-            request = service.GetCryptoKeyVersionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.get_crypto_key_version]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_public_key(
-        self,
-        request: Optional[Union[service.GetPublicKeyRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.PublicKey:
-        r"""Returns the public key for the given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN]
-        or
-        [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_get_public_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetPublicKeyRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.get_public_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GetPublicKeyRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-            name (str):
-                Required. The
-                [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                public key to get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.PublicKey:
-                The public key for a given
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-                   Obtained via
-                   [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.GetPublicKeyRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.GetPublicKeyRequest):
-            request = service.GetPublicKeyRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.get_public_key]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_import_job(
-        self,
-        request: Optional[Union[service.GetImportJobRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.ImportJob:
-        r"""Returns metadata for a given
-        [ImportJob][google.cloud.kms.v1.ImportJob].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_get_import_job():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GetImportJobRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.get_import_job(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GetImportJobRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.GetImportJob][google.cloud.kms.v1.KeyManagementService.GetImportJob].
-            name (str):
-                Required. The [name][google.cloud.kms.v1.ImportJob.name]
-                of the [ImportJob][google.cloud.kms.v1.ImportJob] to
-                get.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.ImportJob:
-                An [ImportJob][google.cloud.kms.v1.ImportJob] can be used to create
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   using pre-existing key material, generated outside of
-                   Cloud KMS.
-
-                   When an [ImportJob][google.cloud.kms.v1.ImportJob] is
-                   created, Cloud KMS will generate a "wrapping key",
-                   which is a public/private key pair. You use the
-                   wrapping key to encrypt (also known as wrap) the
-                   pre-existing key material to protect it during the
-                   import process. The nature of the wrapping key
-                   depends on the choice of
-                   [import_method][google.cloud.kms.v1.ImportJob.import_method].
-                   When the wrapping key generation is complete, the
-                   [state][google.cloud.kms.v1.ImportJob.state] will be
-                   set to
-                   [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE]
-                   and the
-                   [public_key][google.cloud.kms.v1.ImportJob.public_key]
-                   can be fetched. The fetched public key can then be
-                   used to wrap your pre-existing key material.
-
-                   Once the key material is wrapped, it can be imported
-                   into a new
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   in an existing
-                   [CryptoKey][google.cloud.kms.v1.CryptoKey] by calling
-                   [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-                   Multiple
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   can be imported with a single
-                   [ImportJob][google.cloud.kms.v1.ImportJob]. Cloud KMS
-                   uses the private key portion of the wrapping key to
-                   unwrap the key material. Only Cloud KMS has access to
-                   the private key.
-
-                   An [ImportJob][google.cloud.kms.v1.ImportJob] expires
-                   3 days after it is created. Once expired, Cloud KMS
-                   will no longer be able to import or unwrap any key
-                   material that was wrapped with the
-                   [ImportJob][google.cloud.kms.v1.ImportJob]'s public
-                   key.
-
-                   For more information, see [Importing a
-                   key](\ https://cloud.google.com/kms/docs/importing-a-key).
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.GetImportJobRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.GetImportJobRequest):
-            request = service.GetImportJobRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.get_import_job]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def create_key_ring(
-        self,
-        request: Optional[Union[service.CreateKeyRingRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        key_ring_id: Optional[str] = None,
-        key_ring: Optional[resources.KeyRing] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.KeyRing:
-        r"""Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given
-        Project and Location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_create_key_ring():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateKeyRingRequest(
-                    parent="parent_value",
-                    key_ring_id="key_ring_id_value",
-                )
-
-                # Make the request
-                response = client.create_key_ring(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.CreateKeyRingRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.CreateKeyRing][google.cloud.kms.v1.KeyManagementService.CreateKeyRing].
-            parent (str):
-                Required. The resource name of the location associated
-                with the [KeyRings][google.cloud.kms.v1.KeyRing], in the
-                format ``projects/*/locations/*``.
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            key_ring_id (str):
-                Required. It must be unique within a location and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``
-
-                This corresponds to the ``key_ring_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            key_ring (google.cloud.kms_v1.types.KeyRing):
-                Required. A [KeyRing][google.cloud.kms.v1.KeyRing] with
-                initial field values.
-
-                This corresponds to the ``key_ring`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.KeyRing:
-                A [KeyRing][google.cloud.kms.v1.KeyRing] is a toplevel logical grouping of
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, key_ring_id, key_ring])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.CreateKeyRingRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.CreateKeyRingRequest):
-            request = service.CreateKeyRingRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-            if key_ring_id is not None:
-                request.key_ring_id = key_ring_id
-            if key_ring is not None:
-                request.key_ring = key_ring
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.create_key_ring]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def create_crypto_key(
-        self,
-        request: Optional[Union[service.CreateCryptoKeyRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        crypto_key_id: Optional[str] = None,
-        crypto_key: Optional[resources.CryptoKey] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and
-        [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm]
-        are required.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_create_crypto_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateCryptoKeyRequest(
-                    parent="parent_value",
-                    crypto_key_id="crypto_key_id_value",
-                )
-
-                # Make the request
-                response = client.create_crypto_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.CreateCryptoKeyRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.CreateCryptoKey][google.cloud.kms.v1.KeyManagementService.CreateCryptoKey].
-            parent (str):
-                Required. The [name][google.cloud.kms.v1.KeyRing.name]
-                of the KeyRing associated with the
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key_id (str):
-                Required. It must be unique within a KeyRing and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``
-
-                This corresponds to the ``crypto_key_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key (google.cloud.kms_v1.types.CryptoKey):
-                Required. A [CryptoKey][google.cloud.kms.v1.CryptoKey]
-                with initial field values.
-
-                This corresponds to the ``crypto_key`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, crypto_key_id, crypto_key])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.CreateCryptoKeyRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.CreateCryptoKeyRequest):
-            request = service.CreateCryptoKeyRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-            if crypto_key_id is not None:
-                request.crypto_key_id = crypto_key_id
-            if crypto_key is not None:
-                request.crypto_key = crypto_key
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.create_crypto_key]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def create_crypto_key_version(
-        self,
-        request: Optional[Union[service.CreateCryptoKeyVersionRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        crypto_key_version: Optional[resources.CryptoKeyVersion] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Create a new
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        The server will assign the next sequential id. If unset,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_create_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.CreateCryptoKeyVersionRequest(
-                    parent="parent_value",
-                )
-
-                # Make the request
-                response = client.create_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.CreateCryptoKeyVersionRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion].
-            parent (str):
-                Required. The [name][google.cloud.kms.v1.CryptoKey.name]
-                of the [CryptoKey][google.cloud.kms.v1.CryptoKey]
-                associated with the
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key_version (google.cloud.kms_v1.types.CryptoKeyVersion):
-                Required. A
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                with initial field values.
-
-                This corresponds to the ``crypto_key_version`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, crypto_key_version])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.CreateCryptoKeyVersionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.CreateCryptoKeyVersionRequest):
-            request = service.CreateCryptoKeyVersionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-            if crypto_key_version is not None:
-                request.crypto_key_version = crypto_key_version
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[
-            self._transport.create_crypto_key_version
-        ]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def import_crypto_key_version(
-        self,
-        request: Optional[Union[service.ImportCryptoKeyVersionRequest, dict]] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Import wrapped key material into a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        All requests must specify a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey]. If a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] is
-        additionally specified in the request, key material will be
-        reimported into that version. Otherwise, a new version will be
-        created, and will be assigned the next sequential id within the
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_import_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.ImportCryptoKeyVersionRequest(
-                    rsa_aes_wrapped_key=b'rsa_aes_wrapped_key_blob',
-                    parent="parent_value",
-                    algorithm="EXTERNAL_SYMMETRIC_ENCRYPTION",
-                    import_job="import_job_value",
-                )
-
-                # Make the request
-                response = client.import_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.ImportCryptoKeyVersionRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.ImportCryptoKeyVersionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.ImportCryptoKeyVersionRequest):
-            request = service.ImportCryptoKeyVersionRequest(request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[
-            self._transport.import_crypto_key_version
-        ]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def create_import_job(
-        self,
-        request: Optional[Union[service.CreateImportJobRequest, dict]] = None,
-        *,
-        parent: Optional[str] = None,
-        import_job_id: Optional[str] = None,
-        import_job: Optional[resources.ImportJob] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.ImportJob:
-        r"""Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method]
-        is required.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_create_import_job():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                import_job = kms_v1.ImportJob()
-                import_job.import_method = "RSA_OAEP_4096_SHA256"
-                import_job.protection_level = "EXTERNAL_VPC"
-
-                request = kms_v1.CreateImportJobRequest(
-                    parent="parent_value",
-                    import_job_id="import_job_id_value",
-                    import_job=import_job,
-                )
-
-                # Make the request
-                response = client.create_import_job(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.CreateImportJobRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.CreateImportJob][google.cloud.kms.v1.KeyManagementService.CreateImportJob].
-            parent (str):
-                Required. The [name][google.cloud.kms.v1.KeyRing.name]
-                of the [KeyRing][google.cloud.kms.v1.KeyRing] associated
-                with the [ImportJobs][google.cloud.kms.v1.ImportJob].
-
-                This corresponds to the ``parent`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            import_job_id (str):
-                Required. It must be unique within a KeyRing and match
-                the regular expression ``[a-zA-Z0-9_-]{1,63}``
-
-                This corresponds to the ``import_job_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            import_job (google.cloud.kms_v1.types.ImportJob):
-                Required. An [ImportJob][google.cloud.kms.v1.ImportJob]
-                with initial field values.
-
-                This corresponds to the ``import_job`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.ImportJob:
-                An [ImportJob][google.cloud.kms.v1.ImportJob] can be used to create
-                   [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   using pre-existing key material, generated outside of
-                   Cloud KMS.
-
-                   When an [ImportJob][google.cloud.kms.v1.ImportJob] is
-                   created, Cloud KMS will generate a "wrapping key",
-                   which is a public/private key pair. You use the
-                   wrapping key to encrypt (also known as wrap) the
-                   pre-existing key material to protect it during the
-                   import process. The nature of the wrapping key
-                   depends on the choice of
-                   [import_method][google.cloud.kms.v1.ImportJob.import_method].
-                   When the wrapping key generation is complete, the
-                   [state][google.cloud.kms.v1.ImportJob.state] will be
-                   set to
-                   [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE]
-                   and the
-                   [public_key][google.cloud.kms.v1.ImportJob.public_key]
-                   can be fetched. The fetched public key can then be
-                   used to wrap your pre-existing key material.
-
-                   Once the key material is wrapped, it can be imported
-                   into a new
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   in an existing
-                   [CryptoKey][google.cloud.kms.v1.CryptoKey] by calling
-                   [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-                   Multiple
-                   [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                   can be imported with a single
-                   [ImportJob][google.cloud.kms.v1.ImportJob]. Cloud KMS
-                   uses the private key portion of the wrapping key to
-                   unwrap the key material. Only Cloud KMS has access to
-                   the private key.
-
-                   An [ImportJob][google.cloud.kms.v1.ImportJob] expires
-                   3 days after it is created. Once expired, Cloud KMS
-                   will no longer be able to import or unwrap any key
-                   material that was wrapped with the
-                   [ImportJob][google.cloud.kms.v1.ImportJob]'s public
-                   key.
-
-                   For more information, see [Importing a
-                   key](\ https://cloud.google.com/kms/docs/importing-a-key).
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([parent, import_job_id, import_job])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.CreateImportJobRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.CreateImportJobRequest):
-            request = service.CreateImportJobRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if parent is not None:
-                request.parent = parent
-            if import_job_id is not None:
-                request.import_job_id = import_job_id
-            if import_job is not None:
-                request.import_job = import_job
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.create_import_job]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", request.parent),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def update_crypto_key(
-        self,
-        request: Optional[Union[service.UpdateCryptoKeyRequest, dict]] = None,
-        *,
-        crypto_key: Optional[resources.CryptoKey] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_update_crypto_key():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateCryptoKeyRequest(
-                )
-
-                # Make the request
-                response = client.update_crypto_key(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.UpdateCryptoKeyRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.UpdateCryptoKey][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKey].
-            crypto_key (google.cloud.kms_v1.types.CryptoKey):
-                Required. [CryptoKey][google.cloud.kms.v1.CryptoKey]
-                with updated values.
-
-                This corresponds to the ``crypto_key`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (google.protobuf.field_mask_pb2.FieldMask):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([crypto_key, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.UpdateCryptoKeyRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.UpdateCryptoKeyRequest):
-            request = service.UpdateCryptoKeyRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if crypto_key is not None:
-                request.crypto_key = crypto_key
-            if update_mask is not None:
-                request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.update_crypto_key]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("crypto_key.name", request.crypto_key.name),)
-            ),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def update_crypto_key_version(
-        self,
-        request: Optional[Union[service.UpdateCryptoKeyVersionRequest, dict]] = None,
-        *,
-        crypto_key_version: Optional[resources.CryptoKeyVersion] = None,
-        update_mask: Optional[field_mask_pb2.FieldMask] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Update a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-        metadata.
-
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] may be
-        changed between
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-        and
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED]
-        using this method. See
-        [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion]
-        and
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        to move between other states.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_update_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateCryptoKeyVersionRequest(
-                )
-
-                # Make the request
-                response = client.update_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.UpdateCryptoKeyVersionRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.UpdateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyVersion].
-            crypto_key_version (google.cloud.kms_v1.types.CryptoKeyVersion):
-                Required.
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                with updated values.
-
-                This corresponds to the ``crypto_key_version`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            update_mask (google.protobuf.field_mask_pb2.FieldMask):
-                Required. List of fields to be
-                updated in this request.
-
-                This corresponds to the ``update_mask`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([crypto_key_version, update_mask])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.UpdateCryptoKeyVersionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.UpdateCryptoKeyVersionRequest):
-            request = service.UpdateCryptoKeyVersionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if crypto_key_version is not None:
-                request.crypto_key_version = crypto_key_version
-            if update_mask is not None:
-                request.update_mask = update_mask
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[
-            self._transport.update_crypto_key_version
-        ]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata(
-                (("crypto_key_version.name", request.crypto_key_version.name),)
-            ),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def update_crypto_key_primary_version(
-        self,
-        request: Optional[
-            Union[service.UpdateCryptoKeyPrimaryVersionRequest, dict]
-        ] = None,
-        *,
-        name: Optional[str] = None,
-        crypto_key_version_id: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKey:
-        r"""Update the version of a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-        Returns an error if called on a key whose purpose is not
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_update_crypto_key_primary_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.UpdateCryptoKeyPrimaryVersionRequest(
-                    name="name_value",
-                    crypto_key_version_id="crypto_key_version_id_value",
-                )
-
-                # Make the request
-                response = client.update_crypto_key_primary_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.UpdateCryptoKeyPrimaryVersionRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion].
-            name (str):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] to update.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            crypto_key_version_id (str):
-                Required. The id of the child
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use as primary.
-
-                This corresponds to the ``crypto_key_version_id`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKey:
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical key that
-                   can be used for cryptographic operations.
-
-                   A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made
-                   up of zero or more
-                   [versions][google.cloud.kms.v1.CryptoKeyVersion],
-                   which represent the actual key material used in
-                   cryptographic operations.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, crypto_key_version_id])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.UpdateCryptoKeyPrimaryVersionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.UpdateCryptoKeyPrimaryVersionRequest):
-            request = service.UpdateCryptoKeyPrimaryVersionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-            if crypto_key_version_id is not None:
-                request.crypto_key_version_id = crypto_key_version_id
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[
-            self._transport.update_crypto_key_primary_version
-        ]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def destroy_crypto_key_version(
-        self,
-        request: Optional[Union[service.DestroyCryptoKeyVersionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Schedule a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for
-        destruction.
-
-        Upon calling this method,
-        [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state]
-        will be set to
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be set to the time
-        [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration]
-        in the future. At that time, the
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will
-        automatically change to
-        [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED],
-        and the key material will be irrevocably destroyed.
-
-        Before the
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        is reached,
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        may be called to reverse the process.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_destroy_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.DestroyCryptoKeyVersionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.destroy_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.DestroyCryptoKeyVersionRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion].
-            name (str):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to destroy.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.DestroyCryptoKeyVersionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.DestroyCryptoKeyVersionRequest):
-            request = service.DestroyCryptoKeyVersionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[
-            self._transport.destroy_crypto_key_version
-        ]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def restore_crypto_key_version(
-        self,
-        request: Optional[Union[service.RestoreCryptoKeyVersionRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> resources.CryptoKeyVersion:
-        r"""Restore a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
-        state.
-
-        Upon restoration of the CryptoKeyVersion,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be cleared.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_restore_crypto_key_version():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.RestoreCryptoKeyVersionRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.restore_crypto_key_version(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.RestoreCryptoKeyVersionRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion].
-            name (str):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to restore.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.CryptoKeyVersion:
-                A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] represents an
-                   individual cryptographic key, and the associated key
-                   material.
-
-                   An
-                   [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                   version can be used for cryptographic operations.
-
-                   For security reasons, the raw cryptographic key
-                   material represented by a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   can never be viewed or exported. It can only be used
-                   to encrypt, decrypt, or sign data when an authorized
-                   user or application invokes Cloud KMS.
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.RestoreCryptoKeyVersionRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.RestoreCryptoKeyVersionRequest):
-            request = service.RestoreCryptoKeyVersionRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[
-            self._transport.restore_crypto_key_version
-        ]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def encrypt(
-        self,
-        request: Optional[Union[service.EncryptRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        plaintext: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.EncryptResponse:
-        r"""Encrypts data, so that it can only be recovered by a call to
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_encrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.EncryptRequest(
-                    name="name_value",
-                    plaintext=b'plaintext_blob',
-                )
-
-                # Make the request
-                response = client.encrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.EncryptRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-            name (str):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] or
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for encryption.
-
-                If a [CryptoKey][google.cloud.kms.v1.CryptoKey] is
-                specified, the server will use its [primary
-                version][google.cloud.kms.v1.CryptoKey.primary].
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            plaintext (bytes):
-                Required. The data to encrypt. Must be no larger than
-                64KiB.
-
-                The maximum size depends on the key version's
-                [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-                For
-                [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
-                [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL],
-                and
-                [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC]
-                keys, the plaintext must be no larger than 64KiB. For
-                [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the
-                combined length of the plaintext and
-                additional_authenticated_data fields must be no larger
-                than 8KiB.
-
-                This corresponds to the ``plaintext`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.EncryptResponse:
-                Response message for
-                   [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, plaintext])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.EncryptRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.EncryptRequest):
-            request = service.EncryptRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-            if plaintext is not None:
-                request.plaintext = plaintext
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.encrypt]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def decrypt(
-        self,
-        request: Optional[Union[service.DecryptRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        ciphertext: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.DecryptResponse:
-        r"""Decrypts data that was protected by
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_decrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.DecryptRequest(
-                    name="name_value",
-                    ciphertext=b'ciphertext_blob',
-                )
-
-                # Make the request
-                response = client.decrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.DecryptRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-            name (str):
-                Required. The resource name of the
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] to use for
-                decryption. The server will choose the appropriate
-                version.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ciphertext (bytes):
-                Required. The encrypted data originally returned in
-                [EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext].
-
-                This corresponds to the ``ciphertext`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.DecryptResponse:
-                Response message for
-                   [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, ciphertext])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.DecryptRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.DecryptRequest):
-            request = service.DecryptRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-            if ciphertext is not None:
-                request.ciphertext = ciphertext
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.decrypt]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def raw_encrypt(
-        self,
-        request: Optional[Union[service.RawEncryptRequest, dict]] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.RawEncryptResponse:
-        r"""Encrypts data using portable cryptographic primitives. Most
-        users should choose
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt] and
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]
-        rather than their raw counterparts. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_raw_encrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.RawEncryptRequest(
-                    name="name_value",
-                    plaintext=b'plaintext_blob',
-                )
-
-                # Make the request
-                response = client.raw_encrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.RawEncryptRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.RawEncryptResponse:
-                Response message for
-                   [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.RawEncryptRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.RawEncryptRequest):
-            request = service.RawEncryptRequest(request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.raw_encrypt]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def raw_decrypt(
-        self,
-        request: Optional[Union[service.RawDecryptRequest, dict]] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.RawDecryptResponse:
-        r"""Decrypts data that was originally encrypted using a raw
-        cryptographic mechanism. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_raw_decrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.RawDecryptRequest(
-                    name="name_value",
-                    ciphertext=b'ciphertext_blob',
-                    initialization_vector=b'initialization_vector_blob',
-                )
-
-                # Make the request
-                response = client.raw_decrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.RawDecryptRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.RawDecryptResponse:
-                Response message for
-                   [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.RawDecryptRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.RawDecryptRequest):
-            request = service.RawDecryptRequest(request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.raw_decrypt]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def asymmetric_sign(
-        self,
-        request: Optional[Union[service.AsymmetricSignRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        digest: Optional[service.Digest] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.AsymmetricSignResponse:
-        r"""Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_SIGN, producing a signature that can be verified with
-        the public key retrieved from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_asymmetric_sign():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.AsymmetricSignRequest(
-                    name="name_value",
-                )
-
-                # Make the request
-                response = client.asymmetric_sign(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.AsymmetricSignRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-            name (str):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for signing.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            digest (google.cloud.kms_v1.types.Digest):
-                Optional. The digest of the data to sign. The digest
-                must be produced with the same digest algorithm as
-                specified by the key version's
-                [algorithm][google.cloud.kms.v1.CryptoKeyVersion.algorithm].
-
-                This field may not be supplied if
-                [AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data]
-                is supplied.
-
-                This corresponds to the ``digest`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.AsymmetricSignResponse:
-                Response message for
-                   [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, digest])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.AsymmetricSignRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.AsymmetricSignRequest):
-            request = service.AsymmetricSignRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-            if digest is not None:
-                request.digest = digest
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.asymmetric_sign]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def asymmetric_decrypt(
-        self,
-        request: Optional[Union[service.AsymmetricDecryptRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        ciphertext: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.AsymmetricDecryptResponse:
-        r"""Decrypts data that was encrypted with a public key retrieved
-        from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey]
-        corresponding to a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_DECRYPT.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_asymmetric_decrypt():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.AsymmetricDecryptRequest(
-                    name="name_value",
-                    ciphertext=b'ciphertext_blob',
-                )
-
-                # Make the request
-                response = client.asymmetric_decrypt(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.AsymmetricDecryptRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-            name (str):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for decryption.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            ciphertext (bytes):
-                Required. The data encrypted with the named
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-                public key using OAEP.
-
-                This corresponds to the ``ciphertext`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.AsymmetricDecryptResponse:
-                Response message for
-                   [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, ciphertext])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.AsymmetricDecryptRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.AsymmetricDecryptRequest):
-            request = service.AsymmetricDecryptRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-            if ciphertext is not None:
-                request.ciphertext = ciphertext
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.asymmetric_decrypt]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def mac_sign(
-        self,
-        request: Optional[Union[service.MacSignRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        data: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.MacSignResponse:
-        r"""Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        producing a tag that can be verified by another source with the
-        same key.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_mac_sign():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.MacSignRequest(
-                    name="name_value",
-                    data=b'data_blob',
-                )
-
-                # Make the request
-                response = client.mac_sign(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.MacSignRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-            name (str):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for signing.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            data (bytes):
-                Required. The data to sign. The MAC
-                tag is computed over this data field
-                based on the specific algorithm.
-
-                This corresponds to the ``data`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.MacSignResponse:
-                Response message for
-                   [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, data])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.MacSignRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.MacSignRequest):
-            request = service.MacSignRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-            if data is not None:
-                request.data = data
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.mac_sign]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def mac_verify(
-        self,
-        request: Optional[Union[service.MacVerifyRequest, dict]] = None,
-        *,
-        name: Optional[str] = None,
-        data: Optional[bytes] = None,
-        mac: Optional[bytes] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.MacVerifyResponse:
-        r"""Verifies MAC tag using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        and returns a response that indicates whether or not the
-        verification was successful.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_mac_verify():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.MacVerifyRequest(
-                    name="name_value",
-                    data=b'data_blob',
-                    mac=b'mac_blob',
-                )
-
-                # Make the request
-                response = client.mac_verify(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.MacVerifyRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-            name (str):
-                Required. The resource name of the
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                to use for verification.
-
-                This corresponds to the ``name`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            data (bytes):
-                Required. The data used previously as a
-                [MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data]
-                to generate the MAC tag.
-
-                This corresponds to the ``data`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            mac (bytes):
-                Required. The signature to verify.
-                This corresponds to the ``mac`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.MacVerifyResponse:
-                Response message for
-                   [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([name, data, mac])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.MacVerifyRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.MacVerifyRequest):
-            request = service.MacVerifyRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if name is not None:
-                request.name = name
-            if data is not None:
-                request.data = data
-            if mac is not None:
-                request.mac = mac
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.mac_verify]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def generate_random_bytes(
-        self,
-        request: Optional[Union[service.GenerateRandomBytesRequest, dict]] = None,
-        *,
-        location: Optional[str] = None,
-        length_bytes: Optional[int] = None,
-        protection_level: Optional[resources.ProtectionLevel] = None,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> service.GenerateRandomBytesResponse:
-        r"""Generate random bytes using the Cloud KMS randomness
-        source in the provided location.
-
-        .. code-block:: python
-
-            # This snippet has been automatically generated and should be regarded as a
-            # code template only.
-            # It will require modifications to work:
-            # - It may require correct/in-range values for request initialization.
-            # - It may require specifying regional endpoints when creating the service
-            #   client as shown in:
-            #   https://googleapis.dev/python/google-api-core/latest/client_options.html
-            from google.cloud import kms_v1
-
-            def sample_generate_random_bytes():
-                # Create a client
-                client = kms_v1.KeyManagementServiceClient()
-
-                # Initialize request argument(s)
-                request = kms_v1.GenerateRandomBytesRequest(
-                )
-
-                # Make the request
-                response = client.generate_random_bytes(request=request)
-
-                # Handle the response
-                print(response)
-
-        Args:
-            request (Union[google.cloud.kms_v1.types.GenerateRandomBytesRequest, dict]):
-                The request object. Request message for
-                [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-            location (str):
-                The project-specific location in
-                which to generate random bytes. For
-                example,
-                "projects/my-project/locations/us-central1".
-
-                This corresponds to the ``location`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            length_bytes (int):
-                The length in bytes of the amount of
-                randomness to retrieve.  Minimum 8
-                bytes, maximum 1024 bytes.
-
-                This corresponds to the ``length_bytes`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-                The
-                [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-                to use when generating the random data. Currently, only
-                [HSM][google.cloud.kms.v1.ProtectionLevel.HSM]
-                protection level is supported.
-
-                This corresponds to the ``protection_level`` field
-                on the ``request`` instance; if ``request`` is provided, this
-                should not be set.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-
-        Returns:
-            google.cloud.kms_v1.types.GenerateRandomBytesResponse:
-                Response message for
-                   [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-
-        """
-        # Create or coerce a protobuf request object.
-        # Quick check: If we got a request object, we should *not* have
-        # gotten any keyword arguments that map to the request.
-        has_flattened_params = any([location, length_bytes, protection_level])
-        if request is not None and has_flattened_params:
-            raise ValueError(
-                "If the `request` argument is set, then none of "
-                "the individual field arguments should be set."
-            )
-
-        # Minor optimization to avoid making a copy if the user passes
-        # in a service.GenerateRandomBytesRequest.
-        # There's no risk of modifying the input as we've already verified
-        # there are no flattened fields.
-        if not isinstance(request, service.GenerateRandomBytesRequest):
-            request = service.GenerateRandomBytesRequest(request)
-            # If we have keyword arguments corresponding to fields on the
-            # request, apply these.
-            if location is not None:
-                request.location = location
-            if length_bytes is not None:
-                request.length_bytes = length_bytes
-            if protection_level is not None:
-                request.protection_level = protection_level
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = self._transport._wrapped_methods[self._transport.generate_random_bytes]
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("location", request.location),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def __enter__(self) -> "KeyManagementServiceClient":
-        return self
-
-    def __exit__(self, type, value, traceback):
-        """Releases underlying transport's resources.
-
-        .. warning::
-            ONLY use as a context manager if the transport is NOT shared
-            with other clients! Exiting the with block will CLOSE the transport
-            and may cause errors in other clients!
-        """
-        self.transport.close()
-
-    def get_location(
-        self,
-        request: Optional[locations_pb2.GetLocationRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.Location:
-        r"""Gets information about a location.
-
-        Args:
-            request (:class:`~.location_pb2.GetLocationRequest`):
-                The request object. Request message for
-                `GetLocation` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.Location:
-                Location object.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.GetLocationRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.get_location,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def list_locations(
-        self,
-        request: Optional[locations_pb2.ListLocationsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> locations_pb2.ListLocationsResponse:
-        r"""Lists information about the supported locations for this service.
-
-        Args:
-            request (:class:`~.location_pb2.ListLocationsRequest`):
-                The request object. Request message for
-                `ListLocations` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.location_pb2.ListLocationsResponse:
-                Response message for ``ListLocations`` method.
-        """
-        # Create or coerce a protobuf request object.
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = locations_pb2.ListLocationsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.list_locations,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("name", request.name),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def set_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.SetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Sets the IAM access control policy on the specified function.
-
-        Replaces any existing policy.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.SetIamPolicyRequest`):
-                The request object. Request message for `SetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.SetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.set_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def get_iam_policy(
-        self,
-        request: Optional[iam_policy_pb2.GetIamPolicyRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> policy_pb2.Policy:
-        r"""Gets the IAM access control policy for a function.
-
-        Returns an empty policy if the function exists and does not have a
-        policy set.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.GetIamPolicyRequest`):
-                The request object. Request message for `GetIamPolicy`
-                method.
-            retry (google.api_core.retry.Retry): Designation of what errors, if
-                any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.policy_pb2.Policy:
-                Defines an Identity and Access Management (IAM) policy.
-                It is used to specify access control policies for Cloud
-                Platform resources.
-                A ``Policy`` is a collection of ``bindings``. A
-                ``binding`` binds one or more ``members`` to a single
-                ``role``. Members can be user accounts, service
-                accounts, Google groups, and domains (such as G Suite).
-                A ``role`` is a named list of permissions (defined by
-                IAM or configured by users). A ``binding`` can
-                optionally specify a ``condition``, which is a logic
-                expression that further constrains the role binding
-                based on attributes about the request and/or target
-                resource.
-
-
-                **JSON Example**::
-
-
-                    {
-                      "bindings": [
-                        {
-                          "role": "roles/resourcemanager.organizationAdmin",
-                          "members": [
-                            "user:mike@example.com",
-                            "group:admins@example.com",
-                            "domain:google.com",
-                            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
-                          ]
-                        },
-                        {
-                          "role": "roles/resourcemanager.organizationViewer",
-                          "members": ["user:eve@example.com"],
-                          "condition": {
-                            "title": "expirable access",
-                            "description": "Does not grant access after Sep 2020",
-                            "expression": "request.time <
-                            timestamp('2020-10-01T00:00:00.000Z')",
-                          }
-                        }
-                      ]
-                    }
-
-                **YAML Example**
-
-                ::
-
-                    bindings:
-                    - members:
-                      - user:mike@example.com
-                      - group:admins@example.com
-                      - domain:google.com
-                      - serviceAccount:my-project-id@appspot.gserviceaccount.com
-                      role: roles/resourcemanager.organizationAdmin
-                    - members:
-                      - user:eve@example.com
-                      role: roles/resourcemanager.organizationViewer
-                      condition:
-                        title: expirable access
-                        description: Does not grant access after Sep 2020
-                        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
-
-                For a description of IAM and its features, see the `IAM
-                developer's
-                guide <https://cloud.google.com/iam/docs>`__.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.GetIamPolicyRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.get_iam_policy,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-    def test_iam_permissions(
-        self,
-        request: Optional[iam_policy_pb2.TestIamPermissionsRequest] = None,
-        *,
-        retry: OptionalRetry = gapic_v1.method.DEFAULT,
-        timeout: Union[float, object] = gapic_v1.method.DEFAULT,
-        metadata: Sequence[Tuple[str, str]] = (),
-    ) -> iam_policy_pb2.TestIamPermissionsResponse:
-        r"""Tests the specified IAM permissions against the IAM access control
-            policy for a function.
-
-        If the function does not exist, this will return an empty set
-        of permissions, not a NOT_FOUND error.
-
-        Args:
-            request (:class:`~.iam_policy_pb2.TestIamPermissionsRequest`):
-                The request object. Request message for
-                `TestIamPermissions` method.
-            retry (google.api_core.retry.Retry): Designation of what errors,
-                 if any, should be retried.
-            timeout (float): The timeout for this request.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        Returns:
-            ~.iam_policy_pb2.TestIamPermissionsResponse:
-                Response message for ``TestIamPermissions`` method.
-        """
-        # Create or coerce a protobuf request object.
-
-        # The request isn't a proto-plus wrapped type,
-        # so it must be constructed via keyword expansion.
-        if isinstance(request, dict):
-            request = iam_policy_pb2.TestIamPermissionsRequest(**request)
-
-        # Wrap the RPC method; this adds retry and timeout information,
-        # and friendly error handling.
-        rpc = gapic_v1.method.wrap_method(
-            self._transport.test_iam_permissions,
-            default_timeout=None,
-            client_info=DEFAULT_CLIENT_INFO,
-        )
-
-        # Certain fields should be provided within the metadata header;
-        # add these here.
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("resource", request.resource),)),
-        )
-
-        # Send the request.
-        response = rpc(
-            request,
-            retry=retry,
-            timeout=timeout,
-            metadata=metadata,
-        )
-
-        # Done; return the response.
-        return response
-
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=package_version.__version__
-)
-
-
-__all__ = ("KeyManagementServiceClient",)
diff --git a/google/cloud/kms_v1/services/key_management_service/pagers.py b/google/cloud/kms_v1/services/key_management_service/pagers.py
deleted file mode 100644
index a4912c1d..00000000
--- a/google/cloud/kms_v1/services/key_management_service/pagers.py
+++ /dev/null
@@ -1,539 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from typing import (
-    Any,
-    AsyncIterator,
-    Awaitable,
-    Callable,
-    Iterator,
-    Optional,
-    Sequence,
-    Tuple,
-)
-
-from google.cloud.kms_v1.types import resources, service
-
-
-class ListKeyRingsPager:
-    """A pager for iterating through ``list_key_rings`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListKeyRingsResponse` object, and
-    provides an ``__iter__`` method to iterate through its
-    ``key_rings`` field.
-
-    If there are more pages, the ``__iter__`` method will make additional
-    ``ListKeyRings`` requests and continue to iterate
-    through the ``key_rings`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListKeyRingsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., service.ListKeyRingsResponse],
-        request: service.ListKeyRingsRequest,
-        response: service.ListKeyRingsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiate the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListKeyRingsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListKeyRingsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListKeyRingsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    def pages(self) -> Iterator[service.ListKeyRingsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __iter__(self) -> Iterator[resources.KeyRing]:
-        for page in self.pages:
-            yield from page.key_rings
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListKeyRingsAsyncPager:
-    """A pager for iterating through ``list_key_rings`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListKeyRingsResponse` object, and
-    provides an ``__aiter__`` method to iterate through its
-    ``key_rings`` field.
-
-    If there are more pages, the ``__aiter__`` method will make additional
-    ``ListKeyRings`` requests and continue to iterate
-    through the ``key_rings`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListKeyRingsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., Awaitable[service.ListKeyRingsResponse]],
-        request: service.ListKeyRingsRequest,
-        response: service.ListKeyRingsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiates the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListKeyRingsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListKeyRingsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListKeyRingsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    async def pages(self) -> AsyncIterator[service.ListKeyRingsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = await self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __aiter__(self) -> AsyncIterator[resources.KeyRing]:
-        async def async_generator():
-            async for page in self.pages:
-                for response in page.key_rings:
-                    yield response
-
-        return async_generator()
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListCryptoKeysPager:
-    """A pager for iterating through ``list_crypto_keys`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListCryptoKeysResponse` object, and
-    provides an ``__iter__`` method to iterate through its
-    ``crypto_keys`` field.
-
-    If there are more pages, the ``__iter__`` method will make additional
-    ``ListCryptoKeys`` requests and continue to iterate
-    through the ``crypto_keys`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListCryptoKeysResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., service.ListCryptoKeysResponse],
-        request: service.ListCryptoKeysRequest,
-        response: service.ListCryptoKeysResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiate the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListCryptoKeysRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListCryptoKeysResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListCryptoKeysRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    def pages(self) -> Iterator[service.ListCryptoKeysResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __iter__(self) -> Iterator[resources.CryptoKey]:
-        for page in self.pages:
-            yield from page.crypto_keys
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListCryptoKeysAsyncPager:
-    """A pager for iterating through ``list_crypto_keys`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListCryptoKeysResponse` object, and
-    provides an ``__aiter__`` method to iterate through its
-    ``crypto_keys`` field.
-
-    If there are more pages, the ``__aiter__`` method will make additional
-    ``ListCryptoKeys`` requests and continue to iterate
-    through the ``crypto_keys`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListCryptoKeysResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., Awaitable[service.ListCryptoKeysResponse]],
-        request: service.ListCryptoKeysRequest,
-        response: service.ListCryptoKeysResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiates the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListCryptoKeysRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListCryptoKeysResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListCryptoKeysRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    async def pages(self) -> AsyncIterator[service.ListCryptoKeysResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = await self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __aiter__(self) -> AsyncIterator[resources.CryptoKey]:
-        async def async_generator():
-            async for page in self.pages:
-                for response in page.crypto_keys:
-                    yield response
-
-        return async_generator()
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListCryptoKeyVersionsPager:
-    """A pager for iterating through ``list_crypto_key_versions`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListCryptoKeyVersionsResponse` object, and
-    provides an ``__iter__`` method to iterate through its
-    ``crypto_key_versions`` field.
-
-    If there are more pages, the ``__iter__`` method will make additional
-    ``ListCryptoKeyVersions`` requests and continue to iterate
-    through the ``crypto_key_versions`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListCryptoKeyVersionsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., service.ListCryptoKeyVersionsResponse],
-        request: service.ListCryptoKeyVersionsRequest,
-        response: service.ListCryptoKeyVersionsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiate the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListCryptoKeyVersionsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListCryptoKeyVersionsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListCryptoKeyVersionsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    def pages(self) -> Iterator[service.ListCryptoKeyVersionsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __iter__(self) -> Iterator[resources.CryptoKeyVersion]:
-        for page in self.pages:
-            yield from page.crypto_key_versions
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListCryptoKeyVersionsAsyncPager:
-    """A pager for iterating through ``list_crypto_key_versions`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListCryptoKeyVersionsResponse` object, and
-    provides an ``__aiter__`` method to iterate through its
-    ``crypto_key_versions`` field.
-
-    If there are more pages, the ``__aiter__`` method will make additional
-    ``ListCryptoKeyVersions`` requests and continue to iterate
-    through the ``crypto_key_versions`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListCryptoKeyVersionsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., Awaitable[service.ListCryptoKeyVersionsResponse]],
-        request: service.ListCryptoKeyVersionsRequest,
-        response: service.ListCryptoKeyVersionsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiates the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListCryptoKeyVersionsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListCryptoKeyVersionsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListCryptoKeyVersionsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    async def pages(self) -> AsyncIterator[service.ListCryptoKeyVersionsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = await self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __aiter__(self) -> AsyncIterator[resources.CryptoKeyVersion]:
-        async def async_generator():
-            async for page in self.pages:
-                for response in page.crypto_key_versions:
-                    yield response
-
-        return async_generator()
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListImportJobsPager:
-    """A pager for iterating through ``list_import_jobs`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListImportJobsResponse` object, and
-    provides an ``__iter__`` method to iterate through its
-    ``import_jobs`` field.
-
-    If there are more pages, the ``__iter__`` method will make additional
-    ``ListImportJobs`` requests and continue to iterate
-    through the ``import_jobs`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListImportJobsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., service.ListImportJobsResponse],
-        request: service.ListImportJobsRequest,
-        response: service.ListImportJobsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiate the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListImportJobsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListImportJobsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListImportJobsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    def pages(self) -> Iterator[service.ListImportJobsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __iter__(self) -> Iterator[resources.ImportJob]:
-        for page in self.pages:
-            yield from page.import_jobs
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
-
-
-class ListImportJobsAsyncPager:
-    """A pager for iterating through ``list_import_jobs`` requests.
-
-    This class thinly wraps an initial
-    :class:`google.cloud.kms_v1.types.ListImportJobsResponse` object, and
-    provides an ``__aiter__`` method to iterate through its
-    ``import_jobs`` field.
-
-    If there are more pages, the ``__aiter__`` method will make additional
-    ``ListImportJobs`` requests and continue to iterate
-    through the ``import_jobs`` field on the
-    corresponding responses.
-
-    All the usual :class:`google.cloud.kms_v1.types.ListImportJobsResponse`
-    attributes are available on the pager. If multiple requests are made, only
-    the most recent response is retained, and thus used for attribute lookup.
-    """
-
-    def __init__(
-        self,
-        method: Callable[..., Awaitable[service.ListImportJobsResponse]],
-        request: service.ListImportJobsRequest,
-        response: service.ListImportJobsResponse,
-        *,
-        metadata: Sequence[Tuple[str, str]] = ()
-    ):
-        """Instantiates the pager.
-
-        Args:
-            method (Callable): The method that was originally called, and
-                which instantiated this pager.
-            request (google.cloud.kms_v1.types.ListImportJobsRequest):
-                The initial request object.
-            response (google.cloud.kms_v1.types.ListImportJobsResponse):
-                The initial response object.
-            metadata (Sequence[Tuple[str, str]]): Strings which should be
-                sent along with the request as metadata.
-        """
-        self._method = method
-        self._request = service.ListImportJobsRequest(request)
-        self._response = response
-        self._metadata = metadata
-
-    def __getattr__(self, name: str) -> Any:
-        return getattr(self._response, name)
-
-    @property
-    async def pages(self) -> AsyncIterator[service.ListImportJobsResponse]:
-        yield self._response
-        while self._response.next_page_token:
-            self._request.page_token = self._response.next_page_token
-            self._response = await self._method(self._request, metadata=self._metadata)
-            yield self._response
-
-    def __aiter__(self) -> AsyncIterator[resources.ImportJob]:
-        async def async_generator():
-            async for page in self.pages:
-                for response in page.import_jobs:
-                    yield response
-
-        return async_generator()
-
-    def __repr__(self) -> str:
-        return "{0}<{1!r}>".format(self.__class__.__name__, self._response)
diff --git a/google/cloud/kms_v1/services/key_management_service/transports/__init__.py b/google/cloud/kms_v1/services/key_management_service/transports/__init__.py
deleted file mode 100644
index 5e027fa1..00000000
--- a/google/cloud/kms_v1/services/key_management_service/transports/__init__.py
+++ /dev/null
@@ -1,38 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from collections import OrderedDict
-from typing import Dict, Type
-
-from .base import KeyManagementServiceTransport
-from .grpc import KeyManagementServiceGrpcTransport
-from .grpc_asyncio import KeyManagementServiceGrpcAsyncIOTransport
-from .rest import KeyManagementServiceRestInterceptor, KeyManagementServiceRestTransport
-
-# Compile a registry of transports.
-_transport_registry = (
-    OrderedDict()
-)  # type: Dict[str, Type[KeyManagementServiceTransport]]
-_transport_registry["grpc"] = KeyManagementServiceGrpcTransport
-_transport_registry["grpc_asyncio"] = KeyManagementServiceGrpcAsyncIOTransport
-_transport_registry["rest"] = KeyManagementServiceRestTransport
-
-__all__ = (
-    "KeyManagementServiceTransport",
-    "KeyManagementServiceGrpcTransport",
-    "KeyManagementServiceGrpcAsyncIOTransport",
-    "KeyManagementServiceRestTransport",
-    "KeyManagementServiceRestInterceptor",
-)
diff --git a/google/cloud/kms_v1/services/key_management_service/transports/base.py b/google/cloud/kms_v1/services/key_management_service/transports/base.py
deleted file mode 100644
index 4bd0cd77..00000000
--- a/google/cloud/kms_v1/services/key_management_service/transports/base.py
+++ /dev/null
@@ -1,845 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-import abc
-from typing import Awaitable, Callable, Dict, Optional, Sequence, Union
-
-import google.api_core
-from google.api_core import exceptions as core_exceptions
-from google.api_core import gapic_v1
-from google.api_core import retry as retries
-import google.auth  # type: ignore
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.oauth2 import service_account  # type: ignore
-
-from google.cloud.kms_v1 import gapic_version as package_version
-from google.cloud.kms_v1.types import resources, service
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=package_version.__version__
-)
-
-
-class KeyManagementServiceTransport(abc.ABC):
-    """Abstract transport class for KeyManagementService."""
-
-    AUTH_SCOPES = (
-        "https://www.googleapis.com/auth/cloud-platform",
-        "https://www.googleapis.com/auth/cloudkms",
-    )
-
-    DEFAULT_HOST: str = "cloudkms.googleapis.com"
-
-    def __init__(
-        self,
-        *,
-        host: str = DEFAULT_HOST,
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        api_audience: Optional[str] = None,
-        **kwargs,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
-            scopes (Optional[Sequence[str]]): A list of scopes.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-        """
-
-        scopes_kwargs = {"scopes": scopes, "default_scopes": self.AUTH_SCOPES}
-
-        # Save the scopes.
-        self._scopes = scopes
-
-        # If no credentials are provided, then determine the appropriate
-        # defaults.
-        if credentials and credentials_file:
-            raise core_exceptions.DuplicateCredentialArgs(
-                "'credentials_file' and 'credentials' are mutually exclusive"
-            )
-
-        if credentials_file is not None:
-            credentials, _ = google.auth.load_credentials_from_file(
-                credentials_file, **scopes_kwargs, quota_project_id=quota_project_id
-            )
-        elif credentials is None:
-            credentials, _ = google.auth.default(
-                **scopes_kwargs, quota_project_id=quota_project_id
-            )
-            # Don't apply audience if the credentials file passed from user.
-            if hasattr(credentials, "with_gdch_audience"):
-                credentials = credentials.with_gdch_audience(
-                    api_audience if api_audience else host
-                )
-
-        # If the credentials are service account credentials, then always try to use self signed JWT.
-        if (
-            always_use_jwt_access
-            and isinstance(credentials, service_account.Credentials)
-            and hasattr(service_account.Credentials, "with_always_use_jwt_access")
-        ):
-            credentials = credentials.with_always_use_jwt_access(True)
-
-        # Save the credentials.
-        self._credentials = credentials
-
-        # Save the hostname. Default to port 443 (HTTPS) if none is specified.
-        if ":" not in host:
-            host += ":443"
-        self._host = host
-
-    def _prep_wrapped_messages(self, client_info):
-        # Precompute the wrapped methods.
-        self._wrapped_methods = {
-            self.list_key_rings: gapic_v1.method.wrap_method(
-                self.list_key_rings,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.list_crypto_keys: gapic_v1.method.wrap_method(
-                self.list_crypto_keys,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.list_crypto_key_versions: gapic_v1.method.wrap_method(
-                self.list_crypto_key_versions,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.list_import_jobs: gapic_v1.method.wrap_method(
-                self.list_import_jobs,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.get_key_ring: gapic_v1.method.wrap_method(
-                self.get_key_ring,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.get_crypto_key: gapic_v1.method.wrap_method(
-                self.get_crypto_key,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.get_crypto_key_version: gapic_v1.method.wrap_method(
-                self.get_crypto_key_version,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.get_public_key: gapic_v1.method.wrap_method(
-                self.get_public_key,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.get_import_job: gapic_v1.method.wrap_method(
-                self.get_import_job,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.create_key_ring: gapic_v1.method.wrap_method(
-                self.create_key_ring,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.create_crypto_key: gapic_v1.method.wrap_method(
-                self.create_crypto_key,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.create_crypto_key_version: gapic_v1.method.wrap_method(
-                self.create_crypto_key_version,
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.import_crypto_key_version: gapic_v1.method.wrap_method(
-                self.import_crypto_key_version,
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.create_import_job: gapic_v1.method.wrap_method(
-                self.create_import_job,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.update_crypto_key: gapic_v1.method.wrap_method(
-                self.update_crypto_key,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.update_crypto_key_version: gapic_v1.method.wrap_method(
-                self.update_crypto_key_version,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.update_crypto_key_primary_version: gapic_v1.method.wrap_method(
-                self.update_crypto_key_primary_version,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.destroy_crypto_key_version: gapic_v1.method.wrap_method(
-                self.destroy_crypto_key_version,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.restore_crypto_key_version: gapic_v1.method.wrap_method(
-                self.restore_crypto_key_version,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.encrypt: gapic_v1.method.wrap_method(
-                self.encrypt,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.decrypt: gapic_v1.method.wrap_method(
-                self.decrypt,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.raw_encrypt: gapic_v1.method.wrap_method(
-                self.raw_encrypt,
-                default_timeout=None,
-                client_info=client_info,
-            ),
-            self.raw_decrypt: gapic_v1.method.wrap_method(
-                self.raw_decrypt,
-                default_timeout=None,
-                client_info=client_info,
-            ),
-            self.asymmetric_sign: gapic_v1.method.wrap_method(
-                self.asymmetric_sign,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.asymmetric_decrypt: gapic_v1.method.wrap_method(
-                self.asymmetric_decrypt,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.mac_sign: gapic_v1.method.wrap_method(
-                self.mac_sign,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.mac_verify: gapic_v1.method.wrap_method(
-                self.mac_verify,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-            self.generate_random_bytes: gapic_v1.method.wrap_method(
-                self.generate_random_bytes,
-                default_retry=retries.Retry(
-                    initial=0.1,
-                    maximum=60.0,
-                    multiplier=1.3,
-                    predicate=retries.if_exception_type(
-                        core_exceptions.DeadlineExceeded,
-                        core_exceptions.ServiceUnavailable,
-                    ),
-                    deadline=60.0,
-                ),
-                default_timeout=60.0,
-                client_info=client_info,
-            ),
-        }
-
-    def close(self):
-        """Closes resources associated with the transport.
-
-        .. warning::
-             Only call this method if the transport is NOT shared
-             with other clients - this may cause errors in other clients!
-        """
-        raise NotImplementedError()
-
-    @property
-    def list_key_rings(
-        self,
-    ) -> Callable[
-        [service.ListKeyRingsRequest],
-        Union[service.ListKeyRingsResponse, Awaitable[service.ListKeyRingsResponse]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def list_crypto_keys(
-        self,
-    ) -> Callable[
-        [service.ListCryptoKeysRequest],
-        Union[
-            service.ListCryptoKeysResponse, Awaitable[service.ListCryptoKeysResponse]
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def list_crypto_key_versions(
-        self,
-    ) -> Callable[
-        [service.ListCryptoKeyVersionsRequest],
-        Union[
-            service.ListCryptoKeyVersionsResponse,
-            Awaitable[service.ListCryptoKeyVersionsResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def list_import_jobs(
-        self,
-    ) -> Callable[
-        [service.ListImportJobsRequest],
-        Union[
-            service.ListImportJobsResponse, Awaitable[service.ListImportJobsResponse]
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_key_ring(
-        self,
-    ) -> Callable[
-        [service.GetKeyRingRequest],
-        Union[resources.KeyRing, Awaitable[resources.KeyRing]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_crypto_key(
-        self,
-    ) -> Callable[
-        [service.GetCryptoKeyRequest],
-        Union[resources.CryptoKey, Awaitable[resources.CryptoKey]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.GetCryptoKeyVersionRequest],
-        Union[resources.CryptoKeyVersion, Awaitable[resources.CryptoKeyVersion]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_public_key(
-        self,
-    ) -> Callable[
-        [service.GetPublicKeyRequest],
-        Union[resources.PublicKey, Awaitable[resources.PublicKey]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_import_job(
-        self,
-    ) -> Callable[
-        [service.GetImportJobRequest],
-        Union[resources.ImportJob, Awaitable[resources.ImportJob]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def create_key_ring(
-        self,
-    ) -> Callable[
-        [service.CreateKeyRingRequest],
-        Union[resources.KeyRing, Awaitable[resources.KeyRing]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def create_crypto_key(
-        self,
-    ) -> Callable[
-        [service.CreateCryptoKeyRequest],
-        Union[resources.CryptoKey, Awaitable[resources.CryptoKey]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def create_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.CreateCryptoKeyVersionRequest],
-        Union[resources.CryptoKeyVersion, Awaitable[resources.CryptoKeyVersion]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def import_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.ImportCryptoKeyVersionRequest],
-        Union[resources.CryptoKeyVersion, Awaitable[resources.CryptoKeyVersion]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def create_import_job(
-        self,
-    ) -> Callable[
-        [service.CreateImportJobRequest],
-        Union[resources.ImportJob, Awaitable[resources.ImportJob]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def update_crypto_key(
-        self,
-    ) -> Callable[
-        [service.UpdateCryptoKeyRequest],
-        Union[resources.CryptoKey, Awaitable[resources.CryptoKey]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def update_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.UpdateCryptoKeyVersionRequest],
-        Union[resources.CryptoKeyVersion, Awaitable[resources.CryptoKeyVersion]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def update_crypto_key_primary_version(
-        self,
-    ) -> Callable[
-        [service.UpdateCryptoKeyPrimaryVersionRequest],
-        Union[resources.CryptoKey, Awaitable[resources.CryptoKey]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def destroy_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.DestroyCryptoKeyVersionRequest],
-        Union[resources.CryptoKeyVersion, Awaitable[resources.CryptoKeyVersion]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def restore_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.RestoreCryptoKeyVersionRequest],
-        Union[resources.CryptoKeyVersion, Awaitable[resources.CryptoKeyVersion]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def encrypt(
-        self,
-    ) -> Callable[
-        [service.EncryptRequest],
-        Union[service.EncryptResponse, Awaitable[service.EncryptResponse]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def decrypt(
-        self,
-    ) -> Callable[
-        [service.DecryptRequest],
-        Union[service.DecryptResponse, Awaitable[service.DecryptResponse]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def raw_encrypt(
-        self,
-    ) -> Callable[
-        [service.RawEncryptRequest],
-        Union[service.RawEncryptResponse, Awaitable[service.RawEncryptResponse]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def raw_decrypt(
-        self,
-    ) -> Callable[
-        [service.RawDecryptRequest],
-        Union[service.RawDecryptResponse, Awaitable[service.RawDecryptResponse]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def asymmetric_sign(
-        self,
-    ) -> Callable[
-        [service.AsymmetricSignRequest],
-        Union[
-            service.AsymmetricSignResponse, Awaitable[service.AsymmetricSignResponse]
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def asymmetric_decrypt(
-        self,
-    ) -> Callable[
-        [service.AsymmetricDecryptRequest],
-        Union[
-            service.AsymmetricDecryptResponse,
-            Awaitable[service.AsymmetricDecryptResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def mac_sign(
-        self,
-    ) -> Callable[
-        [service.MacSignRequest],
-        Union[service.MacSignResponse, Awaitable[service.MacSignResponse]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def mac_verify(
-        self,
-    ) -> Callable[
-        [service.MacVerifyRequest],
-        Union[service.MacVerifyResponse, Awaitable[service.MacVerifyResponse]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def generate_random_bytes(
-        self,
-    ) -> Callable[
-        [service.GenerateRandomBytesRequest],
-        Union[
-            service.GenerateRandomBytesResponse,
-            Awaitable[service.GenerateRandomBytesResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_location(
-        self,
-    ) -> Callable[
-        [locations_pb2.GetLocationRequest],
-        Union[locations_pb2.Location, Awaitable[locations_pb2.Location]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def list_locations(
-        self,
-    ) -> Callable[
-        [locations_pb2.ListLocationsRequest],
-        Union[
-            locations_pb2.ListLocationsResponse,
-            Awaitable[locations_pb2.ListLocationsResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def set_iam_policy(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.SetIamPolicyRequest],
-        Union[policy_pb2.Policy, Awaitable[policy_pb2.Policy]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def get_iam_policy(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.GetIamPolicyRequest],
-        Union[policy_pb2.Policy, Awaitable[policy_pb2.Policy]],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def test_iam_permissions(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.TestIamPermissionsRequest],
-        Union[
-            iam_policy_pb2.TestIamPermissionsResponse,
-            Awaitable[iam_policy_pb2.TestIamPermissionsResponse],
-        ],
-    ]:
-        raise NotImplementedError()
-
-    @property
-    def kind(self) -> str:
-        raise NotImplementedError()
-
-
-__all__ = ("KeyManagementServiceTransport",)
diff --git a/google/cloud/kms_v1/services/key_management_service/transports/grpc.py b/google/cloud/kms_v1/services/key_management_service/transports/grpc.py
deleted file mode 100644
index 604de302..00000000
--- a/google/cloud/kms_v1/services/key_management_service/transports/grpc.py
+++ /dev/null
@@ -1,1226 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from typing import Callable, Dict, Optional, Sequence, Tuple, Union
-import warnings
-
-from google.api_core import gapic_v1, grpc_helpers
-import google.auth  # type: ignore
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-import grpc  # type: ignore
-
-from google.cloud.kms_v1.types import resources, service
-
-from .base import DEFAULT_CLIENT_INFO, KeyManagementServiceTransport
-
-
-class KeyManagementServiceGrpcTransport(KeyManagementServiceTransport):
-    """gRPC backend transport for KeyManagementService.
-
-    Google Cloud Key Management Service
-
-    Manages cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [KeyRing][google.cloud.kms.v1.KeyRing]
-    -  [CryptoKey][google.cloud.kms.v1.CryptoKey]
-    -  [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-    -  [ImportJob][google.cloud.kms.v1.ImportJob]
-
-    If you are using manual gRPC libraries, see `Using gRPC with Cloud
-    KMS <https://cloud.google.com/kms/docs/grpc>`__.
-
-    This class defines the same methods as the primary client, so the
-    primary client can load the underlying transport implementation
-    and call it.
-
-    It sends protocol buffers over the wire using gRPC (which is built on
-    top of HTTP/2); the ``grpcio`` package must be installed.
-    """
-
-    _stubs: Dict[str, Callable]
-
-    def __init__(
-        self,
-        *,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        channel: Optional[grpc.Channel] = None,
-        api_mtls_endpoint: Optional[str] = None,
-        client_cert_source: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        ssl_channel_credentials: Optional[grpc.ChannelCredentials] = None,
-        client_cert_source_for_mtls: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        api_audience: Optional[str] = None,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-                This argument is ignored if ``channel`` is provided.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional(Sequence[str])): A list of scopes. This argument is
-                ignored if ``channel`` is provided.
-            channel (Optional[grpc.Channel]): A ``Channel`` instance through
-                which to make calls.
-            api_mtls_endpoint (Optional[str]): Deprecated. The mutual TLS endpoint.
-                If provided, it overrides the ``host`` argument and tries to create
-                a mutual TLS channel with client SSL credentials from
-                ``client_cert_source`` or application default SSL credentials.
-            client_cert_source (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                Deprecated. A callback to provide client SSL certificate bytes and
-                private key bytes, both in PEM format. It is ignored if
-                ``api_mtls_endpoint`` is None.
-            ssl_channel_credentials (grpc.ChannelCredentials): SSL credentials
-                for the grpc channel. It is ignored if ``channel`` is provided.
-            client_cert_source_for_mtls (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                A callback to provide client certificate bytes and private key bytes,
-                both in PEM format. It is used to configure a mutual TLS channel. It is
-                ignored if ``channel`` or ``ssl_channel_credentials`` is provided.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-
-        Raises:
-          google.auth.exceptions.MutualTLSChannelError: If mutual TLS transport
-              creation failed for any reason.
-          google.api_core.exceptions.DuplicateCredentialArgs: If both ``credentials``
-              and ``credentials_file`` are passed.
-        """
-        self._grpc_channel = None
-        self._ssl_channel_credentials = ssl_channel_credentials
-        self._stubs: Dict[str, Callable] = {}
-
-        if api_mtls_endpoint:
-            warnings.warn("api_mtls_endpoint is deprecated", DeprecationWarning)
-        if client_cert_source:
-            warnings.warn("client_cert_source is deprecated", DeprecationWarning)
-
-        if channel:
-            # Ignore credentials if a channel was passed.
-            credentials = False
-            # If a channel was explicitly provided, set it.
-            self._grpc_channel = channel
-            self._ssl_channel_credentials = None
-
-        else:
-            if api_mtls_endpoint:
-                host = api_mtls_endpoint
-
-                # Create SSL credentials with client_cert_source or application
-                # default SSL credentials.
-                if client_cert_source:
-                    cert, key = client_cert_source()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-                else:
-                    self._ssl_channel_credentials = SslCredentials().ssl_credentials
-
-            else:
-                if client_cert_source_for_mtls and not ssl_channel_credentials:
-                    cert, key = client_cert_source_for_mtls()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-
-        # The base transport sets the host, credentials and scopes
-        super().__init__(
-            host=host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            scopes=scopes,
-            quota_project_id=quota_project_id,
-            client_info=client_info,
-            always_use_jwt_access=always_use_jwt_access,
-            api_audience=api_audience,
-        )
-
-        if not self._grpc_channel:
-            self._grpc_channel = type(self).create_channel(
-                self._host,
-                # use the credentials which are saved
-                credentials=self._credentials,
-                # Set ``credentials_file`` to ``None`` here as
-                # the credentials that we saved earlier should be used.
-                credentials_file=None,
-                scopes=self._scopes,
-                ssl_credentials=self._ssl_channel_credentials,
-                quota_project_id=quota_project_id,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-
-        # Wrap messages. This must be done after self._grpc_channel exists
-        self._prep_wrapped_messages(client_info)
-
-    @classmethod
-    def create_channel(
-        cls,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        quota_project_id: Optional[str] = None,
-        **kwargs,
-    ) -> grpc.Channel:
-        """Create and return a gRPC channel object.
-        Args:
-            host (Optional[str]): The host for the channel to use.
-            credentials (Optional[~.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify this application to the service. If
-                none are specified, the client will attempt to ascertain
-                the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
-            scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
-                service. These are only used when credentials are not specified and
-                are passed to :func:`google.auth.default`.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            kwargs (Optional[dict]): Keyword arguments, which are passed to the
-                channel creation.
-        Returns:
-            grpc.Channel: A gRPC channel object.
-
-        Raises:
-            google.api_core.exceptions.DuplicateCredentialArgs: If both ``credentials``
-              and ``credentials_file`` are passed.
-        """
-
-        return grpc_helpers.create_channel(
-            host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            quota_project_id=quota_project_id,
-            default_scopes=cls.AUTH_SCOPES,
-            scopes=scopes,
-            default_host=cls.DEFAULT_HOST,
-            **kwargs,
-        )
-
-    @property
-    def grpc_channel(self) -> grpc.Channel:
-        """Return the channel designed to connect to this service."""
-        return self._grpc_channel
-
-    @property
-    def list_key_rings(
-        self,
-    ) -> Callable[[service.ListKeyRingsRequest], service.ListKeyRingsResponse]:
-        r"""Return a callable for the list key rings method over gRPC.
-
-        Lists [KeyRings][google.cloud.kms.v1.KeyRing].
-
-        Returns:
-            Callable[[~.ListKeyRingsRequest],
-                    ~.ListKeyRingsResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_key_rings" not in self._stubs:
-            self._stubs["list_key_rings"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListKeyRings",
-                request_serializer=service.ListKeyRingsRequest.serialize,
-                response_deserializer=service.ListKeyRingsResponse.deserialize,
-            )
-        return self._stubs["list_key_rings"]
-
-    @property
-    def list_crypto_keys(
-        self,
-    ) -> Callable[[service.ListCryptoKeysRequest], service.ListCryptoKeysResponse]:
-        r"""Return a callable for the list crypto keys method over gRPC.
-
-        Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        Returns:
-            Callable[[~.ListCryptoKeysRequest],
-                    ~.ListCryptoKeysResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_crypto_keys" not in self._stubs:
-            self._stubs["list_crypto_keys"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListCryptoKeys",
-                request_serializer=service.ListCryptoKeysRequest.serialize,
-                response_deserializer=service.ListCryptoKeysResponse.deserialize,
-            )
-        return self._stubs["list_crypto_keys"]
-
-    @property
-    def list_crypto_key_versions(
-        self,
-    ) -> Callable[
-        [service.ListCryptoKeyVersionsRequest], service.ListCryptoKeyVersionsResponse
-    ]:
-        r"""Return a callable for the list crypto key versions method over gRPC.
-
-        Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-
-        Returns:
-            Callable[[~.ListCryptoKeyVersionsRequest],
-                    ~.ListCryptoKeyVersionsResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_crypto_key_versions" not in self._stubs:
-            self._stubs["list_crypto_key_versions"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListCryptoKeyVersions",
-                request_serializer=service.ListCryptoKeyVersionsRequest.serialize,
-                response_deserializer=service.ListCryptoKeyVersionsResponse.deserialize,
-            )
-        return self._stubs["list_crypto_key_versions"]
-
-    @property
-    def list_import_jobs(
-        self,
-    ) -> Callable[[service.ListImportJobsRequest], service.ListImportJobsResponse]:
-        r"""Return a callable for the list import jobs method over gRPC.
-
-        Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
-
-        Returns:
-            Callable[[~.ListImportJobsRequest],
-                    ~.ListImportJobsResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_import_jobs" not in self._stubs:
-            self._stubs["list_import_jobs"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListImportJobs",
-                request_serializer=service.ListImportJobsRequest.serialize,
-                response_deserializer=service.ListImportJobsResponse.deserialize,
-            )
-        return self._stubs["list_import_jobs"]
-
-    @property
-    def get_key_ring(self) -> Callable[[service.GetKeyRingRequest], resources.KeyRing]:
-        r"""Return a callable for the get key ring method over gRPC.
-
-        Returns metadata for a given
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        Returns:
-            Callable[[~.GetKeyRingRequest],
-                    ~.KeyRing]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_key_ring" not in self._stubs:
-            self._stubs["get_key_ring"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetKeyRing",
-                request_serializer=service.GetKeyRingRequest.serialize,
-                response_deserializer=resources.KeyRing.deserialize,
-            )
-        return self._stubs["get_key_ring"]
-
-    @property
-    def get_crypto_key(
-        self,
-    ) -> Callable[[service.GetCryptoKeyRequest], resources.CryptoKey]:
-        r"""Return a callable for the get crypto key method over gRPC.
-
-        Returns metadata for a given
-        [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
-        [primary][google.cloud.kms.v1.CryptoKey.primary]
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        Returns:
-            Callable[[~.GetCryptoKeyRequest],
-                    ~.CryptoKey]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_crypto_key" not in self._stubs:
-            self._stubs["get_crypto_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetCryptoKey",
-                request_serializer=service.GetCryptoKeyRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["get_crypto_key"]
-
-    @property
-    def get_crypto_key_version(
-        self,
-    ) -> Callable[[service.GetCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        r"""Return a callable for the get crypto key version method over gRPC.
-
-        Returns metadata for a given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        Returns:
-            Callable[[~.GetCryptoKeyVersionRequest],
-                    ~.CryptoKeyVersion]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_crypto_key_version" not in self._stubs:
-            self._stubs["get_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetCryptoKeyVersion",
-                request_serializer=service.GetCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["get_crypto_key_version"]
-
-    @property
-    def get_public_key(
-        self,
-    ) -> Callable[[service.GetPublicKeyRequest], resources.PublicKey]:
-        r"""Return a callable for the get public key method over gRPC.
-
-        Returns the public key for the given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN]
-        or
-        [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].
-
-        Returns:
-            Callable[[~.GetPublicKeyRequest],
-                    ~.PublicKey]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_public_key" not in self._stubs:
-            self._stubs["get_public_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetPublicKey",
-                request_serializer=service.GetPublicKeyRequest.serialize,
-                response_deserializer=resources.PublicKey.deserialize,
-            )
-        return self._stubs["get_public_key"]
-
-    @property
-    def get_import_job(
-        self,
-    ) -> Callable[[service.GetImportJobRequest], resources.ImportJob]:
-        r"""Return a callable for the get import job method over gRPC.
-
-        Returns metadata for a given
-        [ImportJob][google.cloud.kms.v1.ImportJob].
-
-        Returns:
-            Callable[[~.GetImportJobRequest],
-                    ~.ImportJob]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_import_job" not in self._stubs:
-            self._stubs["get_import_job"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetImportJob",
-                request_serializer=service.GetImportJobRequest.serialize,
-                response_deserializer=resources.ImportJob.deserialize,
-            )
-        return self._stubs["get_import_job"]
-
-    @property
-    def create_key_ring(
-        self,
-    ) -> Callable[[service.CreateKeyRingRequest], resources.KeyRing]:
-        r"""Return a callable for the create key ring method over gRPC.
-
-        Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given
-        Project and Location.
-
-        Returns:
-            Callable[[~.CreateKeyRingRequest],
-                    ~.KeyRing]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_key_ring" not in self._stubs:
-            self._stubs["create_key_ring"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateKeyRing",
-                request_serializer=service.CreateKeyRingRequest.serialize,
-                response_deserializer=resources.KeyRing.deserialize,
-            )
-        return self._stubs["create_key_ring"]
-
-    @property
-    def create_crypto_key(
-        self,
-    ) -> Callable[[service.CreateCryptoKeyRequest], resources.CryptoKey]:
-        r"""Return a callable for the create crypto key method over gRPC.
-
-        Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and
-        [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm]
-        are required.
-
-        Returns:
-            Callable[[~.CreateCryptoKeyRequest],
-                    ~.CryptoKey]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_crypto_key" not in self._stubs:
-            self._stubs["create_crypto_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateCryptoKey",
-                request_serializer=service.CreateCryptoKeyRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["create_crypto_key"]
-
-    @property
-    def create_crypto_key_version(
-        self,
-    ) -> Callable[[service.CreateCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        r"""Return a callable for the create crypto key version method over gRPC.
-
-        Create a new
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        The server will assign the next sequential id. If unset,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
-
-        Returns:
-            Callable[[~.CreateCryptoKeyVersionRequest],
-                    ~.CryptoKeyVersion]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_crypto_key_version" not in self._stubs:
-            self._stubs["create_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateCryptoKeyVersion",
-                request_serializer=service.CreateCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["create_crypto_key_version"]
-
-    @property
-    def import_crypto_key_version(
-        self,
-    ) -> Callable[[service.ImportCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        r"""Return a callable for the import crypto key version method over gRPC.
-
-        Import wrapped key material into a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        All requests must specify a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey]. If a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] is
-        additionally specified in the request, key material will be
-        reimported into that version. Otherwise, a new version will be
-        created, and will be assigned the next sequential id within the
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        Returns:
-            Callable[[~.ImportCryptoKeyVersionRequest],
-                    ~.CryptoKeyVersion]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "import_crypto_key_version" not in self._stubs:
-            self._stubs["import_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ImportCryptoKeyVersion",
-                request_serializer=service.ImportCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["import_crypto_key_version"]
-
-    @property
-    def create_import_job(
-        self,
-    ) -> Callable[[service.CreateImportJobRequest], resources.ImportJob]:
-        r"""Return a callable for the create import job method over gRPC.
-
-        Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method]
-        is required.
-
-        Returns:
-            Callable[[~.CreateImportJobRequest],
-                    ~.ImportJob]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_import_job" not in self._stubs:
-            self._stubs["create_import_job"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateImportJob",
-                request_serializer=service.CreateImportJobRequest.serialize,
-                response_deserializer=resources.ImportJob.deserialize,
-            )
-        return self._stubs["create_import_job"]
-
-    @property
-    def update_crypto_key(
-        self,
-    ) -> Callable[[service.UpdateCryptoKeyRequest], resources.CryptoKey]:
-        r"""Return a callable for the update crypto key method over gRPC.
-
-        Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        Returns:
-            Callable[[~.UpdateCryptoKeyRequest],
-                    ~.CryptoKey]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_crypto_key" not in self._stubs:
-            self._stubs["update_crypto_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/UpdateCryptoKey",
-                request_serializer=service.UpdateCryptoKeyRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["update_crypto_key"]
-
-    @property
-    def update_crypto_key_version(
-        self,
-    ) -> Callable[[service.UpdateCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        r"""Return a callable for the update crypto key version method over gRPC.
-
-        Update a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-        metadata.
-
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] may be
-        changed between
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-        and
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED]
-        using this method. See
-        [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion]
-        and
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        to move between other states.
-
-        Returns:
-            Callable[[~.UpdateCryptoKeyVersionRequest],
-                    ~.CryptoKeyVersion]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_crypto_key_version" not in self._stubs:
-            self._stubs["update_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyVersion",
-                request_serializer=service.UpdateCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["update_crypto_key_version"]
-
-    @property
-    def update_crypto_key_primary_version(
-        self,
-    ) -> Callable[[service.UpdateCryptoKeyPrimaryVersionRequest], resources.CryptoKey]:
-        r"""Return a callable for the update crypto key primary
-        version method over gRPC.
-
-        Update the version of a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-        Returns an error if called on a key whose purpose is not
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.UpdateCryptoKeyPrimaryVersionRequest],
-                    ~.CryptoKey]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_crypto_key_primary_version" not in self._stubs:
-            self._stubs[
-                "update_crypto_key_primary_version"
-            ] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyPrimaryVersion",
-                request_serializer=service.UpdateCryptoKeyPrimaryVersionRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["update_crypto_key_primary_version"]
-
-    @property
-    def destroy_crypto_key_version(
-        self,
-    ) -> Callable[[service.DestroyCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        r"""Return a callable for the destroy crypto key version method over gRPC.
-
-        Schedule a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for
-        destruction.
-
-        Upon calling this method,
-        [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state]
-        will be set to
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be set to the time
-        [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration]
-        in the future. At that time, the
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will
-        automatically change to
-        [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED],
-        and the key material will be irrevocably destroyed.
-
-        Before the
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        is reached,
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        may be called to reverse the process.
-
-        Returns:
-            Callable[[~.DestroyCryptoKeyVersionRequest],
-                    ~.CryptoKeyVersion]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "destroy_crypto_key_version" not in self._stubs:
-            self._stubs["destroy_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/DestroyCryptoKeyVersion",
-                request_serializer=service.DestroyCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["destroy_crypto_key_version"]
-
-    @property
-    def restore_crypto_key_version(
-        self,
-    ) -> Callable[[service.RestoreCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        r"""Return a callable for the restore crypto key version method over gRPC.
-
-        Restore a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
-        state.
-
-        Upon restoration of the CryptoKeyVersion,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be cleared.
-
-        Returns:
-            Callable[[~.RestoreCryptoKeyVersionRequest],
-                    ~.CryptoKeyVersion]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "restore_crypto_key_version" not in self._stubs:
-            self._stubs["restore_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/RestoreCryptoKeyVersion",
-                request_serializer=service.RestoreCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["restore_crypto_key_version"]
-
-    @property
-    def encrypt(self) -> Callable[[service.EncryptRequest], service.EncryptResponse]:
-        r"""Return a callable for the encrypt method over gRPC.
-
-        Encrypts data, so that it can only be recovered by a call to
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.EncryptRequest],
-                    ~.EncryptResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "encrypt" not in self._stubs:
-            self._stubs["encrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/Encrypt",
-                request_serializer=service.EncryptRequest.serialize,
-                response_deserializer=service.EncryptResponse.deserialize,
-            )
-        return self._stubs["encrypt"]
-
-    @property
-    def decrypt(self) -> Callable[[service.DecryptRequest], service.DecryptResponse]:
-        r"""Return a callable for the decrypt method over gRPC.
-
-        Decrypts data that was protected by
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.DecryptRequest],
-                    ~.DecryptResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "decrypt" not in self._stubs:
-            self._stubs["decrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/Decrypt",
-                request_serializer=service.DecryptRequest.serialize,
-                response_deserializer=service.DecryptResponse.deserialize,
-            )
-        return self._stubs["decrypt"]
-
-    @property
-    def raw_encrypt(
-        self,
-    ) -> Callable[[service.RawEncryptRequest], service.RawEncryptResponse]:
-        r"""Return a callable for the raw encrypt method over gRPC.
-
-        Encrypts data using portable cryptographic primitives. Most
-        users should choose
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt] and
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]
-        rather than their raw counterparts. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.RawEncryptRequest],
-                    ~.RawEncryptResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "raw_encrypt" not in self._stubs:
-            self._stubs["raw_encrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/RawEncrypt",
-                request_serializer=service.RawEncryptRequest.serialize,
-                response_deserializer=service.RawEncryptResponse.deserialize,
-            )
-        return self._stubs["raw_encrypt"]
-
-    @property
-    def raw_decrypt(
-        self,
-    ) -> Callable[[service.RawDecryptRequest], service.RawDecryptResponse]:
-        r"""Return a callable for the raw decrypt method over gRPC.
-
-        Decrypts data that was originally encrypted using a raw
-        cryptographic mechanism. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.RawDecryptRequest],
-                    ~.RawDecryptResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "raw_decrypt" not in self._stubs:
-            self._stubs["raw_decrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/RawDecrypt",
-                request_serializer=service.RawDecryptRequest.serialize,
-                response_deserializer=service.RawDecryptResponse.deserialize,
-            )
-        return self._stubs["raw_decrypt"]
-
-    @property
-    def asymmetric_sign(
-        self,
-    ) -> Callable[[service.AsymmetricSignRequest], service.AsymmetricSignResponse]:
-        r"""Return a callable for the asymmetric sign method over gRPC.
-
-        Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_SIGN, producing a signature that can be verified with
-        the public key retrieved from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-        Returns:
-            Callable[[~.AsymmetricSignRequest],
-                    ~.AsymmetricSignResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "asymmetric_sign" not in self._stubs:
-            self._stubs["asymmetric_sign"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/AsymmetricSign",
-                request_serializer=service.AsymmetricSignRequest.serialize,
-                response_deserializer=service.AsymmetricSignResponse.deserialize,
-            )
-        return self._stubs["asymmetric_sign"]
-
-    @property
-    def asymmetric_decrypt(
-        self,
-    ) -> Callable[
-        [service.AsymmetricDecryptRequest], service.AsymmetricDecryptResponse
-    ]:
-        r"""Return a callable for the asymmetric decrypt method over gRPC.
-
-        Decrypts data that was encrypted with a public key retrieved
-        from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey]
-        corresponding to a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_DECRYPT.
-
-        Returns:
-            Callable[[~.AsymmetricDecryptRequest],
-                    ~.AsymmetricDecryptResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "asymmetric_decrypt" not in self._stubs:
-            self._stubs["asymmetric_decrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/AsymmetricDecrypt",
-                request_serializer=service.AsymmetricDecryptRequest.serialize,
-                response_deserializer=service.AsymmetricDecryptResponse.deserialize,
-            )
-        return self._stubs["asymmetric_decrypt"]
-
-    @property
-    def mac_sign(self) -> Callable[[service.MacSignRequest], service.MacSignResponse]:
-        r"""Return a callable for the mac sign method over gRPC.
-
-        Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        producing a tag that can be verified by another source with the
-        same key.
-
-        Returns:
-            Callable[[~.MacSignRequest],
-                    ~.MacSignResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "mac_sign" not in self._stubs:
-            self._stubs["mac_sign"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/MacSign",
-                request_serializer=service.MacSignRequest.serialize,
-                response_deserializer=service.MacSignResponse.deserialize,
-            )
-        return self._stubs["mac_sign"]
-
-    @property
-    def mac_verify(
-        self,
-    ) -> Callable[[service.MacVerifyRequest], service.MacVerifyResponse]:
-        r"""Return a callable for the mac verify method over gRPC.
-
-        Verifies MAC tag using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        and returns a response that indicates whether or not the
-        verification was successful.
-
-        Returns:
-            Callable[[~.MacVerifyRequest],
-                    ~.MacVerifyResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "mac_verify" not in self._stubs:
-            self._stubs["mac_verify"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/MacVerify",
-                request_serializer=service.MacVerifyRequest.serialize,
-                response_deserializer=service.MacVerifyResponse.deserialize,
-            )
-        return self._stubs["mac_verify"]
-
-    @property
-    def generate_random_bytes(
-        self,
-    ) -> Callable[
-        [service.GenerateRandomBytesRequest], service.GenerateRandomBytesResponse
-    ]:
-        r"""Return a callable for the generate random bytes method over gRPC.
-
-        Generate random bytes using the Cloud KMS randomness
-        source in the provided location.
-
-        Returns:
-            Callable[[~.GenerateRandomBytesRequest],
-                    ~.GenerateRandomBytesResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "generate_random_bytes" not in self._stubs:
-            self._stubs["generate_random_bytes"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GenerateRandomBytes",
-                request_serializer=service.GenerateRandomBytesRequest.serialize,
-                response_deserializer=service.GenerateRandomBytesResponse.deserialize,
-            )
-        return self._stubs["generate_random_bytes"]
-
-    @property
-    def set_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.SetIamPolicyRequest], policy_pb2.Policy]:
-        r"""Return a callable for the set iam policy method over gRPC.
-        Sets the IAM access control policy on the specified
-        function. Replaces any existing policy.
-        Returns:
-            Callable[[~.SetIamPolicyRequest],
-                    ~.Policy]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "set_iam_policy" not in self._stubs:
-            self._stubs["set_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/SetIamPolicy",
-                request_serializer=iam_policy_pb2.SetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["set_iam_policy"]
-
-    @property
-    def get_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.GetIamPolicyRequest], policy_pb2.Policy]:
-        r"""Return a callable for the get iam policy method over gRPC.
-        Gets the IAM access control policy for a function.
-        Returns an empty policy if the function exists and does
-        not have a policy set.
-        Returns:
-            Callable[[~.GetIamPolicyRequest],
-                    ~.Policy]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_iam_policy" not in self._stubs:
-            self._stubs["get_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/GetIamPolicy",
-                request_serializer=iam_policy_pb2.GetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["get_iam_policy"]
-
-    @property
-    def test_iam_permissions(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.TestIamPermissionsRequest],
-        iam_policy_pb2.TestIamPermissionsResponse,
-    ]:
-        r"""Return a callable for the test iam permissions method over gRPC.
-        Tests the specified permissions against the IAM access control
-        policy for a function. If the function does not exist, this will
-        return an empty set of permissions, not a NOT_FOUND error.
-        Returns:
-            Callable[[~.TestIamPermissionsRequest],
-                    ~.TestIamPermissionsResponse]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "test_iam_permissions" not in self._stubs:
-            self._stubs["test_iam_permissions"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/TestIamPermissions",
-                request_serializer=iam_policy_pb2.TestIamPermissionsRequest.SerializeToString,
-                response_deserializer=iam_policy_pb2.TestIamPermissionsResponse.FromString,
-            )
-        return self._stubs["test_iam_permissions"]
-
-    def close(self):
-        self.grpc_channel.close()
-
-    @property
-    def list_locations(
-        self,
-    ) -> Callable[
-        [locations_pb2.ListLocationsRequest], locations_pb2.ListLocationsResponse
-    ]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_locations" not in self._stubs:
-            self._stubs["list_locations"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/ListLocations",
-                request_serializer=locations_pb2.ListLocationsRequest.SerializeToString,
-                response_deserializer=locations_pb2.ListLocationsResponse.FromString,
-            )
-        return self._stubs["list_locations"]
-
-    @property
-    def get_location(
-        self,
-    ) -> Callable[[locations_pb2.GetLocationRequest], locations_pb2.Location]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_location" not in self._stubs:
-            self._stubs["get_location"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/GetLocation",
-                request_serializer=locations_pb2.GetLocationRequest.SerializeToString,
-                response_deserializer=locations_pb2.Location.FromString,
-            )
-        return self._stubs["get_location"]
-
-    @property
-    def kind(self) -> str:
-        return "grpc"
-
-
-__all__ = ("KeyManagementServiceGrpcTransport",)
diff --git a/google/cloud/kms_v1/services/key_management_service/transports/grpc_asyncio.py b/google/cloud/kms_v1/services/key_management_service/transports/grpc_asyncio.py
deleted file mode 100644
index d3399556..00000000
--- a/google/cloud/kms_v1/services/key_management_service/transports/grpc_asyncio.py
+++ /dev/null
@@ -1,1257 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from typing import Awaitable, Callable, Dict, Optional, Sequence, Tuple, Union
-import warnings
-
-from google.api_core import gapic_v1, grpc_helpers_async
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-import grpc  # type: ignore
-from grpc.experimental import aio  # type: ignore
-
-from google.cloud.kms_v1.types import resources, service
-
-from .base import DEFAULT_CLIENT_INFO, KeyManagementServiceTransport
-from .grpc import KeyManagementServiceGrpcTransport
-
-
-class KeyManagementServiceGrpcAsyncIOTransport(KeyManagementServiceTransport):
-    """gRPC AsyncIO backend transport for KeyManagementService.
-
-    Google Cloud Key Management Service
-
-    Manages cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [KeyRing][google.cloud.kms.v1.KeyRing]
-    -  [CryptoKey][google.cloud.kms.v1.CryptoKey]
-    -  [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-    -  [ImportJob][google.cloud.kms.v1.ImportJob]
-
-    If you are using manual gRPC libraries, see `Using gRPC with Cloud
-    KMS <https://cloud.google.com/kms/docs/grpc>`__.
-
-    This class defines the same methods as the primary client, so the
-    primary client can load the underlying transport implementation
-    and call it.
-
-    It sends protocol buffers over the wire using gRPC (which is built on
-    top of HTTP/2); the ``grpcio`` package must be installed.
-    """
-
-    _grpc_channel: aio.Channel
-    _stubs: Dict[str, Callable] = {}
-
-    @classmethod
-    def create_channel(
-        cls,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        quota_project_id: Optional[str] = None,
-        **kwargs,
-    ) -> aio.Channel:
-        """Create and return a gRPC AsyncIO channel object.
-        Args:
-            host (Optional[str]): The host for the channel to use.
-            credentials (Optional[~.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify this application to the service. If
-                none are specified, the client will attempt to ascertain
-                the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
-                service. These are only used when credentials are not specified and
-                are passed to :func:`google.auth.default`.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            kwargs (Optional[dict]): Keyword arguments, which are passed to the
-                channel creation.
-        Returns:
-            aio.Channel: A gRPC AsyncIO channel object.
-        """
-
-        return grpc_helpers_async.create_channel(
-            host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            quota_project_id=quota_project_id,
-            default_scopes=cls.AUTH_SCOPES,
-            scopes=scopes,
-            default_host=cls.DEFAULT_HOST,
-            **kwargs,
-        )
-
-    def __init__(
-        self,
-        *,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        channel: Optional[aio.Channel] = None,
-        api_mtls_endpoint: Optional[str] = None,
-        client_cert_source: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        ssl_channel_credentials: Optional[grpc.ChannelCredentials] = None,
-        client_cert_source_for_mtls: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        api_audience: Optional[str] = None,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-                This argument is ignored if ``channel`` is provided.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
-                service. These are only used when credentials are not specified and
-                are passed to :func:`google.auth.default`.
-            channel (Optional[aio.Channel]): A ``Channel`` instance through
-                which to make calls.
-            api_mtls_endpoint (Optional[str]): Deprecated. The mutual TLS endpoint.
-                If provided, it overrides the ``host`` argument and tries to create
-                a mutual TLS channel with client SSL credentials from
-                ``client_cert_source`` or application default SSL credentials.
-            client_cert_source (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                Deprecated. A callback to provide client SSL certificate bytes and
-                private key bytes, both in PEM format. It is ignored if
-                ``api_mtls_endpoint`` is None.
-            ssl_channel_credentials (grpc.ChannelCredentials): SSL credentials
-                for the grpc channel. It is ignored if ``channel`` is provided.
-            client_cert_source_for_mtls (Optional[Callable[[], Tuple[bytes, bytes]]]):
-                A callback to provide client certificate bytes and private key bytes,
-                both in PEM format. It is used to configure a mutual TLS channel. It is
-                ignored if ``channel`` or ``ssl_channel_credentials`` is provided.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you're developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-
-        Raises:
-            google.auth.exceptions.MutualTlsChannelError: If mutual TLS transport
-              creation failed for any reason.
-          google.api_core.exceptions.DuplicateCredentialArgs: If both ``credentials``
-              and ``credentials_file`` are passed.
-        """
-        self._grpc_channel = None
-        self._ssl_channel_credentials = ssl_channel_credentials
-        self._stubs: Dict[str, Callable] = {}
-
-        if api_mtls_endpoint:
-            warnings.warn("api_mtls_endpoint is deprecated", DeprecationWarning)
-        if client_cert_source:
-            warnings.warn("client_cert_source is deprecated", DeprecationWarning)
-
-        if channel:
-            # Ignore credentials if a channel was passed.
-            credentials = False
-            # If a channel was explicitly provided, set it.
-            self._grpc_channel = channel
-            self._ssl_channel_credentials = None
-        else:
-            if api_mtls_endpoint:
-                host = api_mtls_endpoint
-
-                # Create SSL credentials with client_cert_source or application
-                # default SSL credentials.
-                if client_cert_source:
-                    cert, key = client_cert_source()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-                else:
-                    self._ssl_channel_credentials = SslCredentials().ssl_credentials
-
-            else:
-                if client_cert_source_for_mtls and not ssl_channel_credentials:
-                    cert, key = client_cert_source_for_mtls()
-                    self._ssl_channel_credentials = grpc.ssl_channel_credentials(
-                        certificate_chain=cert, private_key=key
-                    )
-
-        # The base transport sets the host, credentials and scopes
-        super().__init__(
-            host=host,
-            credentials=credentials,
-            credentials_file=credentials_file,
-            scopes=scopes,
-            quota_project_id=quota_project_id,
-            client_info=client_info,
-            always_use_jwt_access=always_use_jwt_access,
-            api_audience=api_audience,
-        )
-
-        if not self._grpc_channel:
-            self._grpc_channel = type(self).create_channel(
-                self._host,
-                # use the credentials which are saved
-                credentials=self._credentials,
-                # Set ``credentials_file`` to ``None`` here as
-                # the credentials that we saved earlier should be used.
-                credentials_file=None,
-                scopes=self._scopes,
-                ssl_credentials=self._ssl_channel_credentials,
-                quota_project_id=quota_project_id,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-
-        # Wrap messages. This must be done after self._grpc_channel exists
-        self._prep_wrapped_messages(client_info)
-
-    @property
-    def grpc_channel(self) -> aio.Channel:
-        """Create the channel designed to connect to this service.
-
-        This property caches on the instance; repeated calls return
-        the same channel.
-        """
-        # Return the channel from cache.
-        return self._grpc_channel
-
-    @property
-    def list_key_rings(
-        self,
-    ) -> Callable[
-        [service.ListKeyRingsRequest], Awaitable[service.ListKeyRingsResponse]
-    ]:
-        r"""Return a callable for the list key rings method over gRPC.
-
-        Lists [KeyRings][google.cloud.kms.v1.KeyRing].
-
-        Returns:
-            Callable[[~.ListKeyRingsRequest],
-                    Awaitable[~.ListKeyRingsResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_key_rings" not in self._stubs:
-            self._stubs["list_key_rings"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListKeyRings",
-                request_serializer=service.ListKeyRingsRequest.serialize,
-                response_deserializer=service.ListKeyRingsResponse.deserialize,
-            )
-        return self._stubs["list_key_rings"]
-
-    @property
-    def list_crypto_keys(
-        self,
-    ) -> Callable[
-        [service.ListCryptoKeysRequest], Awaitable[service.ListCryptoKeysResponse]
-    ]:
-        r"""Return a callable for the list crypto keys method over gRPC.
-
-        Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-        Returns:
-            Callable[[~.ListCryptoKeysRequest],
-                    Awaitable[~.ListCryptoKeysResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_crypto_keys" not in self._stubs:
-            self._stubs["list_crypto_keys"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListCryptoKeys",
-                request_serializer=service.ListCryptoKeysRequest.serialize,
-                response_deserializer=service.ListCryptoKeysResponse.deserialize,
-            )
-        return self._stubs["list_crypto_keys"]
-
-    @property
-    def list_crypto_key_versions(
-        self,
-    ) -> Callable[
-        [service.ListCryptoKeyVersionsRequest],
-        Awaitable[service.ListCryptoKeyVersionsResponse],
-    ]:
-        r"""Return a callable for the list crypto key versions method over gRPC.
-
-        Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-
-        Returns:
-            Callable[[~.ListCryptoKeyVersionsRequest],
-                    Awaitable[~.ListCryptoKeyVersionsResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_crypto_key_versions" not in self._stubs:
-            self._stubs["list_crypto_key_versions"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListCryptoKeyVersions",
-                request_serializer=service.ListCryptoKeyVersionsRequest.serialize,
-                response_deserializer=service.ListCryptoKeyVersionsResponse.deserialize,
-            )
-        return self._stubs["list_crypto_key_versions"]
-
-    @property
-    def list_import_jobs(
-        self,
-    ) -> Callable[
-        [service.ListImportJobsRequest], Awaitable[service.ListImportJobsResponse]
-    ]:
-        r"""Return a callable for the list import jobs method over gRPC.
-
-        Lists [ImportJobs][google.cloud.kms.v1.ImportJob].
-
-        Returns:
-            Callable[[~.ListImportJobsRequest],
-                    Awaitable[~.ListImportJobsResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_import_jobs" not in self._stubs:
-            self._stubs["list_import_jobs"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ListImportJobs",
-                request_serializer=service.ListImportJobsRequest.serialize,
-                response_deserializer=service.ListImportJobsResponse.deserialize,
-            )
-        return self._stubs["list_import_jobs"]
-
-    @property
-    def get_key_ring(
-        self,
-    ) -> Callable[[service.GetKeyRingRequest], Awaitable[resources.KeyRing]]:
-        r"""Return a callable for the get key ring method over gRPC.
-
-        Returns metadata for a given
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        Returns:
-            Callable[[~.GetKeyRingRequest],
-                    Awaitable[~.KeyRing]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_key_ring" not in self._stubs:
-            self._stubs["get_key_ring"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetKeyRing",
-                request_serializer=service.GetKeyRingRequest.serialize,
-                response_deserializer=resources.KeyRing.deserialize,
-            )
-        return self._stubs["get_key_ring"]
-
-    @property
-    def get_crypto_key(
-        self,
-    ) -> Callable[[service.GetCryptoKeyRequest], Awaitable[resources.CryptoKey]]:
-        r"""Return a callable for the get crypto key method over gRPC.
-
-        Returns metadata for a given
-        [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
-        [primary][google.cloud.kms.v1.CryptoKey.primary]
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        Returns:
-            Callable[[~.GetCryptoKeyRequest],
-                    Awaitable[~.CryptoKey]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_crypto_key" not in self._stubs:
-            self._stubs["get_crypto_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetCryptoKey",
-                request_serializer=service.GetCryptoKeyRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["get_crypto_key"]
-
-    @property
-    def get_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.GetCryptoKeyVersionRequest], Awaitable[resources.CryptoKeyVersion]
-    ]:
-        r"""Return a callable for the get crypto key version method over gRPC.
-
-        Returns metadata for a given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        Returns:
-            Callable[[~.GetCryptoKeyVersionRequest],
-                    Awaitable[~.CryptoKeyVersion]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_crypto_key_version" not in self._stubs:
-            self._stubs["get_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetCryptoKeyVersion",
-                request_serializer=service.GetCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["get_crypto_key_version"]
-
-    @property
-    def get_public_key(
-        self,
-    ) -> Callable[[service.GetPublicKeyRequest], Awaitable[resources.PublicKey]]:
-        r"""Return a callable for the get public key method over gRPC.
-
-        Returns the public key for the given
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN]
-        or
-        [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].
-
-        Returns:
-            Callable[[~.GetPublicKeyRequest],
-                    Awaitable[~.PublicKey]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_public_key" not in self._stubs:
-            self._stubs["get_public_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetPublicKey",
-                request_serializer=service.GetPublicKeyRequest.serialize,
-                response_deserializer=resources.PublicKey.deserialize,
-            )
-        return self._stubs["get_public_key"]
-
-    @property
-    def get_import_job(
-        self,
-    ) -> Callable[[service.GetImportJobRequest], Awaitable[resources.ImportJob]]:
-        r"""Return a callable for the get import job method over gRPC.
-
-        Returns metadata for a given
-        [ImportJob][google.cloud.kms.v1.ImportJob].
-
-        Returns:
-            Callable[[~.GetImportJobRequest],
-                    Awaitable[~.ImportJob]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_import_job" not in self._stubs:
-            self._stubs["get_import_job"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GetImportJob",
-                request_serializer=service.GetImportJobRequest.serialize,
-                response_deserializer=resources.ImportJob.deserialize,
-            )
-        return self._stubs["get_import_job"]
-
-    @property
-    def create_key_ring(
-        self,
-    ) -> Callable[[service.CreateKeyRingRequest], Awaitable[resources.KeyRing]]:
-        r"""Return a callable for the create key ring method over gRPC.
-
-        Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given
-        Project and Location.
-
-        Returns:
-            Callable[[~.CreateKeyRingRequest],
-                    Awaitable[~.KeyRing]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_key_ring" not in self._stubs:
-            self._stubs["create_key_ring"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateKeyRing",
-                request_serializer=service.CreateKeyRingRequest.serialize,
-                response_deserializer=resources.KeyRing.deserialize,
-            )
-        return self._stubs["create_key_ring"]
-
-    @property
-    def create_crypto_key(
-        self,
-    ) -> Callable[[service.CreateCryptoKeyRequest], Awaitable[resources.CryptoKey]]:
-        r"""Return a callable for the create crypto key method over gRPC.
-
-        Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and
-        [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm]
-        are required.
-
-        Returns:
-            Callable[[~.CreateCryptoKeyRequest],
-                    Awaitable[~.CryptoKey]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_crypto_key" not in self._stubs:
-            self._stubs["create_crypto_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateCryptoKey",
-                request_serializer=service.CreateCryptoKeyRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["create_crypto_key"]
-
-    @property
-    def create_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.CreateCryptoKeyVersionRequest], Awaitable[resources.CryptoKeyVersion]
-    ]:
-        r"""Return a callable for the create crypto key version method over gRPC.
-
-        Create a new
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        The server will assign the next sequential id. If unset,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
-
-        Returns:
-            Callable[[~.CreateCryptoKeyVersionRequest],
-                    Awaitable[~.CryptoKeyVersion]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_crypto_key_version" not in self._stubs:
-            self._stubs["create_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateCryptoKeyVersion",
-                request_serializer=service.CreateCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["create_crypto_key_version"]
-
-    @property
-    def import_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.ImportCryptoKeyVersionRequest], Awaitable[resources.CryptoKeyVersion]
-    ]:
-        r"""Return a callable for the import crypto key version method over gRPC.
-
-        Import wrapped key material into a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-
-        All requests must specify a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey]. If a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] is
-        additionally specified in the request, key material will be
-        reimported into that version. Otherwise, a new version will be
-        created, and will be assigned the next sequential id within the
-        [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        Returns:
-            Callable[[~.ImportCryptoKeyVersionRequest],
-                    Awaitable[~.CryptoKeyVersion]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "import_crypto_key_version" not in self._stubs:
-            self._stubs["import_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/ImportCryptoKeyVersion",
-                request_serializer=service.ImportCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["import_crypto_key_version"]
-
-    @property
-    def create_import_job(
-        self,
-    ) -> Callable[[service.CreateImportJobRequest], Awaitable[resources.ImportJob]]:
-        r"""Return a callable for the create import job method over gRPC.
-
-        Create a new [ImportJob][google.cloud.kms.v1.ImportJob] within a
-        [KeyRing][google.cloud.kms.v1.KeyRing].
-
-        [ImportJob.import_method][google.cloud.kms.v1.ImportJob.import_method]
-        is required.
-
-        Returns:
-            Callable[[~.CreateImportJobRequest],
-                    Awaitable[~.ImportJob]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "create_import_job" not in self._stubs:
-            self._stubs["create_import_job"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/CreateImportJob",
-                request_serializer=service.CreateImportJobRequest.serialize,
-                response_deserializer=resources.ImportJob.deserialize,
-            )
-        return self._stubs["create_import_job"]
-
-    @property
-    def update_crypto_key(
-        self,
-    ) -> Callable[[service.UpdateCryptoKeyRequest], Awaitable[resources.CryptoKey]]:
-        r"""Return a callable for the update crypto key method over gRPC.
-
-        Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
-
-        Returns:
-            Callable[[~.UpdateCryptoKeyRequest],
-                    Awaitable[~.CryptoKey]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_crypto_key" not in self._stubs:
-            self._stubs["update_crypto_key"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/UpdateCryptoKey",
-                request_serializer=service.UpdateCryptoKeyRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["update_crypto_key"]
-
-    @property
-    def update_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.UpdateCryptoKeyVersionRequest], Awaitable[resources.CryptoKeyVersion]
-    ]:
-        r"""Return a callable for the update crypto key version method over gRPC.
-
-        Update a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-        metadata.
-
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] may be
-        changed between
-        [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-        and
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED]
-        using this method. See
-        [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion]
-        and
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        to move between other states.
-
-        Returns:
-            Callable[[~.UpdateCryptoKeyVersionRequest],
-                    Awaitable[~.CryptoKeyVersion]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_crypto_key_version" not in self._stubs:
-            self._stubs["update_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyVersion",
-                request_serializer=service.UpdateCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["update_crypto_key_version"]
-
-    @property
-    def update_crypto_key_primary_version(
-        self,
-    ) -> Callable[
-        [service.UpdateCryptoKeyPrimaryVersionRequest], Awaitable[resources.CryptoKey]
-    ]:
-        r"""Return a callable for the update crypto key primary
-        version method over gRPC.
-
-        Update the version of a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-        Returns an error if called on a key whose purpose is not
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.UpdateCryptoKeyPrimaryVersionRequest],
-                    Awaitable[~.CryptoKey]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "update_crypto_key_primary_version" not in self._stubs:
-            self._stubs[
-                "update_crypto_key_primary_version"
-            ] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyPrimaryVersion",
-                request_serializer=service.UpdateCryptoKeyPrimaryVersionRequest.serialize,
-                response_deserializer=resources.CryptoKey.deserialize,
-            )
-        return self._stubs["update_crypto_key_primary_version"]
-
-    @property
-    def destroy_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.DestroyCryptoKeyVersionRequest], Awaitable[resources.CryptoKeyVersion]
-    ]:
-        r"""Return a callable for the destroy crypto key version method over gRPC.
-
-        Schedule a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for
-        destruction.
-
-        Upon calling this method,
-        [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state]
-        will be set to
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be set to the time
-        [destroy_scheduled_duration][google.cloud.kms.v1.CryptoKey.destroy_scheduled_duration]
-        in the future. At that time, the
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will
-        automatically change to
-        [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED],
-        and the key material will be irrevocably destroyed.
-
-        Before the
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        is reached,
-        [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-        may be called to reverse the process.
-
-        Returns:
-            Callable[[~.DestroyCryptoKeyVersionRequest],
-                    Awaitable[~.CryptoKeyVersion]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "destroy_crypto_key_version" not in self._stubs:
-            self._stubs["destroy_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/DestroyCryptoKeyVersion",
-                request_serializer=service.DestroyCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["destroy_crypto_key_version"]
-
-    @property
-    def restore_crypto_key_version(
-        self,
-    ) -> Callable[
-        [service.RestoreCryptoKeyVersionRequest], Awaitable[resources.CryptoKeyVersion]
-    ]:
-        r"""Return a callable for the restore crypto key version method over gRPC.
-
-        Restore a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
-        [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
-        state.
-
-        Upon restoration of the CryptoKeyVersion,
-        [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set
-        to
-        [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED],
-        and
-        [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time]
-        will be cleared.
-
-        Returns:
-            Callable[[~.RestoreCryptoKeyVersionRequest],
-                    Awaitable[~.CryptoKeyVersion]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "restore_crypto_key_version" not in self._stubs:
-            self._stubs["restore_crypto_key_version"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/RestoreCryptoKeyVersion",
-                request_serializer=service.RestoreCryptoKeyVersionRequest.serialize,
-                response_deserializer=resources.CryptoKeyVersion.deserialize,
-            )
-        return self._stubs["restore_crypto_key_version"]
-
-    @property
-    def encrypt(
-        self,
-    ) -> Callable[[service.EncryptRequest], Awaitable[service.EncryptResponse]]:
-        r"""Return a callable for the encrypt method over gRPC.
-
-        Encrypts data, so that it can only be recovered by a call to
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.EncryptRequest],
-                    Awaitable[~.EncryptResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "encrypt" not in self._stubs:
-            self._stubs["encrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/Encrypt",
-                request_serializer=service.EncryptRequest.serialize,
-                response_deserializer=service.EncryptResponse.deserialize,
-            )
-        return self._stubs["encrypt"]
-
-    @property
-    def decrypt(
-        self,
-    ) -> Callable[[service.DecryptRequest], Awaitable[service.DecryptResponse]]:
-        r"""Return a callable for the decrypt method over gRPC.
-
-        Decrypts data that was protected by
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.DecryptRequest],
-                    Awaitable[~.DecryptResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "decrypt" not in self._stubs:
-            self._stubs["decrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/Decrypt",
-                request_serializer=service.DecryptRequest.serialize,
-                response_deserializer=service.DecryptResponse.deserialize,
-            )
-        return self._stubs["decrypt"]
-
-    @property
-    def raw_encrypt(
-        self,
-    ) -> Callable[[service.RawEncryptRequest], Awaitable[service.RawEncryptResponse]]:
-        r"""Return a callable for the raw encrypt method over gRPC.
-
-        Encrypts data using portable cryptographic primitives. Most
-        users should choose
-        [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt] and
-        [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt]
-        rather than their raw counterparts. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.RawEncryptRequest],
-                    Awaitable[~.RawEncryptResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "raw_encrypt" not in self._stubs:
-            self._stubs["raw_encrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/RawEncrypt",
-                request_serializer=service.RawEncryptRequest.serialize,
-                response_deserializer=service.RawEncryptResponse.deserialize,
-            )
-        return self._stubs["raw_encrypt"]
-
-    @property
-    def raw_decrypt(
-        self,
-    ) -> Callable[[service.RawDecryptRequest], Awaitable[service.RawDecryptResponse]]:
-        r"""Return a callable for the raw decrypt method over gRPC.
-
-        Decrypts data that was originally encrypted using a raw
-        cryptographic mechanism. The
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must
-        be
-        [RAW_ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.RAW_ENCRYPT_DECRYPT].
-
-        Returns:
-            Callable[[~.RawDecryptRequest],
-                    Awaitable[~.RawDecryptResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "raw_decrypt" not in self._stubs:
-            self._stubs["raw_decrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/RawDecrypt",
-                request_serializer=service.RawDecryptRequest.serialize,
-                response_deserializer=service.RawDecryptResponse.deserialize,
-            )
-        return self._stubs["raw_decrypt"]
-
-    @property
-    def asymmetric_sign(
-        self,
-    ) -> Callable[
-        [service.AsymmetricSignRequest], Awaitable[service.AsymmetricSignResponse]
-    ]:
-        r"""Return a callable for the asymmetric sign method over gRPC.
-
-        Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_SIGN, producing a signature that can be verified with
-        the public key retrieved from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-        Returns:
-            Callable[[~.AsymmetricSignRequest],
-                    Awaitable[~.AsymmetricSignResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "asymmetric_sign" not in self._stubs:
-            self._stubs["asymmetric_sign"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/AsymmetricSign",
-                request_serializer=service.AsymmetricSignRequest.serialize,
-                response_deserializer=service.AsymmetricSignResponse.deserialize,
-            )
-        return self._stubs["asymmetric_sign"]
-
-    @property
-    def asymmetric_decrypt(
-        self,
-    ) -> Callable[
-        [service.AsymmetricDecryptRequest], Awaitable[service.AsymmetricDecryptResponse]
-    ]:
-        r"""Return a callable for the asymmetric decrypt method over gRPC.
-
-        Decrypts data that was encrypted with a public key retrieved
-        from
-        [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey]
-        corresponding to a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        ASYMMETRIC_DECRYPT.
-
-        Returns:
-            Callable[[~.AsymmetricDecryptRequest],
-                    Awaitable[~.AsymmetricDecryptResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "asymmetric_decrypt" not in self._stubs:
-            self._stubs["asymmetric_decrypt"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/AsymmetricDecrypt",
-                request_serializer=service.AsymmetricDecryptRequest.serialize,
-                response_deserializer=service.AsymmetricDecryptResponse.deserialize,
-            )
-        return self._stubs["asymmetric_decrypt"]
-
-    @property
-    def mac_sign(
-        self,
-    ) -> Callable[[service.MacSignRequest], Awaitable[service.MacSignResponse]]:
-        r"""Return a callable for the mac sign method over gRPC.
-
-        Signs data using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        producing a tag that can be verified by another source with the
-        same key.
-
-        Returns:
-            Callable[[~.MacSignRequest],
-                    Awaitable[~.MacSignResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "mac_sign" not in self._stubs:
-            self._stubs["mac_sign"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/MacSign",
-                request_serializer=service.MacSignRequest.serialize,
-                response_deserializer=service.MacSignResponse.deserialize,
-            )
-        return self._stubs["mac_sign"]
-
-    @property
-    def mac_verify(
-        self,
-    ) -> Callable[[service.MacVerifyRequest], Awaitable[service.MacVerifyResponse]]:
-        r"""Return a callable for the mac verify method over gRPC.
-
-        Verifies MAC tag using a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] MAC,
-        and returns a response that indicates whether or not the
-        verification was successful.
-
-        Returns:
-            Callable[[~.MacVerifyRequest],
-                    Awaitable[~.MacVerifyResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "mac_verify" not in self._stubs:
-            self._stubs["mac_verify"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/MacVerify",
-                request_serializer=service.MacVerifyRequest.serialize,
-                response_deserializer=service.MacVerifyResponse.deserialize,
-            )
-        return self._stubs["mac_verify"]
-
-    @property
-    def generate_random_bytes(
-        self,
-    ) -> Callable[
-        [service.GenerateRandomBytesRequest],
-        Awaitable[service.GenerateRandomBytesResponse],
-    ]:
-        r"""Return a callable for the generate random bytes method over gRPC.
-
-        Generate random bytes using the Cloud KMS randomness
-        source in the provided location.
-
-        Returns:
-            Callable[[~.GenerateRandomBytesRequest],
-                    Awaitable[~.GenerateRandomBytesResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "generate_random_bytes" not in self._stubs:
-            self._stubs["generate_random_bytes"] = self.grpc_channel.unary_unary(
-                "/google.cloud.kms.v1.KeyManagementService/GenerateRandomBytes",
-                request_serializer=service.GenerateRandomBytesRequest.serialize,
-                response_deserializer=service.GenerateRandomBytesResponse.deserialize,
-            )
-        return self._stubs["generate_random_bytes"]
-
-    @property
-    def set_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.SetIamPolicyRequest], Awaitable[policy_pb2.Policy]]:
-        r"""Return a callable for the set iam policy method over gRPC.
-        Sets the IAM access control policy on the specified
-        function. Replaces any existing policy.
-        Returns:
-            Callable[[~.SetIamPolicyRequest],
-                    Awaitable[~.Policy]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "set_iam_policy" not in self._stubs:
-            self._stubs["set_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/SetIamPolicy",
-                request_serializer=iam_policy_pb2.SetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["set_iam_policy"]
-
-    @property
-    def get_iam_policy(
-        self,
-    ) -> Callable[[iam_policy_pb2.GetIamPolicyRequest], Awaitable[policy_pb2.Policy]]:
-        r"""Return a callable for the get iam policy method over gRPC.
-        Gets the IAM access control policy for a function.
-        Returns an empty policy if the function exists and does
-        not have a policy set.
-        Returns:
-            Callable[[~.GetIamPolicyRequest],
-                    Awaitable[~.Policy]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_iam_policy" not in self._stubs:
-            self._stubs["get_iam_policy"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/GetIamPolicy",
-                request_serializer=iam_policy_pb2.GetIamPolicyRequest.SerializeToString,
-                response_deserializer=policy_pb2.Policy.FromString,
-            )
-        return self._stubs["get_iam_policy"]
-
-    @property
-    def test_iam_permissions(
-        self,
-    ) -> Callable[
-        [iam_policy_pb2.TestIamPermissionsRequest],
-        Awaitable[iam_policy_pb2.TestIamPermissionsResponse],
-    ]:
-        r"""Return a callable for the test iam permissions method over gRPC.
-        Tests the specified permissions against the IAM access control
-        policy for a function. If the function does not exist, this will
-        return an empty set of permissions, not a NOT_FOUND error.
-        Returns:
-            Callable[[~.TestIamPermissionsRequest],
-                    Awaitable[~.TestIamPermissionsResponse]]:
-                A function that, when called, will call the underlying RPC
-                on the server.
-        """
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "test_iam_permissions" not in self._stubs:
-            self._stubs["test_iam_permissions"] = self.grpc_channel.unary_unary(
-                "/google.iam.v1.IAMPolicy/TestIamPermissions",
-                request_serializer=iam_policy_pb2.TestIamPermissionsRequest.SerializeToString,
-                response_deserializer=iam_policy_pb2.TestIamPermissionsResponse.FromString,
-            )
-        return self._stubs["test_iam_permissions"]
-
-    def close(self):
-        return self.grpc_channel.close()
-
-    @property
-    def list_locations(
-        self,
-    ) -> Callable[
-        [locations_pb2.ListLocationsRequest], locations_pb2.ListLocationsResponse
-    ]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "list_locations" not in self._stubs:
-            self._stubs["list_locations"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/ListLocations",
-                request_serializer=locations_pb2.ListLocationsRequest.SerializeToString,
-                response_deserializer=locations_pb2.ListLocationsResponse.FromString,
-            )
-        return self._stubs["list_locations"]
-
-    @property
-    def get_location(
-        self,
-    ) -> Callable[[locations_pb2.GetLocationRequest], locations_pb2.Location]:
-        r"""Return a callable for the list locations method over gRPC."""
-        # Generate a "stub function" on-the-fly which will actually make
-        # the request.
-        # gRPC handles serialization and deserialization, so we just need
-        # to pass in the functions for each.
-        if "get_location" not in self._stubs:
-            self._stubs["get_location"] = self.grpc_channel.unary_unary(
-                "/google.cloud.location.Locations/GetLocation",
-                request_serializer=locations_pb2.GetLocationRequest.SerializeToString,
-                response_deserializer=locations_pb2.Location.FromString,
-            )
-        return self._stubs["get_location"]
-
-
-__all__ = ("KeyManagementServiceGrpcAsyncIOTransport",)
diff --git a/google/cloud/kms_v1/services/key_management_service/transports/rest.py b/google/cloud/kms_v1/services/key_management_service/transports/rest.py
deleted file mode 100644
index 2f21d0e6..00000000
--- a/google/cloud/kms_v1/services/key_management_service/transports/rest.py
+++ /dev/null
@@ -1,4646 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-import dataclasses
-import json  # type: ignore
-import re
-from typing import Any, Callable, Dict, List, Optional, Sequence, Tuple, Union
-import warnings
-
-from google.api_core import gapic_v1, path_template, rest_helpers, rest_streaming
-from google.api_core import exceptions as core_exceptions
-from google.api_core import retry as retries
-from google.auth import credentials as ga_credentials  # type: ignore
-from google.auth.transport.grpc import SslCredentials  # type: ignore
-from google.auth.transport.requests import AuthorizedSession  # type: ignore
-from google.cloud.location import locations_pb2  # type: ignore
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.protobuf import json_format
-import grpc  # type: ignore
-from requests import __version__ as requests_version
-
-try:
-    OptionalRetry = Union[retries.Retry, gapic_v1.method._MethodDefault]
-except AttributeError:  # pragma: NO COVER
-    OptionalRetry = Union[retries.Retry, object]  # type: ignore
-
-
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-
-from google.cloud.kms_v1.types import resources, service
-
-from .base import DEFAULT_CLIENT_INFO as BASE_DEFAULT_CLIENT_INFO
-from .base import KeyManagementServiceTransport
-
-DEFAULT_CLIENT_INFO = gapic_v1.client_info.ClientInfo(
-    gapic_version=BASE_DEFAULT_CLIENT_INFO.gapic_version,
-    grpc_version=None,
-    rest_version=requests_version,
-)
-
-
-class KeyManagementServiceRestInterceptor:
-    """Interceptor for KeyManagementService.
-
-    Interceptors are used to manipulate requests, request metadata, and responses
-    in arbitrary ways.
-    Example use cases include:
-    * Logging
-    * Verifying requests according to service or custom semantics
-    * Stripping extraneous information from responses
-
-    These use cases and more can be enabled by injecting an
-    instance of a custom subclass when constructing the KeyManagementServiceRestTransport.
-
-    .. code-block:: python
-        class MyCustomKeyManagementServiceInterceptor(KeyManagementServiceRestInterceptor):
-            def pre_asymmetric_decrypt(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_asymmetric_decrypt(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_asymmetric_sign(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_asymmetric_sign(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_create_crypto_key(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_create_crypto_key(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_create_crypto_key_version(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_create_crypto_key_version(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_create_import_job(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_create_import_job(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_create_key_ring(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_create_key_ring(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_decrypt(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_decrypt(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_destroy_crypto_key_version(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_destroy_crypto_key_version(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_encrypt(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_encrypt(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_generate_random_bytes(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_generate_random_bytes(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_get_crypto_key(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_get_crypto_key(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_get_crypto_key_version(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_get_crypto_key_version(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_get_import_job(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_get_import_job(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_get_key_ring(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_get_key_ring(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_get_public_key(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_get_public_key(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_import_crypto_key_version(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_import_crypto_key_version(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_list_crypto_keys(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_list_crypto_keys(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_list_crypto_key_versions(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_list_crypto_key_versions(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_list_import_jobs(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_list_import_jobs(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_list_key_rings(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_list_key_rings(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_mac_sign(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_mac_sign(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_mac_verify(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_mac_verify(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_raw_decrypt(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_raw_decrypt(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_raw_encrypt(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_raw_encrypt(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_restore_crypto_key_version(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_restore_crypto_key_version(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_update_crypto_key(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_update_crypto_key(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_update_crypto_key_primary_version(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_update_crypto_key_primary_version(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-            def pre_update_crypto_key_version(self, request, metadata):
-                logging.log(f"Received request: {request}")
-                return request, metadata
-
-            def post_update_crypto_key_version(self, response):
-                logging.log(f"Received response: {response}")
-                return response
-
-        transport = KeyManagementServiceRestTransport(interceptor=MyCustomKeyManagementServiceInterceptor())
-        client = KeyManagementServiceClient(transport=transport)
-
-
-    """
-
-    def pre_asymmetric_decrypt(
-        self,
-        request: service.AsymmetricDecryptRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.AsymmetricDecryptRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for asymmetric_decrypt
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_asymmetric_decrypt(
-        self, response: service.AsymmetricDecryptResponse
-    ) -> service.AsymmetricDecryptResponse:
-        """Post-rpc interceptor for asymmetric_decrypt
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_asymmetric_sign(
-        self,
-        request: service.AsymmetricSignRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.AsymmetricSignRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for asymmetric_sign
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_asymmetric_sign(
-        self, response: service.AsymmetricSignResponse
-    ) -> service.AsymmetricSignResponse:
-        """Post-rpc interceptor for asymmetric_sign
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_create_crypto_key(
-        self,
-        request: service.CreateCryptoKeyRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.CreateCryptoKeyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for create_crypto_key
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_create_crypto_key(
-        self, response: resources.CryptoKey
-    ) -> resources.CryptoKey:
-        """Post-rpc interceptor for create_crypto_key
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_create_crypto_key_version(
-        self,
-        request: service.CreateCryptoKeyVersionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.CreateCryptoKeyVersionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for create_crypto_key_version
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_create_crypto_key_version(
-        self, response: resources.CryptoKeyVersion
-    ) -> resources.CryptoKeyVersion:
-        """Post-rpc interceptor for create_crypto_key_version
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_create_import_job(
-        self,
-        request: service.CreateImportJobRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.CreateImportJobRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for create_import_job
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_create_import_job(
-        self, response: resources.ImportJob
-    ) -> resources.ImportJob:
-        """Post-rpc interceptor for create_import_job
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_create_key_ring(
-        self, request: service.CreateKeyRingRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.CreateKeyRingRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for create_key_ring
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_create_key_ring(self, response: resources.KeyRing) -> resources.KeyRing:
-        """Post-rpc interceptor for create_key_ring
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_decrypt(
-        self, request: service.DecryptRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.DecryptRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for decrypt
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_decrypt(
-        self, response: service.DecryptResponse
-    ) -> service.DecryptResponse:
-        """Post-rpc interceptor for decrypt
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_destroy_crypto_key_version(
-        self,
-        request: service.DestroyCryptoKeyVersionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.DestroyCryptoKeyVersionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for destroy_crypto_key_version
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_destroy_crypto_key_version(
-        self, response: resources.CryptoKeyVersion
-    ) -> resources.CryptoKeyVersion:
-        """Post-rpc interceptor for destroy_crypto_key_version
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_encrypt(
-        self, request: service.EncryptRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.EncryptRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for encrypt
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_encrypt(
-        self, response: service.EncryptResponse
-    ) -> service.EncryptResponse:
-        """Post-rpc interceptor for encrypt
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_generate_random_bytes(
-        self,
-        request: service.GenerateRandomBytesRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.GenerateRandomBytesRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for generate_random_bytes
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_generate_random_bytes(
-        self, response: service.GenerateRandomBytesResponse
-    ) -> service.GenerateRandomBytesResponse:
-        """Post-rpc interceptor for generate_random_bytes
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_crypto_key(
-        self, request: service.GetCryptoKeyRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.GetCryptoKeyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_crypto_key
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_get_crypto_key(self, response: resources.CryptoKey) -> resources.CryptoKey:
-        """Post-rpc interceptor for get_crypto_key
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_crypto_key_version(
-        self,
-        request: service.GetCryptoKeyVersionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.GetCryptoKeyVersionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_crypto_key_version
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_get_crypto_key_version(
-        self, response: resources.CryptoKeyVersion
-    ) -> resources.CryptoKeyVersion:
-        """Post-rpc interceptor for get_crypto_key_version
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_import_job(
-        self, request: service.GetImportJobRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.GetImportJobRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_import_job
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_get_import_job(self, response: resources.ImportJob) -> resources.ImportJob:
-        """Post-rpc interceptor for get_import_job
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_key_ring(
-        self, request: service.GetKeyRingRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.GetKeyRingRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_key_ring
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_get_key_ring(self, response: resources.KeyRing) -> resources.KeyRing:
-        """Post-rpc interceptor for get_key_ring
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_public_key(
-        self, request: service.GetPublicKeyRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.GetPublicKeyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_public_key
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_get_public_key(self, response: resources.PublicKey) -> resources.PublicKey:
-        """Post-rpc interceptor for get_public_key
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_import_crypto_key_version(
-        self,
-        request: service.ImportCryptoKeyVersionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.ImportCryptoKeyVersionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for import_crypto_key_version
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_import_crypto_key_version(
-        self, response: resources.CryptoKeyVersion
-    ) -> resources.CryptoKeyVersion:
-        """Post-rpc interceptor for import_crypto_key_version
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_list_crypto_keys(
-        self,
-        request: service.ListCryptoKeysRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.ListCryptoKeysRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for list_crypto_keys
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_list_crypto_keys(
-        self, response: service.ListCryptoKeysResponse
-    ) -> service.ListCryptoKeysResponse:
-        """Post-rpc interceptor for list_crypto_keys
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_list_crypto_key_versions(
-        self,
-        request: service.ListCryptoKeyVersionsRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.ListCryptoKeyVersionsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for list_crypto_key_versions
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_list_crypto_key_versions(
-        self, response: service.ListCryptoKeyVersionsResponse
-    ) -> service.ListCryptoKeyVersionsResponse:
-        """Post-rpc interceptor for list_crypto_key_versions
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_list_import_jobs(
-        self,
-        request: service.ListImportJobsRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.ListImportJobsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for list_import_jobs
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_list_import_jobs(
-        self, response: service.ListImportJobsResponse
-    ) -> service.ListImportJobsResponse:
-        """Post-rpc interceptor for list_import_jobs
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_list_key_rings(
-        self, request: service.ListKeyRingsRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.ListKeyRingsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for list_key_rings
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_list_key_rings(
-        self, response: service.ListKeyRingsResponse
-    ) -> service.ListKeyRingsResponse:
-        """Post-rpc interceptor for list_key_rings
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_mac_sign(
-        self, request: service.MacSignRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.MacSignRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for mac_sign
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_mac_sign(
-        self, response: service.MacSignResponse
-    ) -> service.MacSignResponse:
-        """Post-rpc interceptor for mac_sign
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_mac_verify(
-        self, request: service.MacVerifyRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.MacVerifyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for mac_verify
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_mac_verify(
-        self, response: service.MacVerifyResponse
-    ) -> service.MacVerifyResponse:
-        """Post-rpc interceptor for mac_verify
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_raw_decrypt(
-        self, request: service.RawDecryptRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.RawDecryptRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for raw_decrypt
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_raw_decrypt(
-        self, response: service.RawDecryptResponse
-    ) -> service.RawDecryptResponse:
-        """Post-rpc interceptor for raw_decrypt
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_raw_encrypt(
-        self, request: service.RawEncryptRequest, metadata: Sequence[Tuple[str, str]]
-    ) -> Tuple[service.RawEncryptRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for raw_encrypt
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_raw_encrypt(
-        self, response: service.RawEncryptResponse
-    ) -> service.RawEncryptResponse:
-        """Post-rpc interceptor for raw_encrypt
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_restore_crypto_key_version(
-        self,
-        request: service.RestoreCryptoKeyVersionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.RestoreCryptoKeyVersionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for restore_crypto_key_version
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_restore_crypto_key_version(
-        self, response: resources.CryptoKeyVersion
-    ) -> resources.CryptoKeyVersion:
-        """Post-rpc interceptor for restore_crypto_key_version
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_update_crypto_key(
-        self,
-        request: service.UpdateCryptoKeyRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.UpdateCryptoKeyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for update_crypto_key
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_update_crypto_key(
-        self, response: resources.CryptoKey
-    ) -> resources.CryptoKey:
-        """Post-rpc interceptor for update_crypto_key
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_update_crypto_key_primary_version(
-        self,
-        request: service.UpdateCryptoKeyPrimaryVersionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.UpdateCryptoKeyPrimaryVersionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for update_crypto_key_primary_version
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_update_crypto_key_primary_version(
-        self, response: resources.CryptoKey
-    ) -> resources.CryptoKey:
-        """Post-rpc interceptor for update_crypto_key_primary_version
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_update_crypto_key_version(
-        self,
-        request: service.UpdateCryptoKeyVersionRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[service.UpdateCryptoKeyVersionRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for update_crypto_key_version
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_update_crypto_key_version(
-        self, response: resources.CryptoKeyVersion
-    ) -> resources.CryptoKeyVersion:
-        """Post-rpc interceptor for update_crypto_key_version
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_location(
-        self,
-        request: locations_pb2.GetLocationRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[locations_pb2.GetLocationRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_location
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_get_location(
-        self, response: locations_pb2.Location
-    ) -> locations_pb2.Location:
-        """Post-rpc interceptor for get_location
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_list_locations(
-        self,
-        request: locations_pb2.ListLocationsRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[locations_pb2.ListLocationsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for list_locations
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_list_locations(
-        self, response: locations_pb2.ListLocationsResponse
-    ) -> locations_pb2.ListLocationsResponse:
-        """Post-rpc interceptor for list_locations
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_get_iam_policy(
-        self,
-        request: iam_policy_pb2.GetIamPolicyRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[iam_policy_pb2.GetIamPolicyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for get_iam_policy
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_get_iam_policy(self, response: policy_pb2.Policy) -> policy_pb2.Policy:
-        """Post-rpc interceptor for get_iam_policy
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_set_iam_policy(
-        self,
-        request: iam_policy_pb2.SetIamPolicyRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[iam_policy_pb2.SetIamPolicyRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for set_iam_policy
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_set_iam_policy(self, response: policy_pb2.Policy) -> policy_pb2.Policy:
-        """Post-rpc interceptor for set_iam_policy
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-    def pre_test_iam_permissions(
-        self,
-        request: iam_policy_pb2.TestIamPermissionsRequest,
-        metadata: Sequence[Tuple[str, str]],
-    ) -> Tuple[iam_policy_pb2.TestIamPermissionsRequest, Sequence[Tuple[str, str]]]:
-        """Pre-rpc interceptor for test_iam_permissions
-
-        Override in a subclass to manipulate the request or metadata
-        before they are sent to the KeyManagementService server.
-        """
-        return request, metadata
-
-    def post_test_iam_permissions(
-        self, response: iam_policy_pb2.TestIamPermissionsResponse
-    ) -> iam_policy_pb2.TestIamPermissionsResponse:
-        """Post-rpc interceptor for test_iam_permissions
-
-        Override in a subclass to manipulate the response
-        after it is returned by the KeyManagementService server but before
-        it is returned to user code.
-        """
-        return response
-
-
-@dataclasses.dataclass
-class KeyManagementServiceRestStub:
-    _session: AuthorizedSession
-    _host: str
-    _interceptor: KeyManagementServiceRestInterceptor
-
-
-class KeyManagementServiceRestTransport(KeyManagementServiceTransport):
-    """REST backend transport for KeyManagementService.
-
-    Google Cloud Key Management Service
-
-    Manages cryptographic keys and operations using those keys.
-    Implements a REST model with the following objects:
-
-    -  [KeyRing][google.cloud.kms.v1.KeyRing]
-    -  [CryptoKey][google.cloud.kms.v1.CryptoKey]
-    -  [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-    -  [ImportJob][google.cloud.kms.v1.ImportJob]
-
-    If you are using manual gRPC libraries, see `Using gRPC with Cloud
-    KMS <https://cloud.google.com/kms/docs/grpc>`__.
-
-    This class defines the same methods as the primary client, so the
-    primary client can load the underlying transport implementation
-    and call it.
-
-    It sends JSON representations of protocol buffers over HTTP/1.1
-
-    """
-
-    def __init__(
-        self,
-        *,
-        host: str = "cloudkms.googleapis.com",
-        credentials: Optional[ga_credentials.Credentials] = None,
-        credentials_file: Optional[str] = None,
-        scopes: Optional[Sequence[str]] = None,
-        client_cert_source_for_mtls: Optional[Callable[[], Tuple[bytes, bytes]]] = None,
-        quota_project_id: Optional[str] = None,
-        client_info: gapic_v1.client_info.ClientInfo = DEFAULT_CLIENT_INFO,
-        always_use_jwt_access: Optional[bool] = False,
-        url_scheme: str = "https",
-        interceptor: Optional[KeyManagementServiceRestInterceptor] = None,
-        api_audience: Optional[str] = None,
-    ) -> None:
-        """Instantiate the transport.
-
-        Args:
-            host (Optional[str]):
-                 The hostname to connect to.
-            credentials (Optional[google.auth.credentials.Credentials]): The
-                authorization credentials to attach to requests. These
-                credentials identify the application to the service; if none
-                are specified, the client will attempt to ascertain the
-                credentials from the environment.
-
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
-            scopes (Optional(Sequence[str])): A list of scopes. This argument is
-                ignored if ``channel`` is provided.
-            client_cert_source_for_mtls (Callable[[], Tuple[bytes, bytes]]): Client
-                certificate to configure mutual TLS HTTP channel. It is ignored
-                if ``channel`` is provided.
-            quota_project_id (Optional[str]): An optional project to use for billing
-                and quota.
-            client_info (google.api_core.gapic_v1.client_info.ClientInfo):
-                The client info used to send a user-agent string along with
-                API requests. If ``None``, then default info will be used.
-                Generally, you only need to set this if you are developing
-                your own client library.
-            always_use_jwt_access (Optional[bool]): Whether self signed JWT should
-                be used for service account credentials.
-            url_scheme: the protocol scheme for the API endpoint.  Normally
-                "https", but for testing or local servers,
-                "http" can be specified.
-        """
-        # Run the base constructor
-        # TODO(yon-mg): resolve other ctor params i.e. scopes, quota, etc.
-        # TODO: When custom host (api_endpoint) is set, `scopes` must *also* be set on the
-        # credentials object
-        maybe_url_match = re.match("^(?P<scheme>http(?:s)?://)?(?P<host>.*)$", host)
-        if maybe_url_match is None:
-            raise ValueError(
-                f"Unexpected hostname structure: {host}"
-            )  # pragma: NO COVER
-
-        url_match_items = maybe_url_match.groupdict()
-
-        host = f"{url_scheme}://{host}" if not url_match_items["scheme"] else host
-
-        super().__init__(
-            host=host,
-            credentials=credentials,
-            client_info=client_info,
-            always_use_jwt_access=always_use_jwt_access,
-            api_audience=api_audience,
-        )
-        self._session = AuthorizedSession(
-            self._credentials, default_host=self.DEFAULT_HOST
-        )
-        if client_cert_source_for_mtls:
-            self._session.configure_mtls_channel(client_cert_source_for_mtls)
-        self._interceptor = interceptor or KeyManagementServiceRestInterceptor()
-        self._prep_wrapped_messages(client_info)
-
-    class _AsymmetricDecrypt(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("AsymmetricDecrypt")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.AsymmetricDecryptRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.AsymmetricDecryptResponse:
-            r"""Call the asymmetric decrypt method over HTTP.
-
-            Args:
-                request (~.service.AsymmetricDecryptRequest):
-                    The request object. Request message for
-                [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.AsymmetricDecryptResponse:
-                    Response message for
-                [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:asymmetricDecrypt",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_asymmetric_decrypt(
-                request, metadata
-            )
-            pb_request = service.AsymmetricDecryptRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.AsymmetricDecryptResponse()
-            pb_resp = service.AsymmetricDecryptResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_asymmetric_decrypt(resp)
-            return resp
-
-    class _AsymmetricSign(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("AsymmetricSign")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.AsymmetricSignRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.AsymmetricSignResponse:
-            r"""Call the asymmetric sign method over HTTP.
-
-            Args:
-                request (~.service.AsymmetricSignRequest):
-                    The request object. Request message for
-                [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.AsymmetricSignResponse:
-                    Response message for
-                [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:asymmetricSign",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_asymmetric_sign(request, metadata)
-            pb_request = service.AsymmetricSignRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.AsymmetricSignResponse()
-            pb_resp = service.AsymmetricSignResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_asymmetric_sign(resp)
-            return resp
-
-    class _CreateCryptoKey(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("CreateCryptoKey")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "cryptoKeyId": "",
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.CreateCryptoKeyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKey:
-            r"""Call the create crypto key method over HTTP.
-
-            Args:
-                request (~.service.CreateCryptoKeyRequest):
-                    The request object. Request message for
-                [KeyManagementService.CreateCryptoKey][google.cloud.kms.v1.KeyManagementService.CreateCryptoKey].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.CryptoKey:
-                    A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents
-                a logical key that can be used for cryptographic
-                operations.
-
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made up
-                of zero or more
-                [versions][google.cloud.kms.v1.CryptoKeyVersion], which
-                represent the actual key material used in cryptographic
-                operations.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{parent=projects/*/locations/*/keyRings/*}/cryptoKeys",
-                    "body": "crypto_key",
-                },
-            ]
-            request, metadata = self._interceptor.pre_create_crypto_key(
-                request, metadata
-            )
-            pb_request = service.CreateCryptoKeyRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKey()
-            pb_resp = resources.CryptoKey.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_create_crypto_key(resp)
-            return resp
-
-    class _CreateCryptoKeyVersion(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("CreateCryptoKeyVersion")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.CreateCryptoKeyVersionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKeyVersion:
-            r"""Call the create crypto key version method over HTTP.
-
-            Args:
-                request (~.service.CreateCryptoKeyVersionRequest):
-                    The request object. Request message for
-                [KeyManagementService.CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.CryptoKeyVersion:
-                    A
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                represents an individual cryptographic key, and the
-                associated key material.
-
-                An
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                version can be used for cryptographic operations.
-
-                For security reasons, the raw cryptographic key material
-                represented by a
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                can never be viewed or exported. It can only be used to
-                encrypt, decrypt, or sign data when an authorized user
-                or application invokes Cloud KMS.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{parent=projects/*/locations/*/keyRings/*/cryptoKeys/*}/cryptoKeyVersions",
-                    "body": "crypto_key_version",
-                },
-            ]
-            request, metadata = self._interceptor.pre_create_crypto_key_version(
-                request, metadata
-            )
-            pb_request = service.CreateCryptoKeyVersionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKeyVersion()
-            pb_resp = resources.CryptoKeyVersion.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_create_crypto_key_version(resp)
-            return resp
-
-    class _CreateImportJob(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("CreateImportJob")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "importJobId": "",
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.CreateImportJobRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.ImportJob:
-            r"""Call the create import job method over HTTP.
-
-            Args:
-                request (~.service.CreateImportJobRequest):
-                    The request object. Request message for
-                [KeyManagementService.CreateImportJob][google.cloud.kms.v1.KeyManagementService.CreateImportJob].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.ImportJob:
-                    An [ImportJob][google.cloud.kms.v1.ImportJob] can be
-                used to create
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                using pre-existing key material, generated outside of
-                Cloud KMS.
-
-                When an [ImportJob][google.cloud.kms.v1.ImportJob] is
-                created, Cloud KMS will generate a "wrapping key", which
-                is a public/private key pair. You use the wrapping key
-                to encrypt (also known as wrap) the pre-existing key
-                material to protect it during the import process. The
-                nature of the wrapping key depends on the choice of
-                [import_method][google.cloud.kms.v1.ImportJob.import_method].
-                When the wrapping key generation is complete, the
-                [state][google.cloud.kms.v1.ImportJob.state] will be set
-                to
-                [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE]
-                and the
-                [public_key][google.cloud.kms.v1.ImportJob.public_key]
-                can be fetched. The fetched public key can then be used
-                to wrap your pre-existing key material.
-
-                Once the key material is wrapped, it can be imported
-                into a new
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                in an existing
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] by calling
-                [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-                Multiple
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                can be imported with a single
-                [ImportJob][google.cloud.kms.v1.ImportJob]. Cloud KMS
-                uses the private key portion of the wrapping key to
-                unwrap the key material. Only Cloud KMS has access to
-                the private key.
-
-                An [ImportJob][google.cloud.kms.v1.ImportJob] expires 3
-                days after it is created. Once expired, Cloud KMS will
-                no longer be able to import or unwrap any key material
-                that was wrapped with the
-                [ImportJob][google.cloud.kms.v1.ImportJob]'s public key.
-
-                For more information, see `Importing a
-                key <https://cloud.google.com/kms/docs/importing-a-key>`__.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{parent=projects/*/locations/*/keyRings/*}/importJobs",
-                    "body": "import_job",
-                },
-            ]
-            request, metadata = self._interceptor.pre_create_import_job(
-                request, metadata
-            )
-            pb_request = service.CreateImportJobRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.ImportJob()
-            pb_resp = resources.ImportJob.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_create_import_job(resp)
-            return resp
-
-    class _CreateKeyRing(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("CreateKeyRing")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "keyRingId": "",
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.CreateKeyRingRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.KeyRing:
-            r"""Call the create key ring method over HTTP.
-
-            Args:
-                request (~.service.CreateKeyRingRequest):
-                    The request object. Request message for
-                [KeyManagementService.CreateKeyRing][google.cloud.kms.v1.KeyManagementService.CreateKeyRing].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.KeyRing:
-                    A [KeyRing][google.cloud.kms.v1.KeyRing] is a toplevel
-                logical grouping of
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{parent=projects/*/locations/*}/keyRings",
-                    "body": "key_ring",
-                },
-            ]
-            request, metadata = self._interceptor.pre_create_key_ring(request, metadata)
-            pb_request = service.CreateKeyRingRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.KeyRing()
-            pb_resp = resources.KeyRing.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_create_key_ring(resp)
-            return resp
-
-    class _Decrypt(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("Decrypt")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.DecryptRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.DecryptResponse:
-            r"""Call the decrypt method over HTTP.
-
-            Args:
-                request (~.service.DecryptRequest):
-                    The request object. Request message for
-                [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.DecryptResponse:
-                    Response message for
-                [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*}:decrypt",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_decrypt(request, metadata)
-            pb_request = service.DecryptRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.DecryptResponse()
-            pb_resp = service.DecryptResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_decrypt(resp)
-            return resp
-
-    class _DestroyCryptoKeyVersion(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("DestroyCryptoKeyVersion")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.DestroyCryptoKeyVersionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKeyVersion:
-            r"""Call the destroy crypto key
-            version method over HTTP.
-
-                Args:
-                    request (~.service.DestroyCryptoKeyVersionRequest):
-                        The request object. Request message for
-                    [KeyManagementService.DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion].
-                    retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                        should be retried.
-                    timeout (float): The timeout for this request.
-                    metadata (Sequence[Tuple[str, str]]): Strings which should be
-                        sent along with the request as metadata.
-
-                Returns:
-                    ~.resources.CryptoKeyVersion:
-                        A
-                    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                    represents an individual cryptographic key, and the
-                    associated key material.
-
-                    An
-                    [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                    version can be used for cryptographic operations.
-
-                    For security reasons, the raw cryptographic key material
-                    represented by a
-                    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                    can never be viewed or exported. It can only be used to
-                    encrypt, decrypt, or sign data when an authorized user
-                    or application invokes Cloud KMS.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:destroy",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_destroy_crypto_key_version(
-                request, metadata
-            )
-            pb_request = service.DestroyCryptoKeyVersionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKeyVersion()
-            pb_resp = resources.CryptoKeyVersion.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_destroy_crypto_key_version(resp)
-            return resp
-
-    class _Encrypt(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("Encrypt")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.EncryptRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.EncryptResponse:
-            r"""Call the encrypt method over HTTP.
-
-            Args:
-                request (~.service.EncryptRequest):
-                    The request object. Request message for
-                [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.EncryptResponse:
-                    Response message for
-                [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/**}:encrypt",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_encrypt(request, metadata)
-            pb_request = service.EncryptRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.EncryptResponse()
-            pb_resp = service.EncryptResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_encrypt(resp)
-            return resp
-
-    class _GenerateRandomBytes(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("GenerateRandomBytes")
-
-        def __call__(
-            self,
-            request: service.GenerateRandomBytesRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.GenerateRandomBytesResponse:
-            r"""Call the generate random bytes method over HTTP.
-
-            Args:
-                request (~.service.GenerateRandomBytesRequest):
-                    The request object. Request message for
-                [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.GenerateRandomBytesResponse:
-                    Response message for
-                [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{location=projects/*/locations/*}:generateRandomBytes",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_generate_random_bytes(
-                request, metadata
-            )
-            pb_request = service.GenerateRandomBytesRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.GenerateRandomBytesResponse()
-            pb_resp = service.GenerateRandomBytesResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_generate_random_bytes(resp)
-            return resp
-
-    class _GetCryptoKey(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("GetCryptoKey")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.GetCryptoKeyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKey:
-            r"""Call the get crypto key method over HTTP.
-
-            Args:
-                request (~.service.GetCryptoKeyRequest):
-                    The request object. Request message for
-                [KeyManagementService.GetCryptoKey][google.cloud.kms.v1.KeyManagementService.GetCryptoKey].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.CryptoKey:
-                    A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents
-                a logical key that can be used for cryptographic
-                operations.
-
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made up
-                of zero or more
-                [versions][google.cloud.kms.v1.CryptoKeyVersion], which
-                represent the actual key material used in cryptographic
-                operations.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*}",
-                },
-            ]
-            request, metadata = self._interceptor.pre_get_crypto_key(request, metadata)
-            pb_request = service.GetCryptoKeyRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKey()
-            pb_resp = resources.CryptoKey.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_get_crypto_key(resp)
-            return resp
-
-    class _GetCryptoKeyVersion(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("GetCryptoKeyVersion")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.GetCryptoKeyVersionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKeyVersion:
-            r"""Call the get crypto key version method over HTTP.
-
-            Args:
-                request (~.service.GetCryptoKeyVersionRequest):
-                    The request object. Request message for
-                [KeyManagementService.GetCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.GetCryptoKeyVersion].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.CryptoKeyVersion:
-                    A
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                represents an individual cryptographic key, and the
-                associated key material.
-
-                An
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                version can be used for cryptographic operations.
-
-                For security reasons, the raw cryptographic key material
-                represented by a
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                can never be viewed or exported. It can only be used to
-                encrypt, decrypt, or sign data when an authorized user
-                or application invokes Cloud KMS.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}",
-                },
-            ]
-            request, metadata = self._interceptor.pre_get_crypto_key_version(
-                request, metadata
-            )
-            pb_request = service.GetCryptoKeyVersionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKeyVersion()
-            pb_resp = resources.CryptoKeyVersion.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_get_crypto_key_version(resp)
-            return resp
-
-    class _GetImportJob(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("GetImportJob")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.GetImportJobRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.ImportJob:
-            r"""Call the get import job method over HTTP.
-
-            Args:
-                request (~.service.GetImportJobRequest):
-                    The request object. Request message for
-                [KeyManagementService.GetImportJob][google.cloud.kms.v1.KeyManagementService.GetImportJob].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.ImportJob:
-                    An [ImportJob][google.cloud.kms.v1.ImportJob] can be
-                used to create
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                using pre-existing key material, generated outside of
-                Cloud KMS.
-
-                When an [ImportJob][google.cloud.kms.v1.ImportJob] is
-                created, Cloud KMS will generate a "wrapping key", which
-                is a public/private key pair. You use the wrapping key
-                to encrypt (also known as wrap) the pre-existing key
-                material to protect it during the import process. The
-                nature of the wrapping key depends on the choice of
-                [import_method][google.cloud.kms.v1.ImportJob.import_method].
-                When the wrapping key generation is complete, the
-                [state][google.cloud.kms.v1.ImportJob.state] will be set
-                to
-                [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE]
-                and the
-                [public_key][google.cloud.kms.v1.ImportJob.public_key]
-                can be fetched. The fetched public key can then be used
-                to wrap your pre-existing key material.
-
-                Once the key material is wrapped, it can be imported
-                into a new
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                in an existing
-                [CryptoKey][google.cloud.kms.v1.CryptoKey] by calling
-                [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-                Multiple
-                [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-                can be imported with a single
-                [ImportJob][google.cloud.kms.v1.ImportJob]. Cloud KMS
-                uses the private key portion of the wrapping key to
-                unwrap the key material. Only Cloud KMS has access to
-                the private key.
-
-                An [ImportJob][google.cloud.kms.v1.ImportJob] expires 3
-                days after it is created. Once expired, Cloud KMS will
-                no longer be able to import or unwrap any key material
-                that was wrapped with the
-                [ImportJob][google.cloud.kms.v1.ImportJob]'s public key.
-
-                For more information, see `Importing a
-                key <https://cloud.google.com/kms/docs/importing-a-key>`__.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/importJobs/*}",
-                },
-            ]
-            request, metadata = self._interceptor.pre_get_import_job(request, metadata)
-            pb_request = service.GetImportJobRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.ImportJob()
-            pb_resp = resources.ImportJob.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_get_import_job(resp)
-            return resp
-
-    class _GetKeyRing(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("GetKeyRing")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.GetKeyRingRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.KeyRing:
-            r"""Call the get key ring method over HTTP.
-
-            Args:
-                request (~.service.GetKeyRingRequest):
-                    The request object. Request message for
-                [KeyManagementService.GetKeyRing][google.cloud.kms.v1.KeyManagementService.GetKeyRing].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.KeyRing:
-                    A [KeyRing][google.cloud.kms.v1.KeyRing] is a toplevel
-                logical grouping of
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*}",
-                },
-            ]
-            request, metadata = self._interceptor.pre_get_key_ring(request, metadata)
-            pb_request = service.GetKeyRingRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.KeyRing()
-            pb_resp = resources.KeyRing.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_get_key_ring(resp)
-            return resp
-
-    class _GetPublicKey(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("GetPublicKey")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.GetPublicKeyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.PublicKey:
-            r"""Call the get public key method over HTTP.
-
-            Args:
-                request (~.service.GetPublicKeyRequest):
-                    The request object. Request message for
-                [KeyManagementService.GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.PublicKey:
-                    The public key for a given
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-                Obtained via
-                [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}/publicKey",
-                },
-            ]
-            request, metadata = self._interceptor.pre_get_public_key(request, metadata)
-            pb_request = service.GetPublicKeyRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.PublicKey()
-            pb_resp = resources.PublicKey.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_get_public_key(resp)
-            return resp
-
-    class _ImportCryptoKeyVersion(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("ImportCryptoKeyVersion")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.ImportCryptoKeyVersionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKeyVersion:
-            r"""Call the import crypto key version method over HTTP.
-
-            Args:
-                request (~.service.ImportCryptoKeyVersionRequest):
-                    The request object. Request message for
-                [KeyManagementService.ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.CryptoKeyVersion:
-                    A
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                represents an individual cryptographic key, and the
-                associated key material.
-
-                An
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                version can be used for cryptographic operations.
-
-                For security reasons, the raw cryptographic key material
-                represented by a
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                can never be viewed or exported. It can only be used to
-                encrypt, decrypt, or sign data when an authorized user
-                or application invokes Cloud KMS.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{parent=projects/*/locations/*/keyRings/*/cryptoKeys/*}/cryptoKeyVersions:import",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_import_crypto_key_version(
-                request, metadata
-            )
-            pb_request = service.ImportCryptoKeyVersionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKeyVersion()
-            pb_resp = resources.CryptoKeyVersion.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_import_crypto_key_version(resp)
-            return resp
-
-    class _ListCryptoKeys(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("ListCryptoKeys")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.ListCryptoKeysRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.ListCryptoKeysResponse:
-            r"""Call the list crypto keys method over HTTP.
-
-            Args:
-                request (~.service.ListCryptoKeysRequest):
-                    The request object. Request message for
-                [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.ListCryptoKeysResponse:
-                    Response message for
-                [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{parent=projects/*/locations/*/keyRings/*}/cryptoKeys",
-                },
-            ]
-            request, metadata = self._interceptor.pre_list_crypto_keys(
-                request, metadata
-            )
-            pb_request = service.ListCryptoKeysRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.ListCryptoKeysResponse()
-            pb_resp = service.ListCryptoKeysResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_list_crypto_keys(resp)
-            return resp
-
-    class _ListCryptoKeyVersions(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("ListCryptoKeyVersions")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.ListCryptoKeyVersionsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.ListCryptoKeyVersionsResponse:
-            r"""Call the list crypto key versions method over HTTP.
-
-            Args:
-                request (~.service.ListCryptoKeyVersionsRequest):
-                    The request object. Request message for
-                [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.ListCryptoKeyVersionsResponse:
-                    Response message for
-                [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{parent=projects/*/locations/*/keyRings/*/cryptoKeys/*}/cryptoKeyVersions",
-                },
-            ]
-            request, metadata = self._interceptor.pre_list_crypto_key_versions(
-                request, metadata
-            )
-            pb_request = service.ListCryptoKeyVersionsRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.ListCryptoKeyVersionsResponse()
-            pb_resp = service.ListCryptoKeyVersionsResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_list_crypto_key_versions(resp)
-            return resp
-
-    class _ListImportJobs(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("ListImportJobs")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.ListImportJobsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.ListImportJobsResponse:
-            r"""Call the list import jobs method over HTTP.
-
-            Args:
-                request (~.service.ListImportJobsRequest):
-                    The request object. Request message for
-                [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.ListImportJobsResponse:
-                    Response message for
-                [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{parent=projects/*/locations/*/keyRings/*}/importJobs",
-                },
-            ]
-            request, metadata = self._interceptor.pre_list_import_jobs(
-                request, metadata
-            )
-            pb_request = service.ListImportJobsRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.ListImportJobsResponse()
-            pb_resp = service.ListImportJobsResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_list_import_jobs(resp)
-            return resp
-
-    class _ListKeyRings(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("ListKeyRings")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.ListKeyRingsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.ListKeyRingsResponse:
-            r"""Call the list key rings method over HTTP.
-
-            Args:
-                request (~.service.ListKeyRingsRequest):
-                    The request object. Request message for
-                [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.ListKeyRingsResponse:
-                    Response message for
-                [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{parent=projects/*/locations/*}/keyRings",
-                },
-            ]
-            request, metadata = self._interceptor.pre_list_key_rings(request, metadata)
-            pb_request = service.ListKeyRingsRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.ListKeyRingsResponse()
-            pb_resp = service.ListKeyRingsResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_list_key_rings(resp)
-            return resp
-
-    class _MacSign(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("MacSign")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.MacSignRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.MacSignResponse:
-            r"""Call the mac sign method over HTTP.
-
-            Args:
-                request (~.service.MacSignRequest):
-                    The request object. Request message for
-                [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.MacSignResponse:
-                    Response message for
-                [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:macSign",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_mac_sign(request, metadata)
-            pb_request = service.MacSignRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.MacSignResponse()
-            pb_resp = service.MacSignResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_mac_sign(resp)
-            return resp
-
-    class _MacVerify(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("MacVerify")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.MacVerifyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.MacVerifyResponse:
-            r"""Call the mac verify method over HTTP.
-
-            Args:
-                request (~.service.MacVerifyRequest):
-                    The request object. Request message for
-                [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.MacVerifyResponse:
-                    Response message for
-                [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:macVerify",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_mac_verify(request, metadata)
-            pb_request = service.MacVerifyRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.MacVerifyResponse()
-            pb_resp = service.MacVerifyResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_mac_verify(resp)
-            return resp
-
-    class _RawDecrypt(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("RawDecrypt")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.RawDecryptRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.RawDecryptResponse:
-            r"""Call the raw decrypt method over HTTP.
-
-            Args:
-                request (~.service.RawDecryptRequest):
-                    The request object. Request message for
-                [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.RawDecryptResponse:
-                    Response message for
-                [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:rawDecrypt",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_raw_decrypt(request, metadata)
-            pb_request = service.RawDecryptRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.RawDecryptResponse()
-            pb_resp = service.RawDecryptResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_raw_decrypt(resp)
-            return resp
-
-    class _RawEncrypt(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("RawEncrypt")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.RawEncryptRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> service.RawEncryptResponse:
-            r"""Call the raw encrypt method over HTTP.
-
-            Args:
-                request (~.service.RawEncryptRequest):
-                    The request object. Request message for
-                [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.service.RawEncryptResponse:
-                    Response message for
-                [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:rawEncrypt",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_raw_encrypt(request, metadata)
-            pb_request = service.RawEncryptRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = service.RawEncryptResponse()
-            pb_resp = service.RawEncryptResponse.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_raw_encrypt(resp)
-            return resp
-
-    class _RestoreCryptoKeyVersion(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("RestoreCryptoKeyVersion")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.RestoreCryptoKeyVersionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKeyVersion:
-            r"""Call the restore crypto key
-            version method over HTTP.
-
-                Args:
-                    request (~.service.RestoreCryptoKeyVersionRequest):
-                        The request object. Request message for
-                    [KeyManagementService.RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion].
-                    retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                        should be retried.
-                    timeout (float): The timeout for this request.
-                    metadata (Sequence[Tuple[str, str]]): Strings which should be
-                        sent along with the request as metadata.
-
-                Returns:
-                    ~.resources.CryptoKeyVersion:
-                        A
-                    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                    represents an individual cryptographic key, and the
-                    associated key material.
-
-                    An
-                    [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                    version can be used for cryptographic operations.
-
-                    For security reasons, the raw cryptographic key material
-                    represented by a
-                    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                    can never be viewed or exported. It can only be used to
-                    encrypt, decrypt, or sign data when an authorized user
-                    or application invokes Cloud KMS.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:restore",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_restore_crypto_key_version(
-                request, metadata
-            )
-            pb_request = service.RestoreCryptoKeyVersionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKeyVersion()
-            pb_resp = resources.CryptoKeyVersion.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_restore_crypto_key_version(resp)
-            return resp
-
-    class _UpdateCryptoKey(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("UpdateCryptoKey")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "updateMask": {},
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.UpdateCryptoKeyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKey:
-            r"""Call the update crypto key method over HTTP.
-
-            Args:
-                request (~.service.UpdateCryptoKeyRequest):
-                    The request object. Request message for
-                [KeyManagementService.UpdateCryptoKey][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKey].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.CryptoKey:
-                    A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents
-                a logical key that can be used for cryptographic
-                operations.
-
-                A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made up
-                of zero or more
-                [versions][google.cloud.kms.v1.CryptoKeyVersion], which
-                represent the actual key material used in cryptographic
-                operations.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "patch",
-                    "uri": "/v1/{crypto_key.name=projects/*/locations/*/keyRings/*/cryptoKeys/*}",
-                    "body": "crypto_key",
-                },
-            ]
-            request, metadata = self._interceptor.pre_update_crypto_key(
-                request, metadata
-            )
-            pb_request = service.UpdateCryptoKeyRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKey()
-            pb_resp = resources.CryptoKey.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_update_crypto_key(resp)
-            return resp
-
-    class _UpdateCryptoKeyPrimaryVersion(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("UpdateCryptoKeyPrimaryVersion")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {}
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.UpdateCryptoKeyPrimaryVersionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKey:
-            r"""Call the update crypto key primary
-            version method over HTTP.
-
-                Args:
-                    request (~.service.UpdateCryptoKeyPrimaryVersionRequest):
-                        The request object. Request message for
-                    [KeyManagementService.UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion].
-                    retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                        should be retried.
-                    timeout (float): The timeout for this request.
-                    metadata (Sequence[Tuple[str, str]]): Strings which should be
-                        sent along with the request as metadata.
-
-                Returns:
-                    ~.resources.CryptoKey:
-                        A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents
-                    a logical key that can be used for cryptographic
-                    operations.
-
-                    A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made up
-                    of zero or more
-                    [versions][google.cloud.kms.v1.CryptoKeyVersion], which
-                    represent the actual key material used in cryptographic
-                    operations.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*}:updatePrimaryVersion",
-                    "body": "*",
-                },
-            ]
-            request, metadata = self._interceptor.pre_update_crypto_key_primary_version(
-                request, metadata
-            )
-            pb_request = service.UpdateCryptoKeyPrimaryVersionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKey()
-            pb_resp = resources.CryptoKey.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_update_crypto_key_primary_version(resp)
-            return resp
-
-    class _UpdateCryptoKeyVersion(KeyManagementServiceRestStub):
-        def __hash__(self):
-            return hash("UpdateCryptoKeyVersion")
-
-        __REQUIRED_FIELDS_DEFAULT_VALUES: Dict[str, Any] = {
-            "updateMask": {},
-        }
-
-        @classmethod
-        def _get_unset_required_fields(cls, message_dict):
-            return {
-                k: v
-                for k, v in cls.__REQUIRED_FIELDS_DEFAULT_VALUES.items()
-                if k not in message_dict
-            }
-
-        def __call__(
-            self,
-            request: service.UpdateCryptoKeyVersionRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> resources.CryptoKeyVersion:
-            r"""Call the update crypto key version method over HTTP.
-
-            Args:
-                request (~.service.UpdateCryptoKeyVersionRequest):
-                    The request object. Request message for
-                [KeyManagementService.UpdateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyVersion].
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                ~.resources.CryptoKeyVersion:
-                    A
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                represents an individual cryptographic key, and the
-                associated key material.
-
-                An
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                version can be used for cryptographic operations.
-
-                For security reasons, the raw cryptographic key material
-                represented by a
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                can never be viewed or exported. It can only be used to
-                encrypt, decrypt, or sign data when an authorized user
-                or application invokes Cloud KMS.
-
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "patch",
-                    "uri": "/v1/{crypto_key_version.name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}",
-                    "body": "crypto_key_version",
-                },
-            ]
-            request, metadata = self._interceptor.pre_update_crypto_key_version(
-                request, metadata
-            )
-            pb_request = service.UpdateCryptoKeyVersionRequest.pb(request)
-            transcoded_request = path_template.transcode(http_options, pb_request)
-
-            # Jsonify the request body
-
-            body = json_format.MessageToJson(
-                transcoded_request["body"],
-                including_default_value_fields=False,
-                use_integers_for_enums=True,
-            )
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(
-                json_format.MessageToJson(
-                    transcoded_request["query_params"],
-                    including_default_value_fields=False,
-                    use_integers_for_enums=True,
-                )
-            )
-            query_params.update(self._get_unset_required_fields(query_params))
-
-            query_params["$alt"] = "json;enum-encoding=int"
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params, strict=True),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            # Return the response
-            resp = resources.CryptoKeyVersion()
-            pb_resp = resources.CryptoKeyVersion.pb(resp)
-
-            json_format.Parse(response.content, pb_resp, ignore_unknown_fields=True)
-            resp = self._interceptor.post_update_crypto_key_version(resp)
-            return resp
-
-    @property
-    def asymmetric_decrypt(
-        self,
-    ) -> Callable[
-        [service.AsymmetricDecryptRequest], service.AsymmetricDecryptResponse
-    ]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._AsymmetricDecrypt(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def asymmetric_sign(
-        self,
-    ) -> Callable[[service.AsymmetricSignRequest], service.AsymmetricSignResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._AsymmetricSign(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def create_crypto_key(
-        self,
-    ) -> Callable[[service.CreateCryptoKeyRequest], resources.CryptoKey]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._CreateCryptoKey(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def create_crypto_key_version(
-        self,
-    ) -> Callable[[service.CreateCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._CreateCryptoKeyVersion(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def create_import_job(
-        self,
-    ) -> Callable[[service.CreateImportJobRequest], resources.ImportJob]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._CreateImportJob(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def create_key_ring(
-        self,
-    ) -> Callable[[service.CreateKeyRingRequest], resources.KeyRing]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._CreateKeyRing(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def decrypt(self) -> Callable[[service.DecryptRequest], service.DecryptResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._Decrypt(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def destroy_crypto_key_version(
-        self,
-    ) -> Callable[[service.DestroyCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._DestroyCryptoKeyVersion(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def encrypt(self) -> Callable[[service.EncryptRequest], service.EncryptResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._Encrypt(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def generate_random_bytes(
-        self,
-    ) -> Callable[
-        [service.GenerateRandomBytesRequest], service.GenerateRandomBytesResponse
-    ]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GenerateRandomBytes(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_crypto_key(
-        self,
-    ) -> Callable[[service.GetCryptoKeyRequest], resources.CryptoKey]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GetCryptoKey(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_crypto_key_version(
-        self,
-    ) -> Callable[[service.GetCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GetCryptoKeyVersion(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_import_job(
-        self,
-    ) -> Callable[[service.GetImportJobRequest], resources.ImportJob]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GetImportJob(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_key_ring(self) -> Callable[[service.GetKeyRingRequest], resources.KeyRing]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GetKeyRing(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_public_key(
-        self,
-    ) -> Callable[[service.GetPublicKeyRequest], resources.PublicKey]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._GetPublicKey(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def import_crypto_key_version(
-        self,
-    ) -> Callable[[service.ImportCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._ImportCryptoKeyVersion(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def list_crypto_keys(
-        self,
-    ) -> Callable[[service.ListCryptoKeysRequest], service.ListCryptoKeysResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._ListCryptoKeys(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def list_crypto_key_versions(
-        self,
-    ) -> Callable[
-        [service.ListCryptoKeyVersionsRequest], service.ListCryptoKeyVersionsResponse
-    ]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._ListCryptoKeyVersions(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def list_import_jobs(
-        self,
-    ) -> Callable[[service.ListImportJobsRequest], service.ListImportJobsResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._ListImportJobs(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def list_key_rings(
-        self,
-    ) -> Callable[[service.ListKeyRingsRequest], service.ListKeyRingsResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._ListKeyRings(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def mac_sign(self) -> Callable[[service.MacSignRequest], service.MacSignResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._MacSign(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def mac_verify(
-        self,
-    ) -> Callable[[service.MacVerifyRequest], service.MacVerifyResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._MacVerify(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def raw_decrypt(
-        self,
-    ) -> Callable[[service.RawDecryptRequest], service.RawDecryptResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._RawDecrypt(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def raw_encrypt(
-        self,
-    ) -> Callable[[service.RawEncryptRequest], service.RawEncryptResponse]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._RawEncrypt(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def restore_crypto_key_version(
-        self,
-    ) -> Callable[[service.RestoreCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._RestoreCryptoKeyVersion(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def update_crypto_key(
-        self,
-    ) -> Callable[[service.UpdateCryptoKeyRequest], resources.CryptoKey]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._UpdateCryptoKey(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def update_crypto_key_primary_version(
-        self,
-    ) -> Callable[[service.UpdateCryptoKeyPrimaryVersionRequest], resources.CryptoKey]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._UpdateCryptoKeyPrimaryVersion(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def update_crypto_key_version(
-        self,
-    ) -> Callable[[service.UpdateCryptoKeyVersionRequest], resources.CryptoKeyVersion]:
-        # The return type is fine, but mypy isn't sophisticated enough to determine what's going on here.
-        # In C++ this would require a dynamic_cast
-        return self._UpdateCryptoKeyVersion(self._session, self._host, self._interceptor)  # type: ignore
-
-    @property
-    def get_location(self):
-        return self._GetLocation(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _GetLocation(KeyManagementServiceRestStub):
-        def __call__(
-            self,
-            request: locations_pb2.GetLocationRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> locations_pb2.Location:
-            r"""Call the get location method over HTTP.
-
-            Args:
-                request (locations_pb2.GetLocationRequest):
-                    The request object for GetLocation method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                locations_pb2.Location: Response from GetLocation method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*/locations/*}",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_get_location(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = locations_pb2.Location()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_get_location(resp)
-            return resp
-
-    @property
-    def list_locations(self):
-        return self._ListLocations(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _ListLocations(KeyManagementServiceRestStub):
-        def __call__(
-            self,
-            request: locations_pb2.ListLocationsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> locations_pb2.ListLocationsResponse:
-            r"""Call the list locations method over HTTP.
-
-            Args:
-                request (locations_pb2.ListLocationsRequest):
-                    The request object for ListLocations method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                locations_pb2.ListLocationsResponse: Response from ListLocations method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{name=projects/*}/locations",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_list_locations(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = locations_pb2.ListLocationsResponse()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_list_locations(resp)
-            return resp
-
-    @property
-    def get_iam_policy(self):
-        return self._GetIamPolicy(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _GetIamPolicy(KeyManagementServiceRestStub):
-        def __call__(
-            self,
-            request: iam_policy_pb2.GetIamPolicyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> policy_pb2.Policy:
-            r"""Call the get iam policy method over HTTP.
-
-            Args:
-                request (iam_policy_pb2.GetIamPolicyRequest):
-                    The request object for GetIamPolicy method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                policy_pb2.Policy: Response from GetIamPolicy method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/cryptoKeys/*}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/importJobs/*}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConfig}:getIamPolicy",
-                },
-                {
-                    "method": "get",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConnections/*}:getIamPolicy",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_get_iam_policy(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = policy_pb2.Policy()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_get_iam_policy(resp)
-            return resp
-
-    @property
-    def set_iam_policy(self):
-        return self._SetIamPolicy(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _SetIamPolicy(KeyManagementServiceRestStub):
-        def __call__(
-            self,
-            request: iam_policy_pb2.SetIamPolicyRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> policy_pb2.Policy:
-            r"""Call the set iam policy method over HTTP.
-
-            Args:
-                request (iam_policy_pb2.SetIamPolicyRequest):
-                    The request object for SetIamPolicy method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                policy_pb2.Policy: Response from SetIamPolicy method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/cryptoKeys/*}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/importJobs/*}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConfig}:setIamPolicy",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConnections/*}:setIamPolicy",
-                    "body": "*",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_set_iam_policy(request, metadata)
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            body = json.dumps(transcoded_request["body"])
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = policy_pb2.Policy()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_set_iam_policy(resp)
-            return resp
-
-    @property
-    def test_iam_permissions(self):
-        return self._TestIamPermissions(self._session, self._host, self._interceptor)  # type: ignore
-
-    class _TestIamPermissions(KeyManagementServiceRestStub):
-        def __call__(
-            self,
-            request: iam_policy_pb2.TestIamPermissionsRequest,
-            *,
-            retry: OptionalRetry = gapic_v1.method.DEFAULT,
-            timeout: Optional[float] = None,
-            metadata: Sequence[Tuple[str, str]] = (),
-        ) -> iam_policy_pb2.TestIamPermissionsResponse:
-            r"""Call the test iam permissions method over HTTP.
-
-            Args:
-                request (iam_policy_pb2.TestIamPermissionsRequest):
-                    The request object for TestIamPermissions method.
-                retry (google.api_core.retry.Retry): Designation of what errors, if any,
-                    should be retried.
-                timeout (float): The timeout for this request.
-                metadata (Sequence[Tuple[str, str]]): Strings which should be
-                    sent along with the request as metadata.
-
-            Returns:
-                iam_policy_pb2.TestIamPermissionsResponse: Response from TestIamPermissions method.
-            """
-
-            http_options: List[Dict[str, str]] = [
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/cryptoKeys/*}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/keyRings/*/importJobs/*}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConfig}:testIamPermissions",
-                    "body": "*",
-                },
-                {
-                    "method": "post",
-                    "uri": "/v1/{resource=projects/*/locations/*/ekmConnections/*}:testIamPermissions",
-                    "body": "*",
-                },
-            ]
-
-            request, metadata = self._interceptor.pre_test_iam_permissions(
-                request, metadata
-            )
-            request_kwargs = json_format.MessageToDict(request)
-            transcoded_request = path_template.transcode(http_options, **request_kwargs)
-
-            body = json.dumps(transcoded_request["body"])
-            uri = transcoded_request["uri"]
-            method = transcoded_request["method"]
-
-            # Jsonify the query params
-            query_params = json.loads(json.dumps(transcoded_request["query_params"]))
-
-            # Send the request
-            headers = dict(metadata)
-            headers["Content-Type"] = "application/json"
-
-            response = getattr(self._session, method)(
-                "{host}{uri}".format(host=self._host, uri=uri),
-                timeout=timeout,
-                headers=headers,
-                params=rest_helpers.flatten_query_params(query_params),
-                data=body,
-            )
-
-            # In case of error, raise the appropriate core_exceptions.GoogleAPICallError exception
-            # subclass.
-            if response.status_code >= 400:
-                raise core_exceptions.from_http_response(response)
-
-            resp = iam_policy_pb2.TestIamPermissionsResponse()
-            resp = json_format.Parse(response.content.decode("utf-8"), resp)
-            resp = self._interceptor.post_test_iam_permissions(resp)
-            return resp
-
-    @property
-    def kind(self) -> str:
-        return "rest"
-
-    def close(self):
-        self._session.close()
-
-
-__all__ = ("KeyManagementServiceRestTransport",)
diff --git a/google/cloud/kms_v1/types/__init__.py b/google/cloud/kms_v1/types/__init__.py
deleted file mode 100644
index f391c4a4..00000000
--- a/google/cloud/kms_v1/types/__init__.py
+++ /dev/null
@@ -1,152 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from .ekm_service import (
-    Certificate,
-    CreateEkmConnectionRequest,
-    EkmConfig,
-    EkmConnection,
-    GetEkmConfigRequest,
-    GetEkmConnectionRequest,
-    ListEkmConnectionsRequest,
-    ListEkmConnectionsResponse,
-    UpdateEkmConfigRequest,
-    UpdateEkmConnectionRequest,
-    VerifyConnectivityRequest,
-    VerifyConnectivityResponse,
-)
-from .resources import (
-    CryptoKey,
-    CryptoKeyVersion,
-    CryptoKeyVersionTemplate,
-    ExternalProtectionLevelOptions,
-    ImportJob,
-    KeyOperationAttestation,
-    KeyRing,
-    ProtectionLevel,
-    PublicKey,
-)
-from .service import (
-    AsymmetricDecryptRequest,
-    AsymmetricDecryptResponse,
-    AsymmetricSignRequest,
-    AsymmetricSignResponse,
-    CreateCryptoKeyRequest,
-    CreateCryptoKeyVersionRequest,
-    CreateImportJobRequest,
-    CreateKeyRingRequest,
-    DecryptRequest,
-    DecryptResponse,
-    DestroyCryptoKeyVersionRequest,
-    Digest,
-    EncryptRequest,
-    EncryptResponse,
-    GenerateRandomBytesRequest,
-    GenerateRandomBytesResponse,
-    GetCryptoKeyRequest,
-    GetCryptoKeyVersionRequest,
-    GetImportJobRequest,
-    GetKeyRingRequest,
-    GetPublicKeyRequest,
-    ImportCryptoKeyVersionRequest,
-    ListCryptoKeysRequest,
-    ListCryptoKeysResponse,
-    ListCryptoKeyVersionsRequest,
-    ListCryptoKeyVersionsResponse,
-    ListImportJobsRequest,
-    ListImportJobsResponse,
-    ListKeyRingsRequest,
-    ListKeyRingsResponse,
-    LocationMetadata,
-    MacSignRequest,
-    MacSignResponse,
-    MacVerifyRequest,
-    MacVerifyResponse,
-    RawDecryptRequest,
-    RawDecryptResponse,
-    RawEncryptRequest,
-    RawEncryptResponse,
-    RestoreCryptoKeyVersionRequest,
-    UpdateCryptoKeyPrimaryVersionRequest,
-    UpdateCryptoKeyRequest,
-    UpdateCryptoKeyVersionRequest,
-)
-
-__all__ = (
-    "Certificate",
-    "CreateEkmConnectionRequest",
-    "EkmConfig",
-    "EkmConnection",
-    "GetEkmConfigRequest",
-    "GetEkmConnectionRequest",
-    "ListEkmConnectionsRequest",
-    "ListEkmConnectionsResponse",
-    "UpdateEkmConfigRequest",
-    "UpdateEkmConnectionRequest",
-    "VerifyConnectivityRequest",
-    "VerifyConnectivityResponse",
-    "CryptoKey",
-    "CryptoKeyVersion",
-    "CryptoKeyVersionTemplate",
-    "ExternalProtectionLevelOptions",
-    "ImportJob",
-    "KeyOperationAttestation",
-    "KeyRing",
-    "PublicKey",
-    "ProtectionLevel",
-    "AsymmetricDecryptRequest",
-    "AsymmetricDecryptResponse",
-    "AsymmetricSignRequest",
-    "AsymmetricSignResponse",
-    "CreateCryptoKeyRequest",
-    "CreateCryptoKeyVersionRequest",
-    "CreateImportJobRequest",
-    "CreateKeyRingRequest",
-    "DecryptRequest",
-    "DecryptResponse",
-    "DestroyCryptoKeyVersionRequest",
-    "Digest",
-    "EncryptRequest",
-    "EncryptResponse",
-    "GenerateRandomBytesRequest",
-    "GenerateRandomBytesResponse",
-    "GetCryptoKeyRequest",
-    "GetCryptoKeyVersionRequest",
-    "GetImportJobRequest",
-    "GetKeyRingRequest",
-    "GetPublicKeyRequest",
-    "ImportCryptoKeyVersionRequest",
-    "ListCryptoKeysRequest",
-    "ListCryptoKeysResponse",
-    "ListCryptoKeyVersionsRequest",
-    "ListCryptoKeyVersionsResponse",
-    "ListImportJobsRequest",
-    "ListImportJobsResponse",
-    "ListKeyRingsRequest",
-    "ListKeyRingsResponse",
-    "LocationMetadata",
-    "MacSignRequest",
-    "MacSignResponse",
-    "MacVerifyRequest",
-    "MacVerifyResponse",
-    "RawDecryptRequest",
-    "RawDecryptResponse",
-    "RawEncryptRequest",
-    "RawEncryptResponse",
-    "RestoreCryptoKeyVersionRequest",
-    "UpdateCryptoKeyPrimaryVersionRequest",
-    "UpdateCryptoKeyRequest",
-    "UpdateCryptoKeyVersionRequest",
-)
diff --git a/google/cloud/kms_v1/types/ekm_service.py b/google/cloud/kms_v1/types/ekm_service.py
deleted file mode 100644
index 5834e261..00000000
--- a/google/cloud/kms_v1/types/ekm_service.py
+++ /dev/null
@@ -1,553 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from __future__ import annotations
-
-from typing import MutableMapping, MutableSequence
-
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import timestamp_pb2  # type: ignore
-import proto  # type: ignore
-
-__protobuf__ = proto.module(
-    package="google.cloud.kms.v1",
-    manifest={
-        "ListEkmConnectionsRequest",
-        "ListEkmConnectionsResponse",
-        "GetEkmConnectionRequest",
-        "CreateEkmConnectionRequest",
-        "UpdateEkmConnectionRequest",
-        "GetEkmConfigRequest",
-        "UpdateEkmConfigRequest",
-        "Certificate",
-        "EkmConnection",
-        "EkmConfig",
-        "VerifyConnectivityRequest",
-        "VerifyConnectivityResponse",
-    },
-)
-
-
-class ListEkmConnectionsRequest(proto.Message):
-    r"""Request message for
-    [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-
-    Attributes:
-        parent (str):
-            Required. The resource name of the location associated with
-            the [EkmConnections][google.cloud.kms.v1.EkmConnection] to
-            list, in the format ``projects/*/locations/*``.
-        page_size (int):
-            Optional. Optional limit on the number of
-            [EkmConnections][google.cloud.kms.v1.EkmConnection] to
-            include in the response. Further
-            [EkmConnections][google.cloud.kms.v1.EkmConnection] can
-            subsequently be obtained by including the
-            [ListEkmConnectionsResponse.next_page_token][google.cloud.kms.v1.ListEkmConnectionsResponse.next_page_token]
-            in a subsequent request. If unspecified, the server will
-            pick an appropriate default.
-        page_token (str):
-            Optional. Optional pagination token, returned earlier via
-            [ListEkmConnectionsResponse.next_page_token][google.cloud.kms.v1.ListEkmConnectionsResponse.next_page_token].
-        filter (str):
-            Optional. Only include resources that match the filter in
-            the response. For more information, see `Sorting and
-            filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-        order_by (str):
-            Optional. Specify how the results should be sorted. If not
-            specified, the results will be sorted in the default order.
-            For more information, see `Sorting and filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    page_size: int = proto.Field(
-        proto.INT32,
-        number=2,
-    )
-    page_token: str = proto.Field(
-        proto.STRING,
-        number=3,
-    )
-    filter: str = proto.Field(
-        proto.STRING,
-        number=4,
-    )
-    order_by: str = proto.Field(
-        proto.STRING,
-        number=5,
-    )
-
-
-class ListEkmConnectionsResponse(proto.Message):
-    r"""Response message for
-    [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
-
-    Attributes:
-        ekm_connections (MutableSequence[google.cloud.kms_v1.types.EkmConnection]):
-            The list of
-            [EkmConnections][google.cloud.kms.v1.EkmConnection].
-        next_page_token (str):
-            A token to retrieve next page of results. Pass this value in
-            [ListEkmConnectionsRequest.page_token][google.cloud.kms.v1.ListEkmConnectionsRequest.page_token]
-            to retrieve the next page of results.
-        total_size (int):
-            The total number of
-            [EkmConnections][google.cloud.kms.v1.EkmConnection] that
-            matched the query.
-    """
-
-    @property
-    def raw_page(self):
-        return self
-
-    ekm_connections: MutableSequence["EkmConnection"] = proto.RepeatedField(
-        proto.MESSAGE,
-        number=1,
-        message="EkmConnection",
-    )
-    next_page_token: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    total_size: int = proto.Field(
-        proto.INT32,
-        number=3,
-    )
-
-
-class GetEkmConnectionRequest(proto.Message):
-    r"""Request message for
-    [EkmService.GetEkmConnection][google.cloud.kms.v1.EkmService.GetEkmConnection].
-
-    Attributes:
-        name (str):
-            Required. The [name][google.cloud.kms.v1.EkmConnection.name]
-            of the [EkmConnection][google.cloud.kms.v1.EkmConnection] to
-            get.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class CreateEkmConnectionRequest(proto.Message):
-    r"""Request message for
-    [EkmService.CreateEkmConnection][google.cloud.kms.v1.EkmService.CreateEkmConnection].
-
-    Attributes:
-        parent (str):
-            Required. The resource name of the location associated with
-            the [EkmConnection][google.cloud.kms.v1.EkmConnection], in
-            the format ``projects/*/locations/*``.
-        ekm_connection_id (str):
-            Required. It must be unique within a location and match the
-            regular expression ``[a-zA-Z0-9_-]{1,63}``.
-        ekm_connection (google.cloud.kms_v1.types.EkmConnection):
-            Required. An
-            [EkmConnection][google.cloud.kms.v1.EkmConnection] with
-            initial field values.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    ekm_connection_id: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    ekm_connection: "EkmConnection" = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message="EkmConnection",
-    )
-
-
-class UpdateEkmConnectionRequest(proto.Message):
-    r"""Request message for
-    [EkmService.UpdateEkmConnection][google.cloud.kms.v1.EkmService.UpdateEkmConnection].
-
-    Attributes:
-        ekm_connection (google.cloud.kms_v1.types.EkmConnection):
-            Required. [EkmConnection][google.cloud.kms.v1.EkmConnection]
-            with updated values.
-        update_mask (google.protobuf.field_mask_pb2.FieldMask):
-            Required. List of fields to be updated in
-            this request.
-    """
-
-    ekm_connection: "EkmConnection" = proto.Field(
-        proto.MESSAGE,
-        number=1,
-        message="EkmConnection",
-    )
-    update_mask: field_mask_pb2.FieldMask = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=field_mask_pb2.FieldMask,
-    )
-
-
-class GetEkmConfigRequest(proto.Message):
-    r"""Request message for
-    [EkmService.GetEkmConfig][google.cloud.kms.v1.EkmService.GetEkmConfig].
-
-    Attributes:
-        name (str):
-            Required. The [name][google.cloud.kms.v1.EkmConfig.name] of
-            the [EkmConfig][google.cloud.kms.v1.EkmConfig] to get.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class UpdateEkmConfigRequest(proto.Message):
-    r"""Request message for
-    [EkmService.UpdateEkmConfig][google.cloud.kms.v1.EkmService.UpdateEkmConfig].
-
-    Attributes:
-        ekm_config (google.cloud.kms_v1.types.EkmConfig):
-            Required. [EkmConfig][google.cloud.kms.v1.EkmConfig] with
-            updated values.
-        update_mask (google.protobuf.field_mask_pb2.FieldMask):
-            Required. List of fields to be updated in
-            this request.
-    """
-
-    ekm_config: "EkmConfig" = proto.Field(
-        proto.MESSAGE,
-        number=1,
-        message="EkmConfig",
-    )
-    update_mask: field_mask_pb2.FieldMask = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=field_mask_pb2.FieldMask,
-    )
-
-
-class Certificate(proto.Message):
-    r"""A [Certificate][google.cloud.kms.v1.Certificate] represents an X.509
-    certificate used to authenticate HTTPS connections to EKM replicas.
-
-    Attributes:
-        raw_der (bytes):
-            Required. The raw certificate bytes in DER
-            format.
-        parsed (bool):
-            Output only. True if the certificate was
-            parsed successfully.
-        issuer (str):
-            Output only. The issuer distinguished name in RFC 2253
-            format. Only present if
-            [parsed][google.cloud.kms.v1.Certificate.parsed] is true.
-        subject (str):
-            Output only. The subject distinguished name in RFC 2253
-            format. Only present if
-            [parsed][google.cloud.kms.v1.Certificate.parsed] is true.
-        subject_alternative_dns_names (MutableSequence[str]):
-            Output only. The subject Alternative DNS names. Only present
-            if [parsed][google.cloud.kms.v1.Certificate.parsed] is true.
-        not_before_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The certificate is not valid before this time.
-            Only present if
-            [parsed][google.cloud.kms.v1.Certificate.parsed] is true.
-        not_after_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The certificate is not valid after this time.
-            Only present if
-            [parsed][google.cloud.kms.v1.Certificate.parsed] is true.
-        serial_number (str):
-            Output only. The certificate serial number as a hex string.
-            Only present if
-            [parsed][google.cloud.kms.v1.Certificate.parsed] is true.
-        sha256_fingerprint (str):
-            Output only. The SHA-256 certificate fingerprint as a hex
-            string. Only present if
-            [parsed][google.cloud.kms.v1.Certificate.parsed] is true.
-    """
-
-    raw_der: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-    )
-    parsed: bool = proto.Field(
-        proto.BOOL,
-        number=2,
-    )
-    issuer: str = proto.Field(
-        proto.STRING,
-        number=3,
-    )
-    subject: str = proto.Field(
-        proto.STRING,
-        number=4,
-    )
-    subject_alternative_dns_names: MutableSequence[str] = proto.RepeatedField(
-        proto.STRING,
-        number=5,
-    )
-    not_before_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=6,
-        message=timestamp_pb2.Timestamp,
-    )
-    not_after_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=7,
-        message=timestamp_pb2.Timestamp,
-    )
-    serial_number: str = proto.Field(
-        proto.STRING,
-        number=8,
-    )
-    sha256_fingerprint: str = proto.Field(
-        proto.STRING,
-        number=9,
-    )
-
-
-class EkmConnection(proto.Message):
-    r"""An [EkmConnection][google.cloud.kms.v1.EkmConnection] represents an
-    individual EKM connection. It can be used for creating
-    [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-    [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] with a
-    [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] of
-    [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC], as
-    well as performing cryptographic operations using keys created
-    within the [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-    Attributes:
-        name (str):
-            Output only. The resource name for the
-            [EkmConnection][google.cloud.kms.v1.EkmConnection] in the
-            format ``projects/*/locations/*/ekmConnections/*``.
-        create_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time at which the
-            [EkmConnection][google.cloud.kms.v1.EkmConnection] was
-            created.
-        service_resolvers (MutableSequence[google.cloud.kms_v1.types.EkmConnection.ServiceResolver]):
-            A list of
-            [ServiceResolvers][google.cloud.kms.v1.EkmConnection.ServiceResolver]
-            where the EKM can be reached. There should be one
-            ServiceResolver per EKM replica. Currently, only a single
-            [ServiceResolver][google.cloud.kms.v1.EkmConnection.ServiceResolver]
-            is supported.
-        etag (str):
-            Optional. Etag of the currently stored
-            [EkmConnection][google.cloud.kms.v1.EkmConnection].
-        key_management_mode (google.cloud.kms_v1.types.EkmConnection.KeyManagementMode):
-            Optional. Describes who can perform control plane operations
-            on the EKM. If unset, this defaults to
-            [MANUAL][google.cloud.kms.v1.EkmConnection.KeyManagementMode.MANUAL].
-        crypto_space_path (str):
-            Optional. Identifies the EKM Crypto Space that this
-            [EkmConnection][google.cloud.kms.v1.EkmConnection] maps to.
-            Note: This field is required if
-            [KeyManagementMode][google.cloud.kms.v1.EkmConnection.KeyManagementMode]
-            is
-            [CLOUD_KMS][google.cloud.kms.v1.EkmConnection.KeyManagementMode.CLOUD_KMS].
-    """
-
-    class KeyManagementMode(proto.Enum):
-        r"""[KeyManagementMode][google.cloud.kms.v1.EkmConnection.KeyManagementMode]
-        describes who can perform control plane cryptographic operations
-        using this [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        Values:
-            KEY_MANAGEMENT_MODE_UNSPECIFIED (0):
-                Not specified.
-            MANUAL (1):
-                EKM-side key management operations on
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] created with
-                this [EkmConnection][google.cloud.kms.v1.EkmConnection] must
-                be initiated from the EKM directly and cannot be performed
-                from Cloud KMS. This means that:
-
-                -  When creating a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   associated with this
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection], the
-                   caller must supply the key path of pre-existing external
-                   key material that will be linked to the
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-                -  Destruction of external key material cannot be requested
-                   via the Cloud KMS API and must be performed directly in
-                   the EKM.
-                -  Automatic rotation of key material is not supported.
-            CLOUD_KMS (2):
-                All [CryptoKeys][google.cloud.kms.v1.CryptoKey] created with
-                this [EkmConnection][google.cloud.kms.v1.EkmConnection] use
-                EKM-side key management operations initiated from Cloud KMS.
-                This means that:
-
-                -  When a
-                   [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-                   associated with this
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection] is
-                   created, the EKM automatically generates new key material
-                   and a new key path. The caller cannot supply the key path
-                   of pre-existing external key material.
-                -  Destruction of external key material associated with this
-                   [EkmConnection][google.cloud.kms.v1.EkmConnection] can be
-                   requested by calling
-                   [DestroyCryptoKeyVersion][EkmService.DestroyCryptoKeyVersion].
-                -  Automatic rotation of key material is supported.
-        """
-        KEY_MANAGEMENT_MODE_UNSPECIFIED = 0
-        MANUAL = 1
-        CLOUD_KMS = 2
-
-    class ServiceResolver(proto.Message):
-        r"""A
-        [ServiceResolver][google.cloud.kms.v1.EkmConnection.ServiceResolver]
-        represents an EKM replica that can be reached within an
-        [EkmConnection][google.cloud.kms.v1.EkmConnection].
-
-        Attributes:
-            service_directory_service (str):
-                Required. The resource name of the Service Directory service
-                pointing to an EKM replica, in the format
-                ``projects/*/locations/*/namespaces/*/services/*``.
-            endpoint_filter (str):
-                Optional. The filter applied to the endpoints
-                of the resolved service. If no filter is
-                specified, all endpoints will be considered. An
-                endpoint will be chosen arbitrarily from the
-                filtered list for each request.
-
-                For endpoint filter syntax and examples, see
-                https://cloud.google.com/service-directory/docs/reference/rpc/google.cloud.servicedirectory.v1#resolveservicerequest.
-            hostname (str):
-                Required. The hostname of the EKM replica
-                used at TLS and HTTP layers.
-            server_certificates (MutableSequence[google.cloud.kms_v1.types.Certificate]):
-                Required. A list of leaf server certificates used to
-                authenticate HTTPS connections to the EKM replica.
-                Currently, a maximum of 10
-                [Certificate][google.cloud.kms.v1.Certificate] is supported.
-        """
-
-        service_directory_service: str = proto.Field(
-            proto.STRING,
-            number=1,
-        )
-        endpoint_filter: str = proto.Field(
-            proto.STRING,
-            number=2,
-        )
-        hostname: str = proto.Field(
-            proto.STRING,
-            number=3,
-        )
-        server_certificates: MutableSequence["Certificate"] = proto.RepeatedField(
-            proto.MESSAGE,
-            number=4,
-            message="Certificate",
-        )
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    create_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=timestamp_pb2.Timestamp,
-    )
-    service_resolvers: MutableSequence[ServiceResolver] = proto.RepeatedField(
-        proto.MESSAGE,
-        number=3,
-        message=ServiceResolver,
-    )
-    etag: str = proto.Field(
-        proto.STRING,
-        number=5,
-    )
-    key_management_mode: KeyManagementMode = proto.Field(
-        proto.ENUM,
-        number=6,
-        enum=KeyManagementMode,
-    )
-    crypto_space_path: str = proto.Field(
-        proto.STRING,
-        number=7,
-    )
-
-
-class EkmConfig(proto.Message):
-    r"""An [EkmConfig][google.cloud.kms.v1.EkmConfig] is a singleton
-    resource that represents configuration parameters that apply to all
-    [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-    [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] with a
-    [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] of
-    [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC] in a
-    given project and location.
-
-    Attributes:
-        name (str):
-            Output only. The resource name for the
-            [EkmConfig][google.cloud.kms.v1.EkmConfig] in the format
-            ``projects/*/locations/*/ekmConfig``.
-        default_ekm_connection (str):
-            Optional. Resource name of the default
-            [EkmConnection][google.cloud.kms.v1.EkmConnection]. Setting
-            this field to the empty string removes the default.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    default_ekm_connection: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-
-
-class VerifyConnectivityRequest(proto.Message):
-    r"""Request message for
-    [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-
-    Attributes:
-        name (str):
-            Required. The [name][google.cloud.kms.v1.EkmConnection.name]
-            of the [EkmConnection][google.cloud.kms.v1.EkmConnection] to
-            verify.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class VerifyConnectivityResponse(proto.Message):
-    r"""Response message for
-    [EkmService.VerifyConnectivity][google.cloud.kms.v1.EkmService.VerifyConnectivity].
-
-    """
-
-
-__all__ = tuple(sorted(__protobuf__.manifest))
diff --git a/google/cloud/kms_v1/types/resources.py b/google/cloud/kms_v1/types/resources.py
deleted file mode 100644
index 66e14752..00000000
--- a/google/cloud/kms_v1/types/resources.py
+++ /dev/null
@@ -1,1250 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from __future__ import annotations
-
-from typing import MutableMapping, MutableSequence
-
-from google.protobuf import duration_pb2  # type: ignore
-from google.protobuf import timestamp_pb2  # type: ignore
-from google.protobuf import wrappers_pb2  # type: ignore
-import proto  # type: ignore
-
-__protobuf__ = proto.module(
-    package="google.cloud.kms.v1",
-    manifest={
-        "ProtectionLevel",
-        "KeyRing",
-        "CryptoKey",
-        "CryptoKeyVersionTemplate",
-        "KeyOperationAttestation",
-        "CryptoKeyVersion",
-        "PublicKey",
-        "ImportJob",
-        "ExternalProtectionLevelOptions",
-    },
-)
-
-
-class ProtectionLevel(proto.Enum):
-    r"""[ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] specifies how
-    cryptographic operations are performed. For more information, see
-    [Protection levels]
-    (https://cloud.google.com/kms/docs/algorithms#protection_levels).
-
-    Values:
-        PROTECTION_LEVEL_UNSPECIFIED (0):
-            Not specified.
-        SOFTWARE (1):
-            Crypto operations are performed in software.
-        HSM (2):
-            Crypto operations are performed in a Hardware
-            Security Module.
-        EXTERNAL (3):
-            Crypto operations are performed by an
-            external key manager.
-        EXTERNAL_VPC (4):
-            Crypto operations are performed in an
-            EKM-over-VPC backend.
-    """
-    PROTECTION_LEVEL_UNSPECIFIED = 0
-    SOFTWARE = 1
-    HSM = 2
-    EXTERNAL = 3
-    EXTERNAL_VPC = 4
-
-
-class KeyRing(proto.Message):
-    r"""A [KeyRing][google.cloud.kms.v1.KeyRing] is a toplevel logical
-    grouping of [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-
-    Attributes:
-        name (str):
-            Output only. The resource name for the
-            [KeyRing][google.cloud.kms.v1.KeyRing] in the format
-            ``projects/*/locations/*/keyRings/*``.
-        create_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time at which this
-            [KeyRing][google.cloud.kms.v1.KeyRing] was created.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    create_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=timestamp_pb2.Timestamp,
-    )
-
-
-class CryptoKey(proto.Message):
-    r"""A [CryptoKey][google.cloud.kms.v1.CryptoKey] represents a logical
-    key that can be used for cryptographic operations.
-
-    A [CryptoKey][google.cloud.kms.v1.CryptoKey] is made up of zero or
-    more [versions][google.cloud.kms.v1.CryptoKeyVersion], which
-    represent the actual key material used in cryptographic operations.
-
-
-    .. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
-
-    Attributes:
-        name (str):
-            Output only. The resource name for this
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] in the format
-            ``projects/*/locations/*/keyRings/*/cryptoKeys/*``.
-        primary (google.cloud.kms_v1.types.CryptoKeyVersion):
-            Output only. A copy of the "primary"
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            that will be used by
-            [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]
-            when this [CryptoKey][google.cloud.kms.v1.CryptoKey] is
-            given in
-            [EncryptRequest.name][google.cloud.kms.v1.EncryptRequest.name].
-
-            The [CryptoKey][google.cloud.kms.v1.CryptoKey]'s primary
-            version can be updated via
-            [UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion].
-
-            Keys with [purpose][google.cloud.kms.v1.CryptoKey.purpose]
-            [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT]
-            may have a primary. For other keys, this field will be
-            omitted.
-        purpose (google.cloud.kms_v1.types.CryptoKey.CryptoKeyPurpose):
-            Immutable. The immutable purpose of this
-            [CryptoKey][google.cloud.kms.v1.CryptoKey].
-        create_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time at which this
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] was created.
-        next_rotation_time (google.protobuf.timestamp_pb2.Timestamp):
-            At
-            [next_rotation_time][google.cloud.kms.v1.CryptoKey.next_rotation_time],
-            the Key Management Service will automatically:
-
-            1. Create a new version of this
-               [CryptoKey][google.cloud.kms.v1.CryptoKey].
-            2. Mark the new version as primary.
-
-            Key rotations performed manually via
-            [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion]
-            and
-            [UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion]
-            do not affect
-            [next_rotation_time][google.cloud.kms.v1.CryptoKey.next_rotation_time].
-
-            Keys with [purpose][google.cloud.kms.v1.CryptoKey.purpose]
-            [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT]
-            support automatic rotation. For other keys, this field must
-            be omitted.
-        rotation_period (google.protobuf.duration_pb2.Duration):
-            [next_rotation_time][google.cloud.kms.v1.CryptoKey.next_rotation_time]
-            will be advanced by this period when the service
-            automatically rotates a key. Must be at least 24 hours and
-            at most 876,000 hours.
-
-            If
-            [rotation_period][google.cloud.kms.v1.CryptoKey.rotation_period]
-            is set,
-            [next_rotation_time][google.cloud.kms.v1.CryptoKey.next_rotation_time]
-            must also be set.
-
-            Keys with [purpose][google.cloud.kms.v1.CryptoKey.purpose]
-            [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT]
-            support automatic rotation. For other keys, this field must
-            be omitted.
-
-            This field is a member of `oneof`_ ``rotation_schedule``.
-        version_template (google.cloud.kms_v1.types.CryptoKeyVersionTemplate):
-            A template describing settings for new
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            instances. The properties of new
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            instances created by either
-            [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion]
-            or auto-rotation are controlled by this template.
-        labels (MutableMapping[str, str]):
-            Labels with user-defined metadata. For more information, see
-            `Labeling
-            Keys <https://cloud.google.com/kms/docs/labeling-keys>`__.
-        import_only (bool):
-            Immutable. Whether this key may contain
-            imported versions only.
-        destroy_scheduled_duration (google.protobuf.duration_pb2.Duration):
-            Immutable. The period of time that versions of this key
-            spend in the
-            [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
-            state before transitioning to
-            [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED].
-            If not specified at creation time, the default duration is
-            24 hours.
-        crypto_key_backend (str):
-            Immutable. The resource name of the backend environment
-            where the key material for all
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-            associated with this
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] reside and where
-            all related cryptographic operations are performed. Only
-            applicable if
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-            have a
-            [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] of
-            [EXTERNAL_VPC][CryptoKeyVersion.ProtectionLevel.EXTERNAL_VPC],
-            with the resource name in the format
-            ``projects/*/locations/*/ekmConnections/*``. Note, this list
-            is non-exhaustive and may apply to additional
-            [ProtectionLevels][google.cloud.kms.v1.ProtectionLevel] in
-            the future.
-    """
-
-    class CryptoKeyPurpose(proto.Enum):
-        r"""[CryptoKeyPurpose][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose]
-        describes the cryptographic capabilities of a
-        [CryptoKey][google.cloud.kms.v1.CryptoKey]. A given key can only be
-        used for the operations allowed by its purpose. For more
-        information, see `Key
-        purposes <https://cloud.google.com/kms/docs/algorithms#key_purposes>`__.
-
-        Values:
-            CRYPTO_KEY_PURPOSE_UNSPECIFIED (0):
-                Not specified.
-            ENCRYPT_DECRYPT (1):
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this
-                purpose may be used with
-                [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]
-                and
-                [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-            ASYMMETRIC_SIGN (5):
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this
-                purpose may be used with
-                [AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign]
-                and
-                [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-            ASYMMETRIC_DECRYPT (6):
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this
-                purpose may be used with
-                [AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt]
-                and
-                [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-            RAW_ENCRYPT_DECRYPT (7):
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this
-                purpose may be used with
-                [RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt]
-                and
-                [RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-                This purpose is meant to be used for interoperable symmetric
-                encryption and does not support automatic CryptoKey
-                rotation.
-            MAC (9):
-                [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this
-                purpose may be used with
-                [MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-        """
-        CRYPTO_KEY_PURPOSE_UNSPECIFIED = 0
-        ENCRYPT_DECRYPT = 1
-        ASYMMETRIC_SIGN = 5
-        ASYMMETRIC_DECRYPT = 6
-        RAW_ENCRYPT_DECRYPT = 7
-        MAC = 9
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    primary: "CryptoKeyVersion" = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message="CryptoKeyVersion",
-    )
-    purpose: CryptoKeyPurpose = proto.Field(
-        proto.ENUM,
-        number=3,
-        enum=CryptoKeyPurpose,
-    )
-    create_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=5,
-        message=timestamp_pb2.Timestamp,
-    )
-    next_rotation_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=7,
-        message=timestamp_pb2.Timestamp,
-    )
-    rotation_period: duration_pb2.Duration = proto.Field(
-        proto.MESSAGE,
-        number=8,
-        oneof="rotation_schedule",
-        message=duration_pb2.Duration,
-    )
-    version_template: "CryptoKeyVersionTemplate" = proto.Field(
-        proto.MESSAGE,
-        number=11,
-        message="CryptoKeyVersionTemplate",
-    )
-    labels: MutableMapping[str, str] = proto.MapField(
-        proto.STRING,
-        proto.STRING,
-        number=10,
-    )
-    import_only: bool = proto.Field(
-        proto.BOOL,
-        number=13,
-    )
-    destroy_scheduled_duration: duration_pb2.Duration = proto.Field(
-        proto.MESSAGE,
-        number=14,
-        message=duration_pb2.Duration,
-    )
-    crypto_key_backend: str = proto.Field(
-        proto.STRING,
-        number=15,
-    )
-
-
-class CryptoKeyVersionTemplate(proto.Message):
-    r"""A
-    [CryptoKeyVersionTemplate][google.cloud.kms.v1.CryptoKeyVersionTemplate]
-    specifies the properties to use when creating a new
-    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion], either
-    manually with
-    [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion]
-    or automatically as a result of auto-rotation.
-
-    Attributes:
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] to
-            use when creating a
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            based on this template. Immutable. Defaults to
-            [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE].
-        algorithm (google.cloud.kms_v1.types.CryptoKeyVersion.CryptoKeyVersionAlgorithm):
-            Required.
-            [Algorithm][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm]
-            to use when creating a
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            based on this template.
-
-            For backwards compatibility, GOOGLE_SYMMETRIC_ENCRYPTION is
-            implied if both this field is omitted and
-            [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-            is
-            [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-    """
-
-    protection_level: "ProtectionLevel" = proto.Field(
-        proto.ENUM,
-        number=1,
-        enum="ProtectionLevel",
-    )
-    algorithm: "CryptoKeyVersion.CryptoKeyVersionAlgorithm" = proto.Field(
-        proto.ENUM,
-        number=3,
-        enum="CryptoKeyVersion.CryptoKeyVersionAlgorithm",
-    )
-
-
-class KeyOperationAttestation(proto.Message):
-    r"""Contains an HSM-generated attestation about a key operation. For
-    more information, see [Verifying attestations]
-    (https://cloud.google.com/kms/docs/attest-key).
-
-    Attributes:
-        format (google.cloud.kms_v1.types.KeyOperationAttestation.AttestationFormat):
-            Output only. The format of the attestation
-            data.
-        content (bytes):
-            Output only. The attestation data provided by
-            the HSM when the key operation was performed.
-        cert_chains (google.cloud.kms_v1.types.KeyOperationAttestation.CertificateChains):
-            Output only. The certificate chains needed to
-            validate the attestation
-    """
-
-    class AttestationFormat(proto.Enum):
-        r"""Attestation formats provided by the HSM.
-
-        Values:
-            ATTESTATION_FORMAT_UNSPECIFIED (0):
-                Not specified.
-            CAVIUM_V1_COMPRESSED (3):
-                Cavium HSM attestation compressed with gzip.
-                Note that this format is defined by Cavium and
-                subject to change at any time.
-
-                See
-                https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/software-key-attestation.html.
-            CAVIUM_V2_COMPRESSED (4):
-                Cavium HSM attestation V2 compressed with
-                gzip. This is a new format introduced in
-                Cavium's version 3.2-08.
-        """
-        ATTESTATION_FORMAT_UNSPECIFIED = 0
-        CAVIUM_V1_COMPRESSED = 3
-        CAVIUM_V2_COMPRESSED = 4
-
-    class CertificateChains(proto.Message):
-        r"""Certificate chains needed to verify the attestation.
-        Certificates in chains are PEM-encoded and are ordered based on
-        https://tools.ietf.org/html/rfc5246#section-7.4.2.
-
-        Attributes:
-            cavium_certs (MutableSequence[str]):
-                Cavium certificate chain corresponding to the
-                attestation.
-            google_card_certs (MutableSequence[str]):
-                Google card certificate chain corresponding
-                to the attestation.
-            google_partition_certs (MutableSequence[str]):
-                Google partition certificate chain
-                corresponding to the attestation.
-        """
-
-        cavium_certs: MutableSequence[str] = proto.RepeatedField(
-            proto.STRING,
-            number=1,
-        )
-        google_card_certs: MutableSequence[str] = proto.RepeatedField(
-            proto.STRING,
-            number=2,
-        )
-        google_partition_certs: MutableSequence[str] = proto.RepeatedField(
-            proto.STRING,
-            number=3,
-        )
-
-    format: AttestationFormat = proto.Field(
-        proto.ENUM,
-        number=4,
-        enum=AttestationFormat,
-    )
-    content: bytes = proto.Field(
-        proto.BYTES,
-        number=5,
-    )
-    cert_chains: CertificateChains = proto.Field(
-        proto.MESSAGE,
-        number=6,
-        message=CertificateChains,
-    )
-
-
-class CryptoKeyVersion(proto.Message):
-    r"""A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-    represents an individual cryptographic key, and the associated key
-    material.
-
-    An
-    [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-    version can be used for cryptographic operations.
-
-    For security reasons, the raw cryptographic key material represented
-    by a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] can
-    never be viewed or exported. It can only be used to encrypt,
-    decrypt, or sign data when an authorized user or application invokes
-    Cloud KMS.
-
-    Attributes:
-        name (str):
-            Output only. The resource name for this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in
-            the format
-            ``projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*``.
-        state (google.cloud.kms_v1.types.CryptoKeyVersion.CryptoKeyVersionState):
-            The current state of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            Output only. The
-            [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            describing how crypto operations are performed with this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-        algorithm (google.cloud.kms_v1.types.CryptoKeyVersion.CryptoKeyVersionAlgorithm):
-            Output only. The
-            [CryptoKeyVersionAlgorithm][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm]
-            that this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            supports.
-        attestation (google.cloud.kms_v1.types.KeyOperationAttestation):
-            Output only. Statement that was generated and signed by the
-            HSM at key creation time. Use this statement to verify
-            attributes of the key as stored on the HSM, independently of
-            Google. Only provided for key versions with
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersion.protection_level]
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM].
-        create_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time at which this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] was
-            created.
-        generate_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-            key material was generated.
-        destroy_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-            key material is scheduled for destruction. Only present if
-            [state][google.cloud.kms.v1.CryptoKeyVersion.state] is
-            [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED].
-        destroy_event_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time this CryptoKeyVersion's key material
-            was destroyed. Only present if
-            [state][google.cloud.kms.v1.CryptoKeyVersion.state] is
-            [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED].
-        import_job (str):
-            Output only. The name of the
-            [ImportJob][google.cloud.kms.v1.ImportJob] used in the most
-            recent import of this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-            Only present if the underlying key material was imported.
-        import_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time at which this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-            key material was most recently imported.
-        import_failure_reason (str):
-            Output only. The root cause of the most recent import
-            failure. Only present if
-            [state][google.cloud.kms.v1.CryptoKeyVersion.state] is
-            [IMPORT_FAILED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.IMPORT_FAILED].
-        generation_failure_reason (str):
-            Output only. The root cause of the most recent generation
-            failure. Only present if
-            [state][google.cloud.kms.v1.CryptoKeyVersion.state] is
-            [GENERATION_FAILED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.GENERATION_FAILED].
-        external_destruction_failure_reason (str):
-            Output only. The root cause of the most recent external
-            destruction failure. Only present if
-            [state][google.cloud.kms.v1.CryptoKeyVersion.state] is
-            [EXTERNAL_DESTRUCTION_FAILED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.EXTERNAL_DESTRUCTION_FAILED].
-        external_protection_level_options (google.cloud.kms_v1.types.ExternalProtectionLevelOptions):
-            ExternalProtectionLevelOptions stores a group of additional
-            fields for configuring a
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            that are specific to the
-            [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL]
-            protection level and
-            [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC]
-            protection levels.
-        reimport_eligible (bool):
-            Output only. Whether or not this key version is eligible for
-            reimport, by being specified as a target in
-            [ImportCryptoKeyVersionRequest.crypto_key_version][google.cloud.kms.v1.ImportCryptoKeyVersionRequest.crypto_key_version].
-    """
-
-    class CryptoKeyVersionAlgorithm(proto.Enum):
-        r"""The algorithm of the
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion], indicating
-        what parameters must be used for each cryptographic operation.
-
-        The
-        [GOOGLE_SYMMETRIC_ENCRYPTION][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION]
-        algorithm is usable with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
-
-        Algorithms beginning with ``RSA_SIGN_`` are usable with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN].
-
-        The fields in the name after ``RSA_SIGN_`` correspond to the
-        following parameters: padding algorithm, modulus bit length, and
-        digest algorithm.
-
-        For PSS, the salt length used is equal to the length of digest
-        algorithm. For example,
-        [RSA_SIGN_PSS_2048_SHA256][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm.RSA_SIGN_PSS_2048_SHA256]
-        will use PSS with a salt length of 256 bits or 32 bytes.
-
-        Algorithms beginning with ``RSA_DECRYPT_`` are usable with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].
-
-        The fields in the name after ``RSA_DECRYPT_`` correspond to the
-        following parameters: padding algorithm, modulus bit length, and
-        digest algorithm.
-
-        Algorithms beginning with ``EC_SIGN_`` are usable with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN].
-
-        The fields in the name after ``EC_SIGN_`` correspond to the
-        following parameters: elliptic curve, digest algorithm.
-
-        Algorithms beginning with ``HMAC_`` are usable with
-        [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
-        [MAC][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.MAC].
-
-        The suffix following ``HMAC_`` corresponds to the hash algorithm
-        being used (eg. SHA256).
-
-        For more information, see [Key purposes and algorithms]
-        (https://cloud.google.com/kms/docs/algorithms).
-
-        Values:
-            CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED (0):
-                Not specified.
-            GOOGLE_SYMMETRIC_ENCRYPTION (1):
-                Creates symmetric encryption keys.
-            AES_128_GCM (41):
-                AES-GCM (Galois Counter Mode) using 128-bit
-                keys.
-            AES_256_GCM (19):
-                AES-GCM (Galois Counter Mode) using 256-bit
-                keys.
-            AES_128_CBC (42):
-                AES-CBC (Cipher Block Chaining Mode) using
-                128-bit keys.
-            AES_256_CBC (43):
-                AES-CBC (Cipher Block Chaining Mode) using
-                256-bit keys.
-            AES_128_CTR (44):
-                AES-CTR (Counter Mode) using 128-bit keys.
-            AES_256_CTR (45):
-                AES-CTR (Counter Mode) using 256-bit keys.
-            RSA_SIGN_PSS_2048_SHA256 (2):
-                RSASSA-PSS 2048 bit key with a SHA256 digest.
-            RSA_SIGN_PSS_3072_SHA256 (3):
-                RSASSA-PSS 3072 bit key with a SHA256 digest.
-            RSA_SIGN_PSS_4096_SHA256 (4):
-                RSASSA-PSS 4096 bit key with a SHA256 digest.
-            RSA_SIGN_PSS_4096_SHA512 (15):
-                RSASSA-PSS 4096 bit key with a SHA512 digest.
-            RSA_SIGN_PKCS1_2048_SHA256 (5):
-                RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.
-            RSA_SIGN_PKCS1_3072_SHA256 (6):
-                RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.
-            RSA_SIGN_PKCS1_4096_SHA256 (7):
-                RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.
-            RSA_SIGN_PKCS1_4096_SHA512 (16):
-                RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA512 digest.
-            RSA_SIGN_RAW_PKCS1_2048 (28):
-                RSASSA-PKCS1-v1_5 signing without encoding, with a 2048 bit
-                key.
-            RSA_SIGN_RAW_PKCS1_3072 (29):
-                RSASSA-PKCS1-v1_5 signing without encoding, with a 3072 bit
-                key.
-            RSA_SIGN_RAW_PKCS1_4096 (30):
-                RSASSA-PKCS1-v1_5 signing without encoding, with a 4096 bit
-                key.
-            RSA_DECRYPT_OAEP_2048_SHA256 (8):
-                RSAES-OAEP 2048 bit key with a SHA256 digest.
-            RSA_DECRYPT_OAEP_3072_SHA256 (9):
-                RSAES-OAEP 3072 bit key with a SHA256 digest.
-            RSA_DECRYPT_OAEP_4096_SHA256 (10):
-                RSAES-OAEP 4096 bit key with a SHA256 digest.
-            RSA_DECRYPT_OAEP_4096_SHA512 (17):
-                RSAES-OAEP 4096 bit key with a SHA512 digest.
-            RSA_DECRYPT_OAEP_2048_SHA1 (37):
-                RSAES-OAEP 2048 bit key with a SHA1 digest.
-            RSA_DECRYPT_OAEP_3072_SHA1 (38):
-                RSAES-OAEP 3072 bit key with a SHA1 digest.
-            RSA_DECRYPT_OAEP_4096_SHA1 (39):
-                RSAES-OAEP 4096 bit key with a SHA1 digest.
-            EC_SIGN_P256_SHA256 (12):
-                ECDSA on the NIST P-256 curve with a SHA256 digest. Other
-                hash functions can also be used:
-                https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms
-            EC_SIGN_P384_SHA384 (13):
-                ECDSA on the NIST P-384 curve with a SHA384 digest. Other
-                hash functions can also be used:
-                https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms
-            EC_SIGN_SECP256K1_SHA256 (31):
-                ECDSA on the non-NIST secp256k1 curve. This curve is only
-                supported for HSM protection level. Other hash functions can
-                also be used:
-                https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms
-            HMAC_SHA256 (32):
-                HMAC-SHA256 signing with a 256 bit key.
-            HMAC_SHA1 (33):
-                HMAC-SHA1 signing with a 160 bit key.
-            HMAC_SHA384 (34):
-                HMAC-SHA384 signing with a 384 bit key.
-            HMAC_SHA512 (35):
-                HMAC-SHA512 signing with a 512 bit key.
-            HMAC_SHA224 (36):
-                HMAC-SHA224 signing with a 224 bit key.
-            EXTERNAL_SYMMETRIC_ENCRYPTION (18):
-                Algorithm representing symmetric encryption
-                by an external key manager.
-        """
-        CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED = 0
-        GOOGLE_SYMMETRIC_ENCRYPTION = 1
-        AES_128_GCM = 41
-        AES_256_GCM = 19
-        AES_128_CBC = 42
-        AES_256_CBC = 43
-        AES_128_CTR = 44
-        AES_256_CTR = 45
-        RSA_SIGN_PSS_2048_SHA256 = 2
-        RSA_SIGN_PSS_3072_SHA256 = 3
-        RSA_SIGN_PSS_4096_SHA256 = 4
-        RSA_SIGN_PSS_4096_SHA512 = 15
-        RSA_SIGN_PKCS1_2048_SHA256 = 5
-        RSA_SIGN_PKCS1_3072_SHA256 = 6
-        RSA_SIGN_PKCS1_4096_SHA256 = 7
-        RSA_SIGN_PKCS1_4096_SHA512 = 16
-        RSA_SIGN_RAW_PKCS1_2048 = 28
-        RSA_SIGN_RAW_PKCS1_3072 = 29
-        RSA_SIGN_RAW_PKCS1_4096 = 30
-        RSA_DECRYPT_OAEP_2048_SHA256 = 8
-        RSA_DECRYPT_OAEP_3072_SHA256 = 9
-        RSA_DECRYPT_OAEP_4096_SHA256 = 10
-        RSA_DECRYPT_OAEP_4096_SHA512 = 17
-        RSA_DECRYPT_OAEP_2048_SHA1 = 37
-        RSA_DECRYPT_OAEP_3072_SHA1 = 38
-        RSA_DECRYPT_OAEP_4096_SHA1 = 39
-        EC_SIGN_P256_SHA256 = 12
-        EC_SIGN_P384_SHA384 = 13
-        EC_SIGN_SECP256K1_SHA256 = 31
-        HMAC_SHA256 = 32
-        HMAC_SHA1 = 33
-        HMAC_SHA384 = 34
-        HMAC_SHA512 = 35
-        HMAC_SHA224 = 36
-        EXTERNAL_SYMMETRIC_ENCRYPTION = 18
-
-    class CryptoKeyVersionState(proto.Enum):
-        r"""The state of a
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion], indicating
-        if it can be used.
-
-        Values:
-            CRYPTO_KEY_VERSION_STATE_UNSPECIFIED (0):
-                Not specified.
-            PENDING_GENERATION (5):
-                This version is still being generated. It may not be used,
-                enabled, disabled, or destroyed yet. Cloud KMS will
-                automatically mark this version
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                as soon as the version is ready.
-            ENABLED (1):
-                This version may be used for cryptographic
-                operations.
-            DISABLED (2):
-                This version may not be used, but the key material is still
-                available, and the version can be placed back into the
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                state.
-            DESTROYED (3):
-                This version is destroyed, and the key material is no longer
-                stored. This version may only become
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                again if this version is
-                [reimport_eligible][google.cloud.kms.v1.CryptoKeyVersion.reimport_eligible]
-                and the original key material is reimported with a call to
-                [KeyManagementService.ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-            DESTROY_SCHEDULED (4):
-                This version is scheduled for destruction, and will be
-                destroyed soon. Call
-                [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
-                to put it back into the
-                [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED]
-                state.
-            PENDING_IMPORT (6):
-                This version is still being imported. It may not be used,
-                enabled, disabled, or destroyed yet. Cloud KMS will
-                automatically mark this version
-                [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
-                as soon as the version is ready.
-            IMPORT_FAILED (7):
-                This version was not imported successfully. It may not be
-                used, enabled, disabled, or destroyed. The submitted key
-                material has been discarded. Additional details can be found
-                in
-                [CryptoKeyVersion.import_failure_reason][google.cloud.kms.v1.CryptoKeyVersion.import_failure_reason].
-            GENERATION_FAILED (8):
-                This version was not generated successfully. It may not be
-                used, enabled, disabled, or destroyed. Additional details
-                can be found in
-                [CryptoKeyVersion.generation_failure_reason][google.cloud.kms.v1.CryptoKeyVersion.generation_failure_reason].
-            PENDING_EXTERNAL_DESTRUCTION (9):
-                This version was destroyed, and it may not be
-                used or enabled again. Cloud KMS is waiting for
-                the corresponding key material residing in an
-                external key manager to be destroyed.
-            EXTERNAL_DESTRUCTION_FAILED (10):
-                This version was destroyed, and it may not be used or
-                enabled again. However, Cloud KMS could not confirm that the
-                corresponding key material residing in an external key
-                manager was destroyed. Additional details can be found in
-                [CryptoKeyVersion.external_destruction_failure_reason][google.cloud.kms.v1.CryptoKeyVersion.external_destruction_failure_reason].
-        """
-        CRYPTO_KEY_VERSION_STATE_UNSPECIFIED = 0
-        PENDING_GENERATION = 5
-        ENABLED = 1
-        DISABLED = 2
-        DESTROYED = 3
-        DESTROY_SCHEDULED = 4
-        PENDING_IMPORT = 6
-        IMPORT_FAILED = 7
-        GENERATION_FAILED = 8
-        PENDING_EXTERNAL_DESTRUCTION = 9
-        EXTERNAL_DESTRUCTION_FAILED = 10
-
-    class CryptoKeyVersionView(proto.Enum):
-        r"""A view for
-        [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]s. Controls
-        the level of detail returned for
-        [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] in
-        [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions]
-        and
-        [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-
-        Values:
-            CRYPTO_KEY_VERSION_VIEW_UNSPECIFIED (0):
-                Default view for each
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-                Does not include the
-                [attestation][google.cloud.kms.v1.CryptoKeyVersion.attestation]
-                field.
-            FULL (1):
-                Provides all fields in each
-                [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion],
-                including the
-                [attestation][google.cloud.kms.v1.CryptoKeyVersion.attestation].
-        """
-        CRYPTO_KEY_VERSION_VIEW_UNSPECIFIED = 0
-        FULL = 1
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    state: CryptoKeyVersionState = proto.Field(
-        proto.ENUM,
-        number=3,
-        enum=CryptoKeyVersionState,
-    )
-    protection_level: "ProtectionLevel" = proto.Field(
-        proto.ENUM,
-        number=7,
-        enum="ProtectionLevel",
-    )
-    algorithm: CryptoKeyVersionAlgorithm = proto.Field(
-        proto.ENUM,
-        number=10,
-        enum=CryptoKeyVersionAlgorithm,
-    )
-    attestation: "KeyOperationAttestation" = proto.Field(
-        proto.MESSAGE,
-        number=8,
-        message="KeyOperationAttestation",
-    )
-    create_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=4,
-        message=timestamp_pb2.Timestamp,
-    )
-    generate_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=11,
-        message=timestamp_pb2.Timestamp,
-    )
-    destroy_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=5,
-        message=timestamp_pb2.Timestamp,
-    )
-    destroy_event_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=6,
-        message=timestamp_pb2.Timestamp,
-    )
-    import_job: str = proto.Field(
-        proto.STRING,
-        number=14,
-    )
-    import_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=15,
-        message=timestamp_pb2.Timestamp,
-    )
-    import_failure_reason: str = proto.Field(
-        proto.STRING,
-        number=16,
-    )
-    generation_failure_reason: str = proto.Field(
-        proto.STRING,
-        number=19,
-    )
-    external_destruction_failure_reason: str = proto.Field(
-        proto.STRING,
-        number=20,
-    )
-    external_protection_level_options: "ExternalProtectionLevelOptions" = proto.Field(
-        proto.MESSAGE,
-        number=17,
-        message="ExternalProtectionLevelOptions",
-    )
-    reimport_eligible: bool = proto.Field(
-        proto.BOOL,
-        number=18,
-    )
-
-
-class PublicKey(proto.Message):
-    r"""The public key for a given
-    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. Obtained
-    via
-    [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-    Attributes:
-        pem (str):
-            The public key, encoded in PEM format. For more information,
-            see the `RFC 7468 <https://tools.ietf.org/html/rfc7468>`__
-            sections for `General
-            Considerations <https://tools.ietf.org/html/rfc7468#section-2>`__
-            and [Textual Encoding of Subject Public Key Info]
-            (https://tools.ietf.org/html/rfc7468#section-13).
-        algorithm (google.cloud.kms_v1.types.CryptoKeyVersion.CryptoKeyVersionAlgorithm):
-            The
-            [Algorithm][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm]
-            associated with this key.
-        pem_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned [PublicKey.pem][google.cloud.kms.v1.PublicKey.pem].
-            An integrity check of
-            [PublicKey.pem][google.cloud.kms.v1.PublicKey.pem] can be
-            performed by computing the CRC32C checksum of
-            [PublicKey.pem][google.cloud.kms.v1.PublicKey.pem] and
-            comparing your results to this field. Discard the response
-            in case of non-matching checksum values, and perform a
-            limited number of retries. A persistent mismatch may
-            indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-
-            NOTE: This field is in Beta.
-        name (str):
-            The [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            public key. Provided here for verification.
-
-            NOTE: This field is in Beta.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            public key.
-    """
-
-    pem: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    algorithm: "CryptoKeyVersion.CryptoKeyVersionAlgorithm" = proto.Field(
-        proto.ENUM,
-        number=2,
-        enum="CryptoKeyVersion.CryptoKeyVersionAlgorithm",
-    )
-    pem_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=wrappers_pb2.Int64Value,
-    )
-    name: str = proto.Field(
-        proto.STRING,
-        number=4,
-    )
-    protection_level: "ProtectionLevel" = proto.Field(
-        proto.ENUM,
-        number=5,
-        enum="ProtectionLevel",
-    )
-
-
-class ImportJob(proto.Message):
-    r"""An [ImportJob][google.cloud.kms.v1.ImportJob] can be used to create
-    [CryptoKeys][google.cloud.kms.v1.CryptoKey] and
-    [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] using
-    pre-existing key material, generated outside of Cloud KMS.
-
-    When an [ImportJob][google.cloud.kms.v1.ImportJob] is created, Cloud
-    KMS will generate a "wrapping key", which is a public/private key
-    pair. You use the wrapping key to encrypt (also known as wrap) the
-    pre-existing key material to protect it during the import process.
-    The nature of the wrapping key depends on the choice of
-    [import_method][google.cloud.kms.v1.ImportJob.import_method]. When
-    the wrapping key generation is complete, the
-    [state][google.cloud.kms.v1.ImportJob.state] will be set to
-    [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE] and
-    the [public_key][google.cloud.kms.v1.ImportJob.public_key] can be
-    fetched. The fetched public key can then be used to wrap your
-    pre-existing key material.
-
-    Once the key material is wrapped, it can be imported into a new
-    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in an
-    existing [CryptoKey][google.cloud.kms.v1.CryptoKey] by calling
-    [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-    Multiple [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-    can be imported with a single
-    [ImportJob][google.cloud.kms.v1.ImportJob]. Cloud KMS uses the
-    private key portion of the wrapping key to unwrap the key material.
-    Only Cloud KMS has access to the private key.
-
-    An [ImportJob][google.cloud.kms.v1.ImportJob] expires 3 days after
-    it is created. Once expired, Cloud KMS will no longer be able to
-    import or unwrap any key material that was wrapped with the
-    [ImportJob][google.cloud.kms.v1.ImportJob]'s public key.
-
-    For more information, see `Importing a
-    key <https://cloud.google.com/kms/docs/importing-a-key>`__.
-
-    Attributes:
-        name (str):
-            Output only. The resource name for this
-            [ImportJob][google.cloud.kms.v1.ImportJob] in the format
-            ``projects/*/locations/*/keyRings/*/importJobs/*``.
-        import_method (google.cloud.kms_v1.types.ImportJob.ImportMethod):
-            Required. Immutable. The wrapping method to
-            be used for incoming key material.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            Required. Immutable. The protection level of the
-            [ImportJob][google.cloud.kms.v1.ImportJob]. This must match
-            the
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]
-            of the
-            [version_template][google.cloud.kms.v1.CryptoKey.version_template]
-            on the [CryptoKey][google.cloud.kms.v1.CryptoKey] you
-            attempt to import into.
-        create_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time at which this
-            [ImportJob][google.cloud.kms.v1.ImportJob] was created.
-        generate_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time this
-            [ImportJob][google.cloud.kms.v1.ImportJob]'s key material
-            was generated.
-        expire_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time at which this
-            [ImportJob][google.cloud.kms.v1.ImportJob] is scheduled for
-            expiration and can no longer be used to import key material.
-        expire_event_time (google.protobuf.timestamp_pb2.Timestamp):
-            Output only. The time this
-            [ImportJob][google.cloud.kms.v1.ImportJob] expired. Only
-            present if [state][google.cloud.kms.v1.ImportJob.state] is
-            [EXPIRED][google.cloud.kms.v1.ImportJob.ImportJobState.EXPIRED].
-        state (google.cloud.kms_v1.types.ImportJob.ImportJobState):
-            Output only. The current state of the
-            [ImportJob][google.cloud.kms.v1.ImportJob], indicating if it
-            can be used.
-        public_key (google.cloud.kms_v1.types.ImportJob.WrappingPublicKey):
-            Output only. The public key with which to wrap key material
-            prior to import. Only returned if
-            [state][google.cloud.kms.v1.ImportJob.state] is
-            [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE].
-        attestation (google.cloud.kms_v1.types.KeyOperationAttestation):
-            Output only. Statement that was generated and signed by the
-            key creator (for example, an HSM) at key creation time. Use
-            this statement to verify attributes of the key as stored on
-            the HSM, independently of Google. Only present if the chosen
-            [ImportMethod][google.cloud.kms.v1.ImportJob.ImportMethod]
-            is one with a protection level of
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM].
-    """
-
-    class ImportMethod(proto.Enum):
-        r"""[ImportMethod][google.cloud.kms.v1.ImportJob.ImportMethod] describes
-        the key wrapping method chosen for this
-        [ImportJob][google.cloud.kms.v1.ImportJob].
-
-        Values:
-            IMPORT_METHOD_UNSPECIFIED (0):
-                Not specified.
-            RSA_OAEP_3072_SHA1_AES_256 (1):
-                This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key
-                wrapping scheme defined in the PKCS #11 standard. In
-                summary, this involves wrapping the raw key with an
-                ephemeral AES key, and wrapping the ephemeral AES key with a
-                3072 bit RSA key. For more details, see `RSA AES key wrap
-                mechanism <http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908>`__.
-            RSA_OAEP_4096_SHA1_AES_256 (2):
-                This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key
-                wrapping scheme defined in the PKCS #11 standard. In
-                summary, this involves wrapping the raw key with an
-                ephemeral AES key, and wrapping the ephemeral AES key with a
-                4096 bit RSA key. For more details, see `RSA AES key wrap
-                mechanism <http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908>`__.
-            RSA_OAEP_3072_SHA256_AES_256 (3):
-                This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key
-                wrapping scheme defined in the PKCS #11 standard. In
-                summary, this involves wrapping the raw key with an
-                ephemeral AES key, and wrapping the ephemeral AES key with a
-                3072 bit RSA key. For more details, see `RSA AES key wrap
-                mechanism <http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908>`__.
-            RSA_OAEP_4096_SHA256_AES_256 (4):
-                This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key
-                wrapping scheme defined in the PKCS #11 standard. In
-                summary, this involves wrapping the raw key with an
-                ephemeral AES key, and wrapping the ephemeral AES key with a
-                4096 bit RSA key. For more details, see `RSA AES key wrap
-                mechanism <http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908>`__.
-            RSA_OAEP_3072_SHA256 (5):
-                This ImportMethod represents RSAES-OAEP with
-                a 3072 bit RSA key. The key material to be
-                imported is wrapped directly with the RSA key.
-                Due to technical limitations of RSA wrapping,
-                this method cannot be used to wrap RSA keys for
-                import.
-            RSA_OAEP_4096_SHA256 (6):
-                This ImportMethod represents RSAES-OAEP with
-                a 4096 bit RSA key. The key material to be
-                imported is wrapped directly with the RSA key.
-                Due to technical limitations of RSA wrapping,
-                this method cannot be used to wrap RSA keys for
-                import.
-        """
-        IMPORT_METHOD_UNSPECIFIED = 0
-        RSA_OAEP_3072_SHA1_AES_256 = 1
-        RSA_OAEP_4096_SHA1_AES_256 = 2
-        RSA_OAEP_3072_SHA256_AES_256 = 3
-        RSA_OAEP_4096_SHA256_AES_256 = 4
-        RSA_OAEP_3072_SHA256 = 5
-        RSA_OAEP_4096_SHA256 = 6
-
-    class ImportJobState(proto.Enum):
-        r"""The state of the [ImportJob][google.cloud.kms.v1.ImportJob],
-        indicating if it can be used.
-
-        Values:
-            IMPORT_JOB_STATE_UNSPECIFIED (0):
-                Not specified.
-            PENDING_GENERATION (1):
-                The wrapping key for this job is still being generated. It
-                may not be used. Cloud KMS will automatically mark this job
-                as
-                [ACTIVE][google.cloud.kms.v1.ImportJob.ImportJobState.ACTIVE]
-                as soon as the wrapping key is generated.
-            ACTIVE (2):
-                This job may be used in
-                [CreateCryptoKey][google.cloud.kms.v1.KeyManagementService.CreateCryptoKey]
-                and
-                [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion]
-                requests.
-            EXPIRED (3):
-                This job can no longer be used and may not
-                leave this state once entered.
-        """
-        IMPORT_JOB_STATE_UNSPECIFIED = 0
-        PENDING_GENERATION = 1
-        ACTIVE = 2
-        EXPIRED = 3
-
-    class WrappingPublicKey(proto.Message):
-        r"""The public key component of the wrapping key. For details of the
-        type of key this public key corresponds to, see the
-        [ImportMethod][google.cloud.kms.v1.ImportJob.ImportMethod].
-
-        Attributes:
-            pem (str):
-                The public key, encoded in PEM format. For more information,
-                see the `RFC 7468 <https://tools.ietf.org/html/rfc7468>`__
-                sections for `General
-                Considerations <https://tools.ietf.org/html/rfc7468#section-2>`__
-                and [Textual Encoding of Subject Public Key Info]
-                (https://tools.ietf.org/html/rfc7468#section-13).
-        """
-
-        pem: str = proto.Field(
-            proto.STRING,
-            number=1,
-        )
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    import_method: ImportMethod = proto.Field(
-        proto.ENUM,
-        number=2,
-        enum=ImportMethod,
-    )
-    protection_level: "ProtectionLevel" = proto.Field(
-        proto.ENUM,
-        number=9,
-        enum="ProtectionLevel",
-    )
-    create_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=timestamp_pb2.Timestamp,
-    )
-    generate_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=4,
-        message=timestamp_pb2.Timestamp,
-    )
-    expire_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=5,
-        message=timestamp_pb2.Timestamp,
-    )
-    expire_event_time: timestamp_pb2.Timestamp = proto.Field(
-        proto.MESSAGE,
-        number=10,
-        message=timestamp_pb2.Timestamp,
-    )
-    state: ImportJobState = proto.Field(
-        proto.ENUM,
-        number=6,
-        enum=ImportJobState,
-    )
-    public_key: WrappingPublicKey = proto.Field(
-        proto.MESSAGE,
-        number=7,
-        message=WrappingPublicKey,
-    )
-    attestation: "KeyOperationAttestation" = proto.Field(
-        proto.MESSAGE,
-        number=8,
-        message="KeyOperationAttestation",
-    )
-
-
-class ExternalProtectionLevelOptions(proto.Message):
-    r"""ExternalProtectionLevelOptions stores a group of additional fields
-    for configuring a
-    [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] that are
-    specific to the
-    [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL] protection
-    level and
-    [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC]
-    protection levels.
-
-    Attributes:
-        external_key_uri (str):
-            The URI for an external resource that this
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            represents.
-        ekm_connection_key_path (str):
-            The path to the external key material on the EKM when using
-            [EkmConnection][google.cloud.kms.v1.EkmConnection] e.g.,
-            "v0/my/key". Set this field instead of external_key_uri when
-            using an [EkmConnection][google.cloud.kms.v1.EkmConnection].
-    """
-
-    external_key_uri: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    ekm_connection_key_path: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-
-
-__all__ = tuple(sorted(__protobuf__.manifest))
diff --git a/google/cloud/kms_v1/types/service.py b/google/cloud/kms_v1/types/service.py
deleted file mode 100644
index 85ab4064..00000000
--- a/google/cloud/kms_v1/types/service.py
+++ /dev/null
@@ -1,2529 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-from __future__ import annotations
-
-from typing import MutableMapping, MutableSequence
-
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import wrappers_pb2  # type: ignore
-import proto  # type: ignore
-
-from google.cloud.kms_v1.types import resources
-
-__protobuf__ = proto.module(
-    package="google.cloud.kms.v1",
-    manifest={
-        "ListKeyRingsRequest",
-        "ListCryptoKeysRequest",
-        "ListCryptoKeyVersionsRequest",
-        "ListImportJobsRequest",
-        "ListKeyRingsResponse",
-        "ListCryptoKeysResponse",
-        "ListCryptoKeyVersionsResponse",
-        "ListImportJobsResponse",
-        "GetKeyRingRequest",
-        "GetCryptoKeyRequest",
-        "GetCryptoKeyVersionRequest",
-        "GetPublicKeyRequest",
-        "GetImportJobRequest",
-        "CreateKeyRingRequest",
-        "CreateCryptoKeyRequest",
-        "CreateCryptoKeyVersionRequest",
-        "ImportCryptoKeyVersionRequest",
-        "CreateImportJobRequest",
-        "UpdateCryptoKeyRequest",
-        "UpdateCryptoKeyVersionRequest",
-        "UpdateCryptoKeyPrimaryVersionRequest",
-        "DestroyCryptoKeyVersionRequest",
-        "RestoreCryptoKeyVersionRequest",
-        "EncryptRequest",
-        "DecryptRequest",
-        "RawEncryptRequest",
-        "RawDecryptRequest",
-        "AsymmetricSignRequest",
-        "AsymmetricDecryptRequest",
-        "MacSignRequest",
-        "MacVerifyRequest",
-        "GenerateRandomBytesRequest",
-        "EncryptResponse",
-        "DecryptResponse",
-        "RawEncryptResponse",
-        "RawDecryptResponse",
-        "AsymmetricSignResponse",
-        "AsymmetricDecryptResponse",
-        "MacSignResponse",
-        "MacVerifyResponse",
-        "GenerateRandomBytesResponse",
-        "Digest",
-        "LocationMetadata",
-    },
-)
-
-
-class ListKeyRingsRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-
-    Attributes:
-        parent (str):
-            Required. The resource name of the location associated with
-            the [KeyRings][google.cloud.kms.v1.KeyRing], in the format
-            ``projects/*/locations/*``.
-        page_size (int):
-            Optional. Optional limit on the number of
-            [KeyRings][google.cloud.kms.v1.KeyRing] to include in the
-            response. Further [KeyRings][google.cloud.kms.v1.KeyRing]
-            can subsequently be obtained by including the
-            [ListKeyRingsResponse.next_page_token][google.cloud.kms.v1.ListKeyRingsResponse.next_page_token]
-            in a subsequent request. If unspecified, the server will
-            pick an appropriate default.
-        page_token (str):
-            Optional. Optional pagination token, returned earlier via
-            [ListKeyRingsResponse.next_page_token][google.cloud.kms.v1.ListKeyRingsResponse.next_page_token].
-        filter (str):
-            Optional. Only include resources that match the filter in
-            the response. For more information, see `Sorting and
-            filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-        order_by (str):
-            Optional. Specify how the results should be sorted. If not
-            specified, the results will be sorted in the default order.
-            For more information, see `Sorting and filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    page_size: int = proto.Field(
-        proto.INT32,
-        number=2,
-    )
-    page_token: str = proto.Field(
-        proto.STRING,
-        number=3,
-    )
-    filter: str = proto.Field(
-        proto.STRING,
-        number=4,
-    )
-    order_by: str = proto.Field(
-        proto.STRING,
-        number=5,
-    )
-
-
-class ListCryptoKeysRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-
-    Attributes:
-        parent (str):
-            Required. The resource name of the
-            [KeyRing][google.cloud.kms.v1.KeyRing] to list, in the
-            format ``projects/*/locations/*/keyRings/*``.
-        page_size (int):
-            Optional. Optional limit on the number of
-            [CryptoKeys][google.cloud.kms.v1.CryptoKey] to include in
-            the response. Further
-            [CryptoKeys][google.cloud.kms.v1.CryptoKey] can subsequently
-            be obtained by including the
-            [ListCryptoKeysResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeysResponse.next_page_token]
-            in a subsequent request. If unspecified, the server will
-            pick an appropriate default.
-        page_token (str):
-            Optional. Optional pagination token, returned earlier via
-            [ListCryptoKeysResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeysResponse.next_page_token].
-        version_view (google.cloud.kms_v1.types.CryptoKeyVersion.CryptoKeyVersionView):
-            The fields of the primary version to include
-            in the response.
-        filter (str):
-            Optional. Only include resources that match the filter in
-            the response. For more information, see `Sorting and
-            filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-        order_by (str):
-            Optional. Specify how the results should be sorted. If not
-            specified, the results will be sorted in the default order.
-            For more information, see `Sorting and filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    page_size: int = proto.Field(
-        proto.INT32,
-        number=2,
-    )
-    page_token: str = proto.Field(
-        proto.STRING,
-        number=3,
-    )
-    version_view: resources.CryptoKeyVersion.CryptoKeyVersionView = proto.Field(
-        proto.ENUM,
-        number=4,
-        enum=resources.CryptoKeyVersion.CryptoKeyVersionView,
-    )
-    filter: str = proto.Field(
-        proto.STRING,
-        number=5,
-    )
-    order_by: str = proto.Field(
-        proto.STRING,
-        number=6,
-    )
-
-
-class ListCryptoKeyVersionsRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-
-    Attributes:
-        parent (str):
-            Required. The resource name of the
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] to list, in the
-            format ``projects/*/locations/*/keyRings/*/cryptoKeys/*``.
-        page_size (int):
-            Optional. Optional limit on the number of
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] to
-            include in the response. Further
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-            can subsequently be obtained by including the
-            [ListCryptoKeyVersionsResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeyVersionsResponse.next_page_token]
-            in a subsequent request. If unspecified, the server will
-            pick an appropriate default.
-        page_token (str):
-            Optional. Optional pagination token, returned earlier via
-            [ListCryptoKeyVersionsResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeyVersionsResponse.next_page_token].
-        view (google.cloud.kms_v1.types.CryptoKeyVersion.CryptoKeyVersionView):
-            The fields to include in the response.
-        filter (str):
-            Optional. Only include resources that match the filter in
-            the response. For more information, see `Sorting and
-            filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-        order_by (str):
-            Optional. Specify how the results should be sorted. If not
-            specified, the results will be sorted in the default order.
-            For more information, see `Sorting and filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    page_size: int = proto.Field(
-        proto.INT32,
-        number=2,
-    )
-    page_token: str = proto.Field(
-        proto.STRING,
-        number=3,
-    )
-    view: resources.CryptoKeyVersion.CryptoKeyVersionView = proto.Field(
-        proto.ENUM,
-        number=4,
-        enum=resources.CryptoKeyVersion.CryptoKeyVersionView,
-    )
-    filter: str = proto.Field(
-        proto.STRING,
-        number=5,
-    )
-    order_by: str = proto.Field(
-        proto.STRING,
-        number=6,
-    )
-
-
-class ListImportJobsRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-
-    Attributes:
-        parent (str):
-            Required. The resource name of the
-            [KeyRing][google.cloud.kms.v1.KeyRing] to list, in the
-            format ``projects/*/locations/*/keyRings/*``.
-        page_size (int):
-            Optional. Optional limit on the number of
-            [ImportJobs][google.cloud.kms.v1.ImportJob] to include in
-            the response. Further
-            [ImportJobs][google.cloud.kms.v1.ImportJob] can subsequently
-            be obtained by including the
-            [ListImportJobsResponse.next_page_token][google.cloud.kms.v1.ListImportJobsResponse.next_page_token]
-            in a subsequent request. If unspecified, the server will
-            pick an appropriate default.
-        page_token (str):
-            Optional. Optional pagination token, returned earlier via
-            [ListImportJobsResponse.next_page_token][google.cloud.kms.v1.ListImportJobsResponse.next_page_token].
-        filter (str):
-            Optional. Only include resources that match the filter in
-            the response. For more information, see `Sorting and
-            filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-        order_by (str):
-            Optional. Specify how the results should be sorted. If not
-            specified, the results will be sorted in the default order.
-            For more information, see `Sorting and filtering list
-            results <https://cloud.google.com/kms/docs/sorting-and-filtering>`__.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    page_size: int = proto.Field(
-        proto.INT32,
-        number=2,
-    )
-    page_token: str = proto.Field(
-        proto.STRING,
-        number=3,
-    )
-    filter: str = proto.Field(
-        proto.STRING,
-        number=4,
-    )
-    order_by: str = proto.Field(
-        proto.STRING,
-        number=5,
-    )
-
-
-class ListKeyRingsResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].
-
-    Attributes:
-        key_rings (MutableSequence[google.cloud.kms_v1.types.KeyRing]):
-            The list of [KeyRings][google.cloud.kms.v1.KeyRing].
-        next_page_token (str):
-            A token to retrieve next page of results. Pass this value in
-            [ListKeyRingsRequest.page_token][google.cloud.kms.v1.ListKeyRingsRequest.page_token]
-            to retrieve the next page of results.
-        total_size (int):
-            The total number of [KeyRings][google.cloud.kms.v1.KeyRing]
-            that matched the query.
-    """
-
-    @property
-    def raw_page(self):
-        return self
-
-    key_rings: MutableSequence[resources.KeyRing] = proto.RepeatedField(
-        proto.MESSAGE,
-        number=1,
-        message=resources.KeyRing,
-    )
-    next_page_token: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    total_size: int = proto.Field(
-        proto.INT32,
-        number=3,
-    )
-
-
-class ListCryptoKeysResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].
-
-    Attributes:
-        crypto_keys (MutableSequence[google.cloud.kms_v1.types.CryptoKey]):
-            The list of [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-        next_page_token (str):
-            A token to retrieve next page of results. Pass this value in
-            [ListCryptoKeysRequest.page_token][google.cloud.kms.v1.ListCryptoKeysRequest.page_token]
-            to retrieve the next page of results.
-        total_size (int):
-            The total number of
-            [CryptoKeys][google.cloud.kms.v1.CryptoKey] that matched the
-            query.
-    """
-
-    @property
-    def raw_page(self):
-        return self
-
-    crypto_keys: MutableSequence[resources.CryptoKey] = proto.RepeatedField(
-        proto.MESSAGE,
-        number=1,
-        message=resources.CryptoKey,
-    )
-    next_page_token: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    total_size: int = proto.Field(
-        proto.INT32,
-        number=3,
-    )
-
-
-class ListCryptoKeyVersionsResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].
-
-    Attributes:
-        crypto_key_versions (MutableSequence[google.cloud.kms_v1.types.CryptoKeyVersion]):
-            The list of
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-        next_page_token (str):
-            A token to retrieve next page of results. Pass this value in
-            [ListCryptoKeyVersionsRequest.page_token][google.cloud.kms.v1.ListCryptoKeyVersionsRequest.page_token]
-            to retrieve the next page of results.
-        total_size (int):
-            The total number of
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion]
-            that matched the query.
-    """
-
-    @property
-    def raw_page(self):
-        return self
-
-    crypto_key_versions: MutableSequence[
-        resources.CryptoKeyVersion
-    ] = proto.RepeatedField(
-        proto.MESSAGE,
-        number=1,
-        message=resources.CryptoKeyVersion,
-    )
-    next_page_token: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    total_size: int = proto.Field(
-        proto.INT32,
-        number=3,
-    )
-
-
-class ListImportJobsResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.ListImportJobs][google.cloud.kms.v1.KeyManagementService.ListImportJobs].
-
-    Attributes:
-        import_jobs (MutableSequence[google.cloud.kms_v1.types.ImportJob]):
-            The list of [ImportJobs][google.cloud.kms.v1.ImportJob].
-        next_page_token (str):
-            A token to retrieve next page of results. Pass this value in
-            [ListImportJobsRequest.page_token][google.cloud.kms.v1.ListImportJobsRequest.page_token]
-            to retrieve the next page of results.
-        total_size (int):
-            The total number of
-            [ImportJobs][google.cloud.kms.v1.ImportJob] that matched the
-            query.
-    """
-
-    @property
-    def raw_page(self):
-        return self
-
-    import_jobs: MutableSequence[resources.ImportJob] = proto.RepeatedField(
-        proto.MESSAGE,
-        number=1,
-        message=resources.ImportJob,
-    )
-    next_page_token: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    total_size: int = proto.Field(
-        proto.INT32,
-        number=3,
-    )
-
-
-class GetKeyRingRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.GetKeyRing][google.cloud.kms.v1.KeyManagementService.GetKeyRing].
-
-    Attributes:
-        name (str):
-            Required. The [name][google.cloud.kms.v1.KeyRing.name] of
-            the [KeyRing][google.cloud.kms.v1.KeyRing] to get.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class GetCryptoKeyRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.GetCryptoKey][google.cloud.kms.v1.KeyManagementService.GetCryptoKey].
-
-    Attributes:
-        name (str):
-            Required. The [name][google.cloud.kms.v1.CryptoKey.name] of
-            the [CryptoKey][google.cloud.kms.v1.CryptoKey] to get.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class GetCryptoKeyVersionRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.GetCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.GetCryptoKeyVersion].
-
-    Attributes:
-        name (str):
-            Required. The
-            [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            get.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class GetPublicKeyRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
-
-    Attributes:
-        name (str):
-            Required. The
-            [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            public key to get.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class GetImportJobRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.GetImportJob][google.cloud.kms.v1.KeyManagementService.GetImportJob].
-
-    Attributes:
-        name (str):
-            Required. The [name][google.cloud.kms.v1.ImportJob.name] of
-            the [ImportJob][google.cloud.kms.v1.ImportJob] to get.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class CreateKeyRingRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.CreateKeyRing][google.cloud.kms.v1.KeyManagementService.CreateKeyRing].
-
-    Attributes:
-        parent (str):
-            Required. The resource name of the location associated with
-            the [KeyRings][google.cloud.kms.v1.KeyRing], in the format
-            ``projects/*/locations/*``.
-        key_ring_id (str):
-            Required. It must be unique within a location and match the
-            regular expression ``[a-zA-Z0-9_-]{1,63}``
-        key_ring (google.cloud.kms_v1.types.KeyRing):
-            Required. A [KeyRing][google.cloud.kms.v1.KeyRing] with
-            initial field values.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    key_ring_id: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    key_ring: resources.KeyRing = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=resources.KeyRing,
-    )
-
-
-class CreateCryptoKeyRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.CreateCryptoKey][google.cloud.kms.v1.KeyManagementService.CreateCryptoKey].
-
-    Attributes:
-        parent (str):
-            Required. The [name][google.cloud.kms.v1.KeyRing.name] of
-            the KeyRing associated with the
-            [CryptoKeys][google.cloud.kms.v1.CryptoKey].
-        crypto_key_id (str):
-            Required. It must be unique within a KeyRing and match the
-            regular expression ``[a-zA-Z0-9_-]{1,63}``
-        crypto_key (google.cloud.kms_v1.types.CryptoKey):
-            Required. A [CryptoKey][google.cloud.kms.v1.CryptoKey] with
-            initial field values.
-        skip_initial_version_creation (bool):
-            If set to true, the request will create a
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] without any
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-            You must manually call
-            [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion]
-            or
-            [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion]
-            before you can use this
-            [CryptoKey][google.cloud.kms.v1.CryptoKey].
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    crypto_key_id: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    crypto_key: resources.CryptoKey = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=resources.CryptoKey,
-    )
-    skip_initial_version_creation: bool = proto.Field(
-        proto.BOOL,
-        number=5,
-    )
-
-
-class CreateCryptoKeyVersionRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion].
-
-    Attributes:
-        parent (str):
-            Required. The [name][google.cloud.kms.v1.CryptoKey.name] of
-            the [CryptoKey][google.cloud.kms.v1.CryptoKey] associated
-            with the
-            [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
-        crypto_key_version (google.cloud.kms_v1.types.CryptoKeyVersion):
-            Required. A
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            with initial field values.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    crypto_key_version: resources.CryptoKeyVersion = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=resources.CryptoKeyVersion,
-    )
-
-
-class ImportCryptoKeyVersionRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
-
-
-    .. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
-
-    Attributes:
-        parent (str):
-            Required. The [name][google.cloud.kms.v1.CryptoKey.name] of
-            the [CryptoKey][google.cloud.kms.v1.CryptoKey] to be
-            imported into.
-
-            The create permission is only required on this key when
-            creating a new
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
-        crypto_key_version (str):
-            Optional. The optional
-            [name][google.cloud.kms.v1.CryptoKeyVersion.name] of an
-            existing
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            target for an import operation. If this field is not
-            present, a new
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            containing the supplied key material is created.
-
-            If this field is present, the supplied key material is
-            imported into the existing
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. To
-            import into an existing
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion],
-            the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            must be a child of
-            [ImportCryptoKeyVersionRequest.parent][google.cloud.kms.v1.ImportCryptoKeyVersionRequest.parent],
-            have been previously created via [ImportCryptoKeyVersion][],
-            and be in
-            [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED]
-            or
-            [IMPORT_FAILED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.IMPORT_FAILED]
-            state. The key material and algorithm must match the
-            previous
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            exactly if the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] has
-            ever contained key material.
-        algorithm (google.cloud.kms_v1.types.CryptoKeyVersion.CryptoKeyVersionAlgorithm):
-            Required. The
-            [algorithm][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm]
-            of the key being imported. This does not need to match the
-            [version_template][google.cloud.kms.v1.CryptoKey.version_template]
-            of the [CryptoKey][google.cloud.kms.v1.CryptoKey] this
-            version imports into.
-        import_job (str):
-            Required. The [name][google.cloud.kms.v1.ImportJob.name] of
-            the [ImportJob][google.cloud.kms.v1.ImportJob] that was used
-            to wrap this key material.
-        wrapped_key (bytes):
-            Optional. The wrapped key material to import.
-
-            Before wrapping, key material must be formatted. If
-            importing symmetric key material, the expected key material
-            format is plain bytes. If importing asymmetric key material,
-            the expected key material format is PKCS#8-encoded DER (the
-            PrivateKeyInfo structure from RFC 5208).
-
-            When wrapping with import methods
-            ([RSA_OAEP_3072_SHA1_AES_256][google.cloud.kms.v1.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256]
-            or
-            [RSA_OAEP_4096_SHA1_AES_256][google.cloud.kms.v1.ImportJob.ImportMethod.RSA_OAEP_4096_SHA1_AES_256]
-            or
-            [RSA_OAEP_3072_SHA256_AES_256][google.cloud.kms.v1.ImportJob.ImportMethod.RSA_OAEP_3072_SHA256_AES_256]
-            or
-            [RSA_OAEP_4096_SHA256_AES_256][google.cloud.kms.v1.ImportJob.ImportMethod.RSA_OAEP_4096_SHA256_AES_256]),
-
-            this field must contain the concatenation of:
-
-            .. raw:: html
-
-                <ol>
-                  <li>An ephemeral AES-256 wrapping key wrapped with the
-                      [public_key][google.cloud.kms.v1.ImportJob.public_key] using
-                      RSAES-OAEP with SHA-1/SHA-256, MGF1 with SHA-1/SHA-256, and an empty
-                      label.
-                  </li>
-                  <li>The formatted key to be imported, wrapped with the ephemeral AES-256
-                      key using AES-KWP (RFC 5649).
-                  </li>
-                </ol>
-
-            This format is the same as the format produced by PKCS#11
-            mechanism CKM_RSA_AES_KEY_WRAP.
-
-            When wrapping with import methods
-            ([RSA_OAEP_3072_SHA256][google.cloud.kms.v1.ImportJob.ImportMethod.RSA_OAEP_3072_SHA256]
-            or
-            [RSA_OAEP_4096_SHA256][google.cloud.kms.v1.ImportJob.ImportMethod.RSA_OAEP_4096_SHA256]),
-
-            this field must contain the formatted key to be imported,
-            wrapped with the
-            [public_key][google.cloud.kms.v1.ImportJob.public_key] using
-            RSAES-OAEP with SHA-256, MGF1 with SHA-256, and an empty
-            label.
-        rsa_aes_wrapped_key (bytes):
-            Optional. This field has the same meaning as
-            [wrapped_key][google.cloud.kms.v1.ImportCryptoKeyVersionRequest.wrapped_key].
-            Prefer to use that field in new work. Either that field or
-            this field (but not both) must be specified.
-
-            This field is a member of `oneof`_ ``wrapped_key_material``.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    crypto_key_version: str = proto.Field(
-        proto.STRING,
-        number=6,
-    )
-    algorithm: resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm = proto.Field(
-        proto.ENUM,
-        number=2,
-        enum=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm,
-    )
-    import_job: str = proto.Field(
-        proto.STRING,
-        number=4,
-    )
-    wrapped_key: bytes = proto.Field(
-        proto.BYTES,
-        number=8,
-    )
-    rsa_aes_wrapped_key: bytes = proto.Field(
-        proto.BYTES,
-        number=5,
-        oneof="wrapped_key_material",
-    )
-
-
-class CreateImportJobRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.CreateImportJob][google.cloud.kms.v1.KeyManagementService.CreateImportJob].
-
-    Attributes:
-        parent (str):
-            Required. The [name][google.cloud.kms.v1.KeyRing.name] of
-            the [KeyRing][google.cloud.kms.v1.KeyRing] associated with
-            the [ImportJobs][google.cloud.kms.v1.ImportJob].
-        import_job_id (str):
-            Required. It must be unique within a KeyRing and match the
-            regular expression ``[a-zA-Z0-9_-]{1,63}``
-        import_job (google.cloud.kms_v1.types.ImportJob):
-            Required. An [ImportJob][google.cloud.kms.v1.ImportJob] with
-            initial field values.
-    """
-
-    parent: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    import_job_id: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-    import_job: resources.ImportJob = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=resources.ImportJob,
-    )
-
-
-class UpdateCryptoKeyRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.UpdateCryptoKey][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKey].
-
-    Attributes:
-        crypto_key (google.cloud.kms_v1.types.CryptoKey):
-            Required. [CryptoKey][google.cloud.kms.v1.CryptoKey] with
-            updated values.
-        update_mask (google.protobuf.field_mask_pb2.FieldMask):
-            Required. List of fields to be updated in
-            this request.
-    """
-
-    crypto_key: resources.CryptoKey = proto.Field(
-        proto.MESSAGE,
-        number=1,
-        message=resources.CryptoKey,
-    )
-    update_mask: field_mask_pb2.FieldMask = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=field_mask_pb2.FieldMask,
-    )
-
-
-class UpdateCryptoKeyVersionRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.UpdateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyVersion].
-
-    Attributes:
-        crypto_key_version (google.cloud.kms_v1.types.CryptoKeyVersion):
-            Required.
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            with updated values.
-        update_mask (google.protobuf.field_mask_pb2.FieldMask):
-            Required. List of fields to be updated in
-            this request.
-    """
-
-    crypto_key_version: resources.CryptoKeyVersion = proto.Field(
-        proto.MESSAGE,
-        number=1,
-        message=resources.CryptoKeyVersion,
-    )
-    update_mask: field_mask_pb2.FieldMask = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=field_mask_pb2.FieldMask,
-    )
-
-
-class UpdateCryptoKeyPrimaryVersionRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] to update.
-        crypto_key_version_id (str):
-            Required. The id of the child
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use as primary.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    crypto_key_version_id: str = proto.Field(
-        proto.STRING,
-        number=2,
-    )
-
-
-class DestroyCryptoKeyVersionRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            destroy.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class RestoreCryptoKeyVersionRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            restore.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-
-
-class EncryptRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] or
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use for encryption.
-
-            If a [CryptoKey][google.cloud.kms.v1.CryptoKey] is
-            specified, the server will use its [primary
-            version][google.cloud.kms.v1.CryptoKey.primary].
-        plaintext (bytes):
-            Required. The data to encrypt. Must be no larger than 64KiB.
-
-            The maximum size depends on the key version's
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-            For
-            [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
-            [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL],
-            and
-            [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC]
-            keys, the plaintext must be no larger than 64KiB. For
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the
-            combined length of the plaintext and
-            additional_authenticated_data fields must be no larger than
-            8KiB.
-        additional_authenticated_data (bytes):
-            Optional. Optional data that, if specified, must also be
-            provided during decryption through
-            [DecryptRequest.additional_authenticated_data][google.cloud.kms.v1.DecryptRequest.additional_authenticated_data].
-
-            The maximum size depends on the key version's
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-            For
-            [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
-            [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL],
-            and
-            [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC]
-            keys the AAD must be no larger than 64KiB. For
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the
-            combined length of the plaintext and
-            additional_authenticated_data fields must be no larger than
-            8KiB.
-        plaintext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [EncryptRequest.plaintext][google.cloud.kms.v1.EncryptRequest.plaintext].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [EncryptRequest.plaintext][google.cloud.kms.v1.EncryptRequest.plaintext]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([EncryptRequest.plaintext][google.cloud.kms.v1.EncryptRequest.plaintext])
-            is equal to
-            [EncryptRequest.plaintext_crc32c][google.cloud.kms.v1.EncryptRequest.plaintext_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-        additional_authenticated_data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [EncryptRequest.additional_authenticated_data][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [EncryptRequest.additional_authenticated_data][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([EncryptRequest.additional_authenticated_data][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data])
-            is equal to
-            [EncryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    plaintext: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    additional_authenticated_data: bytes = proto.Field(
-        proto.BYTES,
-        number=3,
-    )
-    plaintext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=7,
-        message=wrappers_pb2.Int64Value,
-    )
-    additional_authenticated_data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=8,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class DecryptRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKey][google.cloud.kms.v1.CryptoKey] to use for
-            decryption. The server will choose the appropriate version.
-        ciphertext (bytes):
-            Required. The encrypted data originally returned in
-            [EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext].
-        additional_authenticated_data (bytes):
-            Optional. Optional data that must match the data originally
-            supplied in
-            [EncryptRequest.additional_authenticated_data][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data].
-        ciphertext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [DecryptRequest.ciphertext][google.cloud.kms.v1.DecryptRequest.ciphertext].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [DecryptRequest.ciphertext][google.cloud.kms.v1.DecryptRequest.ciphertext]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([DecryptRequest.ciphertext][google.cloud.kms.v1.DecryptRequest.ciphertext])
-            is equal to
-            [DecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.DecryptRequest.ciphertext_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-        additional_authenticated_data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [DecryptRequest.additional_authenticated_data][google.cloud.kms.v1.DecryptRequest.additional_authenticated_data].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [DecryptRequest.additional_authenticated_data][google.cloud.kms.v1.DecryptRequest.additional_authenticated_data]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([DecryptRequest.additional_authenticated_data][google.cloud.kms.v1.DecryptRequest.additional_authenticated_data])
-            is equal to
-            [DecryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.DecryptRequest.additional_authenticated_data_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    ciphertext: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    additional_authenticated_data: bytes = proto.Field(
-        proto.BYTES,
-        number=3,
-    )
-    ciphertext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=5,
-        message=wrappers_pb2.Int64Value,
-    )
-    additional_authenticated_data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=6,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class RawEncryptRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use for encryption.
-        plaintext (bytes):
-            Required. The data to encrypt. Must be no larger than 64KiB.
-
-            The maximum size depends on the key version's
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-            For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE]
-            keys, the plaintext must be no larger than 64KiB. For
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the
-            combined length of the plaintext and
-            additional_authenticated_data fields must be no larger than
-            8KiB.
-        additional_authenticated_data (bytes):
-            Optional. Optional data that, if specified, must also be
-            provided during decryption through
-            [RawDecryptRequest.additional_authenticated_data][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data].
-
-            This field may only be used in conjunction with an
-            [algorithm][google.cloud.kms.v1.CryptoKeyVersion.algorithm]
-            that accepts additional authenticated data (for example,
-            AES-GCM).
-
-            The maximum size depends on the key version's
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-            For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE]
-            keys, the plaintext must be no larger than 64KiB. For
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the
-            combined length of the plaintext and
-            additional_authenticated_data fields must be no larger than
-            8KiB.
-        plaintext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [RawEncryptRequest.plaintext][google.cloud.kms.v1.RawEncryptRequest.plaintext].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received plaintext using
-            this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C(plaintext) is equal to plaintext_crc32c, and if so,
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        additional_authenticated_data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [RawEncryptRequest.additional_authenticated_data][google.cloud.kms.v1.RawEncryptRequest.additional_authenticated_data].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            additional_authenticated_data using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C(additional_authenticated_data) is equal to
-            additional_authenticated_data_crc32c, and if so, perform a
-            limited number of retries. A persistent mismatch may
-            indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        initialization_vector (bytes):
-            Optional. A customer-supplied initialization vector that
-            will be used for encryption. If it is not provided for
-            AES-CBC and AES-CTR, one will be generated. It will be
-            returned in
-            [RawEncryptResponse.initialization_vector][google.cloud.kms.v1.RawEncryptResponse.initialization_vector].
-        initialization_vector_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [RawEncryptRequest.initialization_vector][google.cloud.kms.v1.RawEncryptRequest.initialization_vector].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            initialization_vector using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C(initialization_vector) is equal to
-            initialization_vector_crc32c, and if so, perform a limited
-            number of retries. A persistent mismatch may indicate an
-            issue in your computation of the CRC32C checksum. Note: This
-            field is defined as int64 for reasons of compatibility
-            across different languages. However, it is a non-negative
-            integer, which will never exceed 2^32-1, and can be safely
-            downconverted to uint32 in languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    plaintext: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    additional_authenticated_data: bytes = proto.Field(
-        proto.BYTES,
-        number=3,
-    )
-    plaintext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=4,
-        message=wrappers_pb2.Int64Value,
-    )
-    additional_authenticated_data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=5,
-        message=wrappers_pb2.Int64Value,
-    )
-    initialization_vector: bytes = proto.Field(
-        proto.BYTES,
-        number=6,
-    )
-    initialization_vector_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=7,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class RawDecryptRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use for decryption.
-        ciphertext (bytes):
-            Required. The encrypted data originally returned in
-            [RawEncryptResponse.ciphertext][google.cloud.kms.v1.RawEncryptResponse.ciphertext].
-        additional_authenticated_data (bytes):
-            Optional. Optional data that must match the data originally
-            supplied in
-            [RawEncryptRequest.additional_authenticated_data][google.cloud.kms.v1.RawEncryptRequest.additional_authenticated_data].
-        initialization_vector (bytes):
-            Required. The initialization vector (IV) used during
-            encryption, which must match the data originally provided in
-            [RawEncryptResponse.initialization_vector][google.cloud.kms.v1.RawEncryptResponse.initialization_vector].
-        tag_length (int):
-            The length of the authentication tag that is
-            appended to the end of the ciphertext. If
-            unspecified (0), the default value for the key's
-            algorithm will be used (for AES-GCM, the default
-            value is 16).
-        ciphertext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [RawDecryptRequest.ciphertext][google.cloud.kms.v1.RawDecryptRequest.ciphertext].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received ciphertext using
-            this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C(ciphertext) is equal to ciphertext_crc32c, and if so,
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        additional_authenticated_data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [RawDecryptRequest.additional_authenticated_data][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            additional_authenticated_data using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C(additional_authenticated_data) is equal to
-            additional_authenticated_data_crc32c, and if so, perform a
-            limited number of retries. A persistent mismatch may
-            indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        initialization_vector_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [RawDecryptRequest.initialization_vector][google.cloud.kms.v1.RawDecryptRequest.initialization_vector].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            initialization_vector using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C(initialization_vector) is equal to
-            initialization_vector_crc32c, and if so, perform a limited
-            number of retries. A persistent mismatch may indicate an
-            issue in your computation of the CRC32C checksum. Note: This
-            field is defined as int64 for reasons of compatibility
-            across different languages. However, it is a non-negative
-            integer, which will never exceed 2^32-1, and can be safely
-            downconverted to uint32 in languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    ciphertext: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    additional_authenticated_data: bytes = proto.Field(
-        proto.BYTES,
-        number=3,
-    )
-    initialization_vector: bytes = proto.Field(
-        proto.BYTES,
-        number=4,
-    )
-    tag_length: int = proto.Field(
-        proto.INT32,
-        number=5,
-    )
-    ciphertext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=6,
-        message=wrappers_pb2.Int64Value,
-    )
-    additional_authenticated_data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=7,
-        message=wrappers_pb2.Int64Value,
-    )
-    initialization_vector_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=8,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class AsymmetricSignRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use for signing.
-        digest (google.cloud.kms_v1.types.Digest):
-            Optional. The digest of the data to sign. The digest must be
-            produced with the same digest algorithm as specified by the
-            key version's
-            [algorithm][google.cloud.kms.v1.CryptoKeyVersion.algorithm].
-
-            This field may not be supplied if
-            [AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data]
-            is supplied.
-        digest_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [AsymmetricSignRequest.digest][google.cloud.kms.v1.AsymmetricSignRequest.digest].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [AsymmetricSignRequest.digest][google.cloud.kms.v1.AsymmetricSignRequest.digest]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([AsymmetricSignRequest.digest][google.cloud.kms.v1.AsymmetricSignRequest.digest])
-            is equal to
-            [AsymmetricSignRequest.digest_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.digest_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-        data (bytes):
-            Optional. The data to sign. It can't be supplied if
-            [AsymmetricSignRequest.digest][google.cloud.kms.v1.AsymmetricSignRequest.digest]
-            is supplied.
-        data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([AsymmetricSignRequest.data][google.cloud.kms.v1.AsymmetricSignRequest.data])
-            is equal to
-            [AsymmetricSignRequest.data_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.data_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    digest: "Digest" = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message="Digest",
-    )
-    digest_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=4,
-        message=wrappers_pb2.Int64Value,
-    )
-    data: bytes = proto.Field(
-        proto.BYTES,
-        number=6,
-    )
-    data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=7,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class AsymmetricDecryptRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use for decryption.
-        ciphertext (bytes):
-            Required. The data encrypted with the named
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s
-            public key using OAEP.
-        ciphertext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [AsymmetricDecryptRequest.ciphertext][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [AsymmetricDecryptRequest.ciphertext][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([AsymmetricDecryptRequest.ciphertext][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext])
-            is equal to
-            [AsymmetricDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    ciphertext: bytes = proto.Field(
-        proto.BYTES,
-        number=3,
-    )
-    ciphertext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=4,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class MacSignRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use for signing.
-        data (bytes):
-            Required. The data to sign. The MAC tag is
-            computed over this data field based on the
-            specific algorithm.
-        data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data])
-            is equal to
-            [MacSignRequest.data_crc32c][google.cloud.kms.v1.MacSignRequest.data_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    data: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class MacVerifyRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-
-    Attributes:
-        name (str):
-            Required. The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to
-            use for verification.
-        data (bytes):
-            Required. The data used previously as a
-            [MacSignRequest.data][google.cloud.kms.v1.MacSignRequest.data]
-            to generate the MAC tag.
-        data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [MacVerifyRequest.data][google.cloud.kms.v1.MacVerifyRequest.data].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [MacVerifyRequest.data][google.cloud.kms.v1.MacVerifyRequest.data]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([MacVerifyRequest.data][google.cloud.kms.v1.MacVerifyRequest.data])
-            is equal to
-            [MacVerifyRequest.data_crc32c][google.cloud.kms.v1.MacVerifyRequest.data_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-        mac (bytes):
-            Required. The signature to verify.
-        mac_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Optional. An optional CRC32C checksum of the
-            [MacVerifyRequest.mac][google.cloud.kms.v1.MacVerifyRequest.mac].
-            If specified,
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will verify the integrity of the received
-            [MacVerifyRequest.mac][google.cloud.kms.v1.MacVerifyRequest.mac]
-            using this checksum.
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            will report an error if the checksum verification fails. If
-            you receive a checksum error, your client should verify that
-            CRC32C([MacVerifyRequest.tag][]) is equal to
-            [MacVerifyRequest.mac_crc32c][google.cloud.kms.v1.MacVerifyRequest.mac_crc32c],
-            and if so, perform a limited number of retries. A persistent
-            mismatch may indicate an issue in your computation of the
-            CRC32C checksum. Note: This field is defined as int64 for
-            reasons of compatibility across different languages.
-            However, it is a non-negative integer, which will never
-            exceed 2^32-1, and can be safely downconverted to uint32 in
-            languages that support this type.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    data: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=wrappers_pb2.Int64Value,
-    )
-    mac: bytes = proto.Field(
-        proto.BYTES,
-        number=4,
-    )
-    mac_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=5,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class GenerateRandomBytesRequest(proto.Message):
-    r"""Request message for
-    [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-
-    Attributes:
-        location (str):
-            The project-specific location in which to
-            generate random bytes. For example,
-            "projects/my-project/locations/us-central1".
-        length_bytes (int):
-            The length in bytes of the amount of
-            randomness to retrieve.  Minimum 8 bytes,
-            maximum 1024 bytes.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            to use when generating the random data. Currently, only
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] protection
-            level is supported.
-    """
-
-    location: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    length_bytes: int = proto.Field(
-        proto.INT32,
-        number=2,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=3,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class EncryptResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
-
-    Attributes:
-        name (str):
-            The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used in encryption. Check this field to verify that the
-            intended resource was used for encryption.
-        ciphertext (bytes):
-            The encrypted data.
-        ciphertext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext].
-            An integrity check of
-            [EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext]
-            can be performed by computing the CRC32C checksum of
-            [EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext]
-            and comparing your results to this field. Discard the
-            response in case of non-matching checksum values, and
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        verified_plaintext_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [EncryptRequest.plaintext_crc32c][google.cloud.kms.v1.EncryptRequest.plaintext_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [plaintext][google.cloud.kms.v1.EncryptRequest.plaintext]. A
-            false value of this field indicates either that
-            [EncryptRequest.plaintext_crc32c][google.cloud.kms.v1.EncryptRequest.plaintext_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [EncryptRequest.plaintext_crc32c][google.cloud.kms.v1.EncryptRequest.plaintext_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        verified_additional_authenticated_data_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [EncryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [AAD][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data].
-            A false value of this field indicates either that
-            [EncryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [EncryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used in encryption.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    ciphertext: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    ciphertext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=4,
-        message=wrappers_pb2.Int64Value,
-    )
-    verified_plaintext_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=5,
-    )
-    verified_additional_authenticated_data_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=6,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=7,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class DecryptResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
-
-    Attributes:
-        plaintext (bytes):
-            The decrypted data originally supplied in
-            [EncryptRequest.plaintext][google.cloud.kms.v1.EncryptRequest.plaintext].
-        plaintext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [DecryptResponse.plaintext][google.cloud.kms.v1.DecryptResponse.plaintext].
-            An integrity check of
-            [DecryptResponse.plaintext][google.cloud.kms.v1.DecryptResponse.plaintext]
-            can be performed by computing the CRC32C checksum of
-            [DecryptResponse.plaintext][google.cloud.kms.v1.DecryptResponse.plaintext]
-            and comparing your results to this field. Discard the
-            response in case of non-matching checksum values, and
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: receiving this response message indicates
-            that
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            is able to successfully decrypt the
-            [ciphertext][google.cloud.kms.v1.DecryptRequest.ciphertext].
-            Note: This field is defined as int64 for reasons of
-            compatibility across different languages. However, it is a
-            non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        used_primary (bool):
-            Whether the Decryption was performed using
-            the primary key version.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used in decryption.
-    """
-
-    plaintext: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-    )
-    plaintext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=wrappers_pb2.Int64Value,
-    )
-    used_primary: bool = proto.Field(
-        proto.BOOL,
-        number=3,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=4,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class RawEncryptResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt].
-
-    Attributes:
-        ciphertext (bytes):
-            The encrypted data. In the case of AES-GCM, the
-            authentication tag is the
-            [tag_length][google.cloud.kms.v1.RawEncryptResponse.tag_length]
-            bytes at the end of this field.
-        initialization_vector (bytes):
-            The initialization vector (IV) generated by the service
-            during encryption. This value must be stored and provided in
-            [RawDecryptRequest.initialization_vector][google.cloud.kms.v1.RawDecryptRequest.initialization_vector]
-            at decryption time.
-        tag_length (int):
-            The length of the authentication tag that is
-            appended to the end of the ciphertext.
-        ciphertext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [RawEncryptResponse.ciphertext][google.cloud.kms.v1.RawEncryptResponse.ciphertext].
-            An integrity check of ciphertext can be performed by
-            computing the CRC32C checksum of ciphertext and comparing
-            your results to this field. Discard the response in case of
-            non-matching checksum values, and perform a limited number
-            of retries. A persistent mismatch may indicate an issue in
-            your computation of the CRC32C checksum. Note: This field is
-            defined as int64 for reasons of compatibility across
-            different languages. However, it is a non-negative integer,
-            which will never exceed 2^32-1, and can be safely
-            downconverted to uint32 in languages that support this type.
-        initialization_vector_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [RawEncryptResponse.initialization_vector][google.cloud.kms.v1.RawEncryptResponse.initialization_vector].
-            An integrity check of initialization_vector can be performed
-            by computing the CRC32C checksum of initialization_vector
-            and comparing your results to this field. Discard the
-            response in case of non-matching checksum values, and
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        verified_plaintext_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [RawEncryptRequest.plaintext_crc32c][google.cloud.kms.v1.RawEncryptRequest.plaintext_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the plaintext. A
-            false value of this field indicates either that
-            [RawEncryptRequest.plaintext_crc32c][google.cloud.kms.v1.RawEncryptRequest.plaintext_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [RawEncryptRequest.plaintext_crc32c][google.cloud.kms.v1.RawEncryptRequest.plaintext_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        verified_additional_authenticated_data_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [RawEncryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawEncryptRequest.additional_authenticated_data_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of
-            additional_authenticated_data. A false value of this field
-            indicates either that //
-            [RawEncryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawEncryptRequest.additional_authenticated_data_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [RawEncryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawEncryptRequest.additional_authenticated_data_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        verified_initialization_vector_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [RawEncryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawEncryptRequest.initialization_vector_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of
-            initialization_vector. A false value of this field indicates
-            either that
-            [RawEncryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawEncryptRequest.initialization_vector_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [RawEncryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawEncryptRequest.initialization_vector_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        name (str):
-            The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used in encryption. Check this field to verify that the
-            intended resource was used for encryption.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used in encryption.
-    """
-
-    ciphertext: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-    )
-    initialization_vector: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    tag_length: int = proto.Field(
-        proto.INT32,
-        number=3,
-    )
-    ciphertext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=4,
-        message=wrappers_pb2.Int64Value,
-    )
-    initialization_vector_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=5,
-        message=wrappers_pb2.Int64Value,
-    )
-    verified_plaintext_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=6,
-    )
-    verified_additional_authenticated_data_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=7,
-    )
-    verified_initialization_vector_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=10,
-    )
-    name: str = proto.Field(
-        proto.STRING,
-        number=8,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=9,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class RawDecryptResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
-
-    Attributes:
-        plaintext (bytes):
-            The decrypted data.
-        plaintext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [RawDecryptResponse.plaintext][google.cloud.kms.v1.RawDecryptResponse.plaintext].
-            An integrity check of plaintext can be performed by
-            computing the CRC32C checksum of plaintext and comparing
-            your results to this field. Discard the response in case of
-            non-matching checksum values, and perform a limited number
-            of retries. A persistent mismatch may indicate an issue in
-            your computation of the CRC32C checksum. Note: receiving
-            this response message indicates that
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            is able to successfully decrypt the
-            [ciphertext][google.cloud.kms.v1.RawDecryptRequest.ciphertext].
-            Note: This field is defined as int64 for reasons of
-            compatibility across different languages. However, it is a
-            non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used in decryption.
-        verified_ciphertext_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [RawDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the ciphertext. A
-            false value of this field indicates either that
-            [RawDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [RawDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        verified_additional_authenticated_data_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [RawDecryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of
-            additional_authenticated_data. A false value of this field
-            indicates either that //
-            [RawDecryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [RawDecryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        verified_initialization_vector_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [RawDecryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of
-            initialization_vector. A false value of this field indicates
-            either that
-            [RawDecryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [RawDecryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-    """
-
-    plaintext: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-    )
-    plaintext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=wrappers_pb2.Int64Value,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=3,
-        enum=resources.ProtectionLevel,
-    )
-    verified_ciphertext_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=4,
-    )
-    verified_additional_authenticated_data_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=5,
-    )
-    verified_initialization_vector_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=6,
-    )
-
-
-class AsymmetricSignResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].
-
-    Attributes:
-        signature (bytes):
-            The created signature.
-        signature_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [AsymmetricSignResponse.signature][google.cloud.kms.v1.AsymmetricSignResponse.signature].
-            An integrity check of
-            [AsymmetricSignResponse.signature][google.cloud.kms.v1.AsymmetricSignResponse.signature]
-            can be performed by computing the CRC32C checksum of
-            [AsymmetricSignResponse.signature][google.cloud.kms.v1.AsymmetricSignResponse.signature]
-            and comparing your results to this field. Discard the
-            response in case of non-matching checksum values, and
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        verified_digest_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [AsymmetricSignRequest.digest_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.digest_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [digest][google.cloud.kms.v1.AsymmetricSignRequest.digest].
-            A false value of this field indicates either that
-            [AsymmetricSignRequest.digest_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.digest_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [AsymmetricSignRequest.digest_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.digest_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        name (str):
-            The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used for signing. Check this field to verify that the
-            intended resource was used for signing.
-        verified_data_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [AsymmetricSignRequest.data_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.data_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [data][google.cloud.kms.v1.AsymmetricSignRequest.data]. A
-            false value of this field indicates either that
-            [AsymmetricSignRequest.data_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.data_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [AsymmetricSignRequest.data_crc32c][google.cloud.kms.v1.AsymmetricSignRequest.data_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used for signing.
-    """
-
-    signature: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-    )
-    signature_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=wrappers_pb2.Int64Value,
-    )
-    verified_digest_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=3,
-    )
-    name: str = proto.Field(
-        proto.STRING,
-        number=4,
-    )
-    verified_data_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=5,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=6,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class AsymmetricDecryptResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].
-
-    Attributes:
-        plaintext (bytes):
-            The decrypted data originally encrypted with
-            the matching public key.
-        plaintext_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [AsymmetricDecryptResponse.plaintext][google.cloud.kms.v1.AsymmetricDecryptResponse.plaintext].
-            An integrity check of
-            [AsymmetricDecryptResponse.plaintext][google.cloud.kms.v1.AsymmetricDecryptResponse.plaintext]
-            can be performed by computing the CRC32C checksum of
-            [AsymmetricDecryptResponse.plaintext][google.cloud.kms.v1.AsymmetricDecryptResponse.plaintext]
-            and comparing your results to this field. Discard the
-            response in case of non-matching checksum values, and
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        verified_ciphertext_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [AsymmetricDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [ciphertext][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext].
-            A false value of this field indicates either that
-            [AsymmetricDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [AsymmetricDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.AsymmetricDecryptRequest.ciphertext_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used in decryption.
-    """
-
-    plaintext: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-    )
-    plaintext_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=2,
-        message=wrappers_pb2.Int64Value,
-    )
-    verified_ciphertext_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=3,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=4,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class MacSignResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].
-
-    Attributes:
-        name (str):
-            The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used for signing. Check this field to verify that the
-            intended resource was used for signing.
-        mac (bytes):
-            The created signature.
-        mac_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [MacSignResponse.mac][google.cloud.kms.v1.MacSignResponse.mac].
-            An integrity check of
-            [MacSignResponse.mac][google.cloud.kms.v1.MacSignResponse.mac]
-            can be performed by computing the CRC32C checksum of
-            [MacSignResponse.mac][google.cloud.kms.v1.MacSignResponse.mac]
-            and comparing your results to this field. Discard the
-            response in case of non-matching checksum values, and
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-        verified_data_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [MacSignRequest.data_crc32c][google.cloud.kms.v1.MacSignRequest.data_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [data][google.cloud.kms.v1.MacSignRequest.data]. A false
-            value of this field indicates either that
-            [MacSignRequest.data_crc32c][google.cloud.kms.v1.MacSignRequest.data_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [MacSignRequest.data_crc32c][google.cloud.kms.v1.MacSignRequest.data_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used for signing.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    mac: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-    )
-    mac_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=wrappers_pb2.Int64Value,
-    )
-    verified_data_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=4,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=5,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class MacVerifyResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.MacVerify][google.cloud.kms.v1.KeyManagementService.MacVerify].
-
-    Attributes:
-        name (str):
-            The resource name of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used for verification. Check this field to verify that the
-            intended resource was used for verification.
-        success (bool):
-            This field indicates whether or not the verification
-            operation for
-            [MacVerifyRequest.mac][google.cloud.kms.v1.MacVerifyRequest.mac]
-            over
-            [MacVerifyRequest.data][google.cloud.kms.v1.MacVerifyRequest.data]
-            was successful.
-        verified_data_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [MacVerifyRequest.data_crc32c][google.cloud.kms.v1.MacVerifyRequest.data_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [data][google.cloud.kms.v1.MacVerifyRequest.data]. A false
-            value of this field indicates either that
-            [MacVerifyRequest.data_crc32c][google.cloud.kms.v1.MacVerifyRequest.data_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [MacVerifyRequest.data_crc32c][google.cloud.kms.v1.MacVerifyRequest.data_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        verified_mac_crc32c (bool):
-            Integrity verification field. A flag indicating whether
-            [MacVerifyRequest.mac_crc32c][google.cloud.kms.v1.MacVerifyRequest.mac_crc32c]
-            was received by
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService]
-            and used for the integrity verification of the
-            [data][google.cloud.kms.v1.MacVerifyRequest.mac]. A false
-            value of this field indicates either that
-            [MacVerifyRequest.mac_crc32c][google.cloud.kms.v1.MacVerifyRequest.mac_crc32c]
-            was left unset or that it was not delivered to
-            [KeyManagementService][google.cloud.kms.v1.KeyManagementService].
-            If you've set
-            [MacVerifyRequest.mac_crc32c][google.cloud.kms.v1.MacVerifyRequest.mac_crc32c]
-            but this field is still false, discard the response and
-            perform a limited number of retries.
-        verified_success_integrity (bool):
-            Integrity verification field. This value is used for the
-            integrity verification of [MacVerifyResponse.success]. If
-            the value of this field contradicts the value of
-            [MacVerifyResponse.success], discard the response and
-            perform a limited number of retries.
-        protection_level (google.cloud.kms_v1.types.ProtectionLevel):
-            The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel]
-            of the
-            [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
-            used for verification.
-    """
-
-    name: str = proto.Field(
-        proto.STRING,
-        number=1,
-    )
-    success: bool = proto.Field(
-        proto.BOOL,
-        number=2,
-    )
-    verified_data_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=3,
-    )
-    verified_mac_crc32c: bool = proto.Field(
-        proto.BOOL,
-        number=4,
-    )
-    verified_success_integrity: bool = proto.Field(
-        proto.BOOL,
-        number=5,
-    )
-    protection_level: resources.ProtectionLevel = proto.Field(
-        proto.ENUM,
-        number=6,
-        enum=resources.ProtectionLevel,
-    )
-
-
-class GenerateRandomBytesResponse(proto.Message):
-    r"""Response message for
-    [KeyManagementService.GenerateRandomBytes][google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes].
-
-    Attributes:
-        data (bytes):
-            The generated data.
-        data_crc32c (google.protobuf.wrappers_pb2.Int64Value):
-            Integrity verification field. A CRC32C checksum of the
-            returned
-            [GenerateRandomBytesResponse.data][google.cloud.kms.v1.GenerateRandomBytesResponse.data].
-            An integrity check of
-            [GenerateRandomBytesResponse.data][google.cloud.kms.v1.GenerateRandomBytesResponse.data]
-            can be performed by computing the CRC32C checksum of
-            [GenerateRandomBytesResponse.data][google.cloud.kms.v1.GenerateRandomBytesResponse.data]
-            and comparing your results to this field. Discard the
-            response in case of non-matching checksum values, and
-            perform a limited number of retries. A persistent mismatch
-            may indicate an issue in your computation of the CRC32C
-            checksum. Note: This field is defined as int64 for reasons
-            of compatibility across different languages. However, it is
-            a non-negative integer, which will never exceed 2^32-1, and
-            can be safely downconverted to uint32 in languages that
-            support this type.
-    """
-
-    data: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-    )
-    data_crc32c: wrappers_pb2.Int64Value = proto.Field(
-        proto.MESSAGE,
-        number=3,
-        message=wrappers_pb2.Int64Value,
-    )
-
-
-class Digest(proto.Message):
-    r"""A [Digest][google.cloud.kms.v1.Digest] holds a cryptographic message
-    digest.
-
-    This message has `oneof`_ fields (mutually exclusive fields).
-    For each oneof, at most one member field can be set at the same time.
-    Setting any member of the oneof automatically clears all other
-    members.
-
-    .. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
-
-    Attributes:
-        sha256 (bytes):
-            A message digest produced with the SHA-256
-            algorithm.
-
-            This field is a member of `oneof`_ ``digest``.
-        sha384 (bytes):
-            A message digest produced with the SHA-384
-            algorithm.
-
-            This field is a member of `oneof`_ ``digest``.
-        sha512 (bytes):
-            A message digest produced with the SHA-512
-            algorithm.
-
-            This field is a member of `oneof`_ ``digest``.
-    """
-
-    sha256: bytes = proto.Field(
-        proto.BYTES,
-        number=1,
-        oneof="digest",
-    )
-    sha384: bytes = proto.Field(
-        proto.BYTES,
-        number=2,
-        oneof="digest",
-    )
-    sha512: bytes = proto.Field(
-        proto.BYTES,
-        number=3,
-        oneof="digest",
-    )
-
-
-class LocationMetadata(proto.Message):
-    r"""Cloud KMS metadata for the given
-    [google.cloud.location.Location][google.cloud.location.Location].
-
-    Attributes:
-        hsm_available (bool):
-            Indicates whether
-            [CryptoKeys][google.cloud.kms.v1.CryptoKey] with
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]
-            [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] can be
-            created in this location.
-        ekm_available (bool):
-            Indicates whether
-            [CryptoKeys][google.cloud.kms.v1.CryptoKey] with
-            [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]
-            [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL] can
-            be created in this location.
-    """
-
-    hsm_available: bool = proto.Field(
-        proto.BOOL,
-        number=1,
-    )
-    ekm_available: bool = proto.Field(
-        proto.BOOL,
-        number=2,
-    )
-
-
-__all__ = tuple(sorted(__protobuf__.manifest))
diff --git a/kms-v1-py.tar.gz b/kms-v1-py.tar.gz
deleted file mode 100644
index b03fc4c90984dc9848337d5795880d79f7a387b7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 65536
zcmV)1K+V4&iwFP!000001MEF%bK6F;`OIH2kNzMjMM5NXCE76c7>RcDtgA#hS(i!$
zgXEAx3<6jHl+2{^-(U9}0A>Il04Z;>OH|ne=IH6^>3asy=Sf(9Zr1(T{x`37HQ+iq
zI%2<Y>A&p0d3bPeaMEg>G!DOMG@A#lqi@L3>!Flf(=f6ELcR$+FIv=YS^eMi`W&x+
zNTaE5__NKAfeU<mcsOtUj}DJdwDmt|936Z^8k<KYd;OQM{~J>OwoV4#(00eCWEzd?
z-(gAR4LS4tSzwQ!BGPKKTI8MQjU7rZFV8A(p!U)pP&cGQGIfVEAkh;g9p4(jkEp4U
zUuY28o=aLrgY061s;H{&{R1G(yeXMjGvay?nT8ZV*dZC&Fb4fHpngPb7x0?+j%~RE
zN?z>fi47xw7y#m<0O9o`3tC&y-iN1Ax*f41hA>`FQRJWQ@4vjf7#2g;@PhHa!yAVC
zmltQ<>t44G2(vC9T!)4s3FyD3b^ufD&xqv%J_D-{SUT1V@d9Fv0}6GKhxon(b_9g1
zk<c4OFIGSS%Fqs@!0t~Yg;)|hm~*-TkjrvOwbLUPy(;;s)4S-^0LHHu_dnl!xF^4M
z?(RC*_ZQtBxw#`}H`nJE_ZK(U@bs2+u0N9Z7uV-CLV;8;4E^E<h(91{BN^!sY1X4u
zL15%@ghHPV?2$cydAZ}MHKt_jJ=4I2=@6d=6FbDk3<13%KymDe9a#}8$xI4{slbR{
z0Bh*UJ1?xrTc&9u&vQcZhD0-;o)UZPdO)oTtjcE?+eB$2ZRlk9R`g_8{Sbe5<@3-E
zTx&viO%oZ$H23x@6)b=*J7dPE^?~C}hjmbIJC#ahNW(#3`-m?zsR~{`!zSeYBqW{N
z3o-x-xe?5)A6UVxTB$q>{%w;#{;V+e^L*;YIQ-_>?rs|2njCwdjlB<J?~g6t9+(0W
zDA%36Jz@cy`==FTNcx2ic1OMuP;0omS0kd~UTSP{_fRz@7}Kmi0xd^zRpXJgVOEVQ
z2O3a^S|K$-u|?Am=X*|{spI(*oL`TZo}Q9JQYSyr$f{PT6VhURkD%{u;0>n(r0G6X
zfJju4&_JRgbq6-Z-VY3DRV)e6qCS9Sei#S-;F0{;CQakuz-ZOT4+loWXbkCd?SI-J
zea5%!w<&&G;`c!O9*W;1@p~+OPmFJ?H9n#rc#&849l(|i(*me4OiK)-H0w`CKei8y
z=J&=??T4cT5x@-Y<xLZA4vkimm9U$*q$O_-<jtYHIT9n`wS&{H3tHIL1ne#%2cTg}
zfE=L7$KI(`9xKzpLGq)@3PER$f&Zp`0~F#uhXBM3_x)M)<hjV@)wN^?`ENp5fe@nw
zTwcBFcFwQ5Mi55TJuVowXE52&;D9P}xoK%vnQ5sq?oYLnT!#fPYN|%aL_Dp8okRh<
zN9`q^QU4~I#klR>9<~~{yzZ@yI?5Qq4}ipuAU>j>fet_v;yiW*r^2)zxk3Tb4fxQq
z>JcSRJQz&St2na6l20h<3Wf$HVpr_}(@LSrZg=C3ZALowC?vcsetBU^nYB~*ywdU9
zv6*hcNy;m&DX>e>t|qp;nyxVE#Il`sHDR#2oYwzJ^u3AbBCKY+D$G8JmZ$;FZNoqQ
zFmNm|93vYh(0+(TK~*z}h*U4!2=&L1bf!a4$6)tC*$5Q`AX3sKoe6Ak)4Krg1BCe*
zdcw0nsV9uEv`gvUpuEO`HJPA!yOb6Wy52I0TD>LS9TaSCoD}WwUC|ET7wyn&q<h=|
zu`TpuNN*NKbi#>DE?lYKqjc+g4~!f(!PN^~Dk~rPkMCF!$mt|(S8u)0{_+oUWeot@
zKmS2~1%dQl<g!X;Ys(u^%+NH28wOBNTT2qgl4i!e6XD}cY!}$faS{M&BPE**oar!z
zVGgaxYTpM_AveF<z8P90+J0++rL0x<D*tY`ePdS={|Vpa6~-tY|F@1C&29YuHLlG1
zbKiBNV-#QigOkR|cKyG`HD~>y*nDnohz*Lb|50<h{$J->y#D^o!1#Q)-WW^re~o7I
zNL&Bo<Hk1s_f@Vp;EV;IX}~jY7*0XpM2?P|m@B$}!Yq)QPKm><X$XOl?K-wgSrR8S
z{&T#d|DJ2H{PXnHghm#6#Kv!-=av{_vHZ6hN5==M{I?n>2V437Di`?!BAhCO^_bwR
zo<cAer{O1-57LeqG7{3@8Di*g|L*oI#9TLKdk0<s(UkAGnBb9lQ;|ju_kn4iyde+m
zsxqgH1NcdVT@{@~mIiCnX%d5TA#chMS<ujs4MPb1Cl)qoij+iEq7Q|C@WfyD^Q6ZM
z<1!=z$30bq$;-eWC?yHrXRJLAmB15awRCfU5NaTx^emuOM4{)I=em?7QZtR9nIz;X
zdC;m5V+O;dpC{%Zfugm0RG$B=sc5{T(Rw(HX|xssmv*RPkfqf!6dVAd;Sd%>;)6e2
zdoiXAMlo7c^6pc}G4`ul;mj?<gdJ?Z<-{!~uFZ*+^shj*`kv0NEEg0p8jX$W(LBhj
z^D(eJ*s&<E2j_GU%>1Y@;j9>fITRoYEnb2_&mI?Fx76?<_AfLxm*O)-+5<Y4m0&h&
z&-@G!))`*x{;!XP-1aPk%>~<V{y(o@77e~*ZT<!jN(>KVxC7s)?BF>00Q(mjx-9FL
z;`ehJMu9h5d)0>=&f3e~b<0hjx+Nz6j=H!_Lhmeh=uLi_MYOoR7z-F?z<`*22BoOk
zEHCtEGRsPQdf>7PuZ~}C(E*S0f{qB3m2w!ktcc^V<>VU%y`A<Qdr)?{eb&49a&sE5
zz2bt{>n=L_YC0|@-L)(#1tn0yWo;x%3?8$8$-xr=C^5JYfs#W@At*TTl~vBenpkCA
zD;Nz}%pMgNI2`YpcP%vH9T-F}Sl^urIGnY`jYlQr?Tm;>%9<K&_}jpqK-^H4C>dl-
zp99<oZ8nG1YS>ir?n|Z+^5U<8$%JhXwhh7*Y_>tz>Vs~Bux${w4Z?~JybZ#(LD)73
z+Xi9VAZ#0i{iTAiO8OW7|FiPvU+a|A;`2YIX}fl0n(Mt5y!iZ2vxP7Fs^|aUrnx=;
z^EIyR`@h@we_!MM-%;RAh<-+kh!=pBw_@>)K>6N{D5_LaFT0YqUTvgmD-}MJA<uXj
zc<4bq$no^kS%tc!(qDQ%G!K(FU8aMWf0ki=IBBE=G=2s*XDVkjh;U`Wt}ShvJqUCM
z+z;-{vYtwxWsUWNJ}ZuqJ)W~hM?AO~E+t6LVVt}%LC(BsfNzS%gcN?rip_+sEY|v-
zPVn72y0};O3%-<RIk$lq@flp=`;<5A_0Vu}-#DaM+ze0>Zwz{FCyHpuRm0Lw7_lsF
z6bIQ$nyGVB8fz<>Nl)jk=kh)|>@&9$#z=)m;T@I_p=Enl7$ZMFymH5wA6D)mR(XZ?
zt1m}^MVONsU1bn^yrhLlbFKg@Zn+%coOI?21LXEvWw59S^W>x&SL;=TZIX1}YK>zJ
zu|o6w<k<=x)!b5v4$IdfH<ea&q@>?!112e}6-P>USZxTIm|Agwr1=Wqy#cc`SK|GY
zMQuf@Y6UFfmdg={Gg7O8m2H;;o|AZ5VVH$En&SP7_t1s{PafaBM=zd#;bJG(v)<v^
zoSh}UE;QSjXTaywabl~LDNe|%NV=q4XZDzDZ*yu?A|ws+9Lc0sSCdJNsu6j)7)p5%
z<K~q~XA$eNgv%k<V$;c5FcXP)%DhB@67jGyS07cgi>zp&w~8(1TgbV!3HTg~rx$1E
zIVW5ZRe7tHF=C=nH&$4@&?qGhU;uoWA5@CkJV#tqAwGD!$kZ&TPpFt{4)ZG1F1fMW
zyh^oe#!%%|s9iL}lPyj)*9-}ksRlzSNjmBVKr2fcYV6F4Bro8@Vug<_R#EIZ?dI3a
z>pF+k|AW4Hvb~aPasHnf{I$OVQT+Q4$1VK+=l1&#uYaww{&Bjc<TlX4{hwyD)i`YE
z?|&a39Buc1zQ(oP|Jm;UyxRT`s1NKeBj73fO6V2PkkLpy_t3?F6^=g-%Rf1g`7~^L
zM@fFSQ-U5&xzB6*{Z^*uqK=V0K__|Q7w-8I;FlePFt;Oyy|M$}!NLb);ti(`<#Djs
z(`xVJe8@mV!xPK3M}S^CIl_?RNXAu(haVTEqr_}sHZn}ZniELO1(U8z`?hgmI*y48
zm&SYS<OI5(l?wZoq@L^F<)rPp)5)IrnrO9Jeb8DxKID+u&>Kl1pdoqkUKlWb5M&IC
z{RFb%Nt%Eh1Qg{0KWqqsMc#rKO<?Ik3t$mz1Zsft&y=RnAr1}|^5Y}B^7F17t>hz{
z?Bl^hZxHTV&e#L3@-zwG_%RTZ1KBee6qqmjy}i4+@1CJTFfY5mbT7>h*S*{B*~Qz7
z?m6&agEi{iyuAlC(uIO1EBLv01@|p>-~H!(_wKrL2?YmAf%(hr85ADIt00(7Q2z?_
z3@~$Q0XpPCG|4ButV9K9f%f#-jELinLA^Q*%sB9-On-nve@LRre0XvFqfueKfor)^
z6`y3qi+$U67qsnOQij*fH1ekrC|_r0u#X-|kB9dVDpKjP>g-&m7&%KQ06u*J()|X@
z8Sa0(?}z{t?>~zGb^qH>pNzPRIE{|_itK7C$xyVIaW9{i&5{ALK$QV&KQa4TW{NLX
zD6ktQ>{yZHJ|#fzSOLDZsWaS-N8yFN`@4(lcZp5_N$%62-Q*>E6>a*bWX^OKk8;)R
z^*ZmmnPFN<$%J!pdk%bwj}(EJ<rWD+!k0_f7I+TLHGVe%1R^a5z!0!FuucPT4f^cE
zTSLZ^^K_GxfFh%V7*4Dq0QXVcey4#4egn5csMQ|incO9Sge`ciai-#wkP~B~U=5<F
z<*-SCNYKEB2R0*g_vTNCK{5<tdM@=wr$j2w<U`+e{$U~Z-DnsHm8W5Q`_$bJnV+#g
zLbeEvr)c85VNk;QWQxc*vpTq(0K$Hzb>8Zgbcilt1=eRBMY2DLwWq38#EHvTqohB(
zB(nYb(k_~IM{&Tb0(y1MoF%WU#!(6oCJryQ<HYjNpQ)pW)bd>2l}Vx+vWEia<%zmH
zGASfW3XCzZl?w})i=arb8OS90fb$v(36~eL+v@o3gmT>#Ao4ht)G{m?I3&-ur6RsC
z5m|uVi{WT9MAqdY;DbL6d@r0stQedjn`u<PKD+yPdvBh1+3zwS33eQsq4!syV<`G$
zJ%f&u1m=FB$HFmush}pKT+lI+e-#iOgjKO2#Y;?MB?---tI6ucWWqx(uAprB7!Se(
zx3rG>_c|-9i)Y4R!ONvzA`?*LVdOfPcU1NKkcGUA>vDS3H1$VOB1j@sL`W59Dr*{f
z7=jGYww<by)HKA&9N<!yzQkgmxArBMAFr0dJ}k;mO%G$m$|oz~M9w)(A}b7nnTgIS
zqWnGA0vc!z0A&<RcPOKN9rdS-IrLbP%o>fr%D)10{T+2}IQ3Z?CT8`Rc^2y2$uv|c
z2$n9Rb7SfN7uw!1s|eERCgWT@Xlh_HOQSj?!r`%o&zKTr2}w3Lfv0d*sQg@~%E)P*
zz^6zt(f|^Hr~+9S<cQ!O=7>n^kUW9+8fN$(T1-4>@ZHIAt<h-kRvH6cj8sZ!^jt;;
zy}1GmW*gF|_S&RIJ|UJ9dPo%*a4RBQL^QWE?!>Y<6N(WvT9QvJzWQWBa1s+4zsrj0
z&vg7DkMTz$1z98zk!efa{E`?L|1&s!Od-J%Vq!jIaTwU6&4(oHuZ+03Nygk2&=o!&
z9s(Hydc5w4(wjkjz;plq21AKkA;4&Lx!x>6I`G^m@Ej+ltK{k=OyF33>V#xh-5+>>
z5W9xSqepFlFL`q&eGvKu^&uVEE_w>`Gu2CyvGV%FAmI`8bSV?<AC~839nrat0`%i2
z(@Z8LUgSmJmF)IC&zbLs|N2Ck6f)BAoXCt(&C=pU4in=sk%-~0aok3JyFp6X(3D21
zocYpX1z};(NkrF}#oq}gqZofx0pXw75t$2>BhS0N`@5TuX7B9h?)ity?)hr`pDDmU
zNJot<G!+eO1X^r_91#VU8`?NwR11-pi`QoG0VsxM7nvU?HyMU#OquB7Dj{8K%z6Vq
zTT>_5)Y9__(l)2#t@v%#zBTxaRL{v!X-lf+r$o+1cBk&M9e6G(0X-iQ@clz2frnZZ
z{EEdoZq?kO>TiUhH?Wy@6Fb1=13#FtJ*4Q;@Oh{Mfo~O1hmExArq2zCpb8|}9=1oX
zKn<Q<Pyv_Q>GCx6(i=UG8D#bThSFU1#^Q~7mBC6RFsX7RkYz5(HQ*uK75s96?i;$E
zTc=;1Ebw9MXTH>^QE^>nxJPddhfMe_XCV>iEKY`snv!M{oJP}tsvC3Keu41bvOAY}
zvE56(X;H`UF>M#n2LdO7eX?I+?1AN5ecQ36my$46fv6uGE}q~-g@Cz3X7*BPt$4cv
z5lG9D<9ILJF|eah=AaVeotRV2h?7t6Q-((LTghgp_EJ$-%C4&QmWzfL^Qv#m_uY@?
z?T5SDn_f3}PZclC6_2-9@#^$GUR`zX?=H^F-o?9Xs5{E5OS&G%)mI(dcm00j8)_m6
zbDFb{zp;I^c}D~U2Auk*8M#<Ie)syrRc7#mq=Z6ITL<}dwi1sDZzZzMnNW1YXq}Wo
zON+u!Nv_ve4x{gq5*8@7cQR4pP8R801kxz$(PR#D$7fy2A>M4Rz~$O`8jc$ea!$#-
zAScELYE}~J#iHIwkDZD~P6@^%izoln&CO*N;z1hX{AgpNe9}BD!39}ocny_#G<VZq
zTkQE~0N7o|qmunr^8(}63|MkXDN-{H;Naj%N|p!Yfd#}kR-An(n{}wAvkGxO9{oHC
z_7(FBBCn97E-g$ofp3W+5;`sEq{D)<Kl<URMX4su&(kxz<veaJ*34O`&8LX^R>%*P
zs;QTBD0t4J%`g)S%Y$MoP0xs1CyrF?Z57GtWePeHina=O;#960Vn4*qOGfZXf7P?k
zm8`F}U~1kKJ!DjEFIF%N*%@iThdJ`I8hLkf^X{^1CSIj*OfPP(^+bX=6^wriz3++G
zI?3mXoNsmqESuCWll#`g_)Vw6wX<lt_@8Ev(w6W$o0{J_=XfqROtC!V_$BlCunbzd
zJ6vQq-Qc~?KM6e7-ktH}CGH&I(bBs7wkl@3;@-sSd((*TJ|!_Bi~YEf$xGgn2mW3i
z6TJjhfuppn6DDl;78nXXsJTdK&7p~rx_`@{EIZV|$CAmn)TESdEUBF&`+&f><G;(k
zQoC$~G|>?bvdyzS%$}G+1n?+uyosnR4LdZEWWEw)D1Jrsi7j{uf~DTCK4U<ZO=pmF
zAYxdT(jj{RL+SZ!IW}&v=Mq-U%Vbt<eqtuoRIFW?Ca5H$k<KA>?(e(3`wlyn{r2YW
zs&hX#hj7;U<>JGY`AgG0ySci(1Fx7hILI_;sSOS*=`@p0(_B%F#dQHe3IArMPQqmM
zQ=LP0ev<>hEa`3cs!rX3H{=$Cm3hICviE3&k&EF-(TyNB2@RV@Blcnrp48kAMuVf)
z;qjZ0tJV66acHzs1~E^B88NJ9dpa?ZVUoQi`L4-B&b|_x5bKoXGVO0&@;`u?>77d>
zytrVP1F+Wx5fX1*Vb5h)W%`Og)42>Q-vY4AFqT3s?w-Xj(<P6J`S`_lTVKjk{k5S7
zC3?Q2KHCb_Y$aa#fgWC2W4;&PWtQ$05oj$yKwG6(#Nr^01-lg%@ieO`OZX;-ns1VU
zsl@W!)}0b&>z1S~K7yW|my;9V5^Hsu)sy9N6vx>VMF#S+B*IEB5R`~2(ytWY3FM&-
zmI_bbtNQ?8>1#|$GjU8d+~j_)+~$)`6Blgo*gHS1yLBsJr1N)0-*dol2&}^t{MQ*w
z*$SbG@1zFSOLnTsu4POf$|D?nzq2&K5o-p;1;;-?{GV-#`x_p66O(P;L*N~y_el5@
zK@W<*d{7g~HU5A-@hjQfZ)1KLbhW0@6S(TX<J+Vmp0)|(t|Q+ocAve^l*d+Qh%kA7
z)qAa1qULVJ79?HXHro0xIwTKr%T;~(fu9RlCpW=(SR)+sQm0_&z(waHaPNL2lrj{h
zw3&34zS0}Wb*a%yatiColkzxsQ+??!e_4XPZZ>K$5$7kFHk+ivQ#l(WodQIhB}|<;
zNe7n2BfmxDV^THY?~CDqe~3I&Ndz!cs1)OPOM!y{EOcR8(dmOV2KgYrFc2otWq_lA
zuwo@C!*YaXVMi~Jxj7c))zG3+JmUn=oSA;4g8Rq(kVq0FqT)n=@!_dBjUKO;F4`+H
zNv4|$6%bx6lZy@iBCm23G$X(%Y6z&m<Pra!pUqEaW3$*%!6*)kA`02Fe}B_ip-{?w
zL?$0>KGOkD2@3J~fA;>ryKNlV6Nmfnyb7-KoD(}M%ZZat_js=FUbo|<eLIQsjh*i8
z&1Pj<qHRtjQJ19b_|BPr?N3$V2l0y(Nl}XAkY}bNOF$7Q6bgk83RUa^sp(Wjley&l
zU}Y`bdC{(j_AtRL8>b5zENg4=DAAa$kwJ0djS}8$OW^bZoGY`;Ii*Zl#o<wJp^Q-B
zZejMbys?Z+0p5qu=)^&vSjYl}6kn>VYtB%|^Z}#BP%xGuVdR$T5I)2f<JLjD&(e!@
zD}`|$xRTq|OFtY=<Dkd(iRE@aQG~m;X(GL3m3MKv8U_B2#m}hYx9?9rob_HE9M7w_
zbV?c50v?{FXIdA%h(%~Avi*u<yBKUQF3hYiJo%@nAawBWcI9OE_Ze;wjW5HiX}qAb
zTCz@Y^CCkhIdEa=SX<8clBF%oPK_R8pULX(yH(yqH45LR82xd;r%^BruR?TlcHM8#
zW{|kyfcI{qG`r{^z#jNh61$9ILy@xAb<ozo2<ReD<~&b<WBm9kNUh8Dg)vpTiiglm
z(ePKMQt0(-?%ncFndsb3ZdZ+ks=gBs;(vYeT#&?WQG_Rc3=1O6zJy(SQ=zxO2OXY+
zzbS_>>W=qQfd|68``vC4ZO2w0gln3RJHEEfYQTkI0sab-w(M>KV{sLZ>8c9hA{!r0
z56FeMw?Ud`QJpg!mMeG8tgnlT(9zs}B6G~Y1Oe3gmmL;~lcLKAUB*@U%|v$(J`d<v
zNsfNUqj+mm;9`jPTE|!EHN&|FEVqLtFG@2JRDOSY%5dbw9|{88@&l#yUkIf0mhs<U
zs^*d=iosVfpoT$qWbjFL7+%)fee(S0-s!IgyFb2|d#2<P&L%%zCq}CVN-**AwVpz6
zpgb~<VhBFlWv4LZ1(l2T@?^E{Ty&7AB(YgXEuocEr0~`h+H4z166O@zg7G*yyw`do
z>t0p05e$dn1TRPTr}0hDsmb17-yR$;n78nT%KXGS1`m_z<z@I)5l7MXjB$zJ+_j%v
zE2}A4V3HUq!p-2S>oLW$WoXYFA1-KJc4vn?LnK$T&Q^+xxHa?c&hJMbPSO45;LYok
z565S}zRmT(De|6FZ}jA8R~bpsD)j8hPrF&6XYNAJpZx7bR_J+gp&y^_Vw-++l=|)P
z^r_LT++upeUgQ<ioA%SJV!Uw<avu)<P#TB~`?;tPHV+H^t*8*b6}kFED<stN$-&Wk
zgBw5R7u5OjxBP-SN1hhE+hEF1vs?KTds9$OG?K~{bVj_H%4K~K>he9bUFpKEUEtZz
z&#?gfg9V;h1x}9+k;rdP71_?F38|Ls2Zg@aedf)ypEZ{@7iLksf09S9u1k##?3}_&
zFVrG3mR3UO3z&b6@cq%dm&fm3_g){pJNj_IxslCX?k}O~qL;^~;>(P|5+>D@jRj9@
zT1LE^fkB!w(C{Ie{{_SIdl=jn_)wB#gtphOJ2FYvJ7f_iGGL6E;|P+VH6EmXh>jlV
zG#;}pZT?Hk-pE$bhELA>EY1Wf74E~h>t~w^#TqQpfZA_PK9?5i-;a;}$d&0=AK$zo
ziKTBEyu?bAe9x^On!H7-($z1~F5*(bPc<(U<n9IQTx@tUgBOyx)|l*oe=k3V_}q6!
z<;}~yH!SD6uj6uJiF>u$8Fa%fa$Qd?(IoZ!cqOhx+b5+BH_PF)S)y6lG2<Ni>$!vC
zB1EAc=bfiybM*FwN_^&F(%#H`05zH6xB_1;^8mjKZytNpzefGD=?g4VCFD8*Q~V_=
zMF%GoYlp?$pdz);lD!j3o5G!6MR?6mYMQzVmV;KU=pJq`a-F*Bo$Pqx?npSst0deV
zG$*o`MkwL=P0l~OI`n>e{^I8>Fi6hz5-fxvKnyZ0>I|{_oMjc%4;sPp#Bf5wi?PgG
z<Rz9}>wSoXd^&>}f~fM*m?h*v6ZUj^fj+NXPAE+3G4x$OvfHfk@~6+XmgN>{c|tD8
z^U)P0iXvO8V%O`({b##<+tEQy<<dPKr!SuW?hmI{^yG0GT#=7Cc?}AOYr-Tk3eMq&
z!)LpPUjI7ie@Uj+xg9=oAM!~~l`b?a=fGAgqI-TEprf~F4!zL|=v4U)d^4+2$=q@;
z?&zZNlrBEw{Ia_{@B7U|ZMxV@hxd2UH0D?SIW{RSDtEn?VM4c~c*H4|T3025_oRI0
zyMfW6Kxg!?k*I9>4Gwm~PKJ1g4R-;`b_7gdN*pQ0m@XD$Jsx0{1a?j6;xP&nB9Aer
zj5Z9|y(qkfkt9<Jhef?&Ol6|Py-OHpbyo1UviMhfM&wNq01;h$P<lyc@rw`|8F+zq
zTio;eag<;Ns>{oOJk~|>C+OL)(JkI&=pfEvIG*^#$#HPyQ<N<dMJ&l&e&}3@-GabO
zUeK`J|MzTn`)S7>VFsTh{$(({^9Io^=)E!2OWCc6DG+|Pi>#8(BBu*oQS&IL?7}>#
zE90{KyOXmclVL#dmq5K!n|BL>0_*38=C{-p6>ZYtU!RR~ee7ZuB<4^|0r_yiRjpKq
z2hH6mAg;}SabO8-r0=sB0l}ytU}AY!{gpd|wXgc~zVr2Q&&yd4>)GDVY|}f3z7`Z~
zE|5suV=V@x`O)Ni9!MkXeCa%zf7x$b#RFBnBnP^Z!5qehU}ml?sgdi0q0>ab;*&Vo
z4!*)tXgZ&El=~aeG^HS%FuBd^X@Bq=ZWWji%Gk#pMve#pNwx@y*TRCeK|;q{wjq`(
z3R}(e!OkQOZ?Nnae(Q1KhjEuuOtS2hfv1vCZtZ!S6e#@57}hUbgR$6_R9(4TK?+<p
zafux;KgE<1bBH{MeGn3+q?q3_hL#j&g4P;#4<!+|Q~K8tCWGKM*(bhx9R=xiUifv%
z)UIBb9QfEq(|RdqFZbf3T%7@n&dCL_z{NFtANOq)!R?bE6|o#X9UPt=|DF?oC?g<0
zF;`YzNs2Z$`x6^ubk>_iO)05b#Fs&ecNBQo4)%w-E61WK3a~OKky&Kr6$=6v{}aq|
zYDLx!6RwU29p%7DMuP?mDQY0X7g_`S`l@VVg}}PFIq-)vly;8$Wd$%HhX9)jZ($n{
zf~d_IQ`cmr@PL9|3<I?vB@|INQ)W2&i8A}8Qt_~`V&<FLWI85!F(shOg#!%a>>bzW
z{MtwDAY3(+7s+edRWxbvbrPb3^)qka-zChgh9QEfqGh{GN?Bo{b2EKAj=W(szGBy(
z$qR<hWN{TD7QOVxcZM<)SN*uO%P_(fM*@>uDfS)J&i6(+XB9ICaconGK(e8zw(Vm$
zAr?S37xHTKj&+5_ajukcp&(@3n%0(wqCJACpx;uByeMvFbaFX6_=}A2KB|v$2)o9S
ztyD$P=JqwYjkWyq=ek_fWji(U#U?mGqhryncU@FOl$>#G)YXw2Bh2b7uQaQ?{stzc
z6;>NqQFSyTMap!am+Ki^6~FBj*7CE|nT>3z7gek1)-OeO2_08c*-Ejhyf<&2YILaS
zJX+m&K<0wBz6mRj%bZ*J@cu9I%4glq^F`c|#Xz}ISjmL9LOTBM_s1XdE~e$$@1j<P
zKplCsW=4~n8K<K(J5?t!<{aiiI(0{}Y^zbObARwPQR3#a`lswq$eiLchVM*r=Q7xm
zXnF|I=Jy!o;YEduj59@Ko*mwb$D;Tmf=~c2H!qdTA3QSVR(_-kW5IVvttb(x!ZaM*
zQ7g<y7218`{&kcD&f9fwOQ8u`S^Z1|(TYH9yBsEz{?Z!pEA)$aYD)@IZ`AHwmTE&1
z6k}o<vy7>>fnUK!lyy|cJnp6W_UP=_lb5;fc<3aoI}!H|j!t{r2iPtqeTbD}yALeR
zis@O>FPDtI^6E9)e;8_Zwhu1n%732xQpfjJ$>Kq3NAt4fYZdv}Dh#m{bzuljLsKJ;
z1`}hPx_|=a0m0l_6LZBvEr;I`pg?&cRjTUkj*f7XFh#G1+?R;Ond9?;Ph)-`_%!7E
z!AQ;W|G=kN9}s-z^8>-BzAuOtbaU2W7?r6MQnP`Bou>|8HKtSdH2vPdL7GZ#@yAJj
ztK##!IG0w(Vcj=&X|3mEt86=0!lBjL1~%>O`J`5}xc|Jqe%FxR7tXmO2x_xOZh7|X
zRkE@4Mi%8&c2XAy#Kr!oxu?c+#7*J%X^E6OUP|rrBoP~hiJ2olO5M09ivA@!dOVay
z;-EO<pV0R%>qfdXgGBd$b9qigA3q#3$KA24lA-+zjN6z+09G)mFQZ;x=2fJYPkh*f
z<$2}eZ~T-=wp}~B;Slc8Z#;WI<`N+La-^nmbazBA;sxESu5MFo+&tMC-QgL<25iiO
zRLfT~PSU`q1hv+X++G_SSZW`68dPqU;W1>st0BuKXN2lg-_4Xwujdbky&jNBr;}l@
znb7IyX0Imz$zHEJ^2gyND5|Zk2S2pWy?#K-w{M<qPwsY@@UuhD9fq6j5N?KfSbGUS
znV;NMf5#JeUOazJ|H5PZ`)v2=i|0Q)eg5p(v!8Z%e|iGtcAq}o{pknqN%P&cpDC=z
zvFH7OQQnHm&H8;!pNHP|<86;^Gxxk{db#~Ge)HfV>}@A^ad>r|db>|{cSX8~H*XFf
zJcM80fG~{l1cU+(lKwxK_<i_?|I+dJg5>RXpLm;CV1xg(vGsSLa2HJ}H!ns7n~LbX
zm*FrVui;5bj@#%{6k?M5EUhpn(ghNKauN|;WC0_m4{a8(2`>ls9yJ&r+!@2h`1ba;
z>r-QCV?1O9lbtumhez*DkG7$~RORD%h#nR(KlY{g@L7WAp?^!k*RSG$9|VoP+c-pI
zs^cZmWqOPD&qHqzCfsgNnI&3>?%PTMI&AVb4o<z}(+%&JgVW>F4$%1H`0Uq{k7wQ=
z2OmBhygNHSI`vLIc!wwNULGS%1%JKr4&MFg{dWBBrO4KYn~oUUk4NMz(--pWlw%~K
z0U|T6G}45xwRaWWz~V*`Yl3(bCM;etnpzK;M?6P8tWLpe9$d!J2mvX=>DURGp8B$5
zX0UkhAoF_zZh8+1&)W0Ct1)H+W)zLXGeMe+fZoVYzTjrZs#{c5+a}p>eV{Ika_yxU
zJpo&ML6E+Xq3^IBxREc`)BS(Sh4~TQwAO5kga?*WGM_pNu`3R0sn>yC$U%r@Se#Yr
z<77~xl#<>;{aUNWfB0ADLAJrk?Q!njhW{@1QY5SS7v6Q+pFb7eLi6e1&tdXrP9C;L
z4%aNgW5&F8WF5DBGMiMw?ll};Fv)pGcjd`--%;IkCcvOx68?AKZH8kj57~rm0K4)N
zo6y3Nm-k!>jQCo;3CI26bRd(#i~BlV@6|L;MTXIN-Y1f9h$op|B&1(bmT)8DR~{+r
zI5mbl-Rf`7pLbnK*G$|^qc1_urlCT8gFonjDBDa+55}7GjxRyY%Gj4YDjmo^j1qd@
z>8Nbj|3aBUCLku0808bM2w|2_Lq4blPR}%3K%hc6=I4}Ht&<%H2Yw8zODwODehW5c
zJp&U0LxL6e3QszPFp4?OE*CMED>mI2B}aA=MR4<d3r~e-p>gYpk;PwdavR%qcE_!R
z3t}Q15XXaUNm0*aPx;n*AnAp?I3=mNqvRaCZ`6k5I-0`H8eOtQ@*2EBXWYKhMN-t2
z&fLOFnSSL$$l9e}Xe`IZ<*+Wh4@8SZLwkCukoV9%t(e~NyR&Dz`I~r2jzqtH`?Qqa
zj1djpxe=0ApPZF=J6{(Rm=CPL0_+DJp>ZV5D~O7%tym7g4Mn?wwO6^_sOw6XIyhiT
z9k(&;YU@ov)kx0Rg;$zhUGF^(2JO}8-mDdRIoHbT*3tG>O<ff$ttGp~)#3+P>C_+Q
z+C=12hb5Y{e$30Nw6+B7vNCinHg6#Q$Al$wXa0DgFEND~4c%rE3@=s30a|=L{PuwZ
zGjt>fGz|2a$pUAbIJqKfICcR1I-f3q4FH+?fY#Qj&rCIwvzKaMi(*nPRxo*Y2K4Po
z!QEu-UF>4AMo75eR7d6woBk?D4JmHuj6chkn74OrU{oB$S8wN7W>`A;S@cS67>zTB
za8TUE<1`BvKMsN0)DPOfWSs<yO<L22v34~b`VykT!sq9o{O$if*#19Hw*S`K{`}9U
zofpskmEXX^yb~&8a(i%KEL_zmf;DpCI7~xvuFB&|EYha5#;hU5s?*&wv7N?zOLA5W
zG4b=^s0Jp!gLoB_Z+`i!E^rzl!o#Q330>6iVc!!VYF{|e!BRGeZ{e@pmcC&IsR+Lf
zRu|5C{%T9>go%VLbkSdkR8_M>6u#_vd3>nXkX^eWc`vXQxC~G&%mkbj%W(xz3K+S6
z|9AJtCoKH0nx$J@VZofTP?CN5>)F}+Q%~L8KnXnC2a0(1QREJR)+!zbY*MCx;`I@8
z^D1p&8J=MQd3p3fhfA0XsJZ}C<ndXFXU<~Wop3L9<wa(eKu#~2(tX;?>2RoojiO*Z
zZZOHbY{82T*!AgYn4qCgi$8P<9a499e|+ZZS#g>u*1VYm-sR=+Kq-ZuE4OF3<7k;a
zh_b8NiJm_shYJil)EkVG9yYC9%KF^C9%LlFm+wxgw~5{#eUZOxpg-d%?Og=GyN2(^
zse%qK#j{md8$yKf@MSzo65cb>=`3{cu(Ncbd`W#}IU&ADR}=Dx>Tw96%#>4m!D<Tt
zf)ZR^2Vc>qgUPtmZe05q8U8ZF%Z`&cbZ>a9zMTGgu#NXa)IO;+M2|Eoymt%ik+eYg
z^0dbno8s`Df1Vwk&VqFDWwm30Y9=>ZJsQGtxoT?&%q`TtHqL~)w;Z-K3;Lz+bVa!m
zae#Gw)^L*??#yL8xmCSWf82l8Xj)33KH<Mv-p;CxUKkRq`o3H<ec9|955k*pKzC}u
zlFf`;0y5N4TI2^!7cxaKo25q6Vz(g~5yMltTm(HC^GWxFwxYrnx<Pk5ZX@3Y!y#&I
z9u||rX1bFBCfuv`3-C$AGhiebEL0EFT2xRKGe>7-5o0}a7{d9nRRZn&KnLHJ5u#%5
zKF>_A&V59C$nhaY{iuB`*5xS82TsW}<`3M5WJawrhcwokbdZIjYYOLft|wwlipjUJ
znEh3rlSgBn#|CMfMe0Vn>m9QA1H-!xjhh~QDz8^_cM7kQv!JP3q>j|Ta$f<!@J}LE
zE|2p@zKZP5yKqCf@RLCIbKuTI?3ggR^dj;~WFS(9gTr?$<QragHGK35sS!w0!ouw(
zQ$8B~VTg4o43=4MJB_xfE_*TG_)svtU?A;iX%n*L$Y5CEecc23SEECt12&4BFt-$4
z_$1n{q@t;-UGd4gxhtmhAdI0>6yFI)@VxuHB@RJ22fUYprg)1*Y!ZRdK@M7x!IMrw
zbSr#vwJ;g26TcteAN;+BGR7wu59sB+d~YIrGB295%wLFngaes=P>@Qj+MFL;T@C~r
zxTB49Ke8(-UN=50(DDt^@21c1B|FYJ)ZS&~SwI3mz6jIUk3-N!%z^jX9u(FrXfCN>
znIu@leAS2Yo{AUpJ|%bK)c;C4fJenh$lJ%Noa@ZPd9^JClezZ90R^(|2RrekzoSh7
zUPD%Z`S6glp8w?R0&phHvo-M11zwisW2=a)Rg>&ZnAvA<PKgr;ym~|b4i>JiH3?y}
zq3o(Ft*k06T-X7*s(Qn~zZ8mHeXY9>r4VG7D5;B~{877wo~wTvzMC#S8S{Srx9qy!
zBBW$~^3Po49rEIE2T|R)XKvWD##sASr8Up>Z{>lE+he@>hyaVb81FdUDYq-v4Ptv3
zOmkp9uN=o2tMLNum={dGMm+S|JB4fel)3-c>!D)<jA5P2e?QE+|M%pl-KQ^%`+ra1
zV|)K^8Bcrvuf6}bu={^q<>s)sZ^u>_#UfzKNWPOF`(68meU;;?$$rdrCeHtvIg7L3
z^IebdMjPu~c5g)Qnt)n6`k#C{xW5(QczI_FV|uVMGR6w~GbhT3{1L-Cvp<ZWD8@Uo
z?m5TpAh{cj(B-=SG9V;a<ErCVm8sd!r{UE&rzZPJt;R${a!jjd{KmQIC?eVA_>Hqi
z`^D8gXQy7WT$P1Qco|-0f;_ef%kNaeuX$9Z4>04R(Jy#nsa10Rt`kVzOjCbwH5Yz&
zvkQK3@k&kor~Tj#<8MvG?1ZK8C$(?R49WSmvl1o|*-^W;`jc6Wv%#*E{h(Fh2-I6J
zxk0h`?Ay1#JrU%0YIXSXcZ&IG78T#Bh2bxZ`BTVsrru<c_i;G#<1!_Selx3YsT%{P
zJ{&v2*;kXD{(LhoJ<q&eJ^O0)?Ay>;t|jXW&WpV7g}RqLER&1$krYVrMR91UM_d-g
zpK^}MFPt&v9_8uyg5Pz<IrV(rk9t+NuFv^Z7dX9;slfDKbuA`-b9XnVlf`;pmLknB
zhk5LJfua2~0ngL_g(XZP)*9gY$=!IzI-vaI=AmOP(8YJgJDux6-j8};i`Il0Wo$y$
zx{&vyUDa3{+&>xBjP*f$udfi+w>lAXm2iBoS14X7bTwGKR^*f|{?#JUB16l6%HTiq
z#D2o35dYbI_TuRiGyc<)-JhPd_|Gz)7XNASpY@CXWS?@1mq<`%QSqYG<fTgv7v(lA
zW|~c9jiZ^i&nz=$wvATW2Agea6`G+lY~OPB?+kl(hKWo+7wk5a--}vVX3Ikb%UIV6
z#iCXhT5+W;xx9i!#v_$4wX33%rHof9>D+bkx8?m(w1qVa<P&jP@8TDism?`e#=cMQ
zlszfj8&+qxib@oaac@A(p1G#$tPLycfVyd>Z*ulWR(Lr>Lsq#aOuyv^hY^%3Br(;h
zefx+4Gkbu)elBvX`&M!1%C(%CU}}6hjfxd(t}I=R3VLDA5mU}wILn7Yn^{wP**%OS
zw?NjlvE$m<ac%6ldmcN^+8s4$9L%~RR;J>D3<T#&I(s2i!_MjoXvQt4FEWGlqOF1o
z_wqE$phzLRqR>`&k7*rfgsNEz_7=MQf>)yMeYX}C%)YEgBDwWV7~B@c1hOt*nqT}5
z1RNm=dCVPd?N8YLS-e#dY;!<0!EWuF*1l=&oBH;RI?4C4IZ<v>*T|=)+@qj;Y8Btu
zq-pkJv!>aLLetE^r59nL6<^4&P=6`*T4r06FmW2N*>?JJ?OUP&S2ak&TuBA$zO_jh
zDEIWEhLJLp#CK!rErXeg;kQ_W&jK@BYp%8Cnr7X1YR$D)+#;+v%WI%P^DU!Y(QZ>J
zwg6j2`)n4|<?nL>Y!%+qAi!ojmXx;_O4PmYR@Z{r*BUvkk<%JE_xwoCJeaSP$Z3Yf
zut0wuSb=*eVwHmMh_ydI-&0wCly8{V$#AbKmC>o7j;@Cno6D(|w@<c!EGB1@lq5SY
zOtx8&R%6ronygo-Q+|CiHo1@Nn$#r=KHg`TYwrt2POTEwOM<^eI;H&S^*7WjmTyKW
z%~DuvnYu;qP!+!fL%(Q*8rC(6loe?krFDzbH%5qzwbnQ$WV{f?vy4-#Oh9`4ytAG<
z5(g$_Gh5a@kXZ$NWgJ*mQ(Fa<S3rBsb3C?ayU8J{rF5D+L0p1r)586%qlU9lnkH4-
zf)QPIS+DmGC{{&@Wl&?0O;sMS{DwNpg5ygmr@~s_PAgS`qL*k>DN<IXf0WiOPVpG=
zz}8LUST{KvIz7thR?ss_rA4Ob<?mq0c}<yD?`+LJPFi>pUdLtH=0<3So73!SiyS5S
zmV$Ar<fpaNvC^-_E?~%nO;vB?GGl(e0o0d^5`!sD-o=;}_}&%vaHe<KGDh3Hq2Amu
zOUl*8H>-Ak238|7p$;N|yQ~>)Uf6GLj5G73(ip2&?&7qsd`p4$ozVf^Phm;v>K9_n
zXrwEQmR|3Bxr#1MS5_vMz16ZJ|546`{Pgu@t;27grCu3_hBhFAqUy!R``cJ<`rOko
zeV#AKC^m>!p6jJd<Fd1To-K?R7DFc#tjZM*suUb>jyW!y*yI$?npVn5yl9%2-&|Cf
z>i8sI!by)85kP8>CBK9ox)Q7(V^*M)()q;GKsX68!6qjmmVw3dbH=t*529%bV{w;5
zqV_2PJ`^wx#bD%*r~Ytw=k<NV&F+&s;!^z?=(Harrw`;DFU=vKy@jX3!@zs!NGXEu
z)f}ruE*aXyZfMcSXgZz07qD<Rk2wn`UF}@bmVZ@Y+_1$gQjN`&#V%RR;yKy6rcs%(
z#?@A0_Q_Y3J4pGfO!GTr;=r;^O`APM7d;wF1vdNmPfW|gD18l0%SEjvFfHk=-LBV*
z#zAzsC(|=h!?!2HX|g@JgB5(-g_%77`9}xcZW!$Z<DG<#M|Rl#w(fO08a^Z{$@XZP
z(qg<FeC-2?@Fv)1rPfFffJt;=1YsCWgu65h>I3aJY#KL}ve>E^3zpIV%Yd_VKLfr+
zEAsX_&`<e9mU6IQ$H8qQ6S!E<6nULvha&#h{E(fI(>M4UCNdxUynQtB+0>7(0+z=V
zY$6`yRi-s3FL@rB7*!a2Fn#8E*4|Eo<DidoG{#FU{2~jbZl?6IC={?=31U>Rp-j4N
zNSf7r+1w&x`GU+++BP{LAUu)dee7*8B#pkTQ!vNp7$dQ@^u7Ld2z+**U+1X(E>mVj
z;N^^(dathi8%%p0jB%`Q!f2Y{K8HyMUgpW)Z5V`bLwsR-7rZ=zrTFB}qn9P8wfV(q
z3N7hoREjr7Z{MGMIP1MSIDRwd3w27`TM{ZjN=%yw$N+zM6~$o7jKs##1rP{EH$VG>
zuYMl`41^7yP+j|aLj$~T#?_3W3$hg<<HJ0c-VX$o@@GEs#WhD?zS0mh23lihFM=#e
zIcow&Wsd^V^`O*Qcz5^6e-c}`l&AEWWo%gGU9GBOc$hnQv0k(OB;5QEzh*8gt8^@b
zK0CL5Lg}P+LJ<XA&&(iOFyqAU`9acSf!PNPa=XCT!ba!*U<LFk4wma++IO8)eEM*D
z&^tLedf$8Y<fq-<>8}S*dk06Sz1<&Q%;E|A^fmxXc+f2%Q>gi5z2{H<_M(B;+hi=G
zRN4t#86-52@CWAW;<rRmLT@7;2A`M-X1PWO_6M<lyNA1j(NO;hpMQ&n|89K=Uk}57
zKY-PKat(Wt7)AzKxecvkZ^8*mRxp39bAPQckDbq=EX-n-QWC_^v@@~?_y`R`PO_H+
zC%2#O;D4c!9q;YyS5KWk&>Aw%AqqMmz4M0tMKJ8Tc(Mab$>Eh)tZ3sQl~>2&kb|R8
zEvG%i04n#}AMd@*53dfrA74EG+gAC;{o4)>uW5p^<{@nvUR;}o9WPALI1Ro|f__Sl
zd!P}_@tuwpsmo*()Mz;NXvTN-m-+H-8l6&aHr^H{rXBSDx5LwiKW_))el&nWFONQm
zyZe;v<b538utV45@nwYY#<ZVKW7xdM(MVUi$mQK9KW{nbBO@8IshHq#tDh*RqL~7_
zxMNLv`cyYfgZ{NY4wI30_}kkaY6G19za9PA`{TpG`+OAuAAG1RuFsv*Uj4l1ou4a;
zwkOyq&Rv%W>&zXy0{<&*i%Ri8q(xC9D2Rd{RSgOvU#s>YThAN1>+4uf_t@l`0ZadR
zc66GDOXEWVwExH@J&)Yz^@3bp4C0mX>Qas`%Q#yt=>Ra(9ixsvdnR`)cl4^7xFuZu
z^Fi@(6&v=OyIE)>($JZis$Cqe<_kD8v)tH)N^mEoX-Fj)#4D%-vu3FacJsLe%;OL+
zrRLhM0PK6ph$S0Gti70CcJ*voY_Q+LU%4%O!*9xDvFvc}^H*E(SHeUF#L=h6LQZU}
zUrbeav*+dUqOr52ycf)v4+}X-a=)Yg>?m=-yO;yc=5aaNUajeDTHM)a?W>V%F~^+Q
z%N8@$^jFoNaR!~aJ+&JSS<HsL=-6?lb&0JC2Ld>y<CjKeyLnEC-co)dBJeN9g*=x9
z4VZI6ri(M|H6+bBFR38Mc@&l@!Se~sfc0Rpmko-uAT~6bIWMU&nt2q~XEbBhgT;=f
zo~g2-(c?rbjFzaeQmch|Jkp?AN8gWt^%-$D3%&NMw9`0^%Mb2JuMX41`^482t=>(k
zUUhj@1(+c;JjKiS&O<PLfH0RPuEV_dUGFUiYQ~W_M8_D+>+Fxc7tenSe{uLQjr_0S
zXgc!fV*enR1Y^uqGnOZ-ycds*gK-q>ppVS%4TGCtSZ?gj_=#!Ps%{6L{B(Nq>g<n$
z4@Yj&?<IvdNT4fAYlQG@iw#@G)KL+G@YQ-xe?5I$t_4^yd!a_8AB`^PV15{kuVB|9
zaskOUnGs3-!60O=SUrCVMaOA~2Y7=X4L9FLxI3cJ`I!d2995^VIpWPSiM#eO`0=GW
zJE%SWFtPmTV6<;SJYgA3>CV(35Hl6%#L@K1IJVXE@pcQF?H-#-6u#qGad7bRJDv~n
zeZ79%f41AVclv6o`0nvIeewKv1PXE|$-!9qP<n?S4xjBF!hR;`e@Q@=T#Kh}E_7vs
z+#Jp=-8I*{Y*y;;a~TWe%?cAgffewEGDXwqVOy@^FufDQ83+9!yfNHCn(DG)0x;i7
z^r7VJ?k>3FaX>DP=-n8{Ffl{1d*!1|j0ySG(@Q@b(#f_)2XFCk9+BH2uSxVe_-pL-
zhasLp@yO4T*~V2`CTW{Zv35%%jwkE?H3fM#%&y$G@yS%}rJ|DUzKCl~)Ild}JTAuz
zy%_i&bVn8#mPIj2@Twh7)-XwdX&RwXn6SgCk&j`<2c$j7TR2H5`Vwb%G@4A)%uB|Y
zuEvb+dhbBv?HNbzgW!@>n@@gQFP=-=UOaK&Cm5LzUV!g|w_SuooHl+xj$jKh2rn-K
zI(i)X<Etr1VxkN4uhA{~`w71X9~9nrdmLN=r5ipC@z>ky5IRi4I>z!Ejo@n^o#J-?
z-?QEAr_99#FO*?~aQ`wG-g$%QcHED~P%mZ9b5kJvY}Z69WfPg#1$ranw4kYo0B=d-
zV^tJz4O62Mg*8^xi)Kx$(6c8;p)Yy}>M8y*6MO!~wF|_3ULY0$!%N#@4(BJ$m7-8S
z=Xl98XREou?|C^(V7;TXpX{Tw9QvhuzL<voT)Cmy@yG%oSWdLk@y7~6usBVVz|uGw
zAj4j%Vx0Z!C`wp>P&IE6M?jQ=zi@Jmx}Y3v$>B=Ggm4ER#UUm!8q(ECp1jDsv?Nyx
zp6Mrh;f&SAF268H%(!7>c238Y#m&9kjxO6K%{cVU>~RCQn>EJy#n;KwZmiR-4V^v0
zhHi|xC9UIJ0)?jV%v!D8dmrsy8q1XgMwWgCqrQEu)b*lS(<=4s$x-Ty9)fzRzdkTh
zhfupf+{XoCA^wTdxL7M>#IlJRMjU=z7ii=~ZD`~`-ljbbuNrnS)M-}$N{ou@<4`CZ
z&k|@h-tv<_4s5+cn5<i%ZJB$gcG|XW+qP}nwr$(CZQHhOyYk$3>s6<k(TezDH6qp=
zW6r;y;!vZnDkMcQpB5Q`q@N0I?>OjY-upxv1|5$IpWpc+b!D{Q*Ec`O7+IT}8BJ;T
zOrEJwM49`io4%SBwfcZR%p4J2&ovW%b4uqJVm!m5-L-@*dS?=7#*BlhT;4`4%89-X
z<J#SV-z0`M55w3_452MlI8RKoSl{CBjtBy34!!ATT9YJp$!fJolX9Z4Vw8u{TXL;*
zz{Lrds?0Gn#(GnsDOK6P_S<rtTJQL!`4zf7&PuFMFRA3-ja$sB@wJ>m9wQLnhfzcy
zLiWmE?&Cmb?bJr)p`D>&apZkj{kWQ-R8I(!1Y=%=p(DX>?Wv$Z%dW{7L4B;%0AuP{
zjNFiTy6CD8RB_v)PLg{==i@S$wD1eF8!BJ8D&SPEX5dzUV3lUDi#J`x(jE1%s-)Jz
zf##y@03{aCps~kgo!&Nh67@b#c&6nU(t4SAdpjBzMBhu-)2qI`ly?<lTEJp<TDmc)
ztr#IG+?rW;6mNX{<WsC82`?TFPIWj=36!?KqkT%YS(NE*?Ca{3YXp?ZZK&$=_;!j^
zjlAIFEyyAkc8P;U$AHGpDS(r#wl(+4!#9jA7%dE_Yv#!yH4Wa)!Q~DX=$NS&0#mX;
z3>!IR02bBii7#G}Y+b8bgw{Ki(P;T&hITSoLMxMqX*CU1Z1G&-Z1gw^6B&fgM{2@i
z-ciexZ864RP<}f!4Y0e>3ni7Lx6;Ii=ut~@W3#F8f1`<3)bUg<%qyZBNK~)_s_xzv
zPO8AenGnA34d%+1J}Q+rwz5^mh5(2MF||CbW7U&12=sA2(rrw*eHVoabZRrEu1&FM
zN^4u3mZ(>cpb4sTu{g9E5ppGd{=J_y3&tA(&$3%aqoXTXzv!F$iNb`)(FW9fo6<u%
zQnmHz#9c;SH@}@=-6b2Eq+7n^dDQWEw#SjdBm35m1X>~-Hy507iWZH^k}T`{AWDst
zr7eXqIYR;luKSlAX5?PD*$mJHA%3OF&23QcM{#@Ae`LBSCh#zko6dE?6M&QyFyuty
z7wNmHYuEw7(Pp)w62`5k!yu8zSG%xA$@#$CuqPsF=}=b$!A-g5R%q>mzSJ9)={N~d
z1oz+>RftbuQ_~F*#_VKqZBQw<9q*QdaY0HiiYk?qY7r=9@o}(3vPERc=f<k~DM1=`
z%PLL<F4Bfap!;od2wsdTz_(0X#hpw>hCPp?8W2tpM_9Hi+d9Y@C3hrZnV9^U79X*X
z$j>-iHE9%-uv`)x#PQNahQAImG_Aa>DAiJ~e*xL4f;(;|V%c9S;xM*^05)&1V51_K
zK$)@ypOxwWfE_%eEi$4+IH-Q1mwfl;w2j190j7m}_vUYaqOxDN#htU{5ot?iSB^ay
z_rPe&p<A9e_rRET@X95>u^RLiCQvZ4F}O5&oFi*%vAZ<Uyk~Lv?=>Sja4g&cKwqv2
z=yG=`{sMYh5gT>LX?HIO{1NCS6lxW#2{$8JplS%|r(i!dtqw{^&@N))yS9iABS@Qa
z-MZgE7hu$E5l>*61VUmL34#ZA0X)q=J5<X))p=FOfQiKn|NK7-8BKplAiw=xLO}aq
zLCA^StQ|`!Ibj>e3NRp(S{$i;zY3xtQ+vqD0nj_4Nm0sj8HzMTR@NWdHB0k}rk;+5
zv$S}!Y;AAr??RVAqs&8XIQ=b(#k%oYlB?~Mp&wNDm+kaq?H=rWlxL98eljeA`CIhN
z(&sJ`5?I`DYxue~Pjk|1JnJ|UPfOZK<2s4wD8(CNRVNtY%j0AeVo?%WElaoG9$pxe
z;!X8xBk7JC+B0=J=}8w>GcbY;kr%3wW66LFQ=h1`kn|M>L=6;q+G;81iKCo21G`b<
z2_)&S0=^}wOG>#~wd<fli}N*9hDs&jsw3pkwzDn#<nsEK4%k?-G?sW)mlJ^QjFL-X
zTY%HzacR&58vn+rsYhizV`VfRL)n<kGsmS4WStq%DVGv_d4f?WA~min?=~E%`ORFY
z`x#3n8AtUI1tv{uqB=+oaGOdi^46QKRCkplXLxwF*KZx+AE`ExZ`eSXiwrDp(yOnn
zI|nsud8`uW(1%zFC(aAy-9SWbwtAns3+Sny04=6)kXAsa(!^j$fDWn*j)_6Z&o)LR
zAbsL4*iNu&X{rkLF)dm(_4_fOiPv`asVZbG(~_(Mb{CaNVL`-k1QyrAI&ieZtA=hU
zTY(^@-S|GXb)-RI?tZm$o*oZ<&QAG9-zOs<*;gNMafKEFUyMsRAp_V)L0{UBxGwW4
zrG-2A@<NzS_2=dawKM?-s`Hkz@s8TH7~EwP2Zd~E_E;%C@VQ_JL?rX5Uo_09Q`@X(
zsdzwlWp<?us6Alkh)?+HPg$ELqene+2XwUU1sP+u%;3nI>TysB9D*0zssdBo6dt>4
z3~>Bj0_Lv+*Rx~;L=GlcS<PujZ{Dx$$U!!dIZ&fSr?w{X-@4B`l7ybRwxT=>9CATw
z+@?^NELL!v#P531xpLgPJEbOL94z$(Lwko?=q8|?zo44w)qO9DUl^`W*FM)n7M58Z
zsH``0dxbzykQXb+jkFk~NavB)N#d;h8Ib`P=?w^(F>lb;Qng~<f`v5_^kQ$)_Kv}2
zw`<RuWv^@e-kNK_eSY<Aa>j;6Hx8M^Ee|dWFh%v#LaW3l3l<}ci?5c9T2HiVqra+N
z+wp1xgyfQpZOxNpEs;L;k(<;uD<%|^ENddrXICPqt4M^Xdi+I_*Rbd`<}S@q7@H6q
z+xK)8T{jzAtI_vq3H9wE*7_CcJRUc{=`Vx2b3?{{(eT8yOk?1J)?hdDKr?gfp{d@8
z4lsdYtwE+*#eLtZ|9W1R;Wt5pQDZ%q<N|0Fmt=)&D)Gt<TZ5!38ig{jQgU47sW$&L
zzx}S4yPEAz!q2gm$iN?Bd_13mQ*do40kZV|cWI)xdft1I<YJ51jt5gr!ITp&;>55P
zw)A3!<GkPdW+pKy@ns1WGj}3HAE;SgI4(M^M?T>Yj~}fRgEg)Ln%@@E06U+iuwP0r
z0rz|fpLqEM&Q4gmCqA6nOinS}q<E^&YUVfXt-&c-s43ygX{CBU$I6vES9$x1R>>LR
z+Qu5*wY5wx!A3&IBYLD@sy1LLPw2ZCOQf^^opikZzbvffiT^iBYTg}cJ{)4EP=a0E
zTi^M*3-U<fip?}J@Xu#TeSX6NIDh+1A~s}oavIgX4>TQ7gm4e?Fc%*jo{JwIs@MBX
zczALuf@FRAs6Ow`t~IFw-y_WRoMXa+-Mx{5V7e@S;5-%xtZw)Qn10UICtCm}j%84C
zevtE?w{IU&Z2}fWnldW@VC1&kdb+rR`1FK`+?{|K;;<A?+vN(kPs39@v!6Wtnmn^2
z-M^!7pviiZF^XuX744bZ*@(M7zZ$$iPZQdR$Xg`1A%qj~8cQvdR?1W+0{a=;tO0Co
z+H5D6ZN}CtE1r(N>u*kda<IHyU2cmpVT{ZS3!w*q8BocbqKG4#Shmuo3ZZ5{XNLno
zyRa*hy0BsYkJ}{coH?Z}bBXNHbv=p`l9G$u+>HG>%Wd)DTWGVx37lXaBIS#f4!{Aa
zyD5gs8FxAP6issb`FIfXNW*#D^Z0i5U^0{a)!6Z|knpQFxxMd~m~`;C@-Q!s^qYVS
z8(g~a49X=UCuKZ+q;nIE^sGRP=z%YI+pBzGvG&qr^UPrUl*r_u9rS!Wjy0h0xXPs8
zRDXG%9Q@2~cz0es75ur}dH%l!RGtf})b;-DIs21y&gHdxjTq;zM)<!DlxiegM@}>-
z=k`$_5OadxYtg}7(dxz(_Z@RxFUXIX!Nm>lpN49D+5i&ARJdpY@muIXN@B7+VK~Zz
zJRV_C^g6O#!FJw#8EO1>Q7=*`4-?adRrh=QTB9P6g>?uIu~qTy?QLf-b4!-+8t33j
z-TH^)*W1&rvpHtQ)N)Tum^mDhW3mXi;s?4!haAYfJfDb=sBa}q+Dae=xc+G%)U~_#
zQ~Iu_1AtP<{=kev@&>^RSPpq`fR0|l4OZ5tXc?AH9cby8K3<>GFFViYi?I=go8N0V
z4)k^w7EYEs2~Ougf(uQ|Otj2)pH59@z^_5pgVp1)1{YG>w;~pKHB#705Y8LL$pQ7Z
z>Q6uXj68*X?nno}Nj9C97R<g}>aH#^5H6RYE#^d&sSCLF!a9(}ed6Mej(^9tXtw&}
z>kHA8|M<nvb;C*N&&HF_-Hhi!&hR%Y-(|}ze<k-fPq**>)ho@OndK*q=Wp+(5jx_k
z=Qm_<f1X7B$;tj+UH6f2Q~#)G`a#zF>BG1ao$Wd0X^kv^!-l{o`hM!G!kJf-8sT^h
z5qLf`T9x709t$)YI^&i2u|V&gb<xG0&B|KI@@zX78;Jqk*MQ#9BgdNY5G{%I&~{~t
z)`g73PpDlPsVUPMPRaL^1X2q@fblsq(m`78^rv~x<$!?LTYJh9;Vy6ttwI^*zV-Kt
z<&cCrgek*QaeYqnGH_Nbg2zkK;tQd;%-*?C*tRRkS6*<Yn@Fcx)vo6BsZeHr6xqrs
z$p`ve$`GV2y1tEUsuge_@)w8kZGp`3c6&VEJ;?Z-!^k)&a53pRaH)~*^kU<my@f?-
zu=PZ9f;oGj^PKFJ*N!c#^OCx5SK(VvKtS={UfkUkshrvvOt;dVDuA@!I=2u1Yjboi
zUGgKJ_eCwP(^m?0e5UAZd2r9ej&SixEV+8!M-zg%JF;*AVH&z4!_~Iz5eZEWT|$!(
z*bc*;{k6`)#pwofZoV_Y`Y4)tmXB|o>Ay^(HT%p#+B6BWCJcbn#e=w=RFQV)ap5;y
zuOlNp6G*T}Ah($N5Q^0Vnv&hy`Isl=zh^Y!u{qb>86B?(tE{t37o$G7xRv03oxokv
z5wdnN!+WL02yI{XXxpYJ$_KdV1h0w;_*BH-B9G*f^^-1K78Clz<Ig?1kUQytxVMo(
z6c1j3D7Sp}HlXoCedgyj`!Qk_z8;auVkB@|3aD`(-kJ4Oo@@VghC8U8Z1#RIqNCf_
zE&gcJ(s|`m(!b`168dt78YztFpIB97Z%%4556WvX0}pSbU=d~)Eezv+t0&if0%9!0
zgB}Bz=_AJ?1C3Zdjy^wyP(k&m4PMD&kVOjpli|i+c9@6cot|Iu&oewt#NB^;gHJy}
zjw1Lm%z6yC-x>e>kPkT&c>hLQG+Qs4d1#&<3<RrupfIeBm9N4dj#$JWg!l`Wm|@mY
zfB|FZ5>DL42Vr;))k%fg!Yo{^Aee>V)`MQ0NqTPy@WB=~2Z9!rzz4Sz<C(hT;Cs7`
zUH#QT#)F|TLEC4$X*8|{F!TZuBSyGzU~R-wb0rTxG5d_%@0}HL4(l{N<qEkR6f|a7
zd$8x;mCc^)K==e0GB*u0EZCD%cd)~)T!_5}yrG;!V2QPOO^sMgF#dCv?nN1(=H+h2
z6=Rv{6>UZD(F$GIwQ7_zXZU3ItB#%`nx^Z)K@sibgs>J>;Cwy@`Yl4#nh*Up=(&|1
zMGAEU`YI-$F7lKWR_cJ-8Lz_>-av6aLl;#_(~@vy_|%!woeh#kpQrm`dbws?G~PQX
z57Dg3_O5{AbT<Fz^I%e<y5P)q7ykKjm_1`ZyOuNSFPT)ZB)x|uRzUUl3CM@BLCnwM
z9W$$h#~RISeYL*rCq)6M2lh`enYlu288XRV8-1L`^pVmOM+(kiMXfog(q=!*9Yhw<
z1K!d$*7U(vR?<M%fFzdzQgg?-t!2%1rs-kte+nb35so_2Y06OaP%#oS$HN2(>jds0
z?@t8hQB~~B&De*G31tJZTNU#wLY|57STJ9p<7BN;9!S5<A+W48CTyPNLsMs9g}kc_
z9Yp!n@lB)P;nBY><o4kZ6UA#GYgU`{+V`^_Xi+#tjraY|2^s>dg=7&4NmXI2l?b#K
zcFX(kq2RJBNU|5}GP*-iEKS2Uxzd+fQ12`A+v~QZnom|A>BzMgHs!+@-KrlPy|~Gy
zzi~gq(j_7q%-ea$jCL^~*JkX)(%7v1dZLqsWTvVfe7xGfsTFN~%Pu7e%LsDtYGg!2
zP3P{d!)Hio4l~Q_p#|NEGKMVh46^A>7B(=jg64~^LkRra4Ccg{9G(YeA1)3LpLQZj
zzV<OvNFFO7>?<z(E5KxIs}4(y51;;PYZy~*`g94NYlSq>HEJ7p&;;y<N9@N|3G@1~
zX18#*JleOs7jEd)sz1vN+8A3HH3fb{#gVLEkrL@mMVI+iO9H7_RZ)U#Ty^S>JRu6T
zOGN?xRkwrbV!I37t=xBie%3vGHMCIMzDTx8vf_T2Fr`F3XtEu19ED|x1RrU)eb&8}
z>B9B_F%7?c;!R!CsN}eSOzxRFo3eqw0WSM@L$9fN(KXtMM{u~Ki)b=Cu9H75{`k;c
zG%F3tNzfu<?G>1%E6By=c^x&>&0HRe0(C(74yfx8BcfL+ZZed?-Wnpz<C!(d+tU;V
z@*Q>g2%<a{3FOU*54B4GW2^rI%!?K*ebO*%g_(~f`)R+Al`|#U_ZADJ1wBrQ%y!;C
zJC~)vyCA@$j9cPlCn%T|AM}b1ofNI4fI|yX#$VRLUlkf{gOmyoq(FEPBtB+fp~A1y
z+~jCW9XXvOYJRl7JE}~xK7#*HE@0ZRw}CS=xoe-<KQpB5ac&81w70uC)W>E@m8eWg
z_#h!kV8wj18@ShpwK_81Ix>bOG{f9tD%8C%Yl^SGj)xyu)kn#QOY}6aDy-}%1TsKh
zV%P7hXr`~drteMQUeOR#M{7l)-<?Rj<Z=YACV&75QzpKSlbp=Mw<NDJtn4t<&5mw2
z=U=oc+T|AgBLShN0<C(b48N=eF9@EjE!oEGju_RE?GP9sOM!Dij`K54jr|lN2S3YI
zKt<Ksi|3tVSf|X%BbM(iT32KQODHnvXT8$#M5aBH?M-qHL<47V4(#la8kW%tlq&Sp
zYY|T3TC@@qb;$XsEWXssk?FdTnH-aNH?0XfA{RL(^XUI0aFzBsX<gqPF@G>;C|W1r
z-v<Z3dZ;q{4OlY^V&_iMR-|LCZ#l3EiSIc}QZ<zGs?~mtQTnW5`|^k4PSHK*X)bS-
zKL;~mM#%T~@Q-+h8OGh{DoRGMe?Hx8tb<8eJjm+^BSy6|$jHOYE$b|(<LU0@CAdKD
zaE+mE$qEz`w21wV+ln=xO9!hA%3pG1tC%ws;g?<wRxA_g&a*=1CEc(>$8^H*)Lu!n
zJ3>K~_l7&Nr1HtJQts6oF6zD8rcK5OkXO9&1kCIFWH#K|?mV{t2;eDXvaw+7N*(uU
z1(Dp8DSOSuK26y1A=`9*q~%x6dzF=$JL@ddtazz)&Rt_vw-tT(h(0ZAQmA7GBX#)D
zI2u%E7-<=AazLeB)TyNlSYB`IK&wgTA{m`%m&#8FlrbW3%TIaaN!f3`pVJ>~PbH;A
zTRO2lWyhI?>g~vf-fOjpKO7Sg*!c{R?wFM^#&FZZzodw429z)gM6153mxfeoU|-Xg
zGjax%JAE0+_FU9kzg1%>p<lJ{mB^(7gVt}8DOL=DB?!6&w^~q#(<l`YSZs0H@8`;g
z@I@qI*}3YZGuZrY`ruzApZLoa-E}trUXXYFWSK8s^^|Ib0lF6j&*6@|Spv(3E`9SR
z`Si6np&k?}WD5Z=VHhd<&!$bj#%5tC)C#>*gqY<#a>8vb;Bq~S+?+vV=tZiD+bP!;
zJZ`?<G1Tk;Fs}-N>eQHm^3l7(G$hhGI6gp*>hUn>yJam6)&e1=+?s5XN%5MA5PW{X
zM}ww0`(lZRnTv}X4_}J}nQ>w}VJAvXY^r|O_(Rq)-1l5_dsrX)e4Le_@HD^mB;Pf@
z^{jvDM2!9j@eO{=*`hwGk!81>5eE170XTTI!3We~>YBJ9#3htRxB(B<1hL1Y^n{aq
z<=@xrxu|4eUpfze(WWcC07PKr7!qR7YNAQW+Izt!Q(#IH2g!3d<2)YXaH$#U91R~U
zCy#>v3{#><BIJN~e7!Y9JeP>9mWZUD8#5!=UqECd&ex&IyH$--6*f62^EKcdq4eFn
znpu8{xRoXRARvE}@O+sb{d}Ieb$rttn63Ocf9dFc%Us80wl2TZr}4}bC*(;2sAsw$
ztW;d+{<ES=%UwufV>}@fl~|K(mKOhrXLG6$o;0K9q|CkNJ?r^8@EX5Ro5Q|rorgd+
z?pv&kn&RJA^Pa4Lxq<0|==lLg2r=4zY+Iv4qwj4x!>dP~a8u)pNihUodkGtnzN*&u
zv4?U%#Ofw<f$WFSM<-@&nZNk=8qm`~NeD0Ld%qo0u)tu02<5L=EKSoV9AjN)?&v2L
z7|->*Z#DBls9DOL2LA`J_(MhS?9y~aZJYIN$vm{7b3c4N3}<;}lRgs(sRnBJ7eWY|
z`Jp!S=BK?2#01A4i9i63uOhgf;FJM<33le^;nV-#j-S4z2=R?*5N%?FP1&v>^SK#9
zzrQ+H4hW>tK2k5C{3mQN2_>)elSSfChfQ|w4!pcW{-PkHE&Q^71}J%TzH(uAS631F
z*sXKe0~vXKM$!dTZBVeGtGI*2`)#7sRmv#cm18YQ8XCV1Z0bLhLsFz|!klZJz-*nv
zM;H3&&<ZgN(gk4EJ*g8WCN38@zY|cHYH-3QC)kwjI<{tLeoH}W`=kc&mvC;uICdh1
zDTNA?YOz-VgX(u`Vw(i>4bzjO=^5urHTBwOY9A}#u9%QZ$@#$EqutIceMPp3`~$kR
zByz0M6o-yOm+4&1lB7+9gCA!MI+Z+i80Oet4{RlOV)U1H(2w@3)sDu@GgZXTyg%|P
zCpH%@$)GJ$t{+^+okjz?hlxhcC|XFIJSPiCiLR-mK&civ%q`|9Q<ZHQ>BZajMpI4N
z=1t}FIcjiD(52-$=yu-Tsc`#lV183}j9v8ztMyHog64-lV57{m@n7l?AzY0#fU8#f
zLVJIt5VDmPIXoQB!^EFmeT9;b<e?PkS@d5i_JRS;flqx6vt^i_QD=dSxCfts<aMZ2
zhX|vm3KkYvmM?2ddwEqOz#D;BKF14@)4ZVKrzeNN@q#=WP>4c?72Uje4}vgY#Y;w8
z%bbw5BQQJ^w*(WKZ;8cdDQ#+jE-^XheE+#L8{B-&X>3kMel|uV=QCSidNvpah0#-!
zZP5$+wxl&Y2gIUzHg8k+LaswPtUDJ-OxJrB=x^UqU^1MzvJH<cC$$|A#cK@oyQ67K
z9rUt^x&BVSfvI|VXEOu~d0HWanApz}L$e6BTJGDbJpj5(nHravW0JxVZpU{9wEp(!
zs*yZK9gT=Z8<tJcsF+G`X}oADRX;xOupqN@1P`hYuK0V6P0ov%XE%e^ilp%hph&mX
z!Hf?x8zK)A+tp-Bsks{n8v|p)k7Cijg~K?#I&(_Orrz5!oF`o?2n|obvYxU^mo@%i
zxZDjK2U~gLT2iC*MMZ1E`OW#%wriYUV0x_PzpyD^($g$%kG7nwTVT776iPf{4G>{#
z{^J;usjNHvTN(*!^&mM;oVH65u951GKWa&-2%M)E%61gsV~;qAf)G!p2DspOv6aJh
z{d!9|r91|zJQjl80cot}7~WI@m2cg}cA8XwGWc&MmW<8ukN#Y%^$o|lr8OJHls;3M
zC>syT;K7(AL?vqUi`qe}ou3Q;^WM+&yEDhtAL<SFFHr-Bh^N6MZq6UBX}D2J#>HgU
z`qU7{B~)@T&!}NZ@2^-$6n4(BUcFh6Fv+RyxtJPXA4|Xtv$r$CP`z5hTXQ|G4?z+c
zyDN&E2)YHY2M83+_L*-okc;Oj8hg9;&sQmF4U?TWEAGeUn(sKI1r#WFRSArnspVzF
z;D}9eBY4bb4Qa)?Y%bYX&O^|<_rF84fBK6)GkTfV7x9c29YE8&4iS;@N{9fP%WHkP
zYSH_i8(aurs-EFo9VawSfW0ICOtl83+0bgxn+W6$Qd3)4T5}LagP)yS^vEKtE>VC}
zaa;N%UT&!Ty<OYH)%yLhdA8M<$M7@l&n{$v9R6LgP^H<Barj$A#?;pd)}N7UXmrr+
zU+nfB`V}@Z_K#CC69CHhBHJhJp35I^t#1XkSvWWgEO@0bB<_LO?^3<KOj2jhORB``
z(o!lL9c`iD1|8;mk(FOQ+gLhb6G#Gwl1wIxf%vG*0X&~G2FK^m!aI510x;6foWKs9
z1N2HZt7r*b`{S%xK`f}VV3yQzya@DtAm3j>f7}41aZHBKrz;plSm9|dIo{7+e8%E6
zr7yuge8cn2H4<<OSJYl#fK{5lVlP%H-Z!-<3T`OcW5g#pe6{yF06zvyvEDeR$^}nV
zF+o#Uuthx2L*zNUDb0YKF?ZO5OCUFfLI9DCKA!F$wx8xuECr--4G=w^p_NbM%`M?O
zUTF1sxyXb{gXsfW?mgi6gswY4GjxF{Q*v<Oxw0T|-qNJM{)af4W#!fOLC^d4lW*b2
zF`<*=R1B(p9iTWf-d9=J*_}M>R9y<NhNe6If`fRUH6$e_?s9dmY04c3-#Pl7hAW-+
zD;&h`>;8=YSjEe;0vL{H6#Ws74h$?X<RoHB)lvT{wcRAs^_D!q-j^dmFq%nhhACVK
z&Z^ss^tY8ta(hbQdo9K5n=m=ew;y{sXFjNeWrvSYT0ALn)*kvz8&$AW+GACZjsces
zBpYCtsyLkZLvL{S)@gnPtWv?laM{(Nuy*?0R(gJcEbauqZ=}=~(qfHA`f=<0y(3h`
z3#{2!mQZ<1U&Iex(?yMS?T17ehA}6DHGbl_Hw=hc=b3#Td6Mzs6D*%F*oLgn0s|8S
za8`I$UnS+44|;*C^4e1c%-5PF`o0~jj2xzjXsVh_zjlm-b3W~PCVrojj*eCP&gLjL
zWOatfEaU1c#oeY!HPcd?6bcK|qB(G<rc<u3NMvlWK~oZ{I=sEf2qevhlWUF7*0VCy
zZfanXdTv&Wu2yQAs^pFsq24mjEHcFuO1(J6Y<k~sk|xGkdWt3rdoaV+P&}FELdQ|T
zgLZ9m-C}ZzCsEfHVhKx0aV)E;Dhq$Z&)yWT+E%aMj$hE_{z{5d%g090X9!_u7;M6;
zG9Gsj7?;w!X93&bAsF{2avHX=)WeV{t-G{puzprl(rkFA#O`pcC{NBWN7Sn>$X`5<
zP?1XWR9q2DCY&ybw3N$|fH3paG`EK2@b^#?0-TDAm5Ynt3;!GO3dr-6#*yQKv<<YD
zC(t$#qqI0v869y#BQi3yaGoCQ7)9QW^c1P=RL4$?kY@fq1mAStK9nBpv=la7U38LR
z7nEI{FPrGKx=CL22z3Un4crZ7%k3vffeoAU3cQO3)SjPuu(fopuA*qm03yKY!v-qA
zSru;~J7$zn9-OW~PNO*|7FJq$E}54hvSy@U3hh)<f2CoPN*<c2tpIgj%v=hcQV<Wm
zMws0bzDk&_%ts~27bZrVk{>UaTvFSbySSp!ZpfV9%{pe>s5-n*bQ0)b<WP~{qFOMX
zZiDDWRDlP^RM5hh(kByM#~ei>2S3?(=1O;;mE=f`7!O+F)9vNq_`LU8>*D_TzD4P;
zhL0-TX0e=-Sg`sQpCS^1^X=)wJmUcr7B21;ycl{yQ?eLZqI3XNerNf-BD*7g6jWhF
z2AA~IMCSNFYA$Ah4OLZdb#_LswKi97dVDFU>n&05h+7+OZVUo3_>htSyl=K78DLI~
zaD;9yT-IsJL_m~ZpH3HKjm<=0HdSD(*z6V1So;J6q*@@J1r}OCf}7t$ROb`JKYgBl
z%H`rc@~iKjJE%O|vzGvI3@%_JQ1Tt2>TAiJq&A^cI5Mu46+3C_zd*%6Qg(Y4cuqcK
zV%csfT)*<Ja2LgZow~!D=S{+wyPLC(Fe`TH6~^wV^1;|7LFK7v{pY>T&dRlU-KS~E
zbc5KmhT3i}Etz|;*7=t=J--EN`JkOQ9g_uV0Q8*k1qJw2#NBoIAwX!nC9^ilCf#o8
z=9E+%&68`H&7>_tdFqq6GDW_#KzHjG{_C_1Z#nO@<=q=7#-$k#>XH!y$0A?ZrKX@L
zi2Q>mMiNCIFLDFz?dI@UPbl{gq2MW|GMg$8&|<<?Q8QzKeR8;<R_<NnRH{H)RAF1K
z(7VZbG~@E)K<Wd+Pbu{_VTh@e_(M0N(%&CW>w(3Jl;DhIU>Vq!0>q@qJZS+3<R8SZ
zhw^fBUWJDES>;DW@xX8o8W5}14LXznjI>+s%hFZQ5JrO){#h57>+Tq`CNm`K*o6=Y
z;fA4~kK23&7ho8#hY!(?x|E`ty{e81X|F6$M<<>IYAvO`QGvg)Z?;loR4vi=Ua{Yv
zC}UE05wFo-UL_GE-wu8u|Hr|^QrtY#s!qw>Z$!iML+(0IV#HfK$B@bI%diA6Gomt$
zLE8#(nplG#lzAb$u_}JL@mQG)!`tk{Dj0H!Ze8VkajLI}lZiD8(wu)6r|kGIp6zmD
zJS?jPRIFNLmU4N+z8TzZktv#lBZWCy$G3h{B%Z)hW908Ck^Q~g)iI+|Km($E?=gk#
zUFIU<1;`6H-WKN>cb@OJ6Km=)->pwQR^CDkFxAl$U&rl&Qj{qrzFUKYl9hSa#?G1k
z0T&aTM>?Yru;b~BC^Ju5@lPF`(`x%;C$(dZ4eY|g!+S>B4Ak8JaZgIx+RpNq4l&?V
zh*AlJo;1zC%7QL*N$1R5ANI{Lx&3~r9~ZpH5s5bR?{TsY^4rjaTgu2wq~wy4ee_Wr
zi{>&-k0w5s9J@W>90Qh`Dx?e1KpaYW#Cj^aI^Rn;I<$<w&n0l`M+m)WEO|lY#bBVu
zc=jZhChV;5T3L0Kqe|X$6KKOXCVO|JXK2aRlqUg}&8dHzQ<s=c8M{tOYnx(^f~$%J
ziQxmg4HznIg?)CFT(n+$Z5N!4{m|5$*$+FaWQdeyOf6CTzb4~#7S19bY5d}#NG(2+
zpQEkw4RSF_JCC_dEp6<qY%kWg1{e3&i@AvyhZ}cFb2XR7sSwz5M$DwESY@IT9maRn
zUT=kd5tmsENdx()hU6Ci^fYb6as)xTQ+H4@jng_XtS{T<;tKiUZnIx8@XAY_eD!&i
z>9@w2%VxhQv7*<CGHhpy@TB*>73Nlg74r$Nsn5?Eg%TCToi+N(%01qw)<2x=ht%Jm
zABa+_n_Bh{9Z`WuiO!pxO!TgiW79~T=WRk)sG-DnR{tss6R*Pf3{m2o{L((+HN)g!
z(6WEV;Nb8yGH8vpb1dl~xmI0@RRL{VB%+z{FvHY|k&0{>y7-@NOf)7v7|pUxtJ<Qg
znz4cp>MPO~8aY_I>w1%UnuSs~dqt}<60G{AdJ=)*(sH@Jm{w3zd1#NDg;H;9&pZTz
z2zUem?gT%Q0M5fOA{ASv<Nh8V9vGWd9KX2Vu)Md{?&Fz(5$9dU0nPl9g)9;t5)(2`
z(y>N=aZmw8b`SWl3TM^5mFU|&nVj50xO#+Ag(hTqnVi<(Ij9}8VQuwvV&*s~<*$8N
zO&X3=NU12tcR!3sCMumyCh9GFNb--MkdKEbs`NDdokZwG9R?XX-}RduRrs#ay_T-G
zFd7@N2^lJAaW<embZI3Z7;<@p&G?j$rwzkzJ#4@m<_11#Iplw`9t!0M<F)X0I*WV}
z6`u%clU<i;{4^3JKv<A%T2o#Ead=_ZKIrq?zDAj<BItKl$=$He9@7_onYAf~Dk|aB
zVN^9l-Fp|wmy9M=s5NChq1kdJxq2f)0Z!*L<s)kKBXoxD{BtG?8fD;%c{wQrj-%Rc
zerE`CtuD*Dx<K!0^Lk?{YNJl}@D-KCCn|O8wur~$ZiOK+{HY3du_~M)Nqi8;*X_Zr
z6QOFNP3-EDG70oyBSAsts-=~viwpPV`hed0MrSGnb{Wcy*)6EFCF<m3v)eeGxkm4c
zl-e?*yl{4O_1~4X#+T<^T7yt?wvz9p4P)U_*GU>ASo#@c<R?}7JCVayc_BCC==lG>
zLXx}2@OnHUGGcY1C(;TkWiord(qeEYyowqCD6-0mXL@BMGLCe&Bbr_Q4et_k2Bd6K
zWr3qQW+bw%owROI*@0MkHLIl%1v2FBPy5HWGPKl6uTJiu@<2o!+rKA)<qxUehIMXZ
zx6;L4kD?u!&=lo;`Ev*}Iza~{*~&=FrQm6!E3(0z`~6FJ2qEL(atJMLiuu2lVN#*K
z`p-u|$ys;0NDszyt<Ap6%Ge;^{|(uO+UM2s@|O{%o>ddL%<bd;dR<lGQa6HZ<BbQt
zY-}iK>q3qbH}s|&4G&?wx*$OJI%6#V!`4pM*dHsKH!mA9p|_n39|wcdWJJzd>4i@z
zKZCj#Z0zQyh~0ZvgURfiQm_Xj7P}Sc5@Uq?01t^H_Nc19<TeWONQl_FHjBmnD0q1c
z%B;(l_x(~-57@JUaRn~fmDTcx>`W!<V&`^+NC2(Et-*;}U_}of*Ut|}^+f|1GwOs0
zH=}>dqn1qPp!x0DkWITQ_h@K)v9-k(v`_~B{tuCxDlLW5DrO-+BW|#VDr&?_gpbWT
zH2}3)OT8)8ua^^lo6NSl#iH>-&MHoI$gPC0CpLRg!i>^n1ZRpKs_S=@b|_6>fvQNa
zs4qW$vQ!$7=Md}CH-~O-<4P}d$@g?E6Qft)0?R;=i%nA{ZD09@nwHZ>Xw~AQV{=<3
zFSaR6tv;5MRDn>GtT|DVgl7AA4j(&I&DIyMvr(iC718qtkfqn)GCGazi(tSFnH&u@
zS}zxr8-~l*R!`D{Nu{13MIvov0N<`$6IPe{8HX7WOD}k!C)_Ffpv`Y6-jL0UD@};M
zsHK=&hf?Ksl^4s0L)9vmI*0wU<Kbez?BR5Ow<Ur6ufU&}5;Y0aE0u?}Dq1r$+EHpa
zJbhj)U(U-cLYS&5jUwU6$;1p;L7}AG?SuDRel?Wj58&7{BU1T87ShJ}!l+LF9j?H7
zJmWS4Mw8zmGd8E|?1i7=i#u(*B>+yF^G{9QEt+L00;D+j#`phB)wJ{I2#-BaEnJOZ
z<rH%O{k`g4>B=bKz|<FWzCB+O1s9C*=}7>$6Ll7)|2nkZgekZ_l=k|+^ECxOACGSj
zI6m(00}CfJ*<2rHE-xh{ve#<~InFs>yIg7@fV^w(zw<S)B68}A*2^~*@0^d#I5q)t
z{?*zZ+l*bC-)KE<x3e6P#Q)!bP1gz`_I3tK2n=?Ajg9W>2x>{hvYvV(G%>0<|L5<5
z4P9=_hS$E8z8}>0!tnBrU%wV(5ieXTxzrf|3}yNR>^7X|6)1vw`TN|jk@{7)-;R6g
z;y0L+Dd-sYo*3EiJ7V*a;l?&2Q`YyYS#oA*V{-C;W^6j-JewH)e}-(3Gya)Ne<LE8
z%H&KA|LPkh5x@FIEiTHe|L>N~C4|cT#N%=dU@kp?2Ng6;aoI5C9Q$d5x-TW5&B5*>
z2lv*kHybM#_Z2`CPxOp8*PH9{m)-5&Kwn40L4m@}VStP4{q@n^+T9q(>qU~w?X}EJ
z%Yh3Ghc@i|oXPL<m%#_!B3eD%4IR&5Zn`=kq48+sD)*y>CsR<^wN~C72QjG(lf}sI
z+e3=zoiiW|o+EZ1|B3N};p7D$19Vh*obLdOKj^{QeCGvJU5jHj9`QhX?z`qlt34#Z
zGNmqlIvt=fSpY+RWewKBrgh(}za`PDiCKAO+oO2RhdHlkg+2c-Z1$2!-JXw-;oCGM
zPSfp`kKlblz}->k!F#y0hQD;%TSC>=jXM*k5}Rnrbx((cQKAP)0u|?wst~G!xIz(l
zqlV;CWhgDD!vZHb42k=KZ>oa-23>ZlQ^hYI&*&nWcsSytn408~<8P@2S1VP?R4Vh>
zBe9RvQjToY<z0@}#`5%ZSmy9_@O-?kbosnq0wc+fUXWDycUkfc8}-l`4@#;vLQ>yv
ztk=;x2Fii7&V4(+9klZUuUm*G7j0a<P?3TbsHyibFtR&60q)*ONHN+i<60V7v6`dF
zP-6g6l&3^y%+51ExEuP)vEhgrV2@XS8gsXI`Z$Rp6rh`Gb~$0n8u>o~_gb9Z1|L$(
z#BpV8Q3G!<!(Z`rrt-Gx(f6VUyIShLW~>#aNrmxLU}1zy)HP{aRP8};OpsbQ8D5AS
zpF;RYguC$I@X=khyPiGsq+a_WZPIP*s9DwxG(j(8hp!K}nh}vtNEKP)aNVDf1K$CJ
z(}NLP$a$U1%(VUuzB5>mXdMm{4)re*dvZ+S@7_&E6MNL~I}$QHbW)Z^1sH|xW`jlW
zgFhWDXio)sE_7X;K-LVVz+pSV@fL##Qq6b4+**<YdgpfQW{iDA-zyCbFB}~jJ|*QR
zC!^uC>^vb>_CFBS+KEaKfVNS6y#fGv6vapuvNBuZS9#8t*!4WCGnPJ*7jq=4ISowU
zFTFpXC_9dDEoe3kTNpES!=+ZwAz>Jpd;x^w^IV(hf2Kqjr%6>TOZEE1ZCkNGD?jCw
z^SIg!z2{R(s_Tb!Cw7DkM*dVt)rKUe@*}OYHn{&iR>@@+qTE*WFn;<^C)vrUg*@-F
zmA$+AFYB^6AkW*Xrq5ifMj6&7+=$~gOzqQBYVcfaEgqLm0?e%}AYygiE?yq2;u2pM
z>lxML&BR3wRbY&=f31>zm%v~UUN~n&N0y_UB}{_dUJ+HOwN~3@N;ZtPW+7olYtk3Z
zp}t8anx@hM85V+<9C!k5%oH+(6c8|%@z29r_9_-abx+opHU$?vCHcY?F4)3Ptp60N
zSDLgfR7Gde!;F%fJG750T*giWY_7p2s;CS1kkW_(=<;Ki(HvS6=(M`gY&yF=$$mCA
zCF%O^w1^`Zf~;pN8baY_h%oY1-Fjn7ft}UT!^iS<#J4mi!&)#wcB0$w>7!48y`P}K
ziw{*H5W`MF^oegqRf>m27YJwPmrF$hs95j0Ww>6YpVWxzB`iV^$I~8T7KVQI%YG~w
zSlmr2`-4fqHvK*}ahE29)%lN1w{#0T^+r(B2S)+*H=)bDx?|D>+x!jaqSfa2NNcz2
z7U}4QJWG^%og&LD;FRS0aFgeS?4briD(E~o7MPatB;1_tjpw@W*;-)7-n-v~N^Ch_
zrf44bHA&qiZC~{EF0nm1Kbl<JUGKk78xK<9J}z-s&@Kt!;GDnzH?T7vrD>suZT?UA
zTfcw{T))G1p#)LZY|BuqzNnmYLN+!-8xs#NZLiox_DJOK=$*|F++(F$U~cApv}HT3
z(<+vy;P7~#{NpQg7`~*(ot)#ao=qr#_uPe9eL$V&V$3}8A0Ang{ly~|SQQ~Gq?kIw
z9`IME<U7v)<6{B+jrOXhv;99#67tp80rOQ|f_M=gikzUpH@NB{s)G;vKe_aA#;i()
zPj!Zg=sD35yxlV(`a!|5G>z%M4O0So@lkd-K<XVheWeTSa>M8fDpj3f?^2eHxxIoP
z9O}rX@oXx`;l$}4X%&X~b$Y1_|IDvCKlD$)28<Wlnq_HbW?&ec<D5?m%tH&#mYS9z
zjWhJviGCm;II<igRERa4wLubCdpiUG_hVVo_vLzAo{tw1k}m)7bSDC?^~HLH8V%m6
z^vi)Ma?JiAgGVICgu|T|Fw9xwRMMeh9TH5JTKtc^JT{d2wyISiHv+*>B3AW<j1aD6
z)qRp}W^|piDb|l)0HV_fvW$)S*(qF*ccyHufWJ<Grw~f---1Z!)&l)f7rf89m+w=m
z>F~H5XSm?`;-UbX<jPvG2#aJowJqh~mNWxR-~WSMy2#;tkVih13na=XJS&X;KklMD
z+;+fp1P-EnJ#h<e0MtedMq@QMrH5Jj{>f<q8S&bFDOIk&>}PrwqPB%LoMUh~U5}I_
z3ciicezDi|g1h}(b9)l_sou*Px!bd@Buxf-6N7Ydg!&e-aQK-C86nv<8?ksP-Ars$
ztvax$6$0R>o;K`fsy<Fz7CZYSLN^T62^KszI3!F8=P`Gs`WT;g?K14YTko0_M;L(;
zd=KLth4|u&$OWMOnB$Y_Hs-{LwXQBoSktd}d_nd8CA45yez5|HcsoEyd#Ud9$H-*Q
z^?lw;0^WyNvelf8|D=n{u!A0@@W`@Jsuym%2nX5?;;tRUGpiIg$Rs<ZoXVBWNJ1pm
zjH!OS4vNu3&$}#P)D#fBRoQ<{?j#&-?|IQ+T7g`5<^}l|2}S)Pp^B+@BU&F%Uf8Rt
z>SYbP+pQs(42<SK{-8hhXq%^_OmL`QpcNfO-P3ha)b2S3Q`8UqS5d^C(K7-!sf}gb
zWNm^g5PD_0meK~4Z2;s4d>mp4^<u=Y;rqzN0~|x+`5jWhWXFjy-S+7U%94y};JIP$
zHzqI~+>KOQzaDX|IQQeLTcFuI*>N^=aQoYFuF7~W0wAYA;o&H-t7<gFOLxKaadN{v
zrF246;zPrgU^#Qp2C^z0=1s$}-Nj#mz?*@etfwpIbwJJLr}mrSW8{mld=>0T?-&Ol
zdIYE>BCB5e+Ddc*qOh8|)Ug_z_#^&pthG4@d}<`P>?#{wKOakzOtSyQLG>1SVjmNI
zLlC_e;jwM{&%abiqSxbN+UB9J%j+qoGPT<{wpV?8^~lJY)WY#luX{Xb1X<0?Blp&A
zlnd<XiHxIN%#$fF+aeV0Y17Y`hAoI`)NItZj$Bd~W>Odu^0d^tIYtQJu<GG2Pq1HP
zTUeS6od*30Hx^3$@Nu)ierarV_cH{OpH^4??EV0==-4;ON#_pX%;WXw&-#Fum<>=q
zSVsIdEvin@if*SR&z3#MUs9&N_W$KRAQAsB_kop+IQ!S;Gv*83O{35)MoXBXCB`@@
zS=&L}rIE`9X1EeBW%PdB{#en-u=0&I4PB1XkGq?J3I%G?Q6cDnGZ4Z~j{e8v`<v<V
z_-zXP&-fQsGc1B9%)_hLt6yOu9#`xj^_JNl&tXY{x&fF<af@+M;{_r)$GvJWDVY&;
z-<0LsD1l8bx(m-l+X3O0io^M>hICO)4qT>09e16#TxT4M<CIeCG|^DEgVNv7$?L`~
zw}#{`E4APL{gUJ(tX3gKFccj*4YPJAIr`GyAXdRT??Bj;z-1^X{rei(8^f@Oax?6+
z7<I9i(k64W97;89w6BCN>tq&dB`n5@4`z%@_bP1lXl!}G&S+x!3L0$`qrdW67;5}%
zIo$O|PSjC_cXfr*@MDYS=fu|(Ix<2=Nhgbn_*EuEQAFF?_sqOjUrLks8A@$S8dlAg
zR>UMDp6XNt4T4w1hsMxECZg5??bC>-!HU`ahx|(;){al#a9WBAZuiMDL|P@w<wb|D
zz>JpGU`NSa*2_vo<>!{lFILQ}PwK$Un83xMu2@4w$~v9><3NS&#r1*q+(<?f=bG)m
zZB;o+mb!#WSa=mnBa^dyN}QTre{vxw1X)G9Zb#%asPNZBCchxMc5oYi$Ul@WBMs`g
z8~WI*ov#x^fNGUXyi!3;Q$X$Zj2cDf`2nloXJzOe%dzcl@`euLPk@W%m*n!aX-SGg
zL!uE?o$+J4+2ZEHYhzPYrs6s<H@jS?8vrH9|61&MAHsILv(wUjQ5-ru)`cFz&25HT
zR}UUiJTwjal%JSN-s{Vh1>VS#P^!NRMHQ8Oi$A9d{x+;JhQKSXDN93zPw7)Rjh0wJ
zRgn^VY8{PgY~{vlM(2|srcSl>fU^-#w3u7KnM+7UwJoL))^joq6BTtcF9bEh6%C6q
z7i|2F6P>Xp(=?Wsks$actC*`z&x)^0j+v<QM-;ion~0U7Sru!oW)d(Vwf_-gM*$Zj
zSbL)MzhCh9zw7}%8`vrP<sUqf(ih~Pdf+pf7JxDTDtjC0HWT)|V0o2aZjvSuS6VqF
z^_C&xC87RsYL#Ra<c3Kosw$)-QCQ#EJ)Qew?uK>vHt?xza>i<olr#fry{h>(F$JYo
ztHeD;mLu6~L5fp!-=7qN7&bmWlGx*x7*og;b1%1+T;kap@v97i9?N#V9{iTy<Vj%h
zb1_6Oti}>RV)%hC-p{ytiX$BMrJ@!+h*%9AO1TnMgYoGDyYh+Yf3qwkGkrxVls3X!
z3~X6d&y2hXb4-O=Y?_loe~Uu<5Ttf#axYT87H&BfBV~o9gatO{dUIK*AV^SbcT{B4
ze_iMA0~Msf!O`PajWd_-_e`z?5<n_7)s`Ctu+pYNNY+;iupQs@iPlpLa4nSH3kGnY
zKjIWS;~@mXKPj%<`W1)pB827U*%*S4jz(JQa~3R@f$6&roP8f|i#>L?NHh!jpERA$
zXF-7Ab@ae<a@O76;_|1mZ6GdcYG`4=|HRnM65}}CU2Z2berH3%(seTTCEERmG2Oek
z*wiVgbRKR=bEf5+ysHQb`Tewl6bk<yA5(#0@}wGw>Cz6jsKOg|CzDI`)6FOjTpKWK
zV5cG{Ok)|~PPU<dGli2$+QHFBY~h)}A^#!?LPW+AzaYv7-~W&VaNl37L?NF;b-(|E
zBuK+a>;FR%U7P=lBubqy^utM;h2Z}~67vw|XiRCUjjP~jkoL=>bz$OJBOX%Pik0}s
z&8;mJOY$lenpMhnP2(jEt4rflmP^VN|9#q}a^E%vW?Clc`PKEV%mK!3B{G-n;sTMP
znW=Q%n0ml})3VExXf@2>CJ)qUfLmrWPpo-L3x&&(6(%<{SB^8VCF~&I;#qfWuPG&%
zB?){|re6e0n$V5Y>T2-nCQyL%5p`$cPaD@h5tP4=fl&RcCHJ!Wgi_%FX;)tCv048r
z6=(E&S{K>lwElBHME(Dog~|UA{F`EYG5(ZmMnR!gDvweIyct3qJ8woW`~+V>13k0K
zeK%za`!II(cdvfEe|7v;5yg+M9+f~3_qf-Rbg1k^CM1r&9)}9GAa;2mZS8pbBQ8=$
z)Pb~}BEr{q(FGTp_xpfWeZBEGzA;P+?FjwKrFRvCq0y3t#iv^2a5>W23SWIh+LllK
zv740X4%2QE!}FS~2g>wLn0oIwA;hz=`8bT->@&#$|8sISl1^Ez^Wnu=aCEgrTUYK6
z1Dak<NW}S!M)Y&CoK#zhvHG?YD1Llexh13&Yt6;(PQB$Efrk`0Bn`v$teKYi&*0!x
z4`A9eDkq}ZAe(C7KC+RDCX0HvtQK0x)HSvlX7Ukxtzqu)mhOGw^F|*m$l?LwX8Bck
zu|Rc(D~#+d91=JM(P8NPgr9rsC#qD!;?`|bY8ILp=^5_K&ovIN&!^L)kv11m<fclF
zbzz}V74+zFXVHrI1sZfOO5Gl^y<Z0%s+i7fOf5p2Z%R@KoC-W2)v+rek?LnPFxneY
zb3u#TV23eE`1YB*3f+?83VqC2coviGyy)U|3*vyaHSC@C=X$VnAzI5DjGE3WW;kM4
zI7ix@R=R`TD!CTSxHq`AjWmgz9MzcDpMEG3SxGWqyj`C2%K8;!P4F$kK**r<mrGRT
zV!Blr{~$tKkza=X$0gndEw5(`-VRG+j8wThpOOw*{^JskXxOq5%{0GUVv6yK;+IPx
z=<>w;50@xtQ`>Y?8&>>}OJtFdk9AUgT!A+)B2ns$DQWhB|D$pSo``EPr%<h%t?ma`
z9^C0fqSW=(J39&oj5H#UoY+?qka%!Lq7uw>-rw6J7~`-i=|?P$QnTKM$Q1Lcj3fzj
z`4noOhbq^v%pcw_c<_|iZL-b1`tws^T55EsOvF+U|8`kg>LXM&M6N*%x|CQ!ZS@pj
zh{3O_k{~X9B#^zdNW6k(v{X!~tz>oYj8rBiolz#`4RECJw~O(#q>uy&O7REiT-#!#
z|E_W5sU{yTX-MO074cABgyR=?fGC)oifFB$TZjn!yC5K9Xe`LtjN%0x((4IX$rZO4
z15~>~EKgEOHm)jXXRxReSxJwO_WETLtZ6JNfVls*Lrr;Qe%XYmu%sRqRI!&imDB9V
z0ci2-oNPBP4T!Ukv_%Bm?{F9LFH=Kd$Tp@@HrP;7C22HQQnW$Cs|y;cULoHPqR<zB
zQB)i?z8WGo*5WKbGbs^WR#~tXtE#A?Vosi2|9?n(r{LbAZf|qPwv8Rzwy|UVV`s;<
zZQHhO+t{&f+ezm=r@yZ6RCjfCRo~2uRqJlfRcqE5<M}-*Q|pyOXmHx%L!1jPUgs$|
zA6j7j7FywQ$Ywe~Qs$o&CjE@L1z%)WPW1LcyUh-~pW3UTbfmQP1{Fg%%X^PB77%{M
zr*|4h&e?%%d2={SecCir^XI>N^0B^_YK(k-Hi?y;#WIW5`ueg@e;8+RT=tW?#VZQ&
zAywC(@Fs_r{fx+TFJ{!OI9!Srm%(G_iwc|RC$%nTs#K2glZr}4-KwrUURsD1tZYKl
ztI0G}U)wmfu3Q4_9|?_58|K;*_hM--xM&bpcr0s;1lrehqlCYEi1MU4wMeE)U8@Hn
zm|xDEpWFI~v|g!-1RgNCt$S&DteFh@VQS=q(VDn!+r(*YzC8`LgonU46~2^uo=WT#
zr3Be0t1?MVt1ao+L0*0O0*MWsXc^1_Pq|_(4gV<!N}~?!K7N!th6{rN^?|ou6TkeS
z?oUkx?yOQnB_({xqw*2Isav9|+gTMc#R=pZacJQE@{*FC0URw+-C{C)KOVla6AD7_
z7|sIpFZ~oph975==4Mmi2U2vKB4<=!#BhFtB;ZbwwM-<tacS8eOh}7=IWVEct(?AZ
z0rjhtJuFyXcbDOxQO%;tPD!P$jeXrZFWf&vpNH)3*aWq-QYi)1(oUTLZt5Ghm^fPs
z7D4c}-hc6U1f4-{f#?a#F~erKaH7VHe?>P2VOI|Jw!oZNvEJk{j%KnjJmC^h(SB8I
z)7C6x!lso?S#FIgR_&RK*jb&#cPmI5rX^XFmc!+h`@#m9al1}{dx<BdMk!L6J>dpk
zyPh_junhe{Fjh%m)$gd;Gd;*xC=H>BMkCuu7Y6Fm$pmhvs_@mBQ5B$hO<rIt=F96i
zE0A<29}h`MmuC)2tffQ-OXCby^t{~OaXe)8yG2__O7N;`kJt5Kc5-5kX>ZraZFlFb
zX}1sEXi-xm8@XFh3HK`S7vzCP5lM(&m7)$vht<gh;xrNyo6HVe9i&$H!L|XH|I*<-
zhLp9%Dg?H(6cR0`a{rmXsd;nA{=-d5#UtcU`5ipHq)c$ejqLN!56>A#tK(w=LitR-
z5w}3PNfM8E$KzUd+Py}WuiImcI6zrG(O68%OW8@CLB0xFI}_SzYB4-~;ipyMWIiEA
zTa-?n{itGLW~HQb_@7oqxyH&oIgs$~Q)VE`Q^P+^1bm*8M*$8GUQ7};_!uqMUW-zX
z*o~<75%RyaO0o>*=LORNKmCcy;d|pm%Wa;`><zoVRiZ#ci0-RRp3U7C!TJF9Y_WP9
z-Y;HM_}!VSgX$YRxgEFL56(}Rn6K-Y4tj6*_V@qMl(2pt`74+G-%Sa<xA*^hQ(_=I
zOjhClb5lYkLKR#w0RjaUh{*fY^#gJ8e<G#3bm@w}AQlpoxVrrhpO^w&Ky}~y0u%r8
zW6K2R@vBDPgMHG)z9b}s(kbS|yFcYk?FBQ^AHPzvV&<H)WL;cdZ2Z4NrJ0C=lVc-#
zz?Y{9GRzM)x0X{q;UMUqz#6tVA)!Y*YxZedZ+5?w!S((O?hdgmrjlwvc&Wn7Y8+bO
zX1b4*;B3)Dl#G<%<=&3muGWwf%yja@^LcW(x;T3}o@II7z{_oQ@$hl;xk3DI5&Om?
zFhX1}Fx|2Smi*vk!fbmodm)&ZN*2B%eW^i<A>L6n#SC*@)QzLVpt5Cb%dWqagLfe-
z;hQNmviz5M1jP9;;cH1>{*47}=L~{$GQBWelpwsQDG>7k^_1$kv-d6E+0<E%c)(PW
zFLh_dw;6tUNvR9G5xS70B=;2V8*gXHkPCktTLXW8auh%IT$9(sCD5z!x>-E{S%B$E
zeoC&K?>BkIX$L#%(5KgWzlPn)*kJ0QBJ1tZQtx;DyQt_-SGy4<c(B(eaxCu@9-r*^
zm&*~PPBMQ03X;qogl&KLykN6%OcX6qdmN;;FA*6hRGSf=Bom8Y1P-=ODHFS-BlyUI
zg}-E(*Y6+;I|v>*(ZF63VyVxc59w_TDJEg3HoGgWkMM*)=a`v%c?W_?Vqyhp_bIU7
zJX3g&LeNR)wI26-`|#Gv!{&55rLTw|uQ-RmHpwm4UPh>Eb)ZGo;M@G*x-S~^VdzH^
zHr~VB-kUg@b6H$584E$Y!l6&+xOwESw+h-Fli<np(oBN#myvoR>G=Ae6tf{9arSbm
zKW~XTxiawiGe4qCqUbQpRwaqL-`j=b7ay4}mD-RmvffH0S&~IP55O*7moXzt^0{B`
zptgNd*X-W8Gex`xp0Atp9Iu;`&)sE-+xz)!u((9_na4rnpQGCKtEqL!91T;k3Ou@(
zPiP09T9B~fEyL-Dj1lBEMei4SkHO-g&{_F(3Z%EGS8y^s|J?8*h`9~IPmI`T9-`QP
zrs&61vO3;#OL#scQR7boX|q^FQEZq`bewp{LTT%h^C`nFY}3O*T$Z2_7*QI_LQ%=*
z(D3qoJmOI+!_`c4a+BqkuBNK~u-#nC$p_Nb<UkMY+#mD2<*?b_n9gu}?7)~o0#Oti
z$8@j26APup70<0+AfR}Sa6Zuc?`AI)tay2@cbHb<<|DJI`ICE4>E-`=WI)<C1%5Yz
z4Wmv0n8&3n&~-D#f^D@j|A`IetJxp~*Z<ATrm2Mlj3b<|_+hh$gpYyBAG1%WAE~F=
zyb_UVt0mMQ2z)thKh^7uwJCV-79L#C4+$32N8*y^SI$C+6bjayV6!>~2hUZc&k{+h
z!R%^>xmGQmSUP+RAw|6<%31T}@nn9$L_5~HFX+-)SWpYEQ8c@MffHy%^nSakx*SNr
z(6ech3Vv%M%iO{Kg@|3(*3_gT<YN^b*t|xsYM<u4zs`46j`DMZq>WKC<T2PL=Q&tJ
zt0Z2&NJilPBjl=ifzkRi;vq7;tzHwOA0cEkS8_Wrcbdi?4&KMG{;cg!6=7XRrKaw2
zF|=;XtUdNmeRK~?u<#Olaf9FZ^PhSrAVpxy&L#474y&Oz8Q3t1D6_UJ)T?n`F9ph@
z?LJ1?-<w!xP96#Cq4JG=<DRVc^uI9;$lD9peDC@IuKVp7k1k6ny}!tqn$#B!q>|<%
z_~qhs`@Ago9(}G1VM2&>8=;~6%`92Ym{I!FVZXVdcohN_F?~O2d*mH*>!7!W_pO2d
zIUso*(n0`3HG2mHLVL6Ir~=RS)~xiZqn1X#;t(gbIs}QT+l|+%RIUBBQPPBOep(^r
zDwyzEYQiE17SNMJ1xu3gRHSTUHFh0~CP)<HbjsEsG;C)}&(+uCjgV9(+hv%|J90I=
z_v!j(*V6j>oc})e{>ssOAz%7_{+9mOc+-6W`^)1w!e3W|RRb|MiZF7cIsEn=LBIZ{
ztM1dBI4o!}3GOWJz1FjINXK3K#P~$5>gU$4vwgdu_FIqvv)~kTp=4ZWt<%27tVsw=
z75L|pmX_4ccn@K(_sZ$Ne#;hquqH5EH9)=G!H#=vD+?<tw{j<bt<%lV>FomExj_gP
z06n#cudquCS+7B@o8{=i%j0tT$X2BtdJ?x94j~ou9gxf^?6&Kj_t$d8WA}xL7-VKZ
z&Z80ErE`RD(&^>+HbwKp=!AK^PmC?SwkRzQ4VppX);_7a0=hjv3aPt!HhTbgi>%qg
zLe3;|L_4S#w^yuF@Hf)+0+YG9ljV1|3*r6S9)?o$zwiJ${CX@@_=vcwY{1??s(gS%
zUGfCG5P+YQ@&JEZkaB>KzoK=qJ8aYuZL&0j9_S_K4_qz0&zd~NymLQma2ipYnUsu*
zy2wk$7_qkyTJ!PTw0YQGs0|&e_#BH3O8PLV{a!&5`k2xV&*_IaauluT$ks}@C0JZn
zW3mw=6->PTUus(xKRs(0hb+xOKC+H?`Bq_P>sTc#97!x4x+^UP@hqY#9V<(<%V)q|
zX4f+7%^H+b`2d1-f~E{E(7YweO4vI=G1j0L<P%16*eMCZ_c&F3PuQHPI@c}uwLKT^
zmen_gB};0Fj4B>A&|-A~0Zu3D*fjrZiO*#yTc69`e$NdkmW%#Pmgzx{^P9l{=(dT?
z`?A<GQ+Qu93h(CexAVbejMuFn@*GN&*KJ+_izom4N?fvE!Was_>;o>|p!o~JZ8U(~
zkB;S<m8^SYZB#huZy|DDY*;6Q%n1of^S2>rX^jMw*#<77VFp&??eKSkmS{lQ_wDuO
z_iIlx>d~Iu9{p3s0pl0ROP{wQAd27QvM}e{NAE`8gH{~cng{{&AY`}>16F_gYsM!j
z5r9wTBs<mwHBC9^KN(NT{hlohx;B%q5Rv}tDdXv~rhFR3%lCW+gOm82#Rhl3ECsns
zV~}P-Q9vzITYX5Qfuf?jbQJ}f2ex}^i|x5_RO0e4f%I6%&{?^C^^IlIfu=s|S89_3
z5;C=pwt^1zcu8p|;c2ECv~*}jUrBjC8CI=g{!%SX9fJWJU<hs%UEM=<zIY`qG}e^b
zMjIfk=>$w+Sf{9zt6)KlGh1BsY{~*0a7A2L=xQ%4C#>%|Hdhv|G(@P#qU$;bqKZti
zUYcQMxF6!Re{FAKB{)M3MdY}4aiHaIS`ReT@7gEyWEV-0GG~i87zuab&}H}6DIz!{
z$yeWmpnlHS=eohCJhEu*sa$w;oqKsS41YJYZUzRol%o4?<ii{0y#7t5OHhdt6)sBy
z9$fyD8At4K{ioqTC2am&f7Wa6m2TnssIyO4u}x!J`f7eq>s1cVP@^?vKGs4s9#gOt
z6fR7m(Utn>#b`)23A&tnif*yUh}wk1z)P(jatN`0;xROr{HfW^siupnRpRZsQPsit
zvM*Re(3_pn#@R5>|0(9T_t#XH^`w5DT$LC}HdGV7Pd~+Ri{S4S#R<>=f^;nu@e#6n
zPV^}6)(?_Zj+>Kd971jG);WM&=qhd$c{97>xGdB%SIL_p7p8e!BPXlV!+9nc;7%YH
z6R3H!I~UThuQn0_@mKtKb~b|{dicQ7d4Ggxvjb|CbTf)28yv^oS=VKK%WT>=qvPU{
zi@f7Q&X{DnYf{=}c2_Mi@m?wS%>|!N5E*0ICpx&c7a9vsA#qfG=ihqlci}>E;!k><
zVLqIB*Brx2o_koPp`U@+%0-r;Bm2j0l~0Q0sG9o4;>PeGA;$@ra6bERWiJlfd7fRo
zqZlnt#7+IUfO*uJk<kG)ZjH-pch^t{4}-rq#~+c@b?Mq0i0mBq{tUSdD=6|!LEDA^
zc17oGey_LAo1LxJwnj58!ZU29T*~As-fP?R!nskD#kQUfr;jnYt}c{6C?TJ`%Rx{{
z(`^>*w}u9h17j%M`}!68u8T@{jWdpH!x6fZ+`Jve-)Xv#?;?T~Tr>=u$1^$4MgW<T
z^2zHeGQ$28PK#6o1HHxxFV3>_&ZI_h_*qO^=x?b`i_Sd8X(u3-;IxWJA%zu}4gL8M
zUAwr9z4GiR0_Es<IvPucZ#H(5X%9!*j)xFe80CV}s_-BdRstrH5YAP077V_Iun)Sg
zVgQQ>4D2-zF8Q^~Ln&FejWuqYvNG0Ya9NYQ|EtQRgXc9T7h3jw#?0l>*=Gt|akmo_
z9$8{R!>Q~k<tj{6g*wFa>CiD=>d-9m64+AUJ={>+P2MwAXa51a>nVv-22^oOPZdb(
zts+bO`@82MyVk*<Iv1J~XHeL`Fed-zMnQ$I7}vU<P)^58)z&tsUfuImM94!<X{>`!
zttuHeOyZBaC*i0y)lG|Nz|HV$u{Ck$-F2ZEr2d)6LM6Hlaj3lauojp}E}xp0v(Th1
zc0>kNTCIJVXGIqzty<;l(Bp=f)re=y;$7EyM@iTXDMosJl2xC<nrt)nlTT$Pk-#|@
zBrJ7dVbo`mIIt5&UR5sU3+prvHKw&xb*_|qPMF~pte<zEZ{;F=f;`8zFZ74I{?P%L
zNo2>B#@(<Gb|g@Bp*Cf>y>MKR4XM%J->RwIbnY5##Vrkva4FFIqDbN?E|OI0k(*BZ
z@K+FmB0veb%u|Lvoj=6uaS%{|2AC2|QQlu)ME9=D6$8TR7ZjX0B8C!*G4DgMQ*#U7
z#lqdx3RaB0H(9RRMVHrUXzMutOi9>vg{Y#4nfmifLNa;<y8Bebu*X{3C@=8+4rFF{
zkZ;jbrKs;+(;3P}XD)2l_JaM597Q15^FiOcIw2j{C)7#g;!XGN;+@?FOufEREsFN+
z(;CFHT;*sMwH-za$;k&y%}5~v+n8yEs)<u3cSxq-kapoNIvgUp*rqUO;uk6EW_7>8
zu6GkBJxlg3-<h-?zm!5@gT!(^(zob%GJ*x=yc}9(k?|6fvJq^i+xqADPQfCyj=&h{
z<Mqbh9Wx@<IC>(}eE(#4M|Js~wS7pZt}L7XgTlCaJx`F}*o|Ml4=BX-(t4LA(~OaO
zWM%7(l<I={h}PwTbaT(5ffQNBg;6!6@4=!0ow6~rk-8y%yQIWMYeBLCdKJ#f-}6t$
z;YvuRz6Z9q!&p8<I%2^5lzF()ZXFCov3o|HBR8xL7(Yq8!IqFX1b#6Q^q$r1+nod^
znJeh`V!UZ6gv;?NFw`F|esNkK?`dP<+8mw4ZDCJ<9@p#>Uc0m8>*dIQ8vcLLHpe_g
zRwiW_BFXmXy59uCRwArN@>4FVkF@6jzS30MFpLeq=ss;FN@^JWAb%$74htakiP58F
zygm)6msFi_{i-1l|5SgMTKQqXX{<PX4qC=eM6+hlKuxa!&t9@(_11u1=-%Mle+o3g
zJ@}%o7}T+H;B*q6h;jXrPpg>EjY_J&P4)BRX!bCb!ciXeHnQg&tUdbNWr4B*#{11N
z^s65;nyO*y(E`_;V<f>9F<PIr*UXK2*QCpHq{FwWhQ8Kn`<(d)2S7t$_K*<U>gCAR
zo!83@#MoshOdV~V+!INQE`gG*BMHQ>i$4B?TtpjWQo(44f7V>8tF>xZA~K0%44J!0
z<{I}Yg<(&jmqrEK9Ni4IgP>dzX~qMUu}Fi+9})X#8A?=Gz+JQ%fLIxZ8fgWFhO#;T
zp75ZrA}7VNwwi9wtDrfyl``KJRk^uz?JgcU!N(9`1=QpRh4dh;jtAOnG-AZ`Vlwk$
z!B5n+OT4VFpDRlG*q;j1{I9yY?ZnBU)XIEn?VqMsaXrM_@Kvyr_Aa1afSq}T#%v8Z
zkHtdw)e?f1^?3FxlG8-V*UO~6rV69kNzC6Q-ej9A{QzK<pQ@VrnVB?7cBeZ}@mPc+
z#=)R#{gu5A+gSUQG~+DTY;{Jo_8ha`IMUB@o#RJ(O#$P1R}z5ujBb*!ussP`i)@Dz
zEJ?*%s_snMMbm<9RU1hz?FItsI*Ew1(Tq65#Lxv*8MyDLYDu_+2n+ld%#hiz%kI}?
z??=A^qRis57W{91ryj_GZoT{&UM!^B1be#R%K`TcO?a)SA@h0HJN%x1zrB0%3W11W
zr4?~QMC*b(v|)L%Ep=fFzEZk)ZR{a<@z33Ni6T;xe*Q5ey(FMefV<og)=V+7671Oe
z|4Pj9Md!C1`osi+EIq<;yj{fa*AQkAnZ3BiCXMEN8xr<4kibski0N%#r}#3UyI2Rn
z$uWr1j`M8Fx%A(%ofK5~TJ>T58wi>cPUL`*wQ3$99*gA)ABoEIJ#lZCrGr8^ka^<o
zd8Ez%i6A+=B`yBdIqVgIbqG9h@^>0_8E7VR6>w|QvU_f|fp$empWrx>+O~XZT8h-{
z{~C4}J@hay>Wd8dib+`dchY*~?qSyOd3O%mQFrz*YwP&h{>W|*C?S$HTsjDo8Y@^!
zhj#l<b0u_sq-TzBUn?AXvD6d$N{{8DqsXN*+Z}CwfK;I)j-D^P;iM7^`JigKMQzIR
z&kdPN_kmhe>$t|iuf0m~&p)^9aofu7b$kJHtw^LGk)$eON1a+1B@q3~UvXgWyb$Gx
ziRzt{lN*Cy_<d(VK=yfRs=R+o*)JE-kXJ1h+oM&2L-cAjZv8@NuI{{V=0#btGabu7
z0;taRRVRl>j4rC;)4TQ$aiJMfgswld+IM(WJ+JU{a$Ky&h^yqvQG)ac16Y3{oxQ(u
z!o-@XM1nGmj>z@(pS}pc6V1tULpYA7AP+v%0rQ^1@zJbR2Sv>-)5M-FWj{0ZlC(!|
z_I_zb!j5=yav4>|T;rnW)d%Wdh=a83o%ggzPVmL_6LlMjL#l^zb(PnGcTQ<p{5q-Q
zc!%OwORlop32*h5$dpy#Y^@AUnYx=VLy~RgUS}KA8FP}GTX;n0_NaQsD?vp@@Vc`G
z=F|JL$WX8kU$kzh5kIuaM!7SHZy;MtGdvdPe}nZGAX_O{odAg=0(1spUtuz*2e(<W
z@b+D-{~fX11K(>P%y5VPJE$Zv6i_9U3x|<0!r+0g^hOZ`uPikeiL<>sM}w&d!YTkG
z8yClql(2<t^w8XjyH|F=f%zct`{nmW6mZj&+#i0=B|-+Xzs9og2AY<0X?~%+dtru!
z*m0L)XMqhUz%p^H`tAHw!D9GCw13uNH6V$|70scknM8fZkK@2gyWsSn<;X*R+oeZB
zG_osj^cGU$q73A|Y=|QhIYWCDWS+{CNNrQEe3cF$xRb%-6Jd05{OQ(%7^CV&DK_EA
z{$qBw4IU%U7D8woz@6=&A=ltv2+09zV2_9i;@BCrk;gPii(cU(m>~l}X%>jKu=-<U
z)_5dJv6u2Oi7;;#L4qLO^6rMkN;I0d4b6@gLBW~dxA3UukN%fKN8d3+UDkgq9(fNT
z1}ZFE-*vE^mJH+-7s_#avOJmsx6!%J6;=HSjYne-MU9y1wgDDryxJE5zDj3H+;;`*
zclrciITeh7VEZycpS_eJ-JmKbzcTK9O`8I7D~*JKcd<>5SYwsYMEusa`qt~kyv*w~
zmPuB5>Ox)ak+~g8e&*-hBuvq~<H$E1=Y2}H#(t#Ot1WFaTffcNaNj<`G&H$tPU>-*
z<<YAyX@*Zkf8?w8nJ2x5@72%wIu}8CdhM}((9`uCH9Jv1N|JU)s}v!$Z4rW2dEfrq
zDiorL0UWm+IL&?i$naoQ<1$UG9}V>!=iLKOcYp<&VdCT4%U3%Y26K5_8{K8B>sdNd
zkaBQU69|KTP&wOUPhSM0xoW)AKARk=xbCkR-f5&Y7SdAB)Bp_8f~W>#Hw9r=cJFB=
zNGH8mi8@(S|FQ+7?WW;PDZfl3s$Oi+V4Ko#+aNq#@P(tuH0$20iVjma)T$9_Asb1(
zEHb9UML)hcIcODEjecs+TM_E0etw{#r>$Bcou}Q*xwNOf4ScN#JA;0^m!mmop))wa
zfN({6L<+n!73CH7GkFhsgh<$zi7b&yp}|C?8WGXd3Q%eV6vHeL5HK&yh4&j_ja<`f
z9qC{uN2H@sFG4?JMCB#P7MAXrqGO@wK*QOcmms&MV=J|Qt!l(pQO44aK#p&1VlFN1
zINHRupu0KnQb%=SNng1G*^2E~?AjKuF8AAQqemxzTf<D;&d|~<W73php*}-qO(=pd
ziXIxh-J?e<fs*e_@xiAgr6mEnMYl8#toROOvW_hxTGh)<igMYKhMwUKCg$&?`<6^7
z$C=PHV;a$EEc)uLu~0}oPCF^onNeDXhBUM$A1jIJOsWzrfI`))=z;=Qj{q=!UNDe<
z7<n{LB7Cg#YTWYZ2Y6ZuQZa@LP%x4$cC>3i>{y$?mx9(q-u)fJcom47*|>U1?KdUC
z1a~dEDsIG}R&}f=7KC(ZA5?JO{uRG#^y?%K+X?HGYCf^w^uP^hkFWLC(M6TW>}o~$
zR^25&_7hcH452x9NflK$Stf#%^XbnCS*;Zzv%NW#4MAl@>1%_Tkv>4_t{ccb<9Qg&
zPcuOdI>@W`Qsg^h3u4&#=dnjt+b%v)=u+$RIk$t&RA6oIzWX|vF16&!(#nr$h^pex
z)@ksdOx8t3F8;DNJ*5WQmml*gueC;uHkaF!djS_01+uxB@qpNzgpo3`wtUosYHM%m
z1%)6Z5kC_^DY_POOtl}u^?)MF8kOixHaQq+fOHgP9O)S9>UeV2fk~tRqEJwtZ5JXf
zM%RL>71=!xA0Xw77-jmEfCcU1+yv%JmKIMJEK{yk*bv$%F9lO{AR`$9^*cL&$^Zj`
zhkz8A8dwg<OQh6aTC`l<Fs|TFkanLeIABlTS~gB~N~J?_{bmrQ8JUi29x8m&2f{8e
zb`p}=m{ZEDy$pS*H<{gaMP8b3PX5hneEubfNv@>UFoYk_E%%O2b7#pGqtRF<nqiVJ
zb41(;@0zfB#1xufT+x&|ugF+3Nn@o@g6@QzLVhfg^FqAtFHZ(JgvE@3zW5^nFG5Gq
zz{V#@8d%#GYWLP)bd{)g)7B#{Y1XCEP%cH5Uak(qTfL<9BfWKDk}z|&EH>xbCSG_u
zYy72z<vYeC_p?cw=&TE4VW|}F)_6QX+AI2+B!T)y!O|aFqT;#CoTiEQn>o>2cprC1
zC&pu|=H7Pc{oEb?!RKIFDKk(-UH;gTvpK{1;i_Rd0%PzAAm2+z8b~hnx4y|*8(1dk
zdeTbaBZh=~9KA5^v)>sEtwGO1F8(#9zPZp~hA<Pkq7;CGe2{b~GURR~)l^>}f$rYU
zXVdyPqN9W=cf27z3XW664}WmBi?232C}LL>FCd)TSj&R#t?Xt~?TDpCp>sz~(<%Y(
zuG6Gi?tyG;qD~vo-LNWQm_x4``7I-Npb8Byi27&c9w)+yTJA9<cGD2U!BkoCKucXj
z7O*X|_lZa;7p5Pco@riR5cOV62`p5;88Zi7_S^IQN6<cStAG9Q^4OscdRX!tX}?@a
zPf7jm`bbJ21JD2Q`epf_(Kg!pRpJZ>qKxorEj5vO<z;FhV=7N=J4oigO`71&l)Bn*
zjg#e@x{ZqJvYI>fV019P(jivKP@%>tY2xMMO5cu)f)@wCEt-1N8-do2RcWW&#LBcn
zD)@O!DeX?a#gl9)eT6g;rC<fg&|=2Jx-ddsHH6COVU_rhq=vFhgs2dCKVN`rv@y`&
z`pX_|e!YZ<Xxhtpcxh_;Us6Q0pc?Av(u2|~V?rwCg^deym{x9zu$fkFfQD#`3xsB1
zA+*pQ1MZ*$Lp8BWIS7gba+Us7gzMpN2F@RWFFZ@}MG+rHoteM%B?)|UK#ji8d9`~=
zO#vna!y6Q&gRCiKibL$(M_*SA)y)E<K2J;ox=ErZ5wnvBxBlx!ZWiWsxZ&mPpo&;{
z-cYj<ckZoCE!UIxUWncDJ9GM;FV~zFNnWRjUC$lcr#`Zq?yzYxA=$5?<~!4aJ3J_2
zx}dqWfrTIZ*cz#=)D{MGJb*Eip$Z0DA3H(>Rzp)86}*oGa{{k(xhGoS^LPkxe}Z-$
zcvA7gU7ws#B458*F_Qc>C$CtHnhK7~jpr8_NM*(%wrVI;r0}+DslDPdvA+!m2M_nx
zr|A;)0r}DAD0Lg8{kF_;2WqC?@Vl}|pI{hu@dV+eZUkD|cOGyrAd--WT`f?jfMUX>
z_Ix}=>-mAdFLs<`I6XGR@&|z63Mn(CM!{<FAO;vCO|IJ6u9L`KdZUz6&kgOhOf4K>
zjPC9-#315Kaeh2HKys9<ub(o&=`+!KnlT0^(C&7Jz{pOoPuL7GU*`O--gp#IIg?Mp
zkxZ_)n|V0}h@mZ$;1*&zU#-3cXnOR-w6llA&L#3-Tu?<A-Z%l1H9G`(9>INZo6eE4
zV3eSh%Qc%iuksi<Es`#@b?3$7isPs2PV%ny^jayAEa5PKa)!LP1xH9V=jQ3VpHE=X
z)3(2o>?-sxrbhgstI@rchr))1ZP&eGJ;5akIXIsBrmh29qM92tZ3Kbaz!Ld1B1d&>
z{<JD>T+EheB3D$AE&NlehbLS3b6h#&>Jf{cM9j;`6|r2GvL(D?$Q379QpvX=G<&@(
zvhE5z-8JV%bvQ~DwJ0r$4q6dLbbH$BBSr^6SE!SsDfybCN46SJBMO7JZg3+m1pyw2
zs_%r83+xtd$VZB94n?a&;&ayTIO7B`{KCv3Mo9>B(C8UKIr(PS)xOgwkLgo&=V5~_
z<7l=Kkvu#|=K|iv3g!lzlN}bB)@o@s4G<tsuPj7D^LCI{h|RS%up^i)K4#x*`2$Cj
zKlPG%UYi}5O+SAA?*p6f=f0<JxBAbPt*2ujzROP6r<(hFDp(b+It{I)kkr>Qd1x#h
zE^6rL0MQWoDNnVTr7J0as`fhUKUOh8>lZxRc<G}{;nC$K4g4CZb@-DfOvS4Be;rxf
z$!1SjR@6YuGRct|1f^IFq~?^UFDe%ADb#*f%xbZlF07zz%2_^mNMddN;^R^~BP#Yf
z8sk&O|E<!Wl_)IP04<xTd}{#kDP$qvjEhc6b~#7v;FGMhZ$9GmS1sN0gT}(&FDBQU
ztLE<vH!wXZ&7>aruQZI5Yk=jr24X9i-!Z7)GH+VEX3Y#7s0Ed$kMO&Ly53FtfgzQa
zdI~7y^4Pf1QY8ZPOvX$)hT`wgBX^TU5DKQP8W6<Fsphs^y|GmrUr>uK0P8S%UZ0}B
z$!=d!70a{P=tipTQr4oLO$2mH*zlT&A=b>#!ev`s1$mZ3>&l1V+U*=Rx-mrum0M%V
zRS!<&xcNaXs!&s3lQ3GMo75`iCbRqSo-JDiwqWt=%)v;7xl!?R(7fr!Y3s^hMa$%^
zRs5ulSuO)QpWF8|+)cp|(A5Z3k?Qgnmmw%9b5<8H$%p|ib<XjU-fuGsxds~C8rKsD
z$Ae9}stHq#s#(YXm@#DPFTpjQ)hmWl-U#U#(aRpvTjTQ9-XEk#C*ZB$`ldlrPu<W<
zhhtLX&C3_kD<trILDI}otl;%gkFBVCOZ@HCdnu|~$Hc&V?ZUXmlhNfgK*ACw8qr-d
zoZ6V`n2}LCC9`rwX6b-Jhp~g<HmzaQ17+kh6_1YI+)Xvz6JG{{0rCvvrHgit@%V%{
zxP)KavrUPj+3L-vHM2j!0=(QYu(0TRevM*1ok~2AZw3!fv$4Bj+HQb?XN!uCnawc6
z`r{}MSXX$Q+2&(ipgswVje;p<Uuur+<XK2tnp-s*zK;aKa*XAWctXQiuXgdbxTH;G
z!MnPpXK9rb3r-hJqK@@)jzomDhet-8V&A?Mg*k1B^=6ge*Hx+^E!1rVv=V)C+<JJ&
zN-#sX*81Fz-dZ7;EDrr{dG-Pm_i__8@!9{s66I5j4S3zf(*QAYTZhUsLN%8*MmZSX
z$Z_=K6`sfn!_I&g$w7PI$L3lyn2i5gsu?ZYApzC4U;sBjb?qawew%^es7}o?i1m1r
zh(>Fe&)3xsS+u}(((kykO1FO`$u1Bo7f<%P==IRDJqo0Q-*4QJM+e3W1GI@VZnFZd
zL7jsvKe|UFbAF^!VI258QR^e;VXcObSak=P*(3fs2(ZJ)SI{PQzD)cFS@`I!=WPDh
z^@#r=8MH*5+oh~$*n)~^geW9IzJGrofa}QMtS&f2)>Q2cZVVC}aDn#cI6-@Eh=F;Q
z)=t1p50ZY5$5l8t`p077-QkKr3Ia$DC!={!*w;Rr%*uqD;%ZGYzjwA85H$U-PvrGf
z3W~~kwkn=$f_BE?eaGZe9qy}{&_08wIacInk-<N28Z#{WnXp`8bF=(;aPlXe-|7ya
zx!O2pcv&KYpCMc?gHL^)(zcLqrM1Yv-a&i6VWr-2P=95T(m7S1PicbFIh<dhTtsoE
z^5lg4`cQ$qOi`2J;~x~&;tln2?{b{NkOg}r3vwH0dH`BMcbF2})h$~Mz7-Oe<EfDK
zOWyr-V(Y-5<sJIl6UJu~0s>TgRMk;H4+N;fz=K&>*?i_1!?oLnI>w1(yG3?<^KC*$
zA)PC|d9`_5d_HK+Ygc@Jc%8bJ-(+e?)GCMFggYU`1F1?|J)Bf`Xt*n*g&2eBStiup
zkup-@qzxnr4VNTCnK!tiSE}f=qHp4<up!EGTdaG=l`TVj8zMOM^dq|5M)RN+-~Oc8
zMirmak==vLKGpEN8r*(G8PP4E(mXLSze06It)d2J_U|Rj75Qw+V~nQ=+ThGfQP5X-
zZVxB%4yJjLHz;lgt3zPkceJ12UkQ9agmL=ww_qNrO3vynv2r9m{96`QkttRKhti0D
z>x82heM4IJON!IoJbYQ-Xz`(i6Q0m!UOU7f`;~+L{Gzn5#a$d;It~<UUG6~=!6SU4
zpAQvcuYV=zq57TnLd-?XzTKMkCZM}m+Z`X-9zRAyD!01QAqDG1{D5FIQN{)T7M=dW
z`xys$w{)x~CYU<-KA8u3+W1|fujmNtbwq(I4*L-|H`?WPuPXu9#Wt6KP353hs@GQc
zFRAfz1I94l;4|9hdY^~S*9wBJNruxlXFdwRt3*5w<XsOK!Up09*j*oPvXLr%fc*kg
z>GiG0B+M+_^LKcpdT%k_nCwF)b58U6>H2ON9*RLmOMaUWtM;mjz<Iojq^L>4?Mdw-
zgqXJNokf$6wk#t}){U`b@AUjht2l;7eQ1Ba3;oJU`pt+UE>>f)WOI9s{%wu;&9->r
z)!UbqzJb>R>-6*m{?)<&nx<rY&As%L4={-c*q##9`i<Fbx~R>DUDHy;M`1HNw}>>Z
z(bj8XKxwS9BKi*e;q_#XWyf5O3>itU3-_?hxjtTpJbo(x_IW-#_al^}JFxRdEE+jJ
z$oz{*jgnOvw56GIw^YKjuYRsHJ!_zauT`chXxAiR_gkWFUPyzzcV#uKytQt<S{Lpm
z)v{4hfG%mH1iFFo<lh|ihKjZXi&z7|V{~QZc0=xDr8i7de&tsX#H39VmiPlM`3l%x
zuLblm7v7*8Bj}#vN?=55vrh?8_7he)dCw;Y5kE9EP^r6^%bo64)s+Ta7*yzLsLAW;
z;oRwJNCLk{Nk|WV*9S+-af>MJdGwJl?I6B!?g35{73XLEY6#c`JE^B5L|0!TR(pfq
z#ZQ_JS|8cRA*x}8^UvJ6dj1M1FN0Z@1<*=Mq!;$eR5fI)SbZ82i}-Z(0wpGaKbk$t
z<0p(M+Hq<!$6?A2^1zu{r>W(G+4{x)3&p$%)b!^?e=vtAP+P<tX{ac8vVzOHaP(7b
z!4;9XpL%U_3C>Wm<fTJYarAHKm9Ft)#G;F?pd5jpdg)TUEZ)(`MB7K@X`V<#L<`+%
zm9+bL{8oD*{Yz{fuS}^+y1eCa<p-yb-TmKe!pYjK<<|?nDTa>^D<POIpO_u5N!xsr
z-gn&DGO%lDzvoO38NKJcYETULxCwTo3k!TC2CRg4x<vVeT7R!4k+fGux>M6u`vM~U
zWGDPt0&wq)z78<`+cKDb^wQ@hQ2hwCR2%qy^jeQ3!4<{xr+&eeAw2ggILL{^5-|O&
zYb(JO^gt^?Ko%`6<hp+?Eu<!LAZ@dQDt;iX_17On=iti?|5|Af{reUuTF7@^|60$s
zO25`S02GV}fLu7Xm*u6rd3TQvF8&eBi1w)Nc6JW%WhjIWgBZC|k9Wo<kNfaDwS7bA
zw~Z8@8*I5)4<f56#F>D92T%VH&9bh-B#sQ)iO_0eBN3xUuDz45R37j$a?(Q6jTRAI
zVf$u}D+&Lz9=<k@2CgM#YR@=kkwcLt2N|c_198$@3k>`2nfZV|y8N~s(m#60Fo-8a
z75g=Jx|29m!_i#H;%B`MaVgvkM1SXxL7U$iPBv1H^%E67I!X^J<}fx17Y%9gV#z+>
zOO9PFdX$7_D<$xP-(ZlLT(Q0XE%s!BLRb8@;7E_|1a&$k{4smB;S_eTds5)9cD)Cl
z{1H%_bRXCu!%RjQXYQVKsXB9xeNd}zv;ALg&#UFG6y<HgxoR3KB>yeDLVBFgxP-h+
zzpJAU_qS#(=~}%fMGwhHF$|(T*a1DyB%KI{=Sr)y)h1WH989K(j*wYgQ`W|?n<dO}
z=<OhltolV@=euJbqOlCgdb0|~thIqiQ38_#>mDZe4S7n9mM&46&26IMjWI`I82aUa
z6ekp?!(F4UHs)PJ!-R%u+d4rKO;l-x@$l=vD$8*GM`F4W>^?EB%=}4JXxWByt`7W}
zzOx&0z3TQeU>x@ZDBbi0x#Ot4u@~M#sc09?-FEYP<FwTupF871i&do6l@{x-Lgdm-
z?LM~@?}l@u^?Kh_zbB?yt)Pe?%yVF?A?q{qdeG7ME=to*7OAw>d!mW)O~C&waQG7i
zNv1-qRa0VSOx4z#(y))}ALc#shYwWP{*gvw-rr!9=f@(HV)v-?_<$Z)i-@B+uL2*?
zY_*=V)vmrxpUZ%#&JZW?PO;5ma?tFoKFa!N>OX%tN^W)V(Y@s|wxh*JWT)<_QPyD}
zjmA--HG1Y1a`v`o$Ib)#cbx~P1k%nOiz@5a3yjn$=vvewY)<l~|EbTDkU+<R;Ik{g
z#gex;=GUgunH$9126RBT&Ybi0`gA$B8nQpIb$Wa5g13MbV3t!=G^v=axS_<4wwyl*
zT+$N615=D4>|7RxGtS;RJ~T&RaeGeaC0Atck|N73SFz;pM~ex-fn`ZL(eU?|<^7tn
z>CULsHtwx4CDr1%D(UI;$7Z3bp2~9GB?>nXG`Z0LcAqSb`;`DgkcSNa1yd2|q0J<;
zK_K^{N9?e$O-tN=9!)#v31qT{H4>-v7^0>C%O5E~xz3A9*XXKN6ewIwqIx&&q{?R#
zxf)E6Lfm&mxpgUOdjHS6$06N0&hYAo8)ykFkm=plmL$Z=Q4=Q79CetBJ*E-n|ILkX
zx4IF2qrI1FDb<W=$_u+t#iE7>?bPf}Mts(sd5y#{UgfK3<htsmZ(E6lX@0@3A^*S)
zA$s1yVxp1fWNitKR<(bW+QuJCdCYw)B3bIDrJ&fL{B91?vLRU?B&rE$gaSBLZIa%z
zymE2Lat#~t5-!^8%b0cbEU~$d;U`b&SA_Q*y7yNsev*!PGE{<F(m#z|{n0MwwpAEn
z&?oO8hY-Kk+#W-hpaCPHTZyPQ<9*R44zK!a>`=Ow{t7r^?F4RKdDGrv?vY+cwV4~f
zMzX?vZStbueuHsoC%L)m)(?-ju{bg~?c(K_Y%gk8DgMc~%0u1{@s|oJyS|kvWDq6A
zyL<3m%m;hdsI6gJA#YmI5b|s%&VpGfINaMq`f4y`kh}9tBH}s5ZnE8p?rG|0Q&|9T
z$68O}5kgs&p{q09n+HD5n!wQnEnFjA+%qhX%JdTD&}`(Yoc50l(sUkg6x8Ls@~S!<
z1uR#BJ7|Jh&p~QclcxQgZkG)4D6bSuoVLT}6AfBN8Qn59e5LseZWKx8Kb;<dIdSbY
z$C)EL_#b~aXPNZRn=x0P!{g$Z+A2cgKV_ZNfXM@@H>3q*YFEI@KBt%bKrfx@XVh>2
z!o0&Gj6^UYa=(*HArkq)>B$*F^jK%@OWhXHe5*WoS_s>T$mYEXE_#0WmH$-kt>|K-
zD*Bv)R#{{^O>^N0cCZqKrfGqq_5&LBTr(|LwZMr-wluAnC(bMJs7mO7wqaPr$D+u8
zLh8ikL6b=>7Ku!7)+awATB`l&k|P#l00Xp<tY8-cA&G~r$P%Om|4e9hhP;B=tHe??
zBkiFujkE2t6*5tZGNqe*S|p4i$UR}ymV&8Sg-!5&Nmun56H0GteO(Dk2SC!L6q)Mv
zdC_!7*OF^)Xztv5fbs=dt%HPNiWK0l2D38EE@w_d5Z}WnmiYz4|8CBs3<#|U^{ecY
za$A`_A^~MbrloQkB%@<&K&$4rJ;TMo2&95`|AWZ0M?IpTPz(<x_V(X!jj$~8j)z_~
zd|^1^z^Xw!Etxt_f}=%gQy}?$Qel@PYY=w(YRmYqy~!e@UHSY1u%tcam8OnqV>$!_
z9z!YAjyhVeAtO?8E;w+YQu(Cvp-oDUfEtz_OD)5I9<EiaO{@DE?!C*gX_nP1VH-oA
z7smo*XflaPaGJt&ge@`&yJ?Oap26D2x_q8r`TXI<hOi-~a)NC<2Fs$bvDG0S%Hxcm
z4JtttE=I^_C34O=_i+`2x<%p@eTMS~RM5g^0G+G3+T$9t+N3eTtcZ$vs_~LofcUEj
zao{9(Ch+#i=}oopaKL7!lvyp_nlkDgW{+#DIDnLT*n@?$2m5YTs4gPdKsxOm>(WhN
zRg@-v8%v&AbuhXa+li)YmALg0al=#E{;+Q2qj*Nd3C0<#!tdH7*%HfCC3!0ajn==M
zRxP?z!%+9P9&$@$s{L5=l*T)Ho>M@07WdeD7&eTcQmo;vN(4UjiCql@6>+EsuTUh~
z)S$&qi^ge<{y5CQI54_&2$A89_{DR;PsqL~5wKWqh#uw(6mXm&W+#!-m=G}msZQ{Q
zIpTg5!G2N`?@t7Ir^h|{>T4*hzYdO4Xb93OSsg%?#3}Rm2e=Uk70fvgW?ua<aWf06
z$A9nQ2`&%%3-+M&kM#}?u#=aFb2&xfPiqXmz5P_pusT}fPit(k#aSd9IH7~pkRflv
z1sVx2gZ`VA`nFc8SXKz05P5Fk>KYreerAz~`JD53^QR|cGx`LO0uYGl;bPPRhM|zv
z+6TA{v?dTnGhsUS16s1>t{O>x+p!#|M4fxI*2;}|f$V%C{s|@=hgyvwyoQnl`#nn=
z6m$6)qPKXF^}U$I3wiul$8fDx<YFDSE4*O6)99SM*=xMFv(odqNE<79+X+iIz&IA?
z!sELfOxf@YKGoDjlgb8##92B#Rq{BM1*>g(cTv?jatHM$Hb;I|Ax89=H?_gkp_FTx
z#$hKb$H9%b^;gq{?I=+c<Xm7x?8WH8N9Q>n;PLQU9*;jSN%FlLDHMw<39KN3P|OkL
z85|#97Vc8;C*+6@>?OFRvJ+B6P!s%wQ^-Yf#7)FsPIZqJs@(;QZ4mTJ<SF0~1YLH|
zicBdM74v?1>y+hB04+N^KpK;tVlamtRvkM@5;3NqB+sE}3J8u(Y`%5`VFBsVb0lSV
zk;R0Fy_S4THAN?`4z}G4ghwmRpO<0;-|#h$cV>14KE>U9pP?Q49lp{PxFCDB7`Ej8
zki|qAg#{m--~eI@^rUhm!!RIo51i#9eDB5}Jh{ck4+W4Rvfl?k{ddI&bb22SnHK{6
z>E+fZJG(Q$I92{~B<2!X500ay=6iB=!5UJ1bLF1z(Ax9f90kk>a-rBK0dLOT+Rm}y
zWt`xC>Z(r<HQE7pj+2q@Bd99Rp90sT;70m}0C)fTsX&3qs#Juj``C~<p6YSMa|NY$
z<^tMt39nYNIVFqHG9=*J7Y`DXsdjm%=tY^N9n8pzLWSph+(t(D_p=A)2Dsg6o?!vV
zJAc$z4ot<w7&K_O2ArsVnjTyTCC=~{*dK}Fv%k@Xu@C#U{oD1oOwcQA&(M|=$}|{X
zq=0ulJDJW+@(wwZxXDIvyZD;vR!fg>RRBr^38n4dd!+8a@23fu<Z?6FJgWuYPB}bo
zcRu)5Xx*Q>ufTEl5t@Nthl(sd_?=!#;&YH*1~rc_mL6JC8~lbq$Ai<fS?mQ4)Bq*U
z7NbqhOkqUw)oe9I$>|{;!>y@Re6~l2&{4^ZWs<~uR9z$4#f`ghTrlR2LD;FHM42gG
zxt!EPvK-o-8okA*MfChAVNFVgbfFauZE(j7-wV1U6<c_IO-FFZC{aCJP9aQPnE@ac
zh1QZ<rQknWE_ywU%%N{%Jvq<rX`HIxG=dOeXggjX6ljml<O7r!IGE1E3~)sn$b#F(
z$UG)=GVdpijwo-)mO*pAaGghBpg5!$Jds}rZNF|VF87Z1N18`Q*aZn>NPc0B#);!0
zF)K*m%`(tQLZo~-rapnv9Z4AVXC~HuzT<kH{BI-=2?VjGIAC6km7P71PDxMZc2V`O
zphR)7jz(w^NRj1iQxnq3`Qv9ux6Vv(H=Se`_br`wjMoL&f4D>{TMm^4J$XQX%dF>N
zK1#`?c)~JCi(i{B(@5+TSYp=~x<DG7bfi9TlYlx*q8qLJ60k9?e6n;U*tmTTIt7ZT
zW^QCQI)#NF6UMzpZX_?Qyz{po(}?pe{x4&-|9ZQ~m#MRROoVjZY%zFZdPgl&2CK{o
zY)Z;;(kTvmf;2b>v)siA=UjJJm0_xHgXK0gs0R;+BLj39($?_VaWKgQ+Xrfabi7+(
z+r%Z*H|8p)OO2dhyUU2nTvnM*jp?ZO$Wmg!d*W3Hk!#&xr`u{9Pejcy+X(d%M`EkZ
z0`^kyL#HZf!^{!E5`9@}L4&U9&;USZN<AABeXBAghZIB?ac&Ds&>(x`PqTLPbughq
zA8;|}iQfw?1xfQ!>Eaat(U+UG_>>YCj&0?{DQYdv1KIr)AbEEBpi9-bEqY45@``YD
zihA=PSaXaJ(uI%BBx3fPzZb00<-8A}3IF8s>AwOPV?g_xQ@Ahi&)`Rx;_+tvyW%|E
ze&QGB&-HguR-9$8ptpcBj>&)Am?b{DjNe{wAFJ~OJN*BrWD|v=<$XV9M)zZfw`{q{
z9HG>U|EZH;k3uS9eCo|hCMRU;Y2OOAD1hDae_1nsC7QCdMGRD&qcSFG+fh6mP3;DR
z+??ZJelg-(&1&PPpFyDXAbj8Ga^WL*o?klWxMl$K0=^sT9$j*6F=S4&VKqvWpi|*1
zR*WI9ca&fsn2U|EgIhaIRN=_~fg$_YBhP`Ad3YBkLOAUl^6(dd?*|}`Z%t2MUed0F
zt^fv`{vU0bvB!cQ0Ovud#uB;G#n~QFn4urA(Rmb-wl(T>3o+GZ&e;8Y1V}#4UEDC)
z6pt)j5n9CPpUwYIsIhp@6oZXPgf0Ivyh1pa)fcNw3cDhYzdJqu)j6oGcGz)Obn`M2
zLcka^x<7G5p`Ht@#!UdozttV3&hHKllm3d_W#8Mzxd?=2#6rXUPT|YKmB;2URM1hu
z+nM8K_UpqpXy0xj;C<%bH$R`-(>}A(_x0C<QpI=5ZR1<d;y29vckTS}nN|V;VYZO@
z6UR`;u>!2m)|&vt%IYn=U{r$~Fv6)TXs9Cz{>rV$6a+#gq@%_K>aDC<ehLkJrXfBL
z;SP*@VqvX@rvU5`FBP}RqK%~`u4~~(sE>X+7?!`+)*>sot$#YNat5Qr2NDjAU0Yhv
zdtS<pDr)m?YaQ7LIsTv6aHwB&{8Eu?B0zna6Sfo_S`s1Go?&0FoGX`(^P0qrBt2!2
zkuz_I#TPVZA6l2-mt}4Qm|9~2MzIaZcO<7b6e3TWknOno8{8`zA(ry5+zZwe8^ndc
zc?-5YaEYplv~!A2Top;?$}qe)K`Wl&eH^|fbqpk!r-fuQVew~20g-LD!tv&Io2h}t
z5t%qLA!d+!RgP$FCkVi#_-H_=3jY3)c5C%`JbB@zj|`qDKzz$eSJz@E^`^n>k@@uV
zl4_w<JmiR)?BcEfHh_n{nD?1;hdKj_+BTdxyj%57^?qb{ufkCOGHP%Jtp`Q!2nh$-
z3w$xo3}oMM2_(*OekWz?fS@j845G>~i7ZlO7SX-H0Ah(}DotVtcb;(-W^GVx%Rt{^
zeyasM-*NA)*2saFmLf#a2aempsCvzTk@oe+aA_-Al;7_xOoU86%$_wM4_skA@iU|(
zW{&B|F-l!JU$I+-s9rm;?LLtdK@PwdC#-OoxK8bs1|yGaluQ>;B^kus7f3QR;AWot
zm00nNh63^*n#E0tP*iN!TeM@{m)Ps?$Q=d-?~CYw8Z(6LHR%F+zg?+(#_o)ycm><L
zQI4`vBzbWUC65qb_p^e0aUFYSC6yK_OSGsctjN){(i?au&Zl2d(!?@`b;quZtL!fp
zYSjT}>-&27U3h_m$kF28o_94q@5l4sNZ;q%1Wv1UK*u66s)ITRd<w-?IwL11$@2!p
zhSxf2GGF!=Waq3^yN%t!2^;&U)RP|i!lYG5i`WWPNXD27ffgNqDB<ARbe|GqG;9P_
zRoGm+%~VctX_>0(1@%YZd58^AGfp7^eN4%id^FU70L$TE$)l%mldOd(G10BcCokp!
zS+b@|kl@EMCTy38=JR?JI!MI%j(UmzqqBPq&ZJ=%eIMJnlZkEHoFo%ZY}>YN+t$Rk
zZQHgd*2(j{Ypq?o_SsdZ&X=z4?{{}~^?m)W|1X+z3EuUo*||Y=7lf^Chc_9eb?58x
zR44Pwx!|miKL9*xy;ZdiZGS5h#6=gIO||}-sYflf*op5=j*}G{;Hgq|b~3qAYS=10
z`F~)OE1T4m;2ARdtNy^GH3lz^VJlnjOyvE%j*4>9*{NR|naf!kc_kxQ<E?2{h7)y2
z(;f$#OH_L55-{74w&(jPz2Tvj4*iXOY<;CKSLJ=1wyk8Am|!b|=|_1QM31sH!eoMM
znDXL-QkAN#Dbne!8C$82@_S#5)T54i8ix#~ax3cL)qa%L{~c*tjiC-&wzFn~SRW;I
zcB*K3k?UY(I6U)rZ?tM%+tId|s7zsG2feFbxaDm;zrsaW!E&zDYyPvdv$pP99*(?r
zwAJhfbGX-e6uZl~Dfcmbl8>M~Lf7*63EYTbscJl_iNsOrVicFFyOiV(QCLtE!HR?1
z(R~ak_%nC8l~Rkis9ppw{H8=Zr_x8z;Mxf$IfM7-dJC)}STD<}yDm3dn7bmQs2RpI
z+i*XVA-j&P%2z}QqglhM{twn~_7E*4^jr)0@+9_(jo+EVVO!YP=Uuthm2pM<m2nT!
zKusRHHkFulM@*f`&}Ee6S6D)3+jJv)F#Pv}Uy7hjM`FOVkzX(S^W?HQeC&HZU9O*d
z!)%|&OxbLoCfHx|8jA1JH1Jh$HEt-vySg|3@#Be?WZ}VK&mb#DQ260WTw5BLz<W3A
zlvXkm-SsPZYBRs7vrm2)1NrR+Z4Yucx_-Jl%B9H!L!O(o8X3i?PMAJ64XDW_8rn~`
zgueLg<)(NksVW@6QqT+}_|(u4<RRZJ<n;aB1%G1zN>yLQmlv*j&whn3wi9Ugo`$U+
zio=AJArs<i7j0O;n|3N)2Z2bUnGQ(92p`%-wP6`wny;;k{<}5TO|Lc-J52=N@3-=V
zr-zWh>v>M{SS?xu?dbx7dhk?$c(^_4O!RHNkB6es&kdG4`C#~J8CGEt)XI|)KIEQ`
z$|&-VGbwR&I`u~-nAj1k*;0oJv8Yr?a3G&kJ<Bwej%+G46N<pY6W+tM(&oud_4$tT
zXa1Vxn+_+v_7{tZ>yAXi6cDvl=i#gaGDlPt;p^yQr+@5TlLC#UcuGV@CoNo@mk|AC
zN;cXKkSHL2qSmFj7-4ik3HWP^O}P{vs8@<?i|k|Kab++e6>i9g@$^6Sx27YVJ|UD%
zeI+(A)NBjq^?Sas5x$&>G!TE9{?C!QRd6zsmkX2jU|SQ4Dhi3w*VW=lHO4nJp-R&q
zglr?J;O5|ZW7HGREZ><~d?kP+x%+3F#Ek4fIZeoijg2g<d~jborO^pOxK1)VnjPY6
zkMwJ&kXfI<&```)r>Bqo`xTs`g?CbwnmY0A<He+z2$wqg62aiP!5*lX?pKVnM9%dV
zY$z7%DuVaku=q^5?1GxlxFzM2Y+At}RZwQ~vZpv9?&BXgK&iw=X<1VTpPY%8sQSR}
z9|`&LlBPO3K`|>CXLn!=Yg)N^i$9f_0j1@9Dcj#Xk+B6TB$ZWW#W%@_BPX0}II6>v
zjJDFG=A=iv$T%c%EZTd4I7>{(qA|U!-FTfAB^qzyK3!i(-Nx1bAstuFg8TJ%f-4<-
z<zas*|1_rQBCb`nBwtRb@5iX9Vl*dGmWXh@$;Bgu*`~1%R1=i<T0uw3x0=G&=~ek&
zhTA$Q`}*C@xfn(4QQMM&Sf1hJOsnk^QjBM%YFB`FDz0!7fpk*sSvP#)IK2_S7#|3B
zLJ47a1t6qHDJYa1yghY*x_L+GNTsEvi!$Iqe?&+pi3=0&4@5KOK_H6{rj<A)gUe<q
zF{jywF1hs$);@sbjpBY<SBIQPS0AHs7KuoSTAtQCtt}cN-3pNfJd0<0&?>>*P6p{y
zq#s%B#o=J%q&Io)L=@iPix=j|8QEBhG**<NbdN>+!K|*^JM$z*z&SbGctrcfWlW7*
z)L)1Z37J3<2vZYr^#ICX@`Gi7L_35ysp1rih_bHaoOwq$Iq%`SXH2d=z+<}t*Yo6d
z;RS{gQ%rd!tT$c+#|fXUg(r7OAhO^JM?8jlNtNLW=2!n{$+y|3IrhH;NHA-A*T1_L
z&x^Oay{ogFEPu%&3m65F*lSS9Ncapn=hy}O8I-DQLHdR_*$%|WbpI8Q{NQWlH6J+V
zFitbOA%JlI+>Pelq9vg0y_H3zvD0ir$DeXUsDyz&*mpUJYiTCFv$$4L4T6>ISP<Mu
zRsgi=S^-94%f~6kHtf%vrEW>KgL0b3XaO3dkiq{#kO;aM?RxciSmfd+3w5<XZRim4
z7K-G=#5%jKoix>OCmLWckS8Ckfe+AtN?4pON+~7&2e2Vx+fUm$TrhU-(D`c~pVz-`
zyJLo#rj~#lS4Y-C5ZKjS7V&~O@;~<lBo?iESex8}h`;W(=l_d9+94()C7bgcwL^{U
zPUg#^;F2+wdEWXLa-fKZG|T3^tj?4~w4=?kz8>EnPkVTdif{a3>TXW=?fJtgy+HZe
z3(3f^R)n+QSZ|Pbr6J!=ARh8>*ziSg_?DE#x5Qeu!y>R|*lBr!={$-G(oH$zFp1Xg
zYNEUViP?olF7h@W>E5-YMWHdDVfRdxXtiA2D%n#OI3sNyI>l8yx)JV$rduC@+LSPK
zUv?uS&#5)6f_A0f$_Y1+YpX&%y*}y;*8EkD%DGBk@uVbhv;U&LhQX1_Y)H*{MU=V9
z7A|%s*qxwmmU2e99uCh$t4Sd%&KnnsW6Ijmon+!UUEf5WWw+iz(CiczyZIL@wOC!o
zDg}iEkqyTRLjRnkDtS2PTz(wn!$C>eb_sl#qn;R1m~ba0y6~&xs4=ul6v5f+Q1H?|
z<IR}00u3(WOzdwm?3Wnfa{pP9A_%h5n0MQYrB;c8)N|jiSC`HFQ!A?c7nNpJ4u_R=
z<b8EKB?pw59FpMd>cn1nGCc294=&7X(?CoFE;tw1gROO%X1H;qCyqvKXY6k&2s_Km
z-_im1N*Nt{os~15oSkE$VK8`hsa`mv$wQpuX(g8u@sw4g`l|p$VWyk}LVd~)Ejd=x
zs7Si(bg#-pHQ`k}R(#P+MZaD^JHMl8lx?Ldx)1MxZ8b!H+@_ouPDXBv$aE<tp!{?u
zh8e}s$}%^S0Qq@X(z?Hao*+<@&m5j{LgnwHV5(m*`!CaTNoPe<_TN?;QT&+@8d}%O
zCjbvpI==&Weu*?`TYn532;i_~qd3>zD`2vPiOB$mNGnN3IhQa4<fB10-v0##w^>cp
zfs_J8U|ecelO+zHPEWBhoaSPMoP{$8@aL^L9|=w9^tiyVPv{|{YES%R&U+B+)0t9|
zxTR>Qmj?w>K22b!NiX6Ck}w%!cF#%1Y9o{+D{ordm~FJSRQQfD`QPpo;wbB@ztSvP
zFQ{|4f8?|prMUT@i=*MPdmrH9nyKCd)etP>?7rn}E+y#+`V&gdWEV!Wvt^=>npjQS
zPcwCPw{RLWaN>Z^Dtb*GGTbRVMT}`9*sHotcu4MtxoO0<f%F9#p`6CYqrDYUFc+<h
zU~K5V>0>^0UtGE+aGyLr`z<AhTyW_zA?Q^@zIpTeQ9^P_G2`%DX(BoRsld6BL#Uwf
z4>_Uzd4bUKYz#?WLLz705;^}yV6B2fT6(j*A(LKA90IUgqPHo$1#@i5{a)>*BF%TN
zr!pK{!D@EsHAy79F7PYpSl+y$8D+-YH1QLz9R|(sRhZ_q0KyJTw8&QL9o;V5<oVGt
zX>JBcRp*Fd5Mvu2P%~g?X(%&2gTe02;Ob^%u2n&8veRh4T+Nb#Ja0DL*Jo&cx}&p_
z2m!W!RD7*s_o1IInyv09wfzW=(Z=4~#?WQJtq!|zu9})_3}8RuGVJTa@$oFlG?arb
z`p|sJsCRReVDXF9|AAn<@dO4Lp)vJwHnUqwbUv$+WZJO)MyM*AUV7$OJV#DXhgx*Q
z5#B+q>}b_YS8QSA?a>C>^}DpT+cjwd)Hg(F9g{TPH7>Dt-*c)5)J9!s=KRNOId)Dn
z`;7vdWYDj%!e15cIhrWNo!lxmQ>9Bz6+&CZEjzFhpBuALh#Q^V<J<#`+*~#LD$oO*
zoN($W52w+^okb{J;iQc|!{e*tbr#aP$@a_shR3(jra+#2{MTzl!*uE6lGAsY2%$)*
z1Gr}8`XrXRe6eFqG0vB3h+)RLT+Yy*t%3@VAWoG|DQGG#u!hCeX^3o=#ySw<uB^rv
z5Rcn?R_ej_&ZY@mUG*mIZ4-H7&9yN*!T!zSkHGxC=sI<q_Nh>E+F=o;g966zvVX0`
ziOD?Zm&HX;S2Zp)o3>nN0vLAqvZAmQcqX{wnh^y($fnwtINC$l&80w`vlf5qWMV_K
zCi)NjEdWXiycV~)>yTVP?EJF9dhB-nI0usA-k9CkTg1Y&Es%ip*{Qq7ES@o7xU~lP
z7kh05c)`OlscM2g_~IRpj^u=<*@!c*M0Ac55}EJo&VV-V#2|S=m}lgq#y@9P&g(7V
zd$)uGSkn^exQ5yS*7>eoG}Fwmn_GMP#9ZZ5Mx2SA)>P)KaR`Mn@3E(nWcjcuwTSTp
zbHi;dM)LU$D@GcC&2!<6qAF5NRd;!@*>I2`uOCcN8Gsh@f5QLjEgjM54^2YJPNFD*
z4h^UwmE3K05Wl{&f9vpHo8#9<1KC013aY=H-(FP&&XXM=CFE(}gF#|XXxZy=JfU!`
z86iE9uQ7aPM0Ldf^rbVFjwbi=Xdaq*quVM+N-1uXF%=_O<qXy{Jyp*(Amlaw>~gj-
zxd+~6zTiLQyNrCV-ZkY~^SLd2E9@7x4ixP8YIv(KfSChR_5xub>AhiUk6SDNMK7Vi
zQfY3Z2gUz^iqoqCOczsRZrAu^M-vdtaiRKF4(#*ed@sO%&fm<l5Eot1GVf+YI0G&O
zC+t{1dy*Y`Y42?41MUFE9sUwwue+Rx4YP)GN6#`%>QAC6Bqd!_#+`EKxBl|_S$Hxy
zBl!2o$mX<IE(Rg~=cKd;0s9M{eu04$H7e-Jm|nkGkBqOCmW2qCZ?R<?Ssf@Gp<0In
z5$@Z&4trfKJ>LP#6Ad@fldCK83|zC2R%ts@jvgMa^-O4~P`dL?Vk!Sgw-ailu)o6~
zWk<k|AkmTHRqEV2#7GAsl{Zc}!|Jt|tXust`!iCvoq@E7L^!-W$MEl0SzJt@%=q$B
zGBA_l3JbxO{KT|{G`Qe#n5njlMIk#{v}G`~5}B6=i2aKNzjCnQGS9ASU(G9`8nj>5
z$q2Lxc7ipT^%(WlAO+Ds3ID+M=+WRXX{pmx4elKc?uA>WT}<BR+f7RC1L7=@IhW^I
zh*V;mTLur3V@4^Llq1G==kx7psa)vgI8!+7W9&H7Fio{RrzU8Y`y5H-4diohOtUC-
zm}cZ7HXB#8>Q}Ui0awt$CS<P~(iHRtZ!VyxhZWf4B9Gw@Rza_l{Vx)bw+gj<5peC`
zG3zwn@@r*VMrTce7HI{<FACUCWJ!L>cj%@Eg4`zpq3I;|Tn&>eHKV%)9J-tI7sX`@
zfM%cs99E;|#ycRWY1ICjL74PjPP$@d%6Hj6Pz0KzjQIywDtacmXy+iP22Tw%&+n|e
z^C-}@FenvhAjKEYZNKgf5namAZ5mwlV*T^+Wg*u+GeREtKI$f;I`-*^O;+Y8jfN_b
zb4}TKQ!PQj0ialePpU*!gO(>m7IwPvW}`FkSo3JatM8BjsxB1p8#KWKH<WvX^@bza
z^uRmUPR-qI3K7=_Rj;LJEO#Y*OUbnWtd_P}!y>K~ke2b?#U}fB&9_g!v(pePHU5`-
z71%A^txhum|9WHtAEHH58dutf6<erdS6K<BPHI~Umq!+R3v_~EwN8;(*;yz8lv=Y5
zIHMOP^)Px`!A5Pmm_|wqjGH1&3#tM4S2B+vINp+By7!;Js5oE4JYu5?6<o|LWvei^
z3_k&L%vO9M?2>sXeFXnTrTm*FfSR;c()R>vC{G&-(CsS$PX$0R><-B7kiOq%`%6v&
zk)@>=^N#$i`a^5lCx|*4$5kVK8bO20vSbZ95titxm%iGYqwB(Yx3Bh}MCTrnk;i5o
zxLq>D9!0omr5=s~VHHwrL5-_cZf3`!(GT4zI4z#`H6q|FsW=Q_E+uPG^`GjgB|&a?
zWF`F*$kT%8wGp7%DR6@Leh<FkL<9Xr+=~}}BXY%yRk}JbG`9?5*c#Kg@fwX*uI{iJ
zh!|O?U?NA|0USatrh%L`xJ7)Mim+O{8-{gx$)5Rnf8P?pE@6#Or2{YlwAoLST}zQX
z8IuJ7==S4ZsYa;{sw>SseN4m^BK<dJvo!#C4M7&E4Yh1k^nF+l*yyw!Op^&sOtlDw
zvLy9P^HGi@MdT;Y>N%xFi9Y4{eG5pP)@8q<eAS?}I>$>lM%wmWQU<zDdkCjV1Q2B_
zts1DtPifj4C5Y!bDa>1(g=7(Ucn2a*7`)s7u9iH*cJ06rLv{6kotG#lMcV(>d38=h
z-~NyDN{-0UJs>25{H&a8B)T%(2c~WP-k8SOn_P?*Gu$(2=etas_r<Pf3ws@O1*S9m
zOAs9f;zzPzxm?YN2qX)t6p1Hs1uO8Eucx2e^{gSW!6doIBUgB@zwI3GE8~(dK?rs(
zfj|2!Mh!9IsQ33!gINTTcL+tk9$k~}UNbmqklBWR_;W+9J}gxgTq#GIcF&sH_TUxo
zqK(!C6Pld;06hNQFUI0|V9IqbFzMdVH9EF}xh$!D@x%$oWu(E5S;bz##HfjqfO-Dy
zE?%xTThA44UhfZUfZ)q1Z@~uZx#Sp(Wp3BO;p}b*|8~ygJ)U6xpsGe>BXFeBY^p_6
zWqP_tkbqLq;5kU~QDwlmfZSnwd2fkY<24YwQt}2s$ck_Q1Zq*Q+XzH|)%pmy=5B!>
z))|SrwdeB33MzXZ_OXR1VuR}HlYf%hxDRZ+7i=sIvy-|lTn+%oqPI2)c)0E+;Gu`{
z$3g}8Fvs`cp!{$%T}1je#G*}H_8>9u*k2us!eK>W>cGDgG};)2<g#V-pr>hhz$Pjh
z2bHof$v>L;B+G9fmrNoy6a}quhJsuXhLjFuoNhtH^PQ%=g6cdq=}q9=r~OcpI-^gC
z*raVagRQolZ&;;Ft(0x_oY9COMEQaBrl3`i>~rL^`CELH!Lzx@B9HBs`Xb}$4Ub|?
z$!V&vTdK2fsyG0ovYJ9gBbJu@ouCmt@XEtmvhNI6?mnUlIKRoqB1sZcC=krIiut98
zuE#N@G2qNW{>OG{2d_fwe*9y*Sifx-HTYOS?|<8_3*!H_U6KSt=Q?6F2nQm?`_v5U
zWdE^Uzs3J!yWCE`Z5KB6|0mmpKlYF9x>i1JXNomhdP|I-I_*Q7H;R3%9t@xO`t4^%
zBRZ3xK`m4*S8>g~l6ELr<?))Mt7(H{AUz_?#!JSL)vwr)6c)MehYHsSb#%eeVuix*
z(ha?sbfSN|Zft%BdvIf$Di#`bgrkCO|Bvm`2!5Va&B9VukK8qsY`Na`Pq=@)TYr#x
zI}W9G$&gFpS~wJqFS6WV_U1~iy<~-kGz;GJYWm!H+`cZjnj|!2A)OZQ9NWY6%<>Jp
z)FjMt1N}l!cZ8lCGz&UQpiS3eLsZjpf_AF1DJ2<>3pv7Y*b#k4Zv@h@=|MWc**m78
zqgwS34nD1<H|c0NIZ6l=gH|!1V`}a29t_Yl9pO9iZe14Wware?%ietNM)A?DM3IgZ
z<(}!u5?qjV77{dB-wu}0xD;P~a*#LfCI3EY=AazU&3`O}%XuuU;HA_EOJFjNo=DgX
zrcLi&l(ALd+ifs4q{mUDtV(P|nb`<2Xx-Lqbv(F*xR{m@8^+fdcD`1lQ&4B!x-l%i
z1lIBpU_S=VDsx(T3Y;qXI2v<{ipf8DWKZNzc5E_<o>IrTLZ=mm<=>pw)&{1TJEx`C
zZ6vSzO`Y;Y%XIf!tOEVzhfi6h)4XoA-IawAkuoN_;`@9ch0HJ^izw!77ZY90!FL~h
z8Gy@{Q&lXSQ*{O!KoQyd@<Q(O){WToHJxzT{m{h!b#Hb&SnrdSqq18um$9gCGqj$T
z<{Qqb!$pmR5c;jUPH=p5sl7>O(Z9vURTJcjmGhr#geSvtF|oysRs3yYg0lwYZbBk;
zcJVeLA+02nIXT$tawRRa@dO3aO~jF<72t+cT0UCi^<o<x)(z(>5)Dh%RPt$Mw+rPk
zaz%vBNh*$8jllwg59E!^0d1~ejjcfuO9s-~G0yp8D877m2`WQZq_S*Zi}ueOs_?wL
z0()y(6KCEREF>Y|3IuiAHt>=R;F4>RHHPN!9PHeshL_La$76fJGpBJL<&Gmd=+deL
zpNWc9AXQ!)WjF0#QQ{frqsoY6qY!$yK;~9hY@l+I03Xmm_4BDeb}eucv?AtYGFod*
z4ms-+QA#Es>hOHcrcN1#)zWn-w-wTLC7`csbGe@{AO5f9iGkI?syfX^#`1F!*XN6y
zj^#*;6kF7x-O^a4{Inz6{_o|mchhm)GpeL#C5RP4FZa&hH8>`fNnWA9S*uV=y4%3X
zDiaq4!XHJG27|6V`vlfV%s;Un8&fC2jht~jrFYp4!K@gC2Vm(sPcfylFDk)Rx++s^
zUngx?Y)Nnrr;H0I{nixx9u;#>75qG63u|qqQ_o{{dsV;Oi!5jw|I%T<R^zP_g!Jem
zg4CfN?6oL9ATOAgK%xgQZiLi>#c@}|>`lJ$gFa_Z9=9>lrw0#$qbeKNs=Ibb53UyP
zSt{5ym2sqaEcJ*q^BSt=;bcu_vqBvz9`*<>thykzm6(7JatdlZw+D4+_;$O^<cjXt
zxTtnv-8^~q<^51F#N?R7^$T*z#LiNl2nLNd2kA#WvK=BEbiZMxW4LdYg|~uzB{bXz
z2~TRICCPzvT5@t^OS_fa7l2SBL5PR$8*Dny0?K;^D1RV4oncsneB-Sp5hMCodx&w!
z032QIS^s-n$Oa@g*tliCk^6^-SD}NT^I&YE7}V}#Nb#6*CBuQwLE_<N-c((Tn2j!2
z^vv7CsML?Bf-f)Uzq^~g8QRGLPbavfGrW9mDGI!>lg-_6UfL*iIrK~xeitcqRDkFU
zdU9hsSgxjAgMSYDYyQz}rAi$w?E;k#gSPf6Yk+<;#>}90hN+~;IO#{XJI3TEHAR{o
zdpnqKu5~O*D%<nw!FojEyReUzD4RJWkm=uX!ImVyYiI%-wldai2d2(ZNEp-WB=s|`
zarLLrCu+OgZ|xlQ-yZw@r-Ii9J11V(FA3e9Ct08FHw`Yfj%({5w?ST>Wiz{!%{SUm
z5h34TtK;^+z}9EfA(N>xkY)p`5U4avKK?h@x<?_}sYf~<b&_0C>o}nw)u@vhlc_&~
z0h6Hk;ZvvRs=Hc?gYnCR=-4uHsrN}PW9A%ROz_`ZAyTCbt?b8Dp;Dc5E2*b-%xr~0
zdG86JL5sz7{ixFFeyPdLV!fkrb^fSwviI%#?8V07ehCn&ozc8xDUs3KG^s(&xBW$p
zxrU(pasSpCRx9CVh27$xCrrmoc{=#?aAw`66l#ukJ$&081k${lePh<o+t`Idy-&^f
zEw!djZ@#70U<%znb=<eq+5`WO)WSvm9sj>etr93P5+%p*Z>hDU=mGvMwY(4jR}Q-6
zv5mK!H8R(me<rj|(|PHdIa>h3hlB1uyTgY==hQng#*?IAnmOznT&Qs#$fjCqRkRSW
zP<a{6?ida)(xLHAlohJFexR6u3K9clUgU}%g(AfA-i61R#whJ=(duc}CDCdV+hP<8
z4W*84;?OjMbuVG0`mmlG7)~d>EOA-dj%wvj{FMSD`Q{a3KHA3?feS`dHv1?gfnWP6
zfGC;>(J5rF;onaW1=lQC@}Jy8R9U;eV1|_473XmG6tzd~?q=npHLiir3pX6gP#F2z
z5;g$@^;{SZF`ANQZ~tA-pmWGCJj{%Mi>yZ(hHQ#3!`YnN-ANGZ-JC@HjkVOk`A<5d
z3$&t94on#r|0jLl&M!Q8*EykGTC^<|G;hRwWb~>6NwJ}2YGqkUY{OLnH>bvQVcpZ&
z^~+B-toBaiNUz5Hre;--h{pZ;Dpe2cq(4y-B9>+a@?Oo57)+*$9=>vhVbueiqW8TQ
zNy`n#*x<+5gL#W<4$+U9!j}TV$2dYKchlSrD3`5brw%dVIMMGdz4tLsk-8rSNH{(2
zKU^h68#U$);E&xPB>YsDh+L+8)228s&In`rZC=|vx%7)oz|q7OYMPB4jZ&3qH77oH
zk!bbd2m`ht{xMq3{~9gJO(jHriUpVJL*x%`>O6h2=t%A5if#WJTBvOfC>yGI56~g*
zq_*`(p@+_Hzb{%ijN^r^w`kICimQ$MX`qSkQHFZoz6aM;F%Wlyvm7`~M@Q+PIu%B!
zELCeYEdWT~4wCL;JeHk8ISNqJH_|#-<%FlcL!-J;MfnG5<qhSs89MuOlno!BXOdG<
zql#Azerf2uEiLnXBQ1+*0t-!Y%~p+Xq-E<AUHJ+xXHiFKyf>m~o&$p+yjA2M+EU)?
zYXe7RFB@mx?`eZ<;i*30?ibn!EZeN=2n^uW<!hhh*gfU|qDS)9RzO=l#qkNhr7P(t
z+t_Ed^bK}hGttd|f7}n;5Te*BI78nW^>J%%)9552i?t$lJS|BPD>1>B`Mk)&`*i<%
zx4)r%{ZCUQ{k|2+BhfG3X5r7l--sguK+SgI%`EO;2nA!NX`yLYbK@rHjK>rOxWe@Z
z1bO3mebm1c4Ng@*b+?%w%`my!@pk_!D8fxsuImW}u_wI{V)Q6O!A#pcMc+$0^n1Z|
zcI9LqVq^GLu6PoKj;&^#>N~A>Kqrbw4uDV(R<)j1UaL=fnNo&{40zyGq-2vf$1h>=
zfRXQcY2^5%FoC9f-!ZUrSxfd>VdUqU7BQEe7E(v+dg!z1ywRY4UxM}N6~o%zUmb)?
zu&tD#y&9wx>Uvqn!{3?5!*3Xdq_*=!VlMoXwjY4AQqIdq;pExVx;$_ySX!+B3we5&
z0p-euNSPWrs)ajNCax-|W3jif@jKR$#jt(WmuH+S?gSCETbg;hujhFJ5)^~t<srx~
z0wV+6&kvTP8^B=Oite?`aI+_Ku!IP4M6}q~GxgNOU<(V{%uq9x41loK+qnjT$ksz?
zVz{Z(+wr__4)VJ-)7t?+XhUPB(hspR=-?IW`(a)iLd~T@=q$2nZWIaDb;Z^U@~}~H
z;Z68Rjo^X!BQwJYZT5u+c!O~zt@|9v{V~W9T<jsvhq$!CRdq~(#7H~*qzQK`DDzLH
z(8y=Q5{FHy!cwF{+kM^3ZxhO<ZVO%Lc*BS}IL4DIix7)|kQwBt0GBw^2E~XDpF&lT
zDCz=<<J0uA=BNQb`$?ztDnfPJqg*3FWjqb;9e)S+gJaCm0Et;7MjA>mz<Y1mtg?;0
z$bI#2k-wVqlX~$NnXTdYB!F{`$*@Ik*#p)XyvqQ`O?W02Sic3~_ub(AcArk>hQCsZ
z6?rFE<K@2^tG#4g!cz)wb@M$?Ku*Br?mrqUVT#!r)$v<nHN2}-iQD~OG}a6wcHIA|
zu@1jAR?R7{>%SZemfi20W68C<>IVE^g5MNQMEZ+k^#sX_g5KrT$Ypd6d2ul9CKS(J
zWH_&Epxt;(6~U)6x>;`Yw}n!nA>JcGb)s9?wLRf9_!{|?E%Lols3~bI%{xb&kh(2L
zsU4r9l>^#>(5^aYK;xIE2!Wk9jTUwISU%ycHwQ3qTTW`rK{hPvF+Z6n`!B*~N`2Bx
zHYhNaox@i$C0MWKnWrZRFW8{wu9@a4*JIcUTGort!GepJL*H$Ek|mIL=W1ukP&m0a
zO^3yvYq(tJ)Gm~oVwLhx`!B9=*8zf+%t7QxCaGB-O*iS=J<BsCh{%^Fm}E*OKt4wY
z%y2^$<M=c#;ZuU&y<<I~1+p&Jvk_{oZp+-ZO9TxgisDGU?MJ5@(x4m5flC+#74s8!
zAR7F>nHHglQEw{l7AJLkwPFW;X})c_jhsle2)c%%oyc#IXBMnon$xEl`#*kkc)wsu
z1a$of_6a)X)(KT$z6n;G=r_UYLH5}--Dl|ys`NX7<0!`l!l>7JKh3e(#>?{J;QM~+
zbbBugelVs!mNnwlPnVzxF3S!svaX=T=frOT>|0Z{;Z_Hkt+TgxNSisZjA*@a3$M!*
zua1_?w9FUPJL(3hj|ZrwmD;*miWG{fe}RD}j9d7L1FGU+L&zSQRc2yE2OlD&3EnN`
z<V{WLlT(SAJ(;vI2sjkySdoMjTd%1KMmn*A$f@ncKQ@VoJTX??r&KJ8$Ls_+m3&;$
z2XFeJ6bm<%cH<(K10-4+CG<(@XH5?8Au{w(TCAbHWpC@)@~cxG-?EsSBXAtpOLIF!
zaNwanuO#9}pF6PXR`cs3M2$=?VVLUfed{MHk+(?|$BPf1pyu1G2AxDKUQpQTx#*ke
zmB&2%X0VE#A{O@Mi5h9;+s%Jjd8y1uX*A2^O$szRZ3r{VA~F5&A|IiIW<_+CFkkx9
zzGlkgLT6RG1}L{eDA)2~pXVv+>Ov@q-c@7He8P6iQ-?2YO!!jHE}I1I3eP!n*Y9$8
zPK&S9OT}EVy~x}wZ`*M3Z45{6pDLF9X8+B6CA4j7Fq@h+PiFJ!x9x$P-8L}`n%ovz
zvr|j#i=uoQ>`I4bz0-hqP3RkkgXKqAuXFkh#-y5oHwZh4uF5p*KTnT44Cl#b?&+^8
z)+Gv&im>JQrNA-QDnYf>r?COBGzYYgEBY}G`Z4k;mGpb1=L@a2qU!u~c)R@Ly#Ug;
zWe_>XYHiqI<QEI-i#U;}he5dI4e>;VoODJh=4n|~9xJ@wHgPyi>Ef1OdY&##)#D%<
z>Pd8-6QToZJ)L}SX*Q;;A!4qR=C-ZiU>NXFN9kGLKWW__H?(yZ=$E+jI~S<OA7oQ)
zLY^%5Chg2jEudem_`cZ;cj}mkIe;Mxy^bWmTPUa2a>#>!(bd>L=xRc?W+mwLV+yDq
z%muoETGi?TF$I?_7J605Q=+y)$)LCa+J@)=5kRU*vN)Iq9LN(z&Sm|NxvH4@Hdlkd
z8aOq;II-0IjiMl|MIELzNcg%qi9(OG@C*n04Ro=24q2KIrX$*#RxXq074){Hbg0|7
z?!Ux`^$;EZF;`0r7GXqH=k2HdZ}Z>gYAd2B-gRIyj&%@Cuv^i%6Genv|IUQwZ7?fD
zrAl;LgU1Ql)jV4~=i6M#Wl5g<G?$t~ntZyzRGzWzKY><JCCOb*S40Fo)}DO$8LgTx
zg491Z^jN}9RDm&2Pn_aOEef)n#r;qRE%2H=^(0{GCP>0Ey=2hOC}Rqxm7E#Hsz?m^
zXl(CDJ5eknW{V9=qjmi7(>iWxA<&kaG4S6(*5RCrh<EzMu>3um<mShi8W|6??c=aW
zuo#3n1z@&foabazXwFvGd1lekS)*33FD=ga-r8n6rELg6aN<h;O^F$z)qbuCY$B9v
zA~mb;(^Qm_RdG2&-VX$gE~voT$zADulVqG@RbhRjLe5>#ZuRLV*1@})Mz-#C;(URa
zW332s3>LNsRHleZjE#hJ(*e9I-miyi=;WFy?Sm#gjOjF=U1(1$f)|R!pf&9QI}S<~
z__g{+D3P1V;C-IFefkASS-)YfaZ$I)EGG%t!#vf3vtM7<YJP$`fs^lv#CJ)XuWaCK
zyaYh#y0wc2p__?t&1Go6GFg_`v6W{pLKwps9fA?m*r@L*=K!TF%%EQCI{VwMOj=0P
z18>F^`TW=gf+T{quAovDSJKZr2Fk%t?E}8{Xo4mK{B11$tu9{l7wa!$R0YXvizKD|
zr9SS28YP2mB71&ai(~CFk(ygG<O^`375yt}il*m3B6SY2mZ~`JdHiS6`Fbne<6MOX
zt8CF(i>K0b&VrBg|F)iXBtzh*_>`fSKm#N}dlv<CL41;~YN9b+o<W%eL9U;7DvuKk
zs7rxXs>Fn~7hAeQ!cvO&yMPb9p~!^ssS=`4J>gN;J{UkY<$GdQcD{8Io^QvcGqmb3
zx5{ajhT-!~12#fsmJvHn8U@EA_F8GWJw<j(FKGoPh49ubkT!Pl1R95~ewr0<$9E!z
zmQtH6%b<>TlpMagk*Q{ba)WSq_f()i{~k|DkA<(}LTZG{0q9MGPPU=*VHdogaNA$3
z<*gHH)KqF}x_!$}N#_$`@fI~bu|f8SUus^0GD91bexMNpLv@H4gRn=eZVWCwsAs>1
zvi8qrAhLlKhk;B1Of5*@XG2o$gj^4m8hPm*SwntI?wV+_En_BdaX&_%%Pg6GmKA%4
zfX2XE|9p7&{@9|lG_YF=DHJZ=Rh$`JgB5s>cLDTS87t2p+R_Gq3{a1FOQ%!xALF?h
zYy`bY6qv#G7mO7ISl4i}7q(?3YzPJAHP-^%y;u27b?|G4EXA-O0^r6-w*kf=j!XNK
zwX>XdZ$F$B?OYi}=GVJ>pev;FZ*?J$nJw8s$n9nGk9(}~_&=xT6I`~C`;GAVn<Ot*
z9pG|&jxKuH0!ytg+;Z%n%-kBoK<+@z=etLvP2WR}tv90fsC_07TM-}%Y%}*kro!x2
z=`G>Wf3B`z2kH2K?GQLM<43`m36rAS^5SR2DV7Zv_h<J|8msIiT=`DccEXWtBS3xu
zum5Dw({<^UyiNP%2s^SilH>ZBw4EL-diBK60>3vWJS+<N=!ccSkD;96fDVP$hy@(L
zU<4oX1AC~2e>dIxhyy~LAA$Ux7Ms4n*UG6{*C!=>v9DW7Z!QM{)#hpRDnX5exkxbc
zAcDDSZL1r7X@E!^W@FVe@Ostz)$na}zMfq6@x*77TsHeXM@%Eg=1ZkZ;NX1^kmu9-
zcOnPUW_x0WSw>$dr)6=bX}D<MgBf5ebFne!#?001&zj^Qxs=t<31%06=|-A#pgF;O
zw3&ISr@$W)n%UqcEyO8%D{`bbNn1T3S5qfBF{3H5y0CHoH%!g?ZWZJc24JOQMVQXf
z5CM`w8K|{rBrx@2=v<p{=kUDhm$(7e4`oR##&B3}#^Fl_gAWH0ZnD<~`nLGb*Wk~O
zj^*)++Si$8dFf4spwVYJsxvFuV1*U70fGlp-EC<Q^b|>=llBSZk%}TSd|n4@Asvu%
z2CPqxSxqh795k}M9aDwAQrE=p!!4#OkNW2Gj2Qg(nym*BLMOulOmPQ8gBS1EhDrFm
z5wsmC&&EYF80rN7KSKHdxFg>#tfx&&uv>SpFXZawdgN+J`AeD92ptl9k6zRGtuPou
zZZK3<OpxT8&3gMj|8k5hhL?P@EL)ZSVPnKqP0ZDE0I>yQ-M@!x2x1Gtx(x~1U&W1e
z;G^oX6W^Da@wC5|{0)cZ{SC_@;yIflo)Add%?0ZKBo4lYuIzEpqD|v};FGd?t2q*w
z<j-MJlTK34lNpjF;g%Vk-p+J(0pBWVjU_BAs2vykc}<|g9;~6ZoWxOOIT7reCHb{>
zULgT*d$`yyc{ttOZb}ws9R1w4FVaVlnhIvRXwGaN*#L>-G>Bb2Q!~ysG`x&p`bJ4O
zmwxZsv`HIfj@K9H%WVtlw3Ul}70KGuA#w0~+A;dI6!Re}12$SoUBQ&q^L~_TCFMka
zq22BBV)eAhb|(x`n&iZNZxLp+^YRhO<V$>se6;|yyO?~&1{1J#zti8o%UPWlBS7$v
zz!e99K>gEghL$%Js15b&pG@*{<&|_LBbRBA7iZxm^FC!W-WWyI`KPW7vL(K>h`#;(
zdetFAXmV?*$lM@Uoew)9k816ZVAgL(r;i8GV%&OA{Rr)>?fttIhUCvoXSe*$RNec~
zJp3Qe#NTnY7kV%6Z@E-&!hd=7`S;)j@!J4jU3ES8zS#kPG~%g#e5~AihZa!KQn8;u
zv3i+Db}JT$i_4YreNJcdf7RlC8S&gl@#EP#le;i)`GLOgz1(NsZU_1KSVw-{=VbT3
z`_#cfcpmS6&8&NOMD6zVP;A~8pB_F=KTm?zWEYHT;b?1>K$Ty^bo;W~AmH-^>TLUx
zMBX}LN5YRKVYvP;@<em>e~>52D+~~H1qt=<DaCQ5t=>u;h6zT(ZH56Y<);3_pKStr
zvNA+%1l;&q^kgnX0Qmp(-0*+SJ~=yE+t{@8u>xY){@>6O^8Bvfs4B|lKj;Y(L--58
z{^wH(hk+l}wATtJ-w9FU<%Fs8VIQdU*SzdM>Zur05$0#$ndSd~^+bx<OXx;*1Bz&A
z7;5<w2lNTrZwUxOl>!<r<n!4)y#1Ma!k?qKJeul;6%Qy$j{`;lk9z71t>Xw7(d|g*
zFaB>H7KZ6Kl&@EyDEl_+OI-iFQNB(%#<f6SAa0bsb5}Gv$=HR+ZOA<hKM-j_30(vK
zc0XSF4lFSS2vKANG~VC)4Po>mp!M8)p@o>sL$DSw=WR7e+g0Q^x=a-M_^!QtBe+~b
zFT&;{N!tqDjNE_Z!(u0@a{HZJV(_KX(eYIo&l_4O<EdAvau<C!z5bbxFCxYbidvus
zD60EKtr0sEJes1jnS(95i|L4Z$~uz)j-^xGHv@DKUX)!84EA?Ga8q8($T4hV7Ddrx
z<xYr5#GDZLvOm_id3oFr&y00|S@6Q<e<>D9oc!d8`B`SbHt-neF-_@7rNX>V3yBTp
z;mym*yDprHmVW;WjrD{l9}AAOrxdL-8(zU_!nR@=884Wj?`#|njVi-^OfHCzygg*q
z#HB)^$QCiBorzEvRduCdry7M1V1nnI^_4DKw!JR{(`ozrh&Md<auS6<NJ)kQ0pG{<
ze4CV4b<5+cMcU&c_NO!zKm^VG5uKsm6y}eV4;NHzic$LK^DTy|Z8e-}T(s}sXF7td
zVX)0Uq?-$@9}J3)eEvfD1GWRn9MQZ`kwf`ta<~)z-Yj^K9OwDg**Fx6NvydU<jNN#
zz3$9QVft4kd2wRXvn&s4ia(>@NfV9xkyqp^G3QFgxd9t7t9(DRLLBxYfP;kk34S?e
z=pO<_<&%b$7NU6q3K*lvC|Ma!9a@%>7DTPk>dAfO8M>hNO(R1U=`75`)e4Sq86*=T
zC888u`3~+VJAne|@4$^OE_cnc;8w&6g7}{r*oC=IAC5W0Bo}n$3(UAkW0X`mgXc*)
zYO$A{O2LXu+9Y!MV7fJwn>0%CaCopJWz~^=6(*q_fk98~-3L)2h_)sbXdlxy;gk{_
z+D1sjeo2_v1ol#z$acVs(!6KRn5Emx7|(LK`czDW8~j}rP4ctuL)(hTk*&dq+h7_#
z^W&|ep;<;ECfNIgC?Ig(7hs_^%D_pbx!EU9#oD+Z9u%cO_P}gTeX_^Y9`Ls0Xy<+?
zXNoV>(WCg<`2l2iTQI>jlmGR;ABi8<5}5TY&bhyehJm+d?UzU<OqRx594)Bw<q+Ui
zUpwq`mU~XheK+bY=&Q}h@mZ8*wNr^Q#~w^j&rHsT{`fL2x>0Xes4;7o8)Q~^D{U9R
zj1ZU}Q6L@}5g-)G&M}Js%-TlavNTtf11|5%No~8BXtqc&f79~U(wc{<j5pt<REIx*
zYvqqHJZ=elLRtSti;2W&bjXPhC-^bKY?5%QIa>Sd-u-henOHq_DvZ_kdw#4CK!^bo
zix_s}&j=+QO@=YPakCs^sWhaeYr6FAV<0ODouQcp5yClGq+4cV3tv9Sf)n^c+aqd6
zSWOwLH>i{TwfRhU^5asl@a`X*_2mX%EguEet&vHg4{l7d2_Yt8wDc^ZeL|g&o7Hj0
z+z@Q@F0LQyG8uK&QQ`<0t6^P_C<f;h>iQZ)H6(V8xw+pXi<e~0Cbnzh2KO}C5E?RB
zr;01@HGJ37GD3Z&mwUXl>PUXu4N;z-?`h31=c}u4^R#-<^1f1f&t}9orq{@3_%(k`
z*NxU!zEGWAJOu9JW;I{!a>jT@oZS*QQvbF@h{bs1-VEUVnayK($$R2MKvK`Nf79Uz
zWoU+okp5x!`Xhy9{T|q=5)XuAV@vF?%cQmI&|Ma7&Q63tQ-DF#(;U)pphWw(sLCXh
z-;Y~6FcZUzQTUlu1q<g~QS;)xkbF-%IAHOD@R@kNQYXXy;yH<-Hc5y>CTJ`q1oAv(
zz9lWb;sinFyIqonvEjC{;ch0>P`COYR}M9#`~%ks7k6!tZvmzF@>G;=nP)wG?OKSB
z)UJ0X11sEu9H0sEj5q;d87t9-B`_^|T!Oa1aIRj<A~sPgyyj<ydsYtWeDb2_S#Bl;
zZl&n&_*g3heD%B!?G(I2Z&pyn;Glr^EbRU-zl;|GnQM|}O$dMip8nt-hkUoqyEx~|
zSr;(K_k%M;&B=~k2%k3jU>NIEtuQsGke2Xn!qM0O6a2&Z_?rdXGfXz|P}N>I<+9hY
z^|MeJxfLpzC(=%_HlvuN4!?C8MmzMD4P?gr+|_0>aYnkvAxnbZ&vJ@k9BSK~m3y`L
zcurf+(J^3|6I59!RyxsLeRC#lPxINIx~PagOX}Pzj_@4HngdI8X6fsu-*t^O3m}P-
zl&|-k$LH+8$7}pNIm~`}=MRbysYNuc{W?zA+$5)m`<ll0d9Qu=(j1$A^=bOdiMaVH
z6fUJfNp~dV3Cpu(5YUlLF`&2y=55b_${C<*`+k|k4bM*LlXP@0TfV6*CutwU6urW7
ztUP@tDS!4g?l<+XJ5`Y11C!18Jyl3`!8cOH^Jp07)!3b(k)}cXIZ5}SufxyD_4raB
zu~#Ct@+o!#lC(Uzp`O1Sz2=-ENmn-{t1h|0pHXeDa%S^7(fnDUI_dGX{}NHc&sTrt
z)8V>Q^)>Fg_Ry{Mh2i=Yus;%JQAzJ`ACPYl3QI8fL}we+ju1Sv6pz88$u4G}?N1Fi
zxv@mhOh`JEpg)yK*5408g_!uc&R_M~87<GIJ$z_-)$*3BhM$2Tw5k<K4Od{d`_%n=
z0nE)_ZzE8527K8QjcDbKwnbqd3IF49X}?HK?@<FJfj($-A5oC(ip<Or{Vl;FRa3{G
z`^YL#H#C(WTCy0IG%+)&J?Ga6sPKX}2N&<X=qv%IvHJ~5<oOApye^ai8nL(K(k;hv
zV=m2k#h0y&N-|Yi6Zhu#L?PBpf)+>j^F{mj-(Q|JwyURbR6M86m0v&oLT8;~|HM^c
zZpnqz-xJL)(!kTWDeMU<P)rp?E8Ja5tLkE`sJUXyk4r{6Mw*AWelHb2+9<r;OceB{
zFWzN%;J9Q--@)?xl;CdH@HvL=vil62eQAY+?Z;5`A)<qG3+m+y_FxQ~FVT*dp+{Ma
z$9TP{-^(Pa%AM$NiucGe%Bs%&TkREFleZ?%f{D1ge8p8-B}T~t2jPJdwBOLziQXYN
zV-S)hK^xZT{W^h>D9aPa@^Q~uax2bsaf|TRex=IMm~Fa}>``F-x5}~2xr_61N$27{
z@79@KzwSnco--IHVP?+#>6rgCEcsVsH<n^!#L;A~w6uavt2KlgeWSWk+H^%I7o_5%
zY!nAS{{)oXwuP<(j&${fB$p*EWE|Fu4oDq*B&_sOpC01nIFR$t6MvRmvpyRcR}&i<
zUb)dYsXh5tdX!>A>wz1UK6uClm>J+v9+<x1Pw7Ik6W8r*fwOY(^3;J^H%Ir^p>$jT
zIwq8boL}-zv0~c7-ebJroEx_!VWF+fWB$QRDpfV2X~)b4S&H3|bY=OC_J(Kv8CiP6
zB#XGeo?8HE&#%XyphO#9QJqg>HoSoAs_}XsLy+^G3{q;TL_6`*WJZvV$;?Ll0`@b{
zrY$<QjRw8_hD*_uOrsak!H#_u4&$j?`^cC|YKLJ-&7A~s{>+5H6uR<k3IwAmOu%hp
zCr;X^pa<t1(r#S}vC$;r$y9Dy)*rjv=i)9>H%PnV@E}jT$Jo;`saWI6StfP!-@7`m
zx~esgdVTKCTyg;^?qm#0Szg$2YXS}!#wlDuk!-oH7Nn_h4pY`za}O*oCo0af!3;dL
zI86Q96mcanPxma1YWyzq(ar9kMOqmRF8S&<;0>#Th#A;TFMcysnqcf)_99@SU%hA6
zWz`NBdJ$X4s<q=CzdeYzvn{IKPH+?G7G2;{psHZG2W2a24?s#IA+7GE#>moksKYf<
j{fR~_X%xZp^g=lg1AOe!CNNOrDb+x$iOx22c(48+@2ftL

diff --git a/mypy.ini b/mypy.ini
deleted file mode 100644
index 574c5aed..00000000
--- a/mypy.ini
+++ /dev/null
@@ -1,3 +0,0 @@
-[mypy]
-python_version = 3.7
-namespace_packages = True
diff --git a/noxfile.py b/noxfile.py
deleted file mode 100644
index 54abbaab..00000000
--- a/noxfile.py
+++ /dev/null
@@ -1,428 +0,0 @@
-# -*- coding: utf-8 -*-
-#
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Generated by synthtool. DO NOT EDIT!
-
-from __future__ import absolute_import
-
-import os
-import pathlib
-import re
-import shutil
-from typing import Dict, List
-import warnings
-
-import nox
-
-FLAKE8_VERSION = "flake8==6.1.0"
-BLACK_VERSION = "black[jupyter]==23.7.0"
-ISORT_VERSION = "isort==5.11.0"
-LINT_PATHS = ["docs", "google", "tests", "noxfile.py", "setup.py"]
-
-DEFAULT_PYTHON_VERSION = "3.8"
-
-UNIT_TEST_PYTHON_VERSIONS: List[str] = ["3.7", "3.8", "3.9", "3.10", "3.11"]
-UNIT_TEST_STANDARD_DEPENDENCIES = [
-    "mock",
-    "asyncmock",
-    "pytest",
-    "pytest-cov",
-    "pytest-asyncio",
-]
-UNIT_TEST_EXTERNAL_DEPENDENCIES: List[str] = []
-UNIT_TEST_LOCAL_DEPENDENCIES: List[str] = []
-UNIT_TEST_DEPENDENCIES: List[str] = []
-UNIT_TEST_EXTRAS: List[str] = []
-UNIT_TEST_EXTRAS_BY_PYTHON: Dict[str, List[str]] = {}
-
-SYSTEM_TEST_PYTHON_VERSIONS: List[str] = ["3.8"]
-SYSTEM_TEST_STANDARD_DEPENDENCIES: List[str] = [
-    "mock",
-    "pytest",
-    "google-cloud-testutils",
-]
-SYSTEM_TEST_EXTERNAL_DEPENDENCIES: List[str] = []
-SYSTEM_TEST_LOCAL_DEPENDENCIES: List[str] = []
-SYSTEM_TEST_DEPENDENCIES: List[str] = []
-SYSTEM_TEST_EXTRAS: List[str] = []
-SYSTEM_TEST_EXTRAS_BY_PYTHON: Dict[str, List[str]] = {}
-
-CURRENT_DIRECTORY = pathlib.Path(__file__).parent.absolute()
-
-# 'docfx' is excluded since it only needs to run in 'docs-presubmit'
-nox.options.sessions = [
-    "unit",
-    "system",
-    "cover",
-    "lint",
-    "lint_setup_py",
-    "blacken",
-    "docs",
-    "format",
-]
-
-# Error if a python version is missing
-nox.options.error_on_missing_interpreters = True
-
-
-@nox.session(python=DEFAULT_PYTHON_VERSION)
-def lint(session):
-    """Run linters.
-
-    Returns a failure if the linters find linting errors or sufficiently
-    serious code quality issues.
-    """
-    session.install(FLAKE8_VERSION, BLACK_VERSION)
-    session.run(
-        "black",
-        "--check",
-        *LINT_PATHS,
-    )
-    session.run("flake8", "google", "tests")
-
-
-@nox.session(python=DEFAULT_PYTHON_VERSION)
-def blacken(session):
-    """Run black. Format code to uniform standard."""
-    session.install(BLACK_VERSION)
-    session.run(
-        "black",
-        *LINT_PATHS,
-    )
-
-
-@nox.session(python=DEFAULT_PYTHON_VERSION)
-def format(session):
-    """
-    Run isort to sort imports. Then run black
-    to format code to uniform standard.
-    """
-    session.install(BLACK_VERSION, ISORT_VERSION)
-    # Use the --fss option to sort imports using strict alphabetical order.
-    # See https://pycqa.github.io/isort/docs/configuration/options.html#force-sort-within-sections
-    session.run(
-        "isort",
-        "--fss",
-        *LINT_PATHS,
-    )
-    session.run(
-        "black",
-        *LINT_PATHS,
-    )
-
-
-@nox.session(python=DEFAULT_PYTHON_VERSION)
-def lint_setup_py(session):
-    """Verify that setup.py is valid (including RST check)."""
-    session.install("docutils", "pygments")
-    session.run("python", "setup.py", "check", "--restructuredtext", "--strict")
-
-
-def install_unittest_dependencies(session, *constraints):
-    standard_deps = UNIT_TEST_STANDARD_DEPENDENCIES + UNIT_TEST_DEPENDENCIES
-    session.install(*standard_deps, *constraints)
-
-    if UNIT_TEST_EXTERNAL_DEPENDENCIES:
-        warnings.warn(
-            "'unit_test_external_dependencies' is deprecated. Instead, please "
-            "use 'unit_test_dependencies' or 'unit_test_local_dependencies'.",
-            DeprecationWarning,
-        )
-        session.install(*UNIT_TEST_EXTERNAL_DEPENDENCIES, *constraints)
-
-    if UNIT_TEST_LOCAL_DEPENDENCIES:
-        session.install(*UNIT_TEST_LOCAL_DEPENDENCIES, *constraints)
-
-    if UNIT_TEST_EXTRAS_BY_PYTHON:
-        extras = UNIT_TEST_EXTRAS_BY_PYTHON.get(session.python, [])
-    elif UNIT_TEST_EXTRAS:
-        extras = UNIT_TEST_EXTRAS
-    else:
-        extras = []
-
-    if extras:
-        session.install("-e", f".[{','.join(extras)}]", *constraints)
-    else:
-        session.install("-e", ".", *constraints)
-
-
-def default(session):
-    # Install all test dependencies, then install this package in-place.
-
-    constraints_path = str(
-        CURRENT_DIRECTORY / "testing" / f"constraints-{session.python}.txt"
-    )
-    install_unittest_dependencies(session, "-c", constraints_path)
-
-    # Run py.test against the unit tests.
-    session.run(
-        "py.test",
-        "--quiet",
-        f"--junitxml=unit_{session.python}_sponge_log.xml",
-        "--cov=google",
-        "--cov=tests/unit",
-        "--cov-append",
-        "--cov-config=.coveragerc",
-        "--cov-report=",
-        "--cov-fail-under=0",
-        os.path.join("tests", "unit"),
-        *session.posargs,
-    )
-
-
-@nox.session(python=UNIT_TEST_PYTHON_VERSIONS)
-def unit(session):
-    """Run the unit test suite."""
-    default(session)
-
-
-def install_systemtest_dependencies(session, *constraints):
-    # Use pre-release gRPC for system tests.
-    # Exclude version 1.52.0rc1 which has a known issue.
-    # See https://github.com/grpc/grpc/issues/32163
-    session.install("--pre", "grpcio!=1.52.0rc1")
-
-    session.install(*SYSTEM_TEST_STANDARD_DEPENDENCIES, *constraints)
-
-    if SYSTEM_TEST_EXTERNAL_DEPENDENCIES:
-        session.install(*SYSTEM_TEST_EXTERNAL_DEPENDENCIES, *constraints)
-
-    if SYSTEM_TEST_LOCAL_DEPENDENCIES:
-        session.install("-e", *SYSTEM_TEST_LOCAL_DEPENDENCIES, *constraints)
-
-    if SYSTEM_TEST_DEPENDENCIES:
-        session.install("-e", *SYSTEM_TEST_DEPENDENCIES, *constraints)
-
-    if SYSTEM_TEST_EXTRAS_BY_PYTHON:
-        extras = SYSTEM_TEST_EXTRAS_BY_PYTHON.get(session.python, [])
-    elif SYSTEM_TEST_EXTRAS:
-        extras = SYSTEM_TEST_EXTRAS
-    else:
-        extras = []
-
-    if extras:
-        session.install("-e", f".[{','.join(extras)}]", *constraints)
-    else:
-        session.install("-e", ".", *constraints)
-
-
-@nox.session(python=SYSTEM_TEST_PYTHON_VERSIONS)
-def system(session):
-    """Run the system test suite."""
-    constraints_path = str(
-        CURRENT_DIRECTORY / "testing" / f"constraints-{session.python}.txt"
-    )
-    system_test_path = os.path.join("tests", "system.py")
-    system_test_folder_path = os.path.join("tests", "system")
-
-    # Check the value of `RUN_SYSTEM_TESTS` env var. It defaults to true.
-    if os.environ.get("RUN_SYSTEM_TESTS", "true") == "false":
-        session.skip("RUN_SYSTEM_TESTS is set to false, skipping")
-    # Install pyopenssl for mTLS testing.
-    if os.environ.get("GOOGLE_API_USE_CLIENT_CERTIFICATE", "false") == "true":
-        session.install("pyopenssl")
-
-    system_test_exists = os.path.exists(system_test_path)
-    system_test_folder_exists = os.path.exists(system_test_folder_path)
-    # Sanity check: only run tests if found.
-    if not system_test_exists and not system_test_folder_exists:
-        session.skip("System tests were not found")
-
-    install_systemtest_dependencies(session, "-c", constraints_path)
-
-    # Run py.test against the system tests.
-    if system_test_exists:
-        session.run(
-            "py.test",
-            "--quiet",
-            f"--junitxml=system_{session.python}_sponge_log.xml",
-            system_test_path,
-            *session.posargs,
-        )
-    if system_test_folder_exists:
-        session.run(
-            "py.test",
-            "--quiet",
-            f"--junitxml=system_{session.python}_sponge_log.xml",
-            system_test_folder_path,
-            *session.posargs,
-        )
-
-
-@nox.session(python=DEFAULT_PYTHON_VERSION)
-def cover(session):
-    """Run the final coverage report.
-
-    This outputs the coverage report aggregating coverage from the unit
-    test runs (not system test runs), and then erases coverage data.
-    """
-    session.install("coverage", "pytest-cov")
-    session.run("coverage", "report", "--show-missing", "--fail-under=100")
-
-    session.run("coverage", "erase")
-
-
-@nox.session(python="3.9")
-def docs(session):
-    """Build the docs for this library."""
-
-    session.install("-e", ".")
-    session.install(
-        "sphinx==4.0.1",
-        "alabaster",
-        "recommonmark",
-    )
-
-    shutil.rmtree(os.path.join("docs", "_build"), ignore_errors=True)
-    session.run(
-        "sphinx-build",
-        "-W",  # warnings as errors
-        "-T",  # show full traceback on exception
-        "-N",  # no colors
-        "-b",
-        "html",
-        "-d",
-        os.path.join("docs", "_build", "doctrees", ""),
-        os.path.join("docs", ""),
-        os.path.join("docs", "_build", "html", ""),
-    )
-
-
-@nox.session(python="3.9")
-def docfx(session):
-    """Build the docfx yaml files for this library."""
-
-    session.install("-e", ".")
-    session.install(
-        "gcp-sphinx-docfx-yaml",
-        "alabaster",
-        "recommonmark",
-    )
-
-    shutil.rmtree(os.path.join("docs", "_build"), ignore_errors=True)
-    session.run(
-        "sphinx-build",
-        "-T",  # show full traceback on exception
-        "-N",  # no colors
-        "-D",
-        (
-            "extensions=sphinx.ext.autodoc,"
-            "sphinx.ext.autosummary,"
-            "docfx_yaml.extension,"
-            "sphinx.ext.intersphinx,"
-            "sphinx.ext.coverage,"
-            "sphinx.ext.napoleon,"
-            "sphinx.ext.todo,"
-            "sphinx.ext.viewcode,"
-            "recommonmark"
-        ),
-        "-b",
-        "html",
-        "-d",
-        os.path.join("docs", "_build", "doctrees", ""),
-        os.path.join("docs", ""),
-        os.path.join("docs", "_build", "html", ""),
-    )
-
-
-@nox.session(python=SYSTEM_TEST_PYTHON_VERSIONS)
-def prerelease_deps(session):
-    """Run all tests with prerelease versions of dependencies installed."""
-
-    # Install all dependencies
-    session.install("-e", ".[all, tests, tracing]")
-    unit_deps_all = UNIT_TEST_STANDARD_DEPENDENCIES + UNIT_TEST_EXTERNAL_DEPENDENCIES
-    session.install(*unit_deps_all)
-    system_deps_all = (
-        SYSTEM_TEST_STANDARD_DEPENDENCIES + SYSTEM_TEST_EXTERNAL_DEPENDENCIES
-    )
-    session.install(*system_deps_all)
-
-    # Because we test minimum dependency versions on the minimum Python
-    # version, the first version we test with in the unit tests sessions has a
-    # constraints file containing all dependencies and extras.
-    with open(
-        CURRENT_DIRECTORY
-        / "testing"
-        / f"constraints-{UNIT_TEST_PYTHON_VERSIONS[0]}.txt",
-        encoding="utf-8",
-    ) as constraints_file:
-        constraints_text = constraints_file.read()
-
-    # Ignore leading whitespace and comment lines.
-    constraints_deps = [
-        match.group(1)
-        for match in re.finditer(
-            r"^\s*(\S+)(?===\S+)", constraints_text, flags=re.MULTILINE
-        )
-    ]
-
-    session.install(*constraints_deps)
-
-    prerel_deps = [
-        "protobuf",
-        # dependency of grpc
-        "six",
-        "googleapis-common-protos",
-        # Exclude version 1.52.0rc1 which has a known issue. See https://github.com/grpc/grpc/issues/32163
-        "grpcio!=1.52.0rc1",
-        "grpcio-status",
-        "google-api-core",
-        "google-auth",
-        "proto-plus",
-        "google-cloud-testutils",
-        # dependencies of google-cloud-testutils"
-        "click",
-    ]
-
-    for dep in prerel_deps:
-        session.install("--pre", "--no-deps", "--upgrade", dep)
-
-    # Remaining dependencies
-    other_deps = [
-        "requests",
-    ]
-    session.install(*other_deps)
-
-    # Print out prerelease package versions
-    session.run(
-        "python", "-c", "import google.protobuf; print(google.protobuf.__version__)"
-    )
-    session.run("python", "-c", "import grpc; print(grpc.__version__)")
-    session.run("python", "-c", "import google.auth; print(google.auth.__version__)")
-
-    session.run("py.test", "tests/unit")
-
-    system_test_path = os.path.join("tests", "system.py")
-    system_test_folder_path = os.path.join("tests", "system")
-
-    # Only run system tests if found.
-    if os.path.exists(system_test_path):
-        session.run(
-            "py.test",
-            "--verbose",
-            f"--junitxml=system_{session.python}_sponge_log.xml",
-            system_test_path,
-            *session.posargs,
-        )
-    if os.path.exists(system_test_folder_path):
-        session.run(
-            "py.test",
-            "--verbose",
-            f"--junitxml=system_{session.python}_sponge_log.xml",
-            system_test_folder_path,
-            *session.posargs,
-        )
diff --git a/owlbot.py b/owlbot.py
deleted file mode 100644
index 01ed8977..00000000
--- a/owlbot.py
+++ /dev/null
@@ -1,71 +0,0 @@
-# Copyright 2022 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-import json
-from pathlib import Path
-import shutil
-
-import synthtool as s
-import synthtool.gcp as gcp
-from synthtool.languages import python
-
-# ----------------------------------------------------------------------------
-# Copy the generated client from the owl-bot staging directory
-# ----------------------------------------------------------------------------
-
-clean_up_generated_samples = True
-
-# Load the default version defined in .repo-metadata.json.
-default_version = json.load(open(".repo-metadata.json", "rt")).get(
-    "default_version"
-)
-
-for library in s.get_staging_dirs(default_version):
-    if clean_up_generated_samples:
-        shutil.rmtree("samples/generated_samples", ignore_errors=True)
-        clean_up_generated_samples = False
-
-    # Escape single '_' which RST treats as target names
-    s.replace(library / "google/**/resources.py", '''"(.*?)((SIGN)|(DECRYPT)|(HMAC))_"''', '''"\g<1>\g<2>\_"''')
-
-    s.replace(library / "google/**/*client.py",
-        r"(\s+)\*\*JSON Example\*\*\s+::",
-        "\n\g<1>**JSON Example**::\n",
-    )
-
-    # Rename `format_` to `format` to avoid breaking change
-    s.replace(library / "**/*.py",
-        "format_",
-        "format"
-    )
-
-    s.move([library], excludes=["**/gapic_version.py"])
-s.remove_staging_dirs()
-
-# ----------------------------------------------------------------------------
-# Add templated files
-# ----------------------------------------------------------------------------
-
-templated_files = gcp.CommonTemplates().py_library(
-    cov_level=100,
-    microgenerator=True,
-    versions=gcp.common.detect_versions(path="./google", default_first=True),
-)
-s.move(templated_files, excludes=[".coveragerc", ".github/release-please.yml"])
-
-python.py_samples(skip_readmes=True)
-
-# run format session for all directories which have a noxfile
-for noxfile in Path(".").glob("**/noxfile.py"):
-    s.shell.run(["nox", "-s", "format"], cwd=noxfile.parent, hide_output=False)
diff --git a/release-please-config.json b/release-please-config.json
deleted file mode 100644
index b72bbb94..00000000
--- a/release-please-config.json
+++ /dev/null
@@ -1,24 +0,0 @@
-{
-  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
-  "packages": {
-    ".": {
-      "release-type": "python",
-      "extra-files": [
-        "google/cloud/kms_v1/gapic_version.py",
-        "google/cloud/kms/gapic_version.py",
-        {
-          "type": "json",
-          "path": "samples/generated_samples/snippet_metadata_google.cloud.kms.v1.json",
-          "jsonpath": "$.clientLibrary.version"
-        }
-      ]
-    }
-  },
-  "release-type": "python",
-  "plugins": [
-    {
-      "type": "sentence-case"
-    }
-  ],
-  "initial-version": "0.1.0"
-}
diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index 39b2a0ec..00000000
--- a/renovate.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-  "extends": [
-    "config:base",
-    "group:all",
-    ":preserveSemverRanges",
-    ":disableDependencyDashboard"
-  ],
-  "ignorePaths": [".pre-commit-config.yaml", ".kokoro/requirements.txt", "setup.py"],
-  "pip_requirements": {
-    "fileMatch": ["requirements-test.txt", "samples/[\\S/]*constraints.txt", "samples/[\\S/]*constraints-test.txt"]
-  }
-}
diff --git a/samples/AUTHORING_GUIDE.md b/samples/AUTHORING_GUIDE.md
deleted file mode 100644
index 8249522f..00000000
--- a/samples/AUTHORING_GUIDE.md
+++ /dev/null
@@ -1 +0,0 @@
-See https://github.com/GoogleCloudPlatform/python-docs-samples/blob/main/AUTHORING_GUIDE.md
\ No newline at end of file
diff --git a/samples/CONTRIBUTING.md b/samples/CONTRIBUTING.md
deleted file mode 100644
index f5fe2e6b..00000000
--- a/samples/CONTRIBUTING.md
+++ /dev/null
@@ -1 +0,0 @@
-See https://github.com/GoogleCloudPlatform/python-docs-samples/blob/main/CONTRIBUTING.md
\ No newline at end of file
diff --git a/samples/attestations/README.rst b/samples/attestations/README.rst
deleted file mode 100644
index 5e5a230d..00000000
--- a/samples/attestations/README.rst
+++ /dev/null
@@ -1,4 +0,0 @@
-Samples migrated
-================
-
-New location: https://github.com/GoogleCloudPlatform/python-docs-samples/tree/main/kms/attestations
\ No newline at end of file
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_async.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_async.py
deleted file mode 100644
index 384eb570..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateEkmConnection
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_CreateEkmConnection_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_create_ekm_connection():
-    # Create a client
-    client = kms_v1.EkmServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateEkmConnectionRequest(
-        parent="parent_value",
-        ekm_connection_id="ekm_connection_id_value",
-    )
-
-    # Make the request
-    response = await client.create_ekm_connection(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_CreateEkmConnection_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_sync.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_sync.py
deleted file mode 100644
index f6ce047d..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_create_ekm_connection_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateEkmConnection
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_CreateEkmConnection_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_create_ekm_connection():
-    # Create a client
-    client = kms_v1.EkmServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateEkmConnectionRequest(
-        parent="parent_value",
-        ekm_connection_id="ekm_connection_id_value",
-    )
-
-    # Make the request
-    response = client.create_ekm_connection(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_CreateEkmConnection_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_async.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_async.py
deleted file mode 100644
index e9a04c7a..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetEkmConfig
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_GetEkmConfig_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_get_ekm_config():
-    # Create a client
-    client = kms_v1.EkmServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetEkmConfigRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.get_ekm_config(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_GetEkmConfig_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_sync.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_sync.py
deleted file mode 100644
index ce4be3c5..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_config_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetEkmConfig
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_GetEkmConfig_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_get_ekm_config():
-    # Create a client
-    client = kms_v1.EkmServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetEkmConfigRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.get_ekm_config(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_GetEkmConfig_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_async.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_async.py
deleted file mode 100644
index 23d5b7ee..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetEkmConnection
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_GetEkmConnection_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_get_ekm_connection():
-    # Create a client
-    client = kms_v1.EkmServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetEkmConnectionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.get_ekm_connection(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_GetEkmConnection_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_sync.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_sync.py
deleted file mode 100644
index 4856b6ca..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_get_ekm_connection_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetEkmConnection
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_GetEkmConnection_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_get_ekm_connection():
-    # Create a client
-    client = kms_v1.EkmServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetEkmConnectionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.get_ekm_connection(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_GetEkmConnection_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_async.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_async.py
deleted file mode 100644
index 1f3de383..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListEkmConnections
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_ListEkmConnections_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_list_ekm_connections():
-    # Create a client
-    client = kms_v1.EkmServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListEkmConnectionsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_ekm_connections(request=request)
-
-    # Handle the response
-    async for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_EkmService_ListEkmConnections_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_sync.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_sync.py
deleted file mode 100644
index 745e8eb1..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_list_ekm_connections_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListEkmConnections
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_ListEkmConnections_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_list_ekm_connections():
-    # Create a client
-    client = kms_v1.EkmServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListEkmConnectionsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_ekm_connections(request=request)
-
-    # Handle the response
-    for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_EkmService_ListEkmConnections_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_async.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_async.py
deleted file mode 100644
index 9064b040..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_async.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateEkmConfig
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_UpdateEkmConfig_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_update_ekm_config():
-    # Create a client
-    client = kms_v1.EkmServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateEkmConfigRequest(
-    )
-
-    # Make the request
-    response = await client.update_ekm_config(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_UpdateEkmConfig_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_sync.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_sync.py
deleted file mode 100644
index c5f083a4..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_config_sync.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateEkmConfig
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_UpdateEkmConfig_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_update_ekm_config():
-    # Create a client
-    client = kms_v1.EkmServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateEkmConfigRequest(
-    )
-
-    # Make the request
-    response = client.update_ekm_config(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_UpdateEkmConfig_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_async.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_async.py
deleted file mode 100644
index 203ea664..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_async.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateEkmConnection
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_UpdateEkmConnection_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_update_ekm_connection():
-    # Create a client
-    client = kms_v1.EkmServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateEkmConnectionRequest(
-    )
-
-    # Make the request
-    response = await client.update_ekm_connection(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_UpdateEkmConnection_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_sync.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_sync.py
deleted file mode 100644
index 78930e86..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_update_ekm_connection_sync.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateEkmConnection
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_UpdateEkmConnection_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_update_ekm_connection():
-    # Create a client
-    client = kms_v1.EkmServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateEkmConnectionRequest(
-    )
-
-    # Make the request
-    response = client.update_ekm_connection(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_UpdateEkmConnection_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_async.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_async.py
deleted file mode 100644
index e9cc6440..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for VerifyConnectivity
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_VerifyConnectivity_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_verify_connectivity():
-    # Create a client
-    client = kms_v1.EkmServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.VerifyConnectivityRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.verify_connectivity(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_VerifyConnectivity_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_sync.py b/samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_sync.py
deleted file mode 100644
index 17333d5a..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_ekm_service_verify_connectivity_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for VerifyConnectivity
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_EkmService_VerifyConnectivity_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_verify_connectivity():
-    # Create a client
-    client = kms_v1.EkmServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.VerifyConnectivityRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.verify_connectivity(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_EkmService_VerifyConnectivity_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_async.py
deleted file mode 100644
index 02a804e1..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for AsymmetricDecrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_AsymmetricDecrypt_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_asymmetric_decrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.AsymmetricDecryptRequest(
-        name="name_value",
-        ciphertext=b'ciphertext_blob',
-    )
-
-    # Make the request
-    response = await client.asymmetric_decrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_AsymmetricDecrypt_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_sync.py
deleted file mode 100644
index 818ea573..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_decrypt_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for AsymmetricDecrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_AsymmetricDecrypt_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_asymmetric_decrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.AsymmetricDecryptRequest(
-        name="name_value",
-        ciphertext=b'ciphertext_blob',
-    )
-
-    # Make the request
-    response = client.asymmetric_decrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_AsymmetricDecrypt_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_async.py
deleted file mode 100644
index 7d59f355..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for AsymmetricSign
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_AsymmetricSign_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_asymmetric_sign():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.AsymmetricSignRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.asymmetric_sign(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_AsymmetricSign_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_sync.py
deleted file mode 100644
index 8e63621a..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_asymmetric_sign_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for AsymmetricSign
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_AsymmetricSign_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_asymmetric_sign():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.AsymmetricSignRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.asymmetric_sign(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_AsymmetricSign_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_async.py
deleted file mode 100644
index dca51c04..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateCryptoKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateCryptoKey_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_create_crypto_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateCryptoKeyRequest(
-        parent="parent_value",
-        crypto_key_id="crypto_key_id_value",
-    )
-
-    # Make the request
-    response = await client.create_crypto_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateCryptoKey_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_sync.py
deleted file mode 100644
index 08f78180..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateCryptoKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateCryptoKey_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_create_crypto_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateCryptoKeyRequest(
-        parent="parent_value",
-        crypto_key_id="crypto_key_id_value",
-    )
-
-    # Make the request
-    response = client.create_crypto_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateCryptoKey_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_async.py
deleted file mode 100644
index 8d1cee9e..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateCryptoKeyVersion_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_create_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateCryptoKeyVersionRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    response = await client.create_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateCryptoKeyVersion_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_sync.py
deleted file mode 100644
index 546ee960..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_crypto_key_version_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateCryptoKeyVersion_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_create_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateCryptoKeyVersionRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    response = client.create_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateCryptoKeyVersion_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_async.py
deleted file mode 100644
index 40706158..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_async.py
+++ /dev/null
@@ -1,58 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateImportJob
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateImportJob_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_create_import_job():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    import_job = kms_v1.ImportJob()
-    import_job.import_method = "RSA_OAEP_4096_SHA256"
-    import_job.protection_level = "EXTERNAL_VPC"
-
-    request = kms_v1.CreateImportJobRequest(
-        parent="parent_value",
-        import_job_id="import_job_id_value",
-        import_job=import_job,
-    )
-
-    # Make the request
-    response = await client.create_import_job(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateImportJob_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_sync.py
deleted file mode 100644
index b2ebe722..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_import_job_sync.py
+++ /dev/null
@@ -1,58 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateImportJob
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateImportJob_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_create_import_job():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    import_job = kms_v1.ImportJob()
-    import_job.import_method = "RSA_OAEP_4096_SHA256"
-    import_job.protection_level = "EXTERNAL_VPC"
-
-    request = kms_v1.CreateImportJobRequest(
-        parent="parent_value",
-        import_job_id="import_job_id_value",
-        import_job=import_job,
-    )
-
-    # Make the request
-    response = client.create_import_job(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateImportJob_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_async.py
deleted file mode 100644
index da1718f7..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateKeyRing
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateKeyRing_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_create_key_ring():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateKeyRingRequest(
-        parent="parent_value",
-        key_ring_id="key_ring_id_value",
-    )
-
-    # Make the request
-    response = await client.create_key_ring(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateKeyRing_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_sync.py
deleted file mode 100644
index 1289dddc..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_create_key_ring_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for CreateKeyRing
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_CreateKeyRing_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_create_key_ring():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.CreateKeyRingRequest(
-        parent="parent_value",
-        key_ring_id="key_ring_id_value",
-    )
-
-    # Make the request
-    response = client.create_key_ring(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_CreateKeyRing_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_async.py
deleted file mode 100644
index 17ead82c..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for Decrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_Decrypt_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_decrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.DecryptRequest(
-        name="name_value",
-        ciphertext=b'ciphertext_blob',
-    )
-
-    # Make the request
-    response = await client.decrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_Decrypt_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_sync.py
deleted file mode 100644
index 40dec793..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_decrypt_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for Decrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_Decrypt_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_decrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.DecryptRequest(
-        name="name_value",
-        ciphertext=b'ciphertext_blob',
-    )
-
-    # Make the request
-    response = client.decrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_Decrypt_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_async.py
deleted file mode 100644
index 63aaf548..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for DestroyCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_DestroyCryptoKeyVersion_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_destroy_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.DestroyCryptoKeyVersionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.destroy_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_DestroyCryptoKeyVersion_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_sync.py
deleted file mode 100644
index cf3d85cc..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for DestroyCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_DestroyCryptoKeyVersion_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_destroy_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.DestroyCryptoKeyVersionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.destroy_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_DestroyCryptoKeyVersion_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_async.py
deleted file mode 100644
index 56c991f7..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for Encrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_Encrypt_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_encrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.EncryptRequest(
-        name="name_value",
-        plaintext=b'plaintext_blob',
-    )
-
-    # Make the request
-    response = await client.encrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_Encrypt_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_sync.py
deleted file mode 100644
index 5547eaf2..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_encrypt_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for Encrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_Encrypt_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_encrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.EncryptRequest(
-        name="name_value",
-        plaintext=b'plaintext_blob',
-    )
-
-    # Make the request
-    response = client.encrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_Encrypt_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_async.py
deleted file mode 100644
index 2b9a2ab9..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_async.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GenerateRandomBytes
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GenerateRandomBytes_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_generate_random_bytes():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GenerateRandomBytesRequest(
-    )
-
-    # Make the request
-    response = await client.generate_random_bytes(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GenerateRandomBytes_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_sync.py
deleted file mode 100644
index d123f210..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_generate_random_bytes_sync.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GenerateRandomBytes
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GenerateRandomBytes_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_generate_random_bytes():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GenerateRandomBytesRequest(
-    )
-
-    # Make the request
-    response = client.generate_random_bytes(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GenerateRandomBytes_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_async.py
deleted file mode 100644
index ab9e9717..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetCryptoKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetCryptoKey_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_get_crypto_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetCryptoKeyRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.get_crypto_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetCryptoKey_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_sync.py
deleted file mode 100644
index 77fc19af..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetCryptoKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetCryptoKey_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_get_crypto_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetCryptoKeyRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.get_crypto_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetCryptoKey_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_async.py
deleted file mode 100644
index 695dc272..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetCryptoKeyVersion_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_get_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetCryptoKeyVersionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.get_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetCryptoKeyVersion_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_sync.py
deleted file mode 100644
index 820b645f..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_crypto_key_version_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetCryptoKeyVersion_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_get_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetCryptoKeyVersionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.get_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetCryptoKeyVersion_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_async.py
deleted file mode 100644
index 9021fa81..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetImportJob
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetImportJob_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_get_import_job():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetImportJobRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.get_import_job(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetImportJob_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_sync.py
deleted file mode 100644
index e557a301..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_import_job_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetImportJob
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetImportJob_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_get_import_job():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetImportJobRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.get_import_job(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetImportJob_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_async.py
deleted file mode 100644
index 6c379748..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetKeyRing
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetKeyRing_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_get_key_ring():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetKeyRingRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.get_key_ring(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetKeyRing_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_sync.py
deleted file mode 100644
index 2987c2b3..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_key_ring_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetKeyRing
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetKeyRing_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_get_key_ring():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetKeyRingRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.get_key_ring(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetKeyRing_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_async.py
deleted file mode 100644
index bbe4034f..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetPublicKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetPublicKey_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_get_public_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetPublicKeyRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.get_public_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetPublicKey_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_sync.py
deleted file mode 100644
index f7240022..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_get_public_key_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for GetPublicKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_GetPublicKey_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_get_public_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.GetPublicKeyRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.get_public_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_GetPublicKey_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_async.py
deleted file mode 100644
index 569c02a6..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_async.py
+++ /dev/null
@@ -1,55 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ImportCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ImportCryptoKeyVersion_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_import_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ImportCryptoKeyVersionRequest(
-        rsa_aes_wrapped_key=b'rsa_aes_wrapped_key_blob',
-        parent="parent_value",
-        algorithm="EXTERNAL_SYMMETRIC_ENCRYPTION",
-        import_job="import_job_value",
-    )
-
-    # Make the request
-    response = await client.import_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ImportCryptoKeyVersion_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_sync.py
deleted file mode 100644
index 29722c71..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_import_crypto_key_version_sync.py
+++ /dev/null
@@ -1,55 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ImportCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ImportCryptoKeyVersion_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_import_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ImportCryptoKeyVersionRequest(
-        rsa_aes_wrapped_key=b'rsa_aes_wrapped_key_blob',
-        parent="parent_value",
-        algorithm="EXTERNAL_SYMMETRIC_ENCRYPTION",
-        import_job="import_job_value",
-    )
-
-    # Make the request
-    response = client.import_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ImportCryptoKeyVersion_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_async.py
deleted file mode 100644
index f7330dfb..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListCryptoKeyVersions
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListCryptoKeyVersions_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_list_crypto_key_versions():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListCryptoKeyVersionsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_crypto_key_versions(request=request)
-
-    # Handle the response
-    async for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListCryptoKeyVersions_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_sync.py
deleted file mode 100644
index b24258d6..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_key_versions_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListCryptoKeyVersions
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListCryptoKeyVersions_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_list_crypto_key_versions():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListCryptoKeyVersionsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_crypto_key_versions(request=request)
-
-    # Handle the response
-    for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListCryptoKeyVersions_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_async.py
deleted file mode 100644
index 9b505818..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListCryptoKeys
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListCryptoKeys_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_list_crypto_keys():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListCryptoKeysRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_crypto_keys(request=request)
-
-    # Handle the response
-    async for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListCryptoKeys_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_sync.py
deleted file mode 100644
index 1fa82e1e..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_crypto_keys_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListCryptoKeys
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListCryptoKeys_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_list_crypto_keys():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListCryptoKeysRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_crypto_keys(request=request)
-
-    # Handle the response
-    for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListCryptoKeys_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_async.py
deleted file mode 100644
index b4c3c206..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListImportJobs
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListImportJobs_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_list_import_jobs():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListImportJobsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_import_jobs(request=request)
-
-    # Handle the response
-    async for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListImportJobs_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_sync.py
deleted file mode 100644
index 59a40244..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_import_jobs_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListImportJobs
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListImportJobs_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_list_import_jobs():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListImportJobsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_import_jobs(request=request)
-
-    # Handle the response
-    for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListImportJobs_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_async.py
deleted file mode 100644
index 97670f3c..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListKeyRings
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListKeyRings_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_list_key_rings():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListKeyRingsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_key_rings(request=request)
-
-    # Handle the response
-    async for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListKeyRings_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_sync.py
deleted file mode 100644
index 5fc693b6..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_list_key_rings_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for ListKeyRings
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_ListKeyRings_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_list_key_rings():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.ListKeyRingsRequest(
-        parent="parent_value",
-    )
-
-    # Make the request
-    page_result = client.list_key_rings(request=request)
-
-    # Handle the response
-    for response in page_result:
-        print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_ListKeyRings_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_async.py
deleted file mode 100644
index 4101085d..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for MacSign
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_MacSign_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_mac_sign():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.MacSignRequest(
-        name="name_value",
-        data=b'data_blob',
-    )
-
-    # Make the request
-    response = await client.mac_sign(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_MacSign_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_sync.py
deleted file mode 100644
index 6e6a6dfd..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_sign_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for MacSign
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_MacSign_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_mac_sign():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.MacSignRequest(
-        name="name_value",
-        data=b'data_blob',
-    )
-
-    # Make the request
-    response = client.mac_sign(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_MacSign_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_async.py
deleted file mode 100644
index 16bcb296..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_async.py
+++ /dev/null
@@ -1,54 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for MacVerify
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_MacVerify_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_mac_verify():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.MacVerifyRequest(
-        name="name_value",
-        data=b'data_blob',
-        mac=b'mac_blob',
-    )
-
-    # Make the request
-    response = await client.mac_verify(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_MacVerify_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_sync.py
deleted file mode 100644
index 7c242012..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_mac_verify_sync.py
+++ /dev/null
@@ -1,54 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for MacVerify
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_MacVerify_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_mac_verify():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.MacVerifyRequest(
-        name="name_value",
-        data=b'data_blob',
-        mac=b'mac_blob',
-    )
-
-    # Make the request
-    response = client.mac_verify(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_MacVerify_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_async.py
deleted file mode 100644
index 116063bf..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_async.py
+++ /dev/null
@@ -1,54 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for RawDecrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_RawDecrypt_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_raw_decrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.RawDecryptRequest(
-        name="name_value",
-        ciphertext=b'ciphertext_blob',
-        initialization_vector=b'initialization_vector_blob',
-    )
-
-    # Make the request
-    response = await client.raw_decrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_RawDecrypt_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_sync.py
deleted file mode 100644
index 603f5a50..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_decrypt_sync.py
+++ /dev/null
@@ -1,54 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for RawDecrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_RawDecrypt_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_raw_decrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.RawDecryptRequest(
-        name="name_value",
-        ciphertext=b'ciphertext_blob',
-        initialization_vector=b'initialization_vector_blob',
-    )
-
-    # Make the request
-    response = client.raw_decrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_RawDecrypt_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_async.py
deleted file mode 100644
index d89d3990..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for RawEncrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_RawEncrypt_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_raw_encrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.RawEncryptRequest(
-        name="name_value",
-        plaintext=b'plaintext_blob',
-    )
-
-    # Make the request
-    response = await client.raw_encrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_RawEncrypt_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_sync.py
deleted file mode 100644
index b709dbce..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_raw_encrypt_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for RawEncrypt
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_RawEncrypt_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_raw_encrypt():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.RawEncryptRequest(
-        name="name_value",
-        plaintext=b'plaintext_blob',
-    )
-
-    # Make the request
-    response = client.raw_encrypt(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_RawEncrypt_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_async.py
deleted file mode 100644
index 1d5fe434..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_async.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for RestoreCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_RestoreCryptoKeyVersion_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_restore_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.RestoreCryptoKeyVersionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = await client.restore_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_RestoreCryptoKeyVersion_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_sync.py
deleted file mode 100644
index 6bc5822c..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_restore_crypto_key_version_sync.py
+++ /dev/null
@@ -1,52 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for RestoreCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_RestoreCryptoKeyVersion_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_restore_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.RestoreCryptoKeyVersionRequest(
-        name="name_value",
-    )
-
-    # Make the request
-    response = client.restore_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_RestoreCryptoKeyVersion_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_async.py
deleted file mode 100644
index c01bc705..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_async.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateCryptoKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_UpdateCryptoKey_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_update_crypto_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateCryptoKeyRequest(
-    )
-
-    # Make the request
-    response = await client.update_crypto_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_UpdateCryptoKey_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_async.py
deleted file mode 100644
index f7270d62..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_async.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateCryptoKeyPrimaryVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyPrimaryVersion_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_update_crypto_key_primary_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateCryptoKeyPrimaryVersionRequest(
-        name="name_value",
-        crypto_key_version_id="crypto_key_version_id_value",
-    )
-
-    # Make the request
-    response = await client.update_crypto_key_primary_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyPrimaryVersion_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_sync.py
deleted file mode 100644
index 0193d20f..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_sync.py
+++ /dev/null
@@ -1,53 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateCryptoKeyPrimaryVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyPrimaryVersion_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_update_crypto_key_primary_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateCryptoKeyPrimaryVersionRequest(
-        name="name_value",
-        crypto_key_version_id="crypto_key_version_id_value",
-    )
-
-    # Make the request
-    response = client.update_crypto_key_primary_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyPrimaryVersion_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_sync.py
deleted file mode 100644
index c0e31cfb..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_sync.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateCryptoKey
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_UpdateCryptoKey_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_update_crypto_key():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateCryptoKeyRequest(
-    )
-
-    # Make the request
-    response = client.update_crypto_key(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_UpdateCryptoKey_sync]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_async.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_async.py
deleted file mode 100644
index 416621d6..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_async.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyVersion_async]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-async def sample_update_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceAsyncClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateCryptoKeyVersionRequest(
-    )
-
-    # Make the request
-    response = await client.update_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyVersion_async]
diff --git a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_sync.py b/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_sync.py
deleted file mode 100644
index af7676d7..00000000
--- a/samples/generated_samples/cloudkms_v1_generated_key_management_service_update_crypto_key_version_sync.py
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-# Generated code. DO NOT EDIT!
-#
-# Snippet for UpdateCryptoKeyVersion
-# NOTE: This snippet has been automatically generated for illustrative purposes only.
-# It may require modifications to work in your environment.
-
-# To install the latest published package dependency, execute the following:
-#   python3 -m pip install google-cloud-kms
-
-
-# [START cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyVersion_sync]
-# This snippet has been automatically generated and should be regarded as a
-# code template only.
-# It will require modifications to work:
-# - It may require correct/in-range values for request initialization.
-# - It may require specifying regional endpoints when creating the service
-#   client as shown in:
-#   https://googleapis.dev/python/google-api-core/latest/client_options.html
-from google.cloud import kms_v1
-
-
-def sample_update_crypto_key_version():
-    # Create a client
-    client = kms_v1.KeyManagementServiceClient()
-
-    # Initialize request argument(s)
-    request = kms_v1.UpdateCryptoKeyVersionRequest(
-    )
-
-    # Make the request
-    response = client.update_crypto_key_version(request=request)
-
-    # Handle the response
-    print(response)
-
-# [END cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyVersion_sync]
diff --git a/samples/generated_samples/snippet_metadata_google.cloud.kms.v1.json b/samples/generated_samples/snippet_metadata_google.cloud.kms.v1.json
deleted file mode 100644
index b64caca0..00000000
--- a/samples/generated_samples/snippet_metadata_google.cloud.kms.v1.json
+++ /dev/null
@@ -1,5810 +0,0 @@
-{
-  "clientLibrary": {
-    "apis": [
-      {
-        "id": "google.cloud.kms.v1",
-        "version": "v1"
-      }
-    ],
-    "language": "PYTHON",
-    "name": "google-cloud-kms",
-    "version": "2.19.2"
-  },
-  "snippets": [
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient",
-          "shortName": "EkmServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient.create_ekm_connection",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.CreateEkmConnection",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "CreateEkmConnection"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateEkmConnectionRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "ekm_connection_id",
-            "type": "str"
-          },
-          {
-            "name": "ekm_connection",
-            "type": "google.cloud.kms_v1.types.EkmConnection"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConnection",
-        "shortName": "create_ekm_connection"
-      },
-      "description": "Sample for CreateEkmConnection",
-      "file": "cloudkms_v1_generated_ekm_service_create_ekm_connection_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_CreateEkmConnection_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_create_ekm_connection_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceClient",
-          "shortName": "EkmServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceClient.create_ekm_connection",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.CreateEkmConnection",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "CreateEkmConnection"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateEkmConnectionRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "ekm_connection_id",
-            "type": "str"
-          },
-          {
-            "name": "ekm_connection",
-            "type": "google.cloud.kms_v1.types.EkmConnection"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConnection",
-        "shortName": "create_ekm_connection"
-      },
-      "description": "Sample for CreateEkmConnection",
-      "file": "cloudkms_v1_generated_ekm_service_create_ekm_connection_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_CreateEkmConnection_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_create_ekm_connection_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient",
-          "shortName": "EkmServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient.get_ekm_config",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.GetEkmConfig",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "GetEkmConfig"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetEkmConfigRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConfig",
-        "shortName": "get_ekm_config"
-      },
-      "description": "Sample for GetEkmConfig",
-      "file": "cloudkms_v1_generated_ekm_service_get_ekm_config_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_GetEkmConfig_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_get_ekm_config_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceClient",
-          "shortName": "EkmServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceClient.get_ekm_config",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.GetEkmConfig",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "GetEkmConfig"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetEkmConfigRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConfig",
-        "shortName": "get_ekm_config"
-      },
-      "description": "Sample for GetEkmConfig",
-      "file": "cloudkms_v1_generated_ekm_service_get_ekm_config_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_GetEkmConfig_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_get_ekm_config_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient",
-          "shortName": "EkmServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient.get_ekm_connection",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.GetEkmConnection",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "GetEkmConnection"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetEkmConnectionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConnection",
-        "shortName": "get_ekm_connection"
-      },
-      "description": "Sample for GetEkmConnection",
-      "file": "cloudkms_v1_generated_ekm_service_get_ekm_connection_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_GetEkmConnection_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_get_ekm_connection_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceClient",
-          "shortName": "EkmServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceClient.get_ekm_connection",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.GetEkmConnection",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "GetEkmConnection"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetEkmConnectionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConnection",
-        "shortName": "get_ekm_connection"
-      },
-      "description": "Sample for GetEkmConnection",
-      "file": "cloudkms_v1_generated_ekm_service_get_ekm_connection_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_GetEkmConnection_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_get_ekm_connection_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient",
-          "shortName": "EkmServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient.list_ekm_connections",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.ListEkmConnections",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "ListEkmConnections"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListEkmConnectionsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.ekm_service.pagers.ListEkmConnectionsAsyncPager",
-        "shortName": "list_ekm_connections"
-      },
-      "description": "Sample for ListEkmConnections",
-      "file": "cloudkms_v1_generated_ekm_service_list_ekm_connections_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_ListEkmConnections_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_list_ekm_connections_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceClient",
-          "shortName": "EkmServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceClient.list_ekm_connections",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.ListEkmConnections",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "ListEkmConnections"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListEkmConnectionsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.ekm_service.pagers.ListEkmConnectionsPager",
-        "shortName": "list_ekm_connections"
-      },
-      "description": "Sample for ListEkmConnections",
-      "file": "cloudkms_v1_generated_ekm_service_list_ekm_connections_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_ListEkmConnections_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_list_ekm_connections_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient",
-          "shortName": "EkmServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient.update_ekm_config",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.UpdateEkmConfig",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "UpdateEkmConfig"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateEkmConfigRequest"
-          },
-          {
-            "name": "ekm_config",
-            "type": "google.cloud.kms_v1.types.EkmConfig"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConfig",
-        "shortName": "update_ekm_config"
-      },
-      "description": "Sample for UpdateEkmConfig",
-      "file": "cloudkms_v1_generated_ekm_service_update_ekm_config_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_UpdateEkmConfig_async",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_update_ekm_config_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceClient",
-          "shortName": "EkmServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceClient.update_ekm_config",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.UpdateEkmConfig",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "UpdateEkmConfig"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateEkmConfigRequest"
-          },
-          {
-            "name": "ekm_config",
-            "type": "google.cloud.kms_v1.types.EkmConfig"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConfig",
-        "shortName": "update_ekm_config"
-      },
-      "description": "Sample for UpdateEkmConfig",
-      "file": "cloudkms_v1_generated_ekm_service_update_ekm_config_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_UpdateEkmConfig_sync",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_update_ekm_config_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient",
-          "shortName": "EkmServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient.update_ekm_connection",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.UpdateEkmConnection",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "UpdateEkmConnection"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateEkmConnectionRequest"
-          },
-          {
-            "name": "ekm_connection",
-            "type": "google.cloud.kms_v1.types.EkmConnection"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConnection",
-        "shortName": "update_ekm_connection"
-      },
-      "description": "Sample for UpdateEkmConnection",
-      "file": "cloudkms_v1_generated_ekm_service_update_ekm_connection_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_UpdateEkmConnection_async",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_update_ekm_connection_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceClient",
-          "shortName": "EkmServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceClient.update_ekm_connection",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.UpdateEkmConnection",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "UpdateEkmConnection"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateEkmConnectionRequest"
-          },
-          {
-            "name": "ekm_connection",
-            "type": "google.cloud.kms_v1.types.EkmConnection"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EkmConnection",
-        "shortName": "update_ekm_connection"
-      },
-      "description": "Sample for UpdateEkmConnection",
-      "file": "cloudkms_v1_generated_ekm_service_update_ekm_connection_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_UpdateEkmConnection_sync",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_update_ekm_connection_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient",
-          "shortName": "EkmServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceAsyncClient.verify_connectivity",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.VerifyConnectivity",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "VerifyConnectivity"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.VerifyConnectivityRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.VerifyConnectivityResponse",
-        "shortName": "verify_connectivity"
-      },
-      "description": "Sample for VerifyConnectivity",
-      "file": "cloudkms_v1_generated_ekm_service_verify_connectivity_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_VerifyConnectivity_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_verify_connectivity_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.EkmServiceClient",
-          "shortName": "EkmServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.EkmServiceClient.verify_connectivity",
-        "method": {
-          "fullName": "google.cloud.kms.v1.EkmService.VerifyConnectivity",
-          "service": {
-            "fullName": "google.cloud.kms.v1.EkmService",
-            "shortName": "EkmService"
-          },
-          "shortName": "VerifyConnectivity"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.VerifyConnectivityRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.VerifyConnectivityResponse",
-        "shortName": "verify_connectivity"
-      },
-      "description": "Sample for VerifyConnectivity",
-      "file": "cloudkms_v1_generated_ekm_service_verify_connectivity_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_EkmService_VerifyConnectivity_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_ekm_service_verify_connectivity_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.asymmetric_decrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "AsymmetricDecrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.AsymmetricDecryptRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "ciphertext",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.AsymmetricDecryptResponse",
-        "shortName": "asymmetric_decrypt"
-      },
-      "description": "Sample for AsymmetricDecrypt",
-      "file": "cloudkms_v1_generated_key_management_service_asymmetric_decrypt_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_AsymmetricDecrypt_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_asymmetric_decrypt_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.asymmetric_decrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "AsymmetricDecrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.AsymmetricDecryptRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "ciphertext",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.AsymmetricDecryptResponse",
-        "shortName": "asymmetric_decrypt"
-      },
-      "description": "Sample for AsymmetricDecrypt",
-      "file": "cloudkms_v1_generated_key_management_service_asymmetric_decrypt_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_AsymmetricDecrypt_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_asymmetric_decrypt_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.asymmetric_sign",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.AsymmetricSign",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "AsymmetricSign"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.AsymmetricSignRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "digest",
-            "type": "google.cloud.kms_v1.types.Digest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.AsymmetricSignResponse",
-        "shortName": "asymmetric_sign"
-      },
-      "description": "Sample for AsymmetricSign",
-      "file": "cloudkms_v1_generated_key_management_service_asymmetric_sign_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_AsymmetricSign_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_asymmetric_sign_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.asymmetric_sign",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.AsymmetricSign",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "AsymmetricSign"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.AsymmetricSignRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "digest",
-            "type": "google.cloud.kms_v1.types.Digest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.AsymmetricSignResponse",
-        "shortName": "asymmetric_sign"
-      },
-      "description": "Sample for AsymmetricSign",
-      "file": "cloudkms_v1_generated_key_management_service_asymmetric_sign_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_AsymmetricSign_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_asymmetric_sign_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.create_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateCryptoKeyVersionRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key_version",
-            "type": "google.cloud.kms_v1.types.CryptoKeyVersion"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "create_crypto_key_version"
-      },
-      "description": "Sample for CreateCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_create_crypto_key_version_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateCryptoKeyVersion_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_crypto_key_version_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.create_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateCryptoKeyVersionRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key_version",
-            "type": "google.cloud.kms_v1.types.CryptoKeyVersion"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "create_crypto_key_version"
-      },
-      "description": "Sample for CreateCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_create_crypto_key_version_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateCryptoKeyVersion_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_crypto_key_version_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.create_crypto_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateCryptoKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateCryptoKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateCryptoKeyRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key_id",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key",
-            "type": "google.cloud.kms_v1.types.CryptoKey"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "create_crypto_key"
-      },
-      "description": "Sample for CreateCryptoKey",
-      "file": "cloudkms_v1_generated_key_management_service_create_crypto_key_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateCryptoKey_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_crypto_key_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.create_crypto_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateCryptoKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateCryptoKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateCryptoKeyRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key_id",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key",
-            "type": "google.cloud.kms_v1.types.CryptoKey"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "create_crypto_key"
-      },
-      "description": "Sample for CreateCryptoKey",
-      "file": "cloudkms_v1_generated_key_management_service_create_crypto_key_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateCryptoKey_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_crypto_key_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.create_import_job",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateImportJob",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateImportJob"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateImportJobRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "import_job_id",
-            "type": "str"
-          },
-          {
-            "name": "import_job",
-            "type": "google.cloud.kms_v1.types.ImportJob"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.ImportJob",
-        "shortName": "create_import_job"
-      },
-      "description": "Sample for CreateImportJob",
-      "file": "cloudkms_v1_generated_key_management_service_create_import_job_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateImportJob_async",
-      "segments": [
-        {
-          "end": 57,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 57,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 51,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 54,
-          "start": 52,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 58,
-          "start": 55,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_import_job_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.create_import_job",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateImportJob",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateImportJob"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateImportJobRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "import_job_id",
-            "type": "str"
-          },
-          {
-            "name": "import_job",
-            "type": "google.cloud.kms_v1.types.ImportJob"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.ImportJob",
-        "shortName": "create_import_job"
-      },
-      "description": "Sample for CreateImportJob",
-      "file": "cloudkms_v1_generated_key_management_service_create_import_job_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateImportJob_sync",
-      "segments": [
-        {
-          "end": 57,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 57,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 51,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 54,
-          "start": 52,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 58,
-          "start": 55,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_import_job_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.create_key_ring",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateKeyRing",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateKeyRing"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateKeyRingRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "key_ring_id",
-            "type": "str"
-          },
-          {
-            "name": "key_ring",
-            "type": "google.cloud.kms_v1.types.KeyRing"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.KeyRing",
-        "shortName": "create_key_ring"
-      },
-      "description": "Sample for CreateKeyRing",
-      "file": "cloudkms_v1_generated_key_management_service_create_key_ring_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateKeyRing_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_key_ring_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.create_key_ring",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.CreateKeyRing",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "CreateKeyRing"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.CreateKeyRingRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "key_ring_id",
-            "type": "str"
-          },
-          {
-            "name": "key_ring",
-            "type": "google.cloud.kms_v1.types.KeyRing"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.KeyRing",
-        "shortName": "create_key_ring"
-      },
-      "description": "Sample for CreateKeyRing",
-      "file": "cloudkms_v1_generated_key_management_service_create_key_ring_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_CreateKeyRing_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_create_key_ring_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.decrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.Decrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "Decrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.DecryptRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "ciphertext",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.DecryptResponse",
-        "shortName": "decrypt"
-      },
-      "description": "Sample for Decrypt",
-      "file": "cloudkms_v1_generated_key_management_service_decrypt_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_Decrypt_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_decrypt_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.decrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.Decrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "Decrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.DecryptRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "ciphertext",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.DecryptResponse",
-        "shortName": "decrypt"
-      },
-      "description": "Sample for Decrypt",
-      "file": "cloudkms_v1_generated_key_management_service_decrypt_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_Decrypt_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_decrypt_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.destroy_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "DestroyCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.DestroyCryptoKeyVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "destroy_crypto_key_version"
-      },
-      "description": "Sample for DestroyCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_DestroyCryptoKeyVersion_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.destroy_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "DestroyCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.DestroyCryptoKeyVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "destroy_crypto_key_version"
-      },
-      "description": "Sample for DestroyCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_DestroyCryptoKeyVersion_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_destroy_crypto_key_version_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.encrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.Encrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "Encrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.EncryptRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "plaintext",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EncryptResponse",
-        "shortName": "encrypt"
-      },
-      "description": "Sample for Encrypt",
-      "file": "cloudkms_v1_generated_key_management_service_encrypt_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_Encrypt_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_encrypt_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.encrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.Encrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "Encrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.EncryptRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "plaintext",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.EncryptResponse",
-        "shortName": "encrypt"
-      },
-      "description": "Sample for Encrypt",
-      "file": "cloudkms_v1_generated_key_management_service_encrypt_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_Encrypt_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_encrypt_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.generate_random_bytes",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GenerateRandomBytes"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GenerateRandomBytesRequest"
-          },
-          {
-            "name": "location",
-            "type": "str"
-          },
-          {
-            "name": "length_bytes",
-            "type": "int"
-          },
-          {
-            "name": "protection_level",
-            "type": "google.cloud.kms_v1.types.ProtectionLevel"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.GenerateRandomBytesResponse",
-        "shortName": "generate_random_bytes"
-      },
-      "description": "Sample for GenerateRandomBytes",
-      "file": "cloudkms_v1_generated_key_management_service_generate_random_bytes_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GenerateRandomBytes_async",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_generate_random_bytes_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.generate_random_bytes",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GenerateRandomBytes",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GenerateRandomBytes"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GenerateRandomBytesRequest"
-          },
-          {
-            "name": "location",
-            "type": "str"
-          },
-          {
-            "name": "length_bytes",
-            "type": "int"
-          },
-          {
-            "name": "protection_level",
-            "type": "google.cloud.kms_v1.types.ProtectionLevel"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.GenerateRandomBytesResponse",
-        "shortName": "generate_random_bytes"
-      },
-      "description": "Sample for GenerateRandomBytes",
-      "file": "cloudkms_v1_generated_key_management_service_generate_random_bytes_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GenerateRandomBytes_sync",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_generate_random_bytes_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.get_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetCryptoKeyVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "get_crypto_key_version"
-      },
-      "description": "Sample for GetCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_get_crypto_key_version_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetCryptoKeyVersion_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_crypto_key_version_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.get_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetCryptoKeyVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "get_crypto_key_version"
-      },
-      "description": "Sample for GetCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_get_crypto_key_version_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetCryptoKeyVersion_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_crypto_key_version_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.get_crypto_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetCryptoKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetCryptoKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetCryptoKeyRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "get_crypto_key"
-      },
-      "description": "Sample for GetCryptoKey",
-      "file": "cloudkms_v1_generated_key_management_service_get_crypto_key_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetCryptoKey_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_crypto_key_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.get_crypto_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetCryptoKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetCryptoKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetCryptoKeyRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "get_crypto_key"
-      },
-      "description": "Sample for GetCryptoKey",
-      "file": "cloudkms_v1_generated_key_management_service_get_crypto_key_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetCryptoKey_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_crypto_key_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.get_import_job",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetImportJob",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetImportJob"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetImportJobRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.ImportJob",
-        "shortName": "get_import_job"
-      },
-      "description": "Sample for GetImportJob",
-      "file": "cloudkms_v1_generated_key_management_service_get_import_job_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetImportJob_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_import_job_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.get_import_job",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetImportJob",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetImportJob"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetImportJobRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.ImportJob",
-        "shortName": "get_import_job"
-      },
-      "description": "Sample for GetImportJob",
-      "file": "cloudkms_v1_generated_key_management_service_get_import_job_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetImportJob_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_import_job_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.get_key_ring",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetKeyRing",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetKeyRing"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetKeyRingRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.KeyRing",
-        "shortName": "get_key_ring"
-      },
-      "description": "Sample for GetKeyRing",
-      "file": "cloudkms_v1_generated_key_management_service_get_key_ring_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetKeyRing_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_key_ring_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.get_key_ring",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetKeyRing",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetKeyRing"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetKeyRingRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.KeyRing",
-        "shortName": "get_key_ring"
-      },
-      "description": "Sample for GetKeyRing",
-      "file": "cloudkms_v1_generated_key_management_service_get_key_ring_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetKeyRing_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_key_ring_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.get_public_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetPublicKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetPublicKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetPublicKeyRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.PublicKey",
-        "shortName": "get_public_key"
-      },
-      "description": "Sample for GetPublicKey",
-      "file": "cloudkms_v1_generated_key_management_service_get_public_key_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetPublicKey_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_public_key_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.get_public_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.GetPublicKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "GetPublicKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.GetPublicKeyRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.PublicKey",
-        "shortName": "get_public_key"
-      },
-      "description": "Sample for GetPublicKey",
-      "file": "cloudkms_v1_generated_key_management_service_get_public_key_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_GetPublicKey_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_get_public_key_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.import_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ImportCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ImportCryptoKeyVersionRequest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "import_crypto_key_version"
-      },
-      "description": "Sample for ImportCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_import_crypto_key_version_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ImportCryptoKeyVersion_async",
-      "segments": [
-        {
-          "end": 54,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 54,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 51,
-          "start": 49,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 55,
-          "start": 52,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_import_crypto_key_version_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.import_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ImportCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ImportCryptoKeyVersionRequest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "import_crypto_key_version"
-      },
-      "description": "Sample for ImportCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_import_crypto_key_version_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ImportCryptoKeyVersion_sync",
-      "segments": [
-        {
-          "end": 54,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 54,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 51,
-          "start": 49,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 55,
-          "start": 52,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_import_crypto_key_version_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.list_crypto_key_versions",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListCryptoKeyVersions"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListCryptoKeyVersionsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeyVersionsAsyncPager",
-        "shortName": "list_crypto_key_versions"
-      },
-      "description": "Sample for ListCryptoKeyVersions",
-      "file": "cloudkms_v1_generated_key_management_service_list_crypto_key_versions_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListCryptoKeyVersions_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_crypto_key_versions_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.list_crypto_key_versions",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListCryptoKeyVersions"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListCryptoKeyVersionsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeyVersionsPager",
-        "shortName": "list_crypto_key_versions"
-      },
-      "description": "Sample for ListCryptoKeyVersions",
-      "file": "cloudkms_v1_generated_key_management_service_list_crypto_key_versions_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListCryptoKeyVersions_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_crypto_key_versions_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.list_crypto_keys",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListCryptoKeys",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListCryptoKeys"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListCryptoKeysRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeysAsyncPager",
-        "shortName": "list_crypto_keys"
-      },
-      "description": "Sample for ListCryptoKeys",
-      "file": "cloudkms_v1_generated_key_management_service_list_crypto_keys_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListCryptoKeys_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_crypto_keys_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.list_crypto_keys",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListCryptoKeys",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListCryptoKeys"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListCryptoKeysRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListCryptoKeysPager",
-        "shortName": "list_crypto_keys"
-      },
-      "description": "Sample for ListCryptoKeys",
-      "file": "cloudkms_v1_generated_key_management_service_list_crypto_keys_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListCryptoKeys_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_crypto_keys_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.list_import_jobs",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListImportJobs",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListImportJobs"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListImportJobsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListImportJobsAsyncPager",
-        "shortName": "list_import_jobs"
-      },
-      "description": "Sample for ListImportJobs",
-      "file": "cloudkms_v1_generated_key_management_service_list_import_jobs_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListImportJobs_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_import_jobs_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.list_import_jobs",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListImportJobs",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListImportJobs"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListImportJobsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListImportJobsPager",
-        "shortName": "list_import_jobs"
-      },
-      "description": "Sample for ListImportJobs",
-      "file": "cloudkms_v1_generated_key_management_service_list_import_jobs_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListImportJobs_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_import_jobs_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.list_key_rings",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListKeyRings",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListKeyRings"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListKeyRingsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListKeyRingsAsyncPager",
-        "shortName": "list_key_rings"
-      },
-      "description": "Sample for ListKeyRings",
-      "file": "cloudkms_v1_generated_key_management_service_list_key_rings_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListKeyRings_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_key_rings_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.list_key_rings",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.ListKeyRings",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "ListKeyRings"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.ListKeyRingsRequest"
-          },
-          {
-            "name": "parent",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.services.key_management_service.pagers.ListKeyRingsPager",
-        "shortName": "list_key_rings"
-      },
-      "description": "Sample for ListKeyRings",
-      "file": "cloudkms_v1_generated_key_management_service_list_key_rings_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_ListKeyRings_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_list_key_rings_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.mac_sign",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.MacSign",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "MacSign"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.MacSignRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "data",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.MacSignResponse",
-        "shortName": "mac_sign"
-      },
-      "description": "Sample for MacSign",
-      "file": "cloudkms_v1_generated_key_management_service_mac_sign_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_MacSign_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_mac_sign_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.mac_sign",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.MacSign",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "MacSign"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.MacSignRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "data",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.MacSignResponse",
-        "shortName": "mac_sign"
-      },
-      "description": "Sample for MacSign",
-      "file": "cloudkms_v1_generated_key_management_service_mac_sign_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_MacSign_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_mac_sign_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.mac_verify",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.MacVerify",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "MacVerify"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.MacVerifyRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "data",
-            "type": "bytes"
-          },
-          {
-            "name": "mac",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.MacVerifyResponse",
-        "shortName": "mac_verify"
-      },
-      "description": "Sample for MacVerify",
-      "file": "cloudkms_v1_generated_key_management_service_mac_verify_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_MacVerify_async",
-      "segments": [
-        {
-          "end": 53,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 53,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 50,
-          "start": 48,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 54,
-          "start": 51,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_mac_verify_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.mac_verify",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.MacVerify",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "MacVerify"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.MacVerifyRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "data",
-            "type": "bytes"
-          },
-          {
-            "name": "mac",
-            "type": "bytes"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.MacVerifyResponse",
-        "shortName": "mac_verify"
-      },
-      "description": "Sample for MacVerify",
-      "file": "cloudkms_v1_generated_key_management_service_mac_verify_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_MacVerify_sync",
-      "segments": [
-        {
-          "end": 53,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 53,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 50,
-          "start": 48,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 54,
-          "start": 51,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_mac_verify_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.raw_decrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.RawDecrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "RawDecrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.RawDecryptRequest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.RawDecryptResponse",
-        "shortName": "raw_decrypt"
-      },
-      "description": "Sample for RawDecrypt",
-      "file": "cloudkms_v1_generated_key_management_service_raw_decrypt_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_RawDecrypt_async",
-      "segments": [
-        {
-          "end": 53,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 53,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 50,
-          "start": 48,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 54,
-          "start": 51,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_raw_decrypt_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.raw_decrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.RawDecrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "RawDecrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.RawDecryptRequest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.RawDecryptResponse",
-        "shortName": "raw_decrypt"
-      },
-      "description": "Sample for RawDecrypt",
-      "file": "cloudkms_v1_generated_key_management_service_raw_decrypt_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_RawDecrypt_sync",
-      "segments": [
-        {
-          "end": 53,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 53,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 50,
-          "start": 48,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 54,
-          "start": 51,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_raw_decrypt_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.raw_encrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.RawEncrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "RawEncrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.RawEncryptRequest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.RawEncryptResponse",
-        "shortName": "raw_encrypt"
-      },
-      "description": "Sample for RawEncrypt",
-      "file": "cloudkms_v1_generated_key_management_service_raw_encrypt_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_RawEncrypt_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_raw_encrypt_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.raw_encrypt",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.RawEncrypt",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "RawEncrypt"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.RawEncryptRequest"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.RawEncryptResponse",
-        "shortName": "raw_encrypt"
-      },
-      "description": "Sample for RawEncrypt",
-      "file": "cloudkms_v1_generated_key_management_service_raw_encrypt_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_RawEncrypt_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_raw_encrypt_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.restore_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "RestoreCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.RestoreCryptoKeyVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "restore_crypto_key_version"
-      },
-      "description": "Sample for RestoreCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_restore_crypto_key_version_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_RestoreCryptoKeyVersion_async",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_restore_crypto_key_version_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.restore_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "RestoreCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.RestoreCryptoKeyVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "restore_crypto_key_version"
-      },
-      "description": "Sample for RestoreCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_restore_crypto_key_version_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_RestoreCryptoKeyVersion_sync",
-      "segments": [
-        {
-          "end": 51,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 51,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 45,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 48,
-          "start": 46,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 52,
-          "start": 49,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_restore_crypto_key_version_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.update_crypto_key_primary_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "UpdateCryptoKeyPrimaryVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateCryptoKeyPrimaryVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key_version_id",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "update_crypto_key_primary_version"
-      },
-      "description": "Sample for UpdateCryptoKeyPrimaryVersion",
-      "file": "cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyPrimaryVersion_async",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.update_crypto_key_primary_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "UpdateCryptoKeyPrimaryVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateCryptoKeyPrimaryVersionRequest"
-          },
-          {
-            "name": "name",
-            "type": "str"
-          },
-          {
-            "name": "crypto_key_version_id",
-            "type": "str"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "update_crypto_key_primary_version"
-      },
-      "description": "Sample for UpdateCryptoKeyPrimaryVersion",
-      "file": "cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyPrimaryVersion_sync",
-      "segments": [
-        {
-          "end": 52,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 52,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 46,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 49,
-          "start": 47,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 53,
-          "start": 50,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_update_crypto_key_primary_version_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.update_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "UpdateCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateCryptoKeyVersionRequest"
-          },
-          {
-            "name": "crypto_key_version",
-            "type": "google.cloud.kms_v1.types.CryptoKeyVersion"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "update_crypto_key_version"
-      },
-      "description": "Sample for UpdateCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_update_crypto_key_version_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyVersion_async",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_update_crypto_key_version_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.update_crypto_key_version",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyVersion",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "UpdateCryptoKeyVersion"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateCryptoKeyVersionRequest"
-          },
-          {
-            "name": "crypto_key_version",
-            "type": "google.cloud.kms_v1.types.CryptoKeyVersion"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKeyVersion",
-        "shortName": "update_crypto_key_version"
-      },
-      "description": "Sample for UpdateCryptoKeyVersion",
-      "file": "cloudkms_v1_generated_key_management_service_update_crypto_key_version_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_UpdateCryptoKeyVersion_sync",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_update_crypto_key_version_sync.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "async": true,
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient",
-          "shortName": "KeyManagementServiceAsyncClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceAsyncClient.update_crypto_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.UpdateCryptoKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "UpdateCryptoKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateCryptoKeyRequest"
-          },
-          {
-            "name": "crypto_key",
-            "type": "google.cloud.kms_v1.types.CryptoKey"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "update_crypto_key"
-      },
-      "description": "Sample for UpdateCryptoKey",
-      "file": "cloudkms_v1_generated_key_management_service_update_crypto_key_async.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_UpdateCryptoKey_async",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_update_crypto_key_async.py"
-    },
-    {
-      "canonical": true,
-      "clientMethod": {
-        "client": {
-          "fullName": "google.cloud.kms_v1.KeyManagementServiceClient",
-          "shortName": "KeyManagementServiceClient"
-        },
-        "fullName": "google.cloud.kms_v1.KeyManagementServiceClient.update_crypto_key",
-        "method": {
-          "fullName": "google.cloud.kms.v1.KeyManagementService.UpdateCryptoKey",
-          "service": {
-            "fullName": "google.cloud.kms.v1.KeyManagementService",
-            "shortName": "KeyManagementService"
-          },
-          "shortName": "UpdateCryptoKey"
-        },
-        "parameters": [
-          {
-            "name": "request",
-            "type": "google.cloud.kms_v1.types.UpdateCryptoKeyRequest"
-          },
-          {
-            "name": "crypto_key",
-            "type": "google.cloud.kms_v1.types.CryptoKey"
-          },
-          {
-            "name": "update_mask",
-            "type": "google.protobuf.field_mask_pb2.FieldMask"
-          },
-          {
-            "name": "retry",
-            "type": "google.api_core.retry.Retry"
-          },
-          {
-            "name": "timeout",
-            "type": "float"
-          },
-          {
-            "name": "metadata",
-            "type": "Sequence[Tuple[str, str]"
-          }
-        ],
-        "resultType": "google.cloud.kms_v1.types.CryptoKey",
-        "shortName": "update_crypto_key"
-      },
-      "description": "Sample for UpdateCryptoKey",
-      "file": "cloudkms_v1_generated_key_management_service_update_crypto_key_sync.py",
-      "language": "PYTHON",
-      "origin": "API_DEFINITION",
-      "regionTag": "cloudkms_v1_generated_KeyManagementService_UpdateCryptoKey_sync",
-      "segments": [
-        {
-          "end": 50,
-          "start": 27,
-          "type": "FULL"
-        },
-        {
-          "end": 50,
-          "start": 27,
-          "type": "SHORT"
-        },
-        {
-          "end": 40,
-          "start": 38,
-          "type": "CLIENT_INITIALIZATION"
-        },
-        {
-          "end": 44,
-          "start": 41,
-          "type": "REQUEST_INITIALIZATION"
-        },
-        {
-          "end": 47,
-          "start": 45,
-          "type": "REQUEST_EXECUTION"
-        },
-        {
-          "end": 51,
-          "start": 48,
-          "type": "RESPONSE_HANDLING"
-        }
-      ],
-      "title": "cloudkms_v1_generated_key_management_service_update_crypto_key_sync.py"
-    }
-  ]
-}
diff --git a/samples/snippets/README.md b/samples/snippets/README.md
deleted file mode 100644
index 58560f87..00000000
--- a/samples/snippets/README.md
+++ /dev/null
@@ -1,4 +0,0 @@
-Samples migrated
-================
-
-New location: https://github.com/GoogleCloudPlatform/python-docs-samples/tree/main/kms/snippets
\ No newline at end of file
diff --git a/scripts/decrypt-secrets.sh b/scripts/decrypt-secrets.sh
deleted file mode 100755
index 0018b421..00000000
--- a/scripts/decrypt-secrets.sh
+++ /dev/null
@@ -1,46 +0,0 @@
-#!/bin/bash
-
-# Copyright 2023 Google LLC All rights reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-ROOT=$( dirname "$DIR" )
-
-# Work from the project root.
-cd $ROOT
-
-# Prevent it from overriding files.
-# We recommend that sample authors use their own service account files and cloud project.
-# In that case, they are supposed to prepare these files by themselves.
-if [[ -f "testing/test-env.sh" ]] || \
-       [[ -f "testing/service-account.json" ]] || \
-       [[ -f "testing/client-secrets.json" ]]; then
-    echo "One or more target files exist, aborting."
-    exit 1
-fi
-
-# Use SECRET_MANAGER_PROJECT if set, fallback to cloud-devrel-kokoro-resources.
-PROJECT_ID="${SECRET_MANAGER_PROJECT:-cloud-devrel-kokoro-resources}"
-
-gcloud secrets versions access latest --secret="python-docs-samples-test-env" \
-       --project="${PROJECT_ID}" \
-       > testing/test-env.sh
-gcloud secrets versions access latest \
-       --secret="python-docs-samples-service-account" \
-       --project="${PROJECT_ID}" \
-       > testing/service-account.json
-gcloud secrets versions access latest \
-       --secret="python-docs-samples-client-secrets" \
-       --project="${PROJECT_ID}" \
-       > testing/client-secrets.json
diff --git a/scripts/fixup_kms_v1_keywords.py b/scripts/fixup_kms_v1_keywords.py
deleted file mode 100644
index cc376d48..00000000
--- a/scripts/fixup_kms_v1_keywords.py
+++ /dev/null
@@ -1,213 +0,0 @@
-#! /usr/bin/env python3
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-import argparse
-import os
-import libcst as cst
-import pathlib
-import sys
-from typing import (Any, Callable, Dict, List, Sequence, Tuple)
-
-
-def partition(
-    predicate: Callable[[Any], bool],
-    iterator: Sequence[Any]
-) -> Tuple[List[Any], List[Any]]:
-    """A stable, out-of-place partition."""
-    results = ([], [])
-
-    for i in iterator:
-        results[int(predicate(i))].append(i)
-
-    # Returns trueList, falseList
-    return results[1], results[0]
-
-
-class kmsCallTransformer(cst.CSTTransformer):
-    CTRL_PARAMS: Tuple[str] = ('retry', 'timeout', 'metadata')
-    METHOD_TO_PARAMS: Dict[str, Tuple[str]] = {
-        'asymmetric_decrypt': ('name', 'ciphertext', 'ciphertext_crc32c', ),
-        'asymmetric_sign': ('name', 'digest', 'digest_crc32c', 'data', 'data_crc32c', ),
-        'create_crypto_key': ('parent', 'crypto_key_id', 'crypto_key', 'skip_initial_version_creation', ),
-        'create_crypto_key_version': ('parent', 'crypto_key_version', ),
-        'create_ekm_connection': ('parent', 'ekm_connection_id', 'ekm_connection', ),
-        'create_import_job': ('parent', 'import_job_id', 'import_job', ),
-        'create_key_ring': ('parent', 'key_ring_id', 'key_ring', ),
-        'decrypt': ('name', 'ciphertext', 'additional_authenticated_data', 'ciphertext_crc32c', 'additional_authenticated_data_crc32c', ),
-        'destroy_crypto_key_version': ('name', ),
-        'encrypt': ('name', 'plaintext', 'additional_authenticated_data', 'plaintext_crc32c', 'additional_authenticated_data_crc32c', ),
-        'generate_random_bytes': ('location', 'length_bytes', 'protection_level', ),
-        'get_crypto_key': ('name', ),
-        'get_crypto_key_version': ('name', ),
-        'get_ekm_config': ('name', ),
-        'get_ekm_connection': ('name', ),
-        'get_import_job': ('name', ),
-        'get_key_ring': ('name', ),
-        'get_public_key': ('name', ),
-        'import_crypto_key_version': ('parent', 'algorithm', 'import_job', 'crypto_key_version', 'wrapped_key', 'rsa_aes_wrapped_key', ),
-        'list_crypto_keys': ('parent', 'page_size', 'page_token', 'version_view', 'filter', 'order_by', ),
-        'list_crypto_key_versions': ('parent', 'page_size', 'page_token', 'view', 'filter', 'order_by', ),
-        'list_ekm_connections': ('parent', 'page_size', 'page_token', 'filter', 'order_by', ),
-        'list_import_jobs': ('parent', 'page_size', 'page_token', 'filter', 'order_by', ),
-        'list_key_rings': ('parent', 'page_size', 'page_token', 'filter', 'order_by', ),
-        'mac_sign': ('name', 'data', 'data_crc32c', ),
-        'mac_verify': ('name', 'data', 'mac', 'data_crc32c', 'mac_crc32c', ),
-        'raw_decrypt': ('name', 'ciphertext', 'initialization_vector', 'additional_authenticated_data', 'tag_length', 'ciphertext_crc32c', 'additional_authenticated_data_crc32c', 'initialization_vector_crc32c', ),
-        'raw_encrypt': ('name', 'plaintext', 'additional_authenticated_data', 'plaintext_crc32c', 'additional_authenticated_data_crc32c', 'initialization_vector', 'initialization_vector_crc32c', ),
-        'restore_crypto_key_version': ('name', ),
-        'update_crypto_key': ('crypto_key', 'update_mask', ),
-        'update_crypto_key_primary_version': ('name', 'crypto_key_version_id', ),
-        'update_crypto_key_version': ('crypto_key_version', 'update_mask', ),
-        'update_ekm_config': ('ekm_config', 'update_mask', ),
-        'update_ekm_connection': ('ekm_connection', 'update_mask', ),
-        'verify_connectivity': ('name', ),
-    'get_iam_policy': ('resource', 'options', ),
-    'set_iam_policy': ('resource', 'policy', ),
-    'test_iam_permissions': ('resource', 'permissions', ),
-    }
-
-    def leave_Call(self, original: cst.Call, updated: cst.Call) -> cst.CSTNode:
-        try:
-            key = original.func.attr.value
-            kword_params = self.METHOD_TO_PARAMS[key]
-        except (AttributeError, KeyError):
-            # Either not a method from the API or too convoluted to be sure.
-            return updated
-
-        # If the existing code is valid, keyword args come after positional args.
-        # Therefore, all positional args must map to the first parameters.
-        args, kwargs = partition(lambda a: not bool(a.keyword), updated.args)
-        if any(k.keyword.value == "request" for k in kwargs):
-            # We've already fixed this file, don't fix it again.
-            return updated
-
-        kwargs, ctrl_kwargs = partition(
-            lambda a: a.keyword.value not in self.CTRL_PARAMS,
-            kwargs
-        )
-
-        args, ctrl_args = args[:len(kword_params)], args[len(kword_params):]
-        ctrl_kwargs.extend(cst.Arg(value=a.value, keyword=cst.Name(value=ctrl))
-                           for a, ctrl in zip(ctrl_args, self.CTRL_PARAMS))
-
-        request_arg = cst.Arg(
-            value=cst.Dict([
-                cst.DictElement(
-                    cst.SimpleString("'{}'".format(name)),
-cst.Element(value=arg.value)
-                )
-                # Note: the args + kwargs looks silly, but keep in mind that
-                # the control parameters had to be stripped out, and that
-                # those could have been passed positionally or by keyword.
-                for name, arg in zip(kword_params, args + kwargs)]),
-            keyword=cst.Name("request")
-        )
-
-        return updated.with_changes(
-            args=[request_arg] + ctrl_kwargs
-        )
-
-
-def fix_files(
-    in_dir: pathlib.Path,
-    out_dir: pathlib.Path,
-    *,
-    transformer=kmsCallTransformer(),
-):
-    """Duplicate the input dir to the output dir, fixing file method calls.
-
-    Preconditions:
-    * in_dir is a real directory
-    * out_dir is a real, empty directory
-    """
-    pyfile_gen = (
-        pathlib.Path(os.path.join(root, f))
-        for root, _, files in os.walk(in_dir)
-        for f in files if os.path.splitext(f)[1] == ".py"
-    )
-
-    for fpath in pyfile_gen:
-        with open(fpath, 'r') as f:
-            src = f.read()
-
-        # Parse the code and insert method call fixes.
-        tree = cst.parse_module(src)
-        updated = tree.visit(transformer)
-
-        # Create the path and directory structure for the new file.
-        updated_path = out_dir.joinpath(fpath.relative_to(in_dir))
-        updated_path.parent.mkdir(parents=True, exist_ok=True)
-
-        # Generate the updated source file at the corresponding path.
-        with open(updated_path, 'w') as f:
-            f.write(updated.code)
-
-
-if __name__ == '__main__':
-    parser = argparse.ArgumentParser(
-        description="""Fix up source that uses the kms client library.
-
-The existing sources are NOT overwritten but are copied to output_dir with changes made.
-
-Note: This tool operates at a best-effort level at converting positional
-      parameters in client method calls to keyword based parameters.
-      Cases where it WILL FAIL include
-      A) * or ** expansion in a method call.
-      B) Calls via function or method alias (includes free function calls)
-      C) Indirect or dispatched calls (e.g. the method is looked up dynamically)
-
-      These all constitute false negatives. The tool will also detect false
-      positives when an API method shares a name with another method.
-""")
-    parser.add_argument(
-        '-d',
-        '--input-directory',
-        required=True,
-        dest='input_dir',
-        help='the input directory to walk for python files to fix up',
-    )
-    parser.add_argument(
-        '-o',
-        '--output-directory',
-        required=True,
-        dest='output_dir',
-        help='the directory to output files fixed via un-flattening',
-    )
-    args = parser.parse_args()
-    input_dir = pathlib.Path(args.input_dir)
-    output_dir = pathlib.Path(args.output_dir)
-    if not input_dir.is_dir():
-        print(
-            f"input directory '{input_dir}' does not exist or is not a directory",
-            file=sys.stderr,
-        )
-        sys.exit(-1)
-
-    if not output_dir.is_dir():
-        print(
-            f"output directory '{output_dir}' does not exist or is not a directory",
-            file=sys.stderr,
-        )
-        sys.exit(-1)
-
-    if os.listdir(output_dir):
-        print(
-            f"output directory '{output_dir}' is not empty",
-            file=sys.stderr,
-        )
-        sys.exit(-1)
-
-    fix_files(input_dir, output_dir)
diff --git a/scripts/readme-gen/readme_gen.py b/scripts/readme-gen/readme_gen.py
deleted file mode 100644
index 1acc1198..00000000
--- a/scripts/readme-gen/readme_gen.py
+++ /dev/null
@@ -1,69 +0,0 @@
-#!/usr/bin/env python
-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-"""Generates READMEs using configuration defined in yaml."""
-
-import argparse
-import io
-import os
-import subprocess
-
-import jinja2
-import yaml
-
-
-jinja_env = jinja2.Environment(
-    trim_blocks=True,
-    loader=jinja2.FileSystemLoader(
-        os.path.abspath(os.path.join(os.path.dirname(__file__), "templates"))
-    ),
-    autoescape=True,
-)
-
-README_TMPL = jinja_env.get_template("README.tmpl.rst")
-
-
-def get_help(file):
-    return subprocess.check_output(["python", file, "--help"]).decode()
-
-
-def main():
-    parser = argparse.ArgumentParser()
-    parser.add_argument("source")
-    parser.add_argument("--destination", default="README.rst")
-
-    args = parser.parse_args()
-
-    source = os.path.abspath(args.source)
-    root = os.path.dirname(source)
-    destination = os.path.join(root, args.destination)
-
-    jinja_env.globals["get_help"] = get_help
-
-    with io.open(source, "r") as f:
-        config = yaml.load(f)
-
-    # This allows get_help to execute in the right directory.
-    os.chdir(root)
-
-    output = README_TMPL.render(config)
-
-    with io.open(destination, "w") as f:
-        f.write(output)
-
-
-if __name__ == "__main__":
-    main()
diff --git a/scripts/readme-gen/templates/README.tmpl.rst b/scripts/readme-gen/templates/README.tmpl.rst
deleted file mode 100644
index 4fd23976..00000000
--- a/scripts/readme-gen/templates/README.tmpl.rst
+++ /dev/null
@@ -1,87 +0,0 @@
-{# The following line is a lie. BUT! Once jinja2 is done with it, it will
-    become truth! #}
-.. This file is automatically generated. Do not edit this file directly.
-
-{{product.name}} Python Samples
-===============================================================================
-
-.. image:: https://gstatic.com/cloudssh/images/open-btn.png
-   :target: https://console.cloud.google.com/cloudshell/open?git_repo=https://github.com/GoogleCloudPlatform/python-docs-samples&page=editor&open_in_editor={{folder}}/README.rst
-
-
-This directory contains samples for {{product.name}}. {{product.description}}
-
-{{description}}
-
-.. _{{product.name}}: {{product.url}}
-
-{% if required_api_url %}
-To run the sample, you need to enable the API at: {{required_api_url}}
-{% endif %}
-
-{% if required_role %}
-To run the sample, you need to have `{{required_role}}` role.
-{% endif %}
-
-{{other_required_steps}}
-
-{% if setup %}
-Setup
--------------------------------------------------------------------------------
-
-{% for section in setup %}
-
-{% include section + '.tmpl.rst' %}
-
-{% endfor %}
-{% endif %}
-
-{% if samples %}
-Samples
--------------------------------------------------------------------------------
-
-{% for sample in samples %}
-{{sample.name}}
-+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-
-{% if not sample.hide_cloudshell_button %}
-.. image:: https://gstatic.com/cloudssh/images/open-btn.png
-   :target: https://console.cloud.google.com/cloudshell/open?git_repo=https://github.com/GoogleCloudPlatform/python-docs-samples&page=editor&open_in_editor={{folder}}/{{sample.file}},{{folder}}/README.rst
-{% endif %}
-
-
-{{sample.description}}
-
-To run this sample:
-
-.. code-block:: bash
-
-    $ python {{sample.file}}
-{% if sample.show_help %}
-
-    {{get_help(sample.file)|indent}}
-{% endif %}
-
-
-{% endfor %}
-{% endif %}
-
-{% if cloud_client_library %}
-
-The client library
--------------------------------------------------------------------------------
-
-This sample uses the `Google Cloud Client Library for Python`_.
-You can read the documentation for more details on API usage and use GitHub
-to `browse the source`_ and  `report issues`_.
-
-.. _Google Cloud Client Library for Python:
-    https://googlecloudplatform.github.io/google-cloud-python/
-.. _browse the source:
-    https://github.com/GoogleCloudPlatform/google-cloud-python
-.. _report issues:
-    https://github.com/GoogleCloudPlatform/google-cloud-python/issues
-
-{% endif %}
-
-.. _Google Cloud SDK: https://cloud.google.com/sdk/
\ No newline at end of file
diff --git a/scripts/readme-gen/templates/auth.tmpl.rst b/scripts/readme-gen/templates/auth.tmpl.rst
deleted file mode 100644
index 1446b94a..00000000
--- a/scripts/readme-gen/templates/auth.tmpl.rst
+++ /dev/null
@@ -1,9 +0,0 @@
-Authentication
-++++++++++++++
-
-This sample requires you to have authentication setup. Refer to the
-`Authentication Getting Started Guide`_ for instructions on setting up
-credentials for applications.
-
-.. _Authentication Getting Started Guide:
-    https://cloud.google.com/docs/authentication/getting-started
diff --git a/scripts/readme-gen/templates/auth_api_key.tmpl.rst b/scripts/readme-gen/templates/auth_api_key.tmpl.rst
deleted file mode 100644
index 11957ce2..00000000
--- a/scripts/readme-gen/templates/auth_api_key.tmpl.rst
+++ /dev/null
@@ -1,14 +0,0 @@
-Authentication
-++++++++++++++
-
-Authentication for this service is done via an `API Key`_. To obtain an API
-Key:
-
-1. Open the `Cloud Platform Console`_
-2. Make sure that billing is enabled for your project.
-3. From the **Credentials** page, create a new **API Key** or use an existing
-   one for your project.
-
-.. _API Key:
-    https://developers.google.com/api-client-library/python/guide/aaa_apikeys
-.. _Cloud Console: https://console.cloud.google.com/project?_
diff --git a/scripts/readme-gen/templates/install_deps.tmpl.rst b/scripts/readme-gen/templates/install_deps.tmpl.rst
deleted file mode 100644
index 6f069c6c..00000000
--- a/scripts/readme-gen/templates/install_deps.tmpl.rst
+++ /dev/null
@@ -1,29 +0,0 @@
-Install Dependencies
-++++++++++++++++++++
-
-#. Clone python-docs-samples and change directory to the sample directory you want to use.
-
-    .. code-block:: bash
-
-        $ git clone https://github.com/GoogleCloudPlatform/python-docs-samples.git
-
-#. Install `pip`_ and `virtualenv`_ if you do not already have them. You may want to refer to the `Python Development Environment Setup Guide`_ for Google Cloud Platform for instructions.
-
-   .. _Python Development Environment Setup Guide:
-       https://cloud.google.com/python/setup
-
-#. Create a virtualenv. Samples are compatible with Python 3.7+.
-
-    .. code-block:: bash
-
-        $ virtualenv env
-        $ source env/bin/activate
-
-#. Install the dependencies needed to run the samples.
-
-    .. code-block:: bash
-
-        $ pip install -r requirements.txt
-
-.. _pip: https://pip.pypa.io/
-.. _virtualenv: https://virtualenv.pypa.io/
diff --git a/scripts/readme-gen/templates/install_portaudio.tmpl.rst b/scripts/readme-gen/templates/install_portaudio.tmpl.rst
deleted file mode 100644
index 5ea33d18..00000000
--- a/scripts/readme-gen/templates/install_portaudio.tmpl.rst
+++ /dev/null
@@ -1,35 +0,0 @@
-Install PortAudio
-+++++++++++++++++
-
-Install `PortAudio`_. This is required by the `PyAudio`_ library to stream
-audio from your computer's microphone. PyAudio depends on PortAudio for cross-platform compatibility, and is installed differently depending on the
-platform.
-
-* For Mac OS X, you can use `Homebrew`_::
-
-      brew install portaudio
-
-  **Note**: if you encounter an error when running `pip install` that indicates
-  it can't find `portaudio.h`, try running `pip install` with the following
-  flags::
-
-      pip install --global-option='build_ext' \
-          --global-option='-I/usr/local/include' \
-          --global-option='-L/usr/local/lib' \
-          pyaudio
-
-* For Debian / Ubuntu Linux::
-
-      apt-get install portaudio19-dev python-all-dev
-
-* Windows may work without having to install PortAudio explicitly (it will get
-  installed with PyAudio).
-
-For more details, see the `PyAudio installation`_ page.
-
-
-.. _PyAudio: https://people.csail.mit.edu/hubert/pyaudio/
-.. _PortAudio: http://www.portaudio.com/
-.. _PyAudio installation:
-  https://people.csail.mit.edu/hubert/pyaudio/#downloads
-.. _Homebrew: http://brew.sh
diff --git a/setup.cfg b/setup.cfg
deleted file mode 100644
index 05235008..00000000
--- a/setup.cfg
+++ /dev/null
@@ -1,19 +0,0 @@
-# -*- coding: utf-8 -*-
-#
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Generated by synthtool. DO NOT EDIT!
-[bdist_wheel]
-universal = 1
diff --git a/setup.py b/setup.py
deleted file mode 100644
index 0380ce63..00000000
--- a/setup.py
+++ /dev/null
@@ -1,91 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-import io
-import os
-
-import setuptools  # type: ignore
-
-package_root = os.path.abspath(os.path.dirname(__file__))
-
-name = "google-cloud-kms"
-
-
-description = "Google Cloud Kms API client library"
-
-version = {}
-with open(os.path.join(package_root, "google/cloud/kms/gapic_version.py")) as fp:
-    exec(fp.read(), version)
-version = version["__version__"]
-
-if version[0] == "0":
-    release_status = "Development Status :: 4 - Beta"
-else:
-    release_status = "Development Status :: 5 - Production/Stable"
-
-dependencies = [
-    "google-api-core[grpc] >= 1.34.0, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*,!=2.8.*,!=2.9.*,!=2.10.*",
-    "proto-plus >= 1.22.0, <2.0.0dev",
-    "proto-plus >= 1.22.2, <2.0.0dev; python_version>='3.11'",
-    "protobuf>=3.19.5,<5.0.0dev,!=3.20.0,!=3.20.1,!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5",
-    "grpc-google-iam-v1 >= 0.12.4, <1.0.0dev",
-]
-url = "https://github.com/googleapis/python-kms"
-
-package_root = os.path.abspath(os.path.dirname(__file__))
-
-readme_filename = os.path.join(package_root, "README.rst")
-with io.open(readme_filename, encoding="utf-8") as readme_file:
-    readme = readme_file.read()
-
-packages = [
-    package
-    for package in setuptools.PEP420PackageFinder.find()
-    if package.startswith("google")
-]
-
-namespaces = ["google", "google.cloud"]
-
-setuptools.setup(
-    name=name,
-    version=version,
-    description=description,
-    long_description=readme,
-    author="Google LLC",
-    author_email="googleapis-packages@google.com",
-    license="Apache 2.0",
-    url=url,
-    classifiers=[
-        release_status,
-        "Intended Audience :: Developers",
-        "License :: OSI Approved :: Apache Software License",
-        "Programming Language :: Python",
-        "Programming Language :: Python :: 3",
-        "Programming Language :: Python :: 3.7",
-        "Programming Language :: Python :: 3.8",
-        "Programming Language :: Python :: 3.9",
-        "Programming Language :: Python :: 3.10",
-        "Programming Language :: Python :: 3.11",
-        "Operating System :: OS Independent",
-        "Topic :: Internet",
-    ],
-    platforms="Posix; MacOS X; Windows",
-    packages=packages,
-    python_requires=">=3.7",
-    namespace_packages=namespaces,
-    install_requires=dependencies,
-    include_package_data=True,
-    zip_safe=False,
-)
diff --git a/testing/.gitignore b/testing/.gitignore
deleted file mode 100644
index b05fbd63..00000000
--- a/testing/.gitignore
+++ /dev/null
@@ -1,3 +0,0 @@
-test-env.sh
-service-account.json
-client-secrets.json
\ No newline at end of file
diff --git a/testing/constraints-3.10.txt b/testing/constraints-3.10.txt
deleted file mode 100644
index ad3f0fa5..00000000
--- a/testing/constraints-3.10.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-# -*- coding: utf-8 -*-
-# This constraints file is required for unit tests.
-# List all library dependencies and extras in this file.
-google-api-core
-proto-plus
-protobuf
-grpc-google-iam-v1
diff --git a/testing/constraints-3.11.txt b/testing/constraints-3.11.txt
deleted file mode 100644
index ad3f0fa5..00000000
--- a/testing/constraints-3.11.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-# -*- coding: utf-8 -*-
-# This constraints file is required for unit tests.
-# List all library dependencies and extras in this file.
-google-api-core
-proto-plus
-protobuf
-grpc-google-iam-v1
diff --git a/testing/constraints-3.12.txt b/testing/constraints-3.12.txt
deleted file mode 100644
index ad3f0fa5..00000000
--- a/testing/constraints-3.12.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-# -*- coding: utf-8 -*-
-# This constraints file is required for unit tests.
-# List all library dependencies and extras in this file.
-google-api-core
-proto-plus
-protobuf
-grpc-google-iam-v1
diff --git a/testing/constraints-3.7.txt b/testing/constraints-3.7.txt
deleted file mode 100644
index 2beecf99..00000000
--- a/testing/constraints-3.7.txt
+++ /dev/null
@@ -1,10 +0,0 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py
-# List all library dependencies and extras in this file.
-# Pin the version to the lower bound.
-# e.g., if setup.py has "google-cloud-foo >= 1.14.0, < 2.0.0dev",
-# Then this file should have google-cloud-foo==1.14.0
-google-api-core==1.34.0
-proto-plus==1.22.0
-protobuf==3.19.5
-grpc-google-iam-v1==0.12.4
diff --git a/testing/constraints-3.8.txt b/testing/constraints-3.8.txt
deleted file mode 100644
index ad3f0fa5..00000000
--- a/testing/constraints-3.8.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-# -*- coding: utf-8 -*-
-# This constraints file is required for unit tests.
-# List all library dependencies and extras in this file.
-google-api-core
-proto-plus
-protobuf
-grpc-google-iam-v1
diff --git a/testing/constraints-3.9.txt b/testing/constraints-3.9.txt
deleted file mode 100644
index ad3f0fa5..00000000
--- a/testing/constraints-3.9.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-# -*- coding: utf-8 -*-
-# This constraints file is required for unit tests.
-# List all library dependencies and extras in this file.
-google-api-core
-proto-plus
-protobuf
-grpc-google-iam-v1
diff --git a/tests/__init__.py b/tests/__init__.py
deleted file mode 100644
index 89a37dc9..00000000
--- a/tests/__init__.py
+++ /dev/null
@@ -1,15 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
diff --git a/tests/system/test_system.py b/tests/system/test_system.py
deleted file mode 100644
index 5f2735a8..00000000
--- a/tests/system/test_system.py
+++ /dev/null
@@ -1,32 +0,0 @@
-# -*- coding: utf-8 -*-
-#
-# Copyright 2019 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     https://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-import os
-
-import pytest
-
-from google.cloud import kms_v1
-
-
-class TestKeyManagementServiceClient(object):
-    @pytest.mark.parametrize("transport", ["grpc", "rest"])
-    def test_list_global_key_rings(self, transport):
-        project_id = os.environ["PROJECT_ID"]
-
-        # List key rings from the global location.
-        client = kms_v1.KeyManagementServiceClient(transport=transport)
-        parent = f"projects/{project_id}/locations/global"
-        client.list_key_rings(request={"parent": parent})
diff --git a/tests/unit/__init__.py b/tests/unit/__init__.py
deleted file mode 100644
index 89a37dc9..00000000
--- a/tests/unit/__init__.py
+++ /dev/null
@@ -1,15 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
diff --git a/tests/unit/gapic/__init__.py b/tests/unit/gapic/__init__.py
deleted file mode 100644
index 89a37dc9..00000000
--- a/tests/unit/gapic/__init__.py
+++ /dev/null
@@ -1,15 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
diff --git a/tests/unit/gapic/kms_v1/__init__.py b/tests/unit/gapic/kms_v1/__init__.py
deleted file mode 100644
index 89a37dc9..00000000
--- a/tests/unit/gapic/kms_v1/__init__.py
+++ /dev/null
@@ -1,15 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
diff --git a/tests/unit/gapic/kms_v1/test_ekm_service.py b/tests/unit/gapic/kms_v1/test_ekm_service.py
deleted file mode 100644
index 046632b9..00000000
--- a/tests/unit/gapic/kms_v1/test_ekm_service.py
+++ /dev/null
@@ -1,6953 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-import os
-
-# try/except added for compatibility with python < 3.8
-try:
-    from unittest import mock
-    from unittest.mock import AsyncMock  # pragma: NO COVER
-except ImportError:  # pragma: NO COVER
-    import mock
-
-from collections.abc import Iterable
-import json
-import math
-
-from google.api_core import gapic_v1, grpc_helpers, grpc_helpers_async, path_template
-from google.api_core import client_options
-from google.api_core import exceptions as core_exceptions
-import google.auth
-from google.auth import credentials as ga_credentials
-from google.auth.exceptions import MutualTLSChannelError
-from google.cloud.location import locations_pb2
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import options_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.oauth2 import service_account
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import json_format
-from google.protobuf import timestamp_pb2  # type: ignore
-import grpc
-from grpc.experimental import aio
-from proto.marshal.rules import wrappers
-from proto.marshal.rules.dates import DurationRule, TimestampRule
-import pytest
-from requests import PreparedRequest, Request, Response
-from requests.sessions import Session
-
-from google.cloud.kms_v1.services.ekm_service import (
-    EkmServiceAsyncClient,
-    EkmServiceClient,
-    pagers,
-    transports,
-)
-from google.cloud.kms_v1.types import ekm_service
-
-
-def client_cert_source_callback():
-    return b"cert bytes", b"key bytes"
-
-
-# If default endpoint is localhost, then default mtls endpoint will be the same.
-# This method modifies the default endpoint so the client can produce a different
-# mtls endpoint for endpoint testing purposes.
-def modify_default_endpoint(client):
-    return (
-        "foo.googleapis.com"
-        if ("localhost" in client.DEFAULT_ENDPOINT)
-        else client.DEFAULT_ENDPOINT
-    )
-
-
-def test__get_default_mtls_endpoint():
-    api_endpoint = "example.googleapis.com"
-    api_mtls_endpoint = "example.mtls.googleapis.com"
-    sandbox_endpoint = "example.sandbox.googleapis.com"
-    sandbox_mtls_endpoint = "example.mtls.sandbox.googleapis.com"
-    non_googleapi = "api.example.com"
-
-    assert EkmServiceClient._get_default_mtls_endpoint(None) is None
-    assert (
-        EkmServiceClient._get_default_mtls_endpoint(api_endpoint) == api_mtls_endpoint
-    )
-    assert (
-        EkmServiceClient._get_default_mtls_endpoint(api_mtls_endpoint)
-        == api_mtls_endpoint
-    )
-    assert (
-        EkmServiceClient._get_default_mtls_endpoint(sandbox_endpoint)
-        == sandbox_mtls_endpoint
-    )
-    assert (
-        EkmServiceClient._get_default_mtls_endpoint(sandbox_mtls_endpoint)
-        == sandbox_mtls_endpoint
-    )
-    assert EkmServiceClient._get_default_mtls_endpoint(non_googleapi) == non_googleapi
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_name",
-    [
-        (EkmServiceClient, "grpc"),
-        (EkmServiceAsyncClient, "grpc_asyncio"),
-        (EkmServiceClient, "rest"),
-    ],
-)
-def test_ekm_service_client_from_service_account_info(client_class, transport_name):
-    creds = ga_credentials.AnonymousCredentials()
-    with mock.patch.object(
-        service_account.Credentials, "from_service_account_info"
-    ) as factory:
-        factory.return_value = creds
-        info = {"valid": True}
-        client = client_class.from_service_account_info(info, transport=transport_name)
-        assert client.transport._credentials == creds
-        assert isinstance(client, client_class)
-
-        assert client.transport._host == (
-            "cloudkms.googleapis.com:443"
-            if transport_name in ["grpc", "grpc_asyncio"]
-            else "https://cloudkms.googleapis.com"
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class,transport_name",
-    [
-        (transports.EkmServiceGrpcTransport, "grpc"),
-        (transports.EkmServiceGrpcAsyncIOTransport, "grpc_asyncio"),
-        (transports.EkmServiceRestTransport, "rest"),
-    ],
-)
-def test_ekm_service_client_service_account_always_use_jwt(
-    transport_class, transport_name
-):
-    with mock.patch.object(
-        service_account.Credentials, "with_always_use_jwt_access", create=True
-    ) as use_jwt:
-        creds = service_account.Credentials(None, None, None)
-        transport = transport_class(credentials=creds, always_use_jwt_access=True)
-        use_jwt.assert_called_once_with(True)
-
-    with mock.patch.object(
-        service_account.Credentials, "with_always_use_jwt_access", create=True
-    ) as use_jwt:
-        creds = service_account.Credentials(None, None, None)
-        transport = transport_class(credentials=creds, always_use_jwt_access=False)
-        use_jwt.assert_not_called()
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_name",
-    [
-        (EkmServiceClient, "grpc"),
-        (EkmServiceAsyncClient, "grpc_asyncio"),
-        (EkmServiceClient, "rest"),
-    ],
-)
-def test_ekm_service_client_from_service_account_file(client_class, transport_name):
-    creds = ga_credentials.AnonymousCredentials()
-    with mock.patch.object(
-        service_account.Credentials, "from_service_account_file"
-    ) as factory:
-        factory.return_value = creds
-        client = client_class.from_service_account_file(
-            "dummy/file/path.json", transport=transport_name
-        )
-        assert client.transport._credentials == creds
-        assert isinstance(client, client_class)
-
-        client = client_class.from_service_account_json(
-            "dummy/file/path.json", transport=transport_name
-        )
-        assert client.transport._credentials == creds
-        assert isinstance(client, client_class)
-
-        assert client.transport._host == (
-            "cloudkms.googleapis.com:443"
-            if transport_name in ["grpc", "grpc_asyncio"]
-            else "https://cloudkms.googleapis.com"
-        )
-
-
-def test_ekm_service_client_get_transport_class():
-    transport = EkmServiceClient.get_transport_class()
-    available_transports = [
-        transports.EkmServiceGrpcTransport,
-        transports.EkmServiceRestTransport,
-    ]
-    assert transport in available_transports
-
-    transport = EkmServiceClient.get_transport_class("grpc")
-    assert transport == transports.EkmServiceGrpcTransport
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name",
-    [
-        (EkmServiceClient, transports.EkmServiceGrpcTransport, "grpc"),
-        (
-            EkmServiceAsyncClient,
-            transports.EkmServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-        ),
-        (EkmServiceClient, transports.EkmServiceRestTransport, "rest"),
-    ],
-)
-@mock.patch.object(
-    EkmServiceClient, "DEFAULT_ENDPOINT", modify_default_endpoint(EkmServiceClient)
-)
-@mock.patch.object(
-    EkmServiceAsyncClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(EkmServiceAsyncClient),
-)
-def test_ekm_service_client_client_options(
-    client_class, transport_class, transport_name
-):
-    # Check that if channel is provided we won't create a new one.
-    with mock.patch.object(EkmServiceClient, "get_transport_class") as gtc:
-        transport = transport_class(credentials=ga_credentials.AnonymousCredentials())
-        client = client_class(transport=transport)
-        gtc.assert_not_called()
-
-    # Check that if channel is provided via str we will create a new one.
-    with mock.patch.object(EkmServiceClient, "get_transport_class") as gtc:
-        client = client_class(transport=transport_name)
-        gtc.assert_called()
-
-    # Check the case api_endpoint is provided.
-    options = client_options.ClientOptions(api_endpoint="squid.clam.whelk")
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(transport=transport_name, client_options=options)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host="squid.clam.whelk",
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
-    # "never".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "never"}):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(transport=transport_name)
-            patched.assert_called_once_with(
-                credentials=None,
-                credentials_file=None,
-                host=client.DEFAULT_ENDPOINT,
-                scopes=None,
-                client_cert_source_for_mtls=None,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )
-
-    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
-    # "always".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "always"}):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(transport=transport_name)
-            patched.assert_called_once_with(
-                credentials=None,
-                credentials_file=None,
-                host=client.DEFAULT_MTLS_ENDPOINT,
-                scopes=None,
-                client_cert_source_for_mtls=None,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )
-
-    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT has
-    # unsupported value.
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "Unsupported"}):
-        with pytest.raises(MutualTLSChannelError):
-            client = client_class(transport=transport_name)
-
-    # Check the case GOOGLE_API_USE_CLIENT_CERTIFICATE has unsupported value.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "Unsupported"}
-    ):
-        with pytest.raises(ValueError):
-            client = client_class(transport=transport_name)
-
-    # Check the case quota_project_id is provided
-    options = client_options.ClientOptions(quota_project_id="octopus")
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id="octopus",
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-    # Check the case api_endpoint is provided
-    options = client_options.ClientOptions(
-        api_audience="https://language.googleapis.com"
-    )
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience="https://language.googleapis.com",
-        )
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name,use_client_cert_env",
-    [
-        (EkmServiceClient, transports.EkmServiceGrpcTransport, "grpc", "true"),
-        (
-            EkmServiceAsyncClient,
-            transports.EkmServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            "true",
-        ),
-        (EkmServiceClient, transports.EkmServiceGrpcTransport, "grpc", "false"),
-        (
-            EkmServiceAsyncClient,
-            transports.EkmServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            "false",
-        ),
-        (EkmServiceClient, transports.EkmServiceRestTransport, "rest", "true"),
-        (EkmServiceClient, transports.EkmServiceRestTransport, "rest", "false"),
-    ],
-)
-@mock.patch.object(
-    EkmServiceClient, "DEFAULT_ENDPOINT", modify_default_endpoint(EkmServiceClient)
-)
-@mock.patch.object(
-    EkmServiceAsyncClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(EkmServiceAsyncClient),
-)
-@mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "auto"})
-def test_ekm_service_client_mtls_env_auto(
-    client_class, transport_class, transport_name, use_client_cert_env
-):
-    # This tests the endpoint autoswitch behavior. Endpoint is autoswitched to the default
-    # mtls endpoint, if GOOGLE_API_USE_CLIENT_CERTIFICATE is "true" and client cert exists.
-
-    # Check the case client_cert_source is provided. Whether client cert is used depends on
-    # GOOGLE_API_USE_CLIENT_CERTIFICATE value.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": use_client_cert_env}
-    ):
-        options = client_options.ClientOptions(
-            client_cert_source=client_cert_source_callback
-        )
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(client_options=options, transport=transport_name)
-
-            if use_client_cert_env == "false":
-                expected_client_cert_source = None
-                expected_host = client.DEFAULT_ENDPOINT
-            else:
-                expected_client_cert_source = client_cert_source_callback
-                expected_host = client.DEFAULT_MTLS_ENDPOINT
-
-            patched.assert_called_once_with(
-                credentials=None,
-                credentials_file=None,
-                host=expected_host,
-                scopes=None,
-                client_cert_source_for_mtls=expected_client_cert_source,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )
-
-    # Check the case ADC client cert is provided. Whether client cert is used depends on
-    # GOOGLE_API_USE_CLIENT_CERTIFICATE value.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": use_client_cert_env}
-    ):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            with mock.patch(
-                "google.auth.transport.mtls.has_default_client_cert_source",
-                return_value=True,
-            ):
-                with mock.patch(
-                    "google.auth.transport.mtls.default_client_cert_source",
-                    return_value=client_cert_source_callback,
-                ):
-                    if use_client_cert_env == "false":
-                        expected_host = client.DEFAULT_ENDPOINT
-                        expected_client_cert_source = None
-                    else:
-                        expected_host = client.DEFAULT_MTLS_ENDPOINT
-                        expected_client_cert_source = client_cert_source_callback
-
-                    patched.return_value = None
-                    client = client_class(transport=transport_name)
-                    patched.assert_called_once_with(
-                        credentials=None,
-                        credentials_file=None,
-                        host=expected_host,
-                        scopes=None,
-                        client_cert_source_for_mtls=expected_client_cert_source,
-                        quota_project_id=None,
-                        client_info=transports.base.DEFAULT_CLIENT_INFO,
-                        always_use_jwt_access=True,
-                        api_audience=None,
-                    )
-
-    # Check the case client_cert_source and ADC client cert are not provided.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": use_client_cert_env}
-    ):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            with mock.patch(
-                "google.auth.transport.mtls.has_default_client_cert_source",
-                return_value=False,
-            ):
-                patched.return_value = None
-                client = client_class(transport=transport_name)
-                patched.assert_called_once_with(
-                    credentials=None,
-                    credentials_file=None,
-                    host=client.DEFAULT_ENDPOINT,
-                    scopes=None,
-                    client_cert_source_for_mtls=None,
-                    quota_project_id=None,
-                    client_info=transports.base.DEFAULT_CLIENT_INFO,
-                    always_use_jwt_access=True,
-                    api_audience=None,
-                )
-
-
-@pytest.mark.parametrize("client_class", [EkmServiceClient, EkmServiceAsyncClient])
-@mock.patch.object(
-    EkmServiceClient, "DEFAULT_ENDPOINT", modify_default_endpoint(EkmServiceClient)
-)
-@mock.patch.object(
-    EkmServiceAsyncClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(EkmServiceAsyncClient),
-)
-def test_ekm_service_client_get_mtls_endpoint_and_cert_source(client_class):
-    mock_client_cert_source = mock.Mock()
-
-    # Test the case GOOGLE_API_USE_CLIENT_CERTIFICATE is "true".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "true"}):
-        mock_api_endpoint = "foo"
-        options = client_options.ClientOptions(
-            client_cert_source=mock_client_cert_source, api_endpoint=mock_api_endpoint
-        )
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source(
-            options
-        )
-        assert api_endpoint == mock_api_endpoint
-        assert cert_source == mock_client_cert_source
-
-    # Test the case GOOGLE_API_USE_CLIENT_CERTIFICATE is "false".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "false"}):
-        mock_client_cert_source = mock.Mock()
-        mock_api_endpoint = "foo"
-        options = client_options.ClientOptions(
-            client_cert_source=mock_client_cert_source, api_endpoint=mock_api_endpoint
-        )
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source(
-            options
-        )
-        assert api_endpoint == mock_api_endpoint
-        assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "never".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "never"}):
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source()
-        assert api_endpoint == client_class.DEFAULT_ENDPOINT
-        assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "always".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "always"}):
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source()
-        assert api_endpoint == client_class.DEFAULT_MTLS_ENDPOINT
-        assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "auto" and default cert doesn't exist.
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "true"}):
-        with mock.patch(
-            "google.auth.transport.mtls.has_default_client_cert_source",
-            return_value=False,
-        ):
-            api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source()
-            assert api_endpoint == client_class.DEFAULT_ENDPOINT
-            assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "auto" and default cert exists.
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "true"}):
-        with mock.patch(
-            "google.auth.transport.mtls.has_default_client_cert_source",
-            return_value=True,
-        ):
-            with mock.patch(
-                "google.auth.transport.mtls.default_client_cert_source",
-                return_value=mock_client_cert_source,
-            ):
-                (
-                    api_endpoint,
-                    cert_source,
-                ) = client_class.get_mtls_endpoint_and_cert_source()
-                assert api_endpoint == client_class.DEFAULT_MTLS_ENDPOINT
-                assert cert_source == mock_client_cert_source
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name",
-    [
-        (EkmServiceClient, transports.EkmServiceGrpcTransport, "grpc"),
-        (
-            EkmServiceAsyncClient,
-            transports.EkmServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-        ),
-        (EkmServiceClient, transports.EkmServiceRestTransport, "rest"),
-    ],
-)
-def test_ekm_service_client_client_options_scopes(
-    client_class, transport_class, transport_name
-):
-    # Check the case scopes are provided.
-    options = client_options.ClientOptions(
-        scopes=["1", "2"],
-    )
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host=client.DEFAULT_ENDPOINT,
-            scopes=["1", "2"],
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name,grpc_helpers",
-    [
-        (EkmServiceClient, transports.EkmServiceGrpcTransport, "grpc", grpc_helpers),
-        (
-            EkmServiceAsyncClient,
-            transports.EkmServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            grpc_helpers_async,
-        ),
-        (EkmServiceClient, transports.EkmServiceRestTransport, "rest", None),
-    ],
-)
-def test_ekm_service_client_client_options_credentials_file(
-    client_class, transport_class, transport_name, grpc_helpers
-):
-    # Check the case credentials file is provided.
-    options = client_options.ClientOptions(credentials_file="credentials.json")
-
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file="credentials.json",
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-
-def test_ekm_service_client_client_options_from_dict():
-    with mock.patch(
-        "google.cloud.kms_v1.services.ekm_service.transports.EkmServiceGrpcTransport.__init__"
-    ) as grpc_transport:
-        grpc_transport.return_value = None
-        client = EkmServiceClient(client_options={"api_endpoint": "squid.clam.whelk"})
-        grpc_transport.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host="squid.clam.whelk",
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name,grpc_helpers",
-    [
-        (EkmServiceClient, transports.EkmServiceGrpcTransport, "grpc", grpc_helpers),
-        (
-            EkmServiceAsyncClient,
-            transports.EkmServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            grpc_helpers_async,
-        ),
-    ],
-)
-def test_ekm_service_client_create_channel_credentials_file(
-    client_class, transport_class, transport_name, grpc_helpers
-):
-    # Check the case credentials file is provided.
-    options = client_options.ClientOptions(credentials_file="credentials.json")
-
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file="credentials.json",
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-    # test that the credentials from file are saved and used as the credentials.
-    with mock.patch.object(
-        google.auth, "load_credentials_from_file", autospec=True
-    ) as load_creds, mock.patch.object(
-        google.auth, "default", autospec=True
-    ) as adc, mock.patch.object(
-        grpc_helpers, "create_channel"
-    ) as create_channel:
-        creds = ga_credentials.AnonymousCredentials()
-        file_creds = ga_credentials.AnonymousCredentials()
-        load_creds.return_value = (file_creds, None)
-        adc.return_value = (creds, None)
-        client = client_class(client_options=options, transport=transport_name)
-        create_channel.assert_called_with(
-            "cloudkms.googleapis.com:443",
-            credentials=file_creds,
-            credentials_file=None,
-            quota_project_id=None,
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            scopes=None,
-            default_host="cloudkms.googleapis.com",
-            ssl_credentials=None,
-            options=[
-                ("grpc.max_send_message_length", -1),
-                ("grpc.max_receive_message_length", -1),
-            ],
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.ListEkmConnectionsRequest,
-        dict,
-    ],
-)
-def test_list_ekm_connections(request_type, transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.ListEkmConnectionsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-        response = client.list_ekm_connections(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.ListEkmConnectionsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListEkmConnectionsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_ekm_connections_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        client.list_ekm_connections()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.ListEkmConnectionsRequest()
-
-
-@pytest.mark.asyncio
-async def test_list_ekm_connections_async(
-    transport: str = "grpc_asyncio", request_type=ekm_service.ListEkmConnectionsRequest
-):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.ListEkmConnectionsResponse(
-                next_page_token="next_page_token_value",
-                total_size=1086,
-            )
-        )
-        response = await client.list_ekm_connections(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.ListEkmConnectionsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListEkmConnectionsAsyncPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-@pytest.mark.asyncio
-async def test_list_ekm_connections_async_from_dict():
-    await test_list_ekm_connections_async(request_type=dict)
-
-
-def test_list_ekm_connections_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.ListEkmConnectionsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        call.return_value = ekm_service.ListEkmConnectionsResponse()
-        client.list_ekm_connections(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_list_ekm_connections_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.ListEkmConnectionsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.ListEkmConnectionsResponse()
-        )
-        await client.list_ekm_connections(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_list_ekm_connections_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.ListEkmConnectionsResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.list_ekm_connections(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-def test_list_ekm_connections_flattened_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_ekm_connections(
-            ekm_service.ListEkmConnectionsRequest(),
-            parent="parent_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_list_ekm_connections_flattened_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.ListEkmConnectionsResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.ListEkmConnectionsResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.list_ekm_connections(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_list_ekm_connections_flattened_error_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.list_ekm_connections(
-            ekm_service.ListEkmConnectionsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_ekm_connections_pager(transport_name: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="abc",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[],
-                next_page_token="def",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="ghi",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-            ),
-            RuntimeError,
-        )
-
-        metadata = ()
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", ""),)),
-        )
-        pager = client.list_ekm_connections(request={})
-
-        assert pager._metadata == metadata
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, ekm_service.EkmConnection) for i in results)
-
-
-def test_list_ekm_connections_pages(transport_name: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections), "__call__"
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="abc",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[],
-                next_page_token="def",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="ghi",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = list(client.list_ekm_connections(request={}).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.asyncio
-async def test_list_ekm_connections_async_pager():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections),
-        "__call__",
-        new_callable=mock.AsyncMock,
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="abc",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[],
-                next_page_token="def",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="ghi",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-            ),
-            RuntimeError,
-        )
-        async_pager = await client.list_ekm_connections(
-            request={},
-        )
-        assert async_pager.next_page_token == "abc"
-        responses = []
-        async for response in async_pager:  # pragma: no branch
-            responses.append(response)
-
-        assert len(responses) == 6
-        assert all(isinstance(i, ekm_service.EkmConnection) for i in responses)
-
-
-@pytest.mark.asyncio
-async def test_list_ekm_connections_async_pages():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_ekm_connections),
-        "__call__",
-        new_callable=mock.AsyncMock,
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="abc",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[],
-                next_page_token="def",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="ghi",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = []
-        # Workaround issue in python 3.9 related to code coverage by adding `# pragma: no branch`
-        # See https://github.com/googleapis/gapic-generator-python/pull/1174#issuecomment-1025132372
-        async for page_ in (  # pragma: no branch
-            await client.list_ekm_connections(request={})
-        ).pages:
-            pages.append(page_)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.GetEkmConnectionRequest,
-        dict,
-    ],
-)
-def test_get_ekm_connection(request_type, transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection(
-            name="name_value",
-            etag="etag_value",
-            key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-            crypto_space_path="crypto_space_path_value",
-        )
-        response = client.get_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.GetEkmConnectionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-def test_get_ekm_connection_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_ekm_connection), "__call__"
-    ) as call:
-        client.get_ekm_connection()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.GetEkmConnectionRequest()
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_connection_async(
-    transport: str = "grpc_asyncio", request_type=ekm_service.GetEkmConnectionRequest
-):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection(
-                name="name_value",
-                etag="etag_value",
-                key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-                crypto_space_path="crypto_space_path_value",
-            )
-        )
-        response = await client.get_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.GetEkmConnectionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_connection_async_from_dict():
-    await test_get_ekm_connection_async(request_type=dict)
-
-
-def test_get_ekm_connection_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.GetEkmConnectionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_ekm_connection), "__call__"
-    ) as call:
-        call.return_value = ekm_service.EkmConnection()
-        client.get_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_connection_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.GetEkmConnectionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_ekm_connection), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection()
-        )
-        await client.get_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_get_ekm_connection_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.get_ekm_connection(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_get_ekm_connection_flattened_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_ekm_connection(
-            ekm_service.GetEkmConnectionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_connection_flattened_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.get_ekm_connection(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_connection_flattened_error_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.get_ekm_connection(
-            ekm_service.GetEkmConnectionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.CreateEkmConnectionRequest,
-        dict,
-    ],
-)
-def test_create_ekm_connection(request_type, transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection(
-            name="name_value",
-            etag="etag_value",
-            key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-            crypto_space_path="crypto_space_path_value",
-        )
-        response = client.create_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.CreateEkmConnectionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-def test_create_ekm_connection_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_ekm_connection), "__call__"
-    ) as call:
-        client.create_ekm_connection()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.CreateEkmConnectionRequest()
-
-
-@pytest.mark.asyncio
-async def test_create_ekm_connection_async(
-    transport: str = "grpc_asyncio", request_type=ekm_service.CreateEkmConnectionRequest
-):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection(
-                name="name_value",
-                etag="etag_value",
-                key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-                crypto_space_path="crypto_space_path_value",
-            )
-        )
-        response = await client.create_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.CreateEkmConnectionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-@pytest.mark.asyncio
-async def test_create_ekm_connection_async_from_dict():
-    await test_create_ekm_connection_async(request_type=dict)
-
-
-def test_create_ekm_connection_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.CreateEkmConnectionRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_ekm_connection), "__call__"
-    ) as call:
-        call.return_value = ekm_service.EkmConnection()
-        client.create_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_create_ekm_connection_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.CreateEkmConnectionRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_ekm_connection), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection()
-        )
-        await client.create_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_create_ekm_connection_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.create_ekm_connection(
-            parent="parent_value",
-            ekm_connection_id="ekm_connection_id_value",
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].ekm_connection_id
-        mock_val = "ekm_connection_id_value"
-        assert arg == mock_val
-        arg = args[0].ekm_connection
-        mock_val = ekm_service.EkmConnection(name="name_value")
-        assert arg == mock_val
-
-
-def test_create_ekm_connection_flattened_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_ekm_connection(
-            ekm_service.CreateEkmConnectionRequest(),
-            parent="parent_value",
-            ekm_connection_id="ekm_connection_id_value",
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-        )
-
-
-@pytest.mark.asyncio
-async def test_create_ekm_connection_flattened_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.create_ekm_connection(
-            parent="parent_value",
-            ekm_connection_id="ekm_connection_id_value",
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].ekm_connection_id
-        mock_val = "ekm_connection_id_value"
-        assert arg == mock_val
-        arg = args[0].ekm_connection
-        mock_val = ekm_service.EkmConnection(name="name_value")
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_create_ekm_connection_flattened_error_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.create_ekm_connection(
-            ekm_service.CreateEkmConnectionRequest(),
-            parent="parent_value",
-            ekm_connection_id="ekm_connection_id_value",
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.UpdateEkmConnectionRequest,
-        dict,
-    ],
-)
-def test_update_ekm_connection(request_type, transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection(
-            name="name_value",
-            etag="etag_value",
-            key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-            crypto_space_path="crypto_space_path_value",
-        )
-        response = client.update_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.UpdateEkmConnectionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-def test_update_ekm_connection_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_connection), "__call__"
-    ) as call:
-        client.update_ekm_connection()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.UpdateEkmConnectionRequest()
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_connection_async(
-    transport: str = "grpc_asyncio", request_type=ekm_service.UpdateEkmConnectionRequest
-):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection(
-                name="name_value",
-                etag="etag_value",
-                key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-                crypto_space_path="crypto_space_path_value",
-            )
-        )
-        response = await client.update_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.UpdateEkmConnectionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_connection_async_from_dict():
-    await test_update_ekm_connection_async(request_type=dict)
-
-
-def test_update_ekm_connection_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.UpdateEkmConnectionRequest()
-
-    request.ekm_connection.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_connection), "__call__"
-    ) as call:
-        call.return_value = ekm_service.EkmConnection()
-        client.update_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "ekm_connection.name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_connection_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.UpdateEkmConnectionRequest()
-
-    request.ekm_connection.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_connection), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection()
-        )
-        await client.update_ekm_connection(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "ekm_connection.name=name_value",
-    ) in kw["metadata"]
-
-
-def test_update_ekm_connection_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.update_ekm_connection(
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].ekm_connection
-        mock_val = ekm_service.EkmConnection(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-def test_update_ekm_connection_flattened_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_ekm_connection(
-            ekm_service.UpdateEkmConnectionRequest(),
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_connection_flattened_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_connection), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConnection()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConnection()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.update_ekm_connection(
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].ekm_connection
-        mock_val = ekm_service.EkmConnection(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_connection_flattened_error_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.update_ekm_connection(
-            ekm_service.UpdateEkmConnectionRequest(),
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.GetEkmConfigRequest,
-        dict,
-    ],
-)
-def test_get_ekm_config(request_type, transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_ekm_config), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConfig(
-            name="name_value",
-            default_ekm_connection="default_ekm_connection_value",
-        )
-        response = client.get_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.GetEkmConfigRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConfig)
-    assert response.name == "name_value"
-    assert response.default_ekm_connection == "default_ekm_connection_value"
-
-
-def test_get_ekm_config_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_ekm_config), "__call__") as call:
-        client.get_ekm_config()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.GetEkmConfigRequest()
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_config_async(
-    transport: str = "grpc_asyncio", request_type=ekm_service.GetEkmConfigRequest
-):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_ekm_config), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConfig(
-                name="name_value",
-                default_ekm_connection="default_ekm_connection_value",
-            )
-        )
-        response = await client.get_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.GetEkmConfigRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConfig)
-    assert response.name == "name_value"
-    assert response.default_ekm_connection == "default_ekm_connection_value"
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_config_async_from_dict():
-    await test_get_ekm_config_async(request_type=dict)
-
-
-def test_get_ekm_config_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.GetEkmConfigRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_ekm_config), "__call__") as call:
-        call.return_value = ekm_service.EkmConfig()
-        client.get_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_config_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.GetEkmConfigRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_ekm_config), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConfig()
-        )
-        await client.get_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_get_ekm_config_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_ekm_config), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConfig()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.get_ekm_config(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_get_ekm_config_flattened_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_ekm_config(
-            ekm_service.GetEkmConfigRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_config_flattened_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_ekm_config), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConfig()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConfig()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.get_ekm_config(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_get_ekm_config_flattened_error_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.get_ekm_config(
-            ekm_service.GetEkmConfigRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.UpdateEkmConfigRequest,
-        dict,
-    ],
-)
-def test_update_ekm_config(request_type, transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_config), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConfig(
-            name="name_value",
-            default_ekm_connection="default_ekm_connection_value",
-        )
-        response = client.update_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.UpdateEkmConfigRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConfig)
-    assert response.name == "name_value"
-    assert response.default_ekm_connection == "default_ekm_connection_value"
-
-
-def test_update_ekm_config_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_config), "__call__"
-    ) as call:
-        client.update_ekm_config()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.UpdateEkmConfigRequest()
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_config_async(
-    transport: str = "grpc_asyncio", request_type=ekm_service.UpdateEkmConfigRequest
-):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_config), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConfig(
-                name="name_value",
-                default_ekm_connection="default_ekm_connection_value",
-            )
-        )
-        response = await client.update_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.UpdateEkmConfigRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConfig)
-    assert response.name == "name_value"
-    assert response.default_ekm_connection == "default_ekm_connection_value"
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_config_async_from_dict():
-    await test_update_ekm_config_async(request_type=dict)
-
-
-def test_update_ekm_config_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.UpdateEkmConfigRequest()
-
-    request.ekm_config.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_config), "__call__"
-    ) as call:
-        call.return_value = ekm_service.EkmConfig()
-        client.update_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "ekm_config.name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_config_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.UpdateEkmConfigRequest()
-
-    request.ekm_config.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_config), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConfig()
-        )
-        await client.update_ekm_config(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "ekm_config.name=name_value",
-    ) in kw["metadata"]
-
-
-def test_update_ekm_config_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_config), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConfig()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.update_ekm_config(
-            ekm_config=ekm_service.EkmConfig(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].ekm_config
-        mock_val = ekm_service.EkmConfig(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-def test_update_ekm_config_flattened_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_ekm_config(
-            ekm_service.UpdateEkmConfigRequest(),
-            ekm_config=ekm_service.EkmConfig(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_config_flattened_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_ekm_config), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.EkmConfig()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.EkmConfig()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.update_ekm_config(
-            ekm_config=ekm_service.EkmConfig(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].ekm_config
-        mock_val = ekm_service.EkmConfig(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_update_ekm_config_flattened_error_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.update_ekm_config(
-            ekm_service.UpdateEkmConfigRequest(),
-            ekm_config=ekm_service.EkmConfig(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.VerifyConnectivityRequest,
-        dict,
-    ],
-)
-def test_verify_connectivity(request_type, transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.verify_connectivity), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.VerifyConnectivityResponse()
-        response = client.verify_connectivity(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.VerifyConnectivityRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.VerifyConnectivityResponse)
-
-
-def test_verify_connectivity_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.verify_connectivity), "__call__"
-    ) as call:
-        client.verify_connectivity()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.VerifyConnectivityRequest()
-
-
-@pytest.mark.asyncio
-async def test_verify_connectivity_async(
-    transport: str = "grpc_asyncio", request_type=ekm_service.VerifyConnectivityRequest
-):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.verify_connectivity), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.VerifyConnectivityResponse()
-        )
-        response = await client.verify_connectivity(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == ekm_service.VerifyConnectivityRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.VerifyConnectivityResponse)
-
-
-@pytest.mark.asyncio
-async def test_verify_connectivity_async_from_dict():
-    await test_verify_connectivity_async(request_type=dict)
-
-
-def test_verify_connectivity_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.VerifyConnectivityRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.verify_connectivity), "__call__"
-    ) as call:
-        call.return_value = ekm_service.VerifyConnectivityResponse()
-        client.verify_connectivity(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_verify_connectivity_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = ekm_service.VerifyConnectivityRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.verify_connectivity), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.VerifyConnectivityResponse()
-        )
-        await client.verify_connectivity(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_verify_connectivity_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.verify_connectivity), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.VerifyConnectivityResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.verify_connectivity(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_verify_connectivity_flattened_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.verify_connectivity(
-            ekm_service.VerifyConnectivityRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_verify_connectivity_flattened_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.verify_connectivity), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = ekm_service.VerifyConnectivityResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            ekm_service.VerifyConnectivityResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.verify_connectivity(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_verify_connectivity_flattened_error_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.verify_connectivity(
-            ekm_service.VerifyConnectivityRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.ListEkmConnectionsRequest,
-        dict,
-    ],
-)
-def test_list_ekm_connections_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.ListEkmConnectionsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.ListEkmConnectionsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.list_ekm_connections(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListEkmConnectionsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_ekm_connections_rest_required_fields(
-    request_type=ekm_service.ListEkmConnectionsRequest,
-):
-    transport_class = transports.EkmServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_ekm_connections._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["parent"] = "parent_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_ekm_connections._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(
-        (
-            "filter",
-            "order_by",
-            "page_size",
-            "page_token",
-        )
-    )
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = ekm_service.ListEkmConnectionsResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = ekm_service.ListEkmConnectionsResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.list_ekm_connections(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_list_ekm_connections_rest_unset_required_fields():
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.list_ekm_connections._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(
-            (
-                "filter",
-                "orderBy",
-                "pageSize",
-                "pageToken",
-            )
-        )
-        & set(("parent",))
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_list_ekm_connections_rest_interceptors(null_interceptor):
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.EkmServiceRestInterceptor(),
-    )
-    client = EkmServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "post_list_ekm_connections"
-    ) as post, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "pre_list_ekm_connections"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = ekm_service.ListEkmConnectionsRequest.pb(
-            ekm_service.ListEkmConnectionsRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = ekm_service.ListEkmConnectionsResponse.to_json(
-            ekm_service.ListEkmConnectionsResponse()
-        )
-
-        request = ekm_service.ListEkmConnectionsRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = ekm_service.ListEkmConnectionsResponse()
-
-        client.list_ekm_connections(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_list_ekm_connections_rest_bad_request(
-    transport: str = "rest", request_type=ekm_service.ListEkmConnectionsRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.list_ekm_connections(request)
-
-
-def test_list_ekm_connections_rest_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.ListEkmConnectionsResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {"parent": "projects/sample1/locations/sample2"}
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.ListEkmConnectionsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.list_ekm_connections(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*}/ekmConnections"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_list_ekm_connections_rest_flattened_error(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_ekm_connections(
-            ekm_service.ListEkmConnectionsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_ekm_connections_rest_pager(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # TODO(kbandes): remove this mock unless there's a good reason for it.
-        # with mock.patch.object(path_template, 'transcode') as transcode:
-        # Set the response as a series of pages
-        response = (
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="abc",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[],
-                next_page_token="def",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                ],
-                next_page_token="ghi",
-            ),
-            ekm_service.ListEkmConnectionsResponse(
-                ekm_connections=[
-                    ekm_service.EkmConnection(),
-                    ekm_service.EkmConnection(),
-                ],
-            ),
-        )
-        # Two responses for two calls
-        response = response + response
-
-        # Wrap the values into proper Response objs
-        response = tuple(
-            ekm_service.ListEkmConnectionsResponse.to_json(x) for x in response
-        )
-        return_values = tuple(Response() for i in response)
-        for return_val, response_val in zip(return_values, response):
-            return_val._content = response_val.encode("UTF-8")
-            return_val.status_code = 200
-        req.side_effect = return_values
-
-        sample_request = {"parent": "projects/sample1/locations/sample2"}
-
-        pager = client.list_ekm_connections(request=sample_request)
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, ekm_service.EkmConnection) for i in results)
-
-        pages = list(client.list_ekm_connections(request=sample_request).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.GetEkmConnectionRequest,
-        dict,
-    ],
-)
-def test_get_ekm_connection_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/ekmConnections/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConnection(
-            name="name_value",
-            etag="etag_value",
-            key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-            crypto_space_path="crypto_space_path_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConnection.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.get_ekm_connection(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-def test_get_ekm_connection_rest_required_fields(
-    request_type=ekm_service.GetEkmConnectionRequest,
-):
-    transport_class = transports.EkmServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_ekm_connection._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_ekm_connection._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = ekm_service.EkmConnection()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = ekm_service.EkmConnection.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.get_ekm_connection(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_get_ekm_connection_rest_unset_required_fields():
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.get_ekm_connection._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_get_ekm_connection_rest_interceptors(null_interceptor):
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.EkmServiceRestInterceptor(),
-    )
-    client = EkmServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "post_get_ekm_connection"
-    ) as post, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "pre_get_ekm_connection"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = ekm_service.GetEkmConnectionRequest.pb(
-            ekm_service.GetEkmConnectionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = ekm_service.EkmConnection.to_json(
-            ekm_service.EkmConnection()
-        )
-
-        request = ekm_service.GetEkmConnectionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = ekm_service.EkmConnection()
-
-        client.get_ekm_connection(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_get_ekm_connection_rest_bad_request(
-    transport: str = "rest", request_type=ekm_service.GetEkmConnectionRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/ekmConnections/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_ekm_connection(request)
-
-
-def test_get_ekm_connection_rest_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConnection()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/ekmConnections/sample3"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConnection.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.get_ekm_connection(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/ekmConnections/*}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_get_ekm_connection_rest_flattened_error(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_ekm_connection(
-            ekm_service.GetEkmConnectionRequest(),
-            name="name_value",
-        )
-
-
-def test_get_ekm_connection_rest_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.CreateEkmConnectionRequest,
-        dict,
-    ],
-)
-def test_create_ekm_connection_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request_init["ekm_connection"] = {
-        "name": "name_value",
-        "create_time": {"seconds": 751, "nanos": 543},
-        "service_resolvers": [
-            {
-                "service_directory_service": "service_directory_service_value",
-                "endpoint_filter": "endpoint_filter_value",
-                "hostname": "hostname_value",
-                "server_certificates": [
-                    {
-                        "raw_der": b"raw_der_blob",
-                        "parsed": True,
-                        "issuer": "issuer_value",
-                        "subject": "subject_value",
-                        "subject_alternative_dns_names": [
-                            "subject_alternative_dns_names_value1",
-                            "subject_alternative_dns_names_value2",
-                        ],
-                        "not_before_time": {},
-                        "not_after_time": {},
-                        "serial_number": "serial_number_value",
-                        "sha256_fingerprint": "sha256_fingerprint_value",
-                    }
-                ],
-            }
-        ],
-        "etag": "etag_value",
-        "key_management_mode": 1,
-        "crypto_space_path": "crypto_space_path_value",
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = ekm_service.CreateEkmConnectionRequest.meta.fields["ekm_connection"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["ekm_connection"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["ekm_connection"][field])):
-                    del request_init["ekm_connection"][field][i][subfield]
-            else:
-                del request_init["ekm_connection"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConnection(
-            name="name_value",
-            etag="etag_value",
-            key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-            crypto_space_path="crypto_space_path_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConnection.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.create_ekm_connection(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-def test_create_ekm_connection_rest_required_fields(
-    request_type=ekm_service.CreateEkmConnectionRequest,
-):
-    transport_class = transports.EkmServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request_init["ekm_connection_id"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-    assert "ekmConnectionId" not in jsonified_request
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_ekm_connection._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-    assert "ekmConnectionId" in jsonified_request
-    assert jsonified_request["ekmConnectionId"] == request_init["ekm_connection_id"]
-
-    jsonified_request["parent"] = "parent_value"
-    jsonified_request["ekmConnectionId"] = "ekm_connection_id_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_ekm_connection._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(("ekm_connection_id",))
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-    assert "ekmConnectionId" in jsonified_request
-    assert jsonified_request["ekmConnectionId"] == "ekm_connection_id_value"
-
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = ekm_service.EkmConnection()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = ekm_service.EkmConnection.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.create_ekm_connection(request)
-
-            expected_params = [
-                (
-                    "ekmConnectionId",
-                    "",
-                ),
-                ("$alt", "json;enum-encoding=int"),
-            ]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_create_ekm_connection_rest_unset_required_fields():
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.create_ekm_connection._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(("ekmConnectionId",))
-        & set(
-            (
-                "parent",
-                "ekmConnectionId",
-                "ekmConnection",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_create_ekm_connection_rest_interceptors(null_interceptor):
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.EkmServiceRestInterceptor(),
-    )
-    client = EkmServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "post_create_ekm_connection"
-    ) as post, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "pre_create_ekm_connection"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = ekm_service.CreateEkmConnectionRequest.pb(
-            ekm_service.CreateEkmConnectionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = ekm_service.EkmConnection.to_json(
-            ekm_service.EkmConnection()
-        )
-
-        request = ekm_service.CreateEkmConnectionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = ekm_service.EkmConnection()
-
-        client.create_ekm_connection(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_create_ekm_connection_rest_bad_request(
-    transport: str = "rest", request_type=ekm_service.CreateEkmConnectionRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.create_ekm_connection(request)
-
-
-def test_create_ekm_connection_rest_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConnection()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {"parent": "projects/sample1/locations/sample2"}
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-            ekm_connection_id="ekm_connection_id_value",
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConnection.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.create_ekm_connection(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*}/ekmConnections"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_create_ekm_connection_rest_flattened_error(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_ekm_connection(
-            ekm_service.CreateEkmConnectionRequest(),
-            parent="parent_value",
-            ekm_connection_id="ekm_connection_id_value",
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-        )
-
-
-def test_create_ekm_connection_rest_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.UpdateEkmConnectionRequest,
-        dict,
-    ],
-)
-def test_update_ekm_connection_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "ekm_connection": {
-            "name": "projects/sample1/locations/sample2/ekmConnections/sample3"
-        }
-    }
-    request_init["ekm_connection"] = {
-        "name": "projects/sample1/locations/sample2/ekmConnections/sample3",
-        "create_time": {"seconds": 751, "nanos": 543},
-        "service_resolvers": [
-            {
-                "service_directory_service": "service_directory_service_value",
-                "endpoint_filter": "endpoint_filter_value",
-                "hostname": "hostname_value",
-                "server_certificates": [
-                    {
-                        "raw_der": b"raw_der_blob",
-                        "parsed": True,
-                        "issuer": "issuer_value",
-                        "subject": "subject_value",
-                        "subject_alternative_dns_names": [
-                            "subject_alternative_dns_names_value1",
-                            "subject_alternative_dns_names_value2",
-                        ],
-                        "not_before_time": {},
-                        "not_after_time": {},
-                        "serial_number": "serial_number_value",
-                        "sha256_fingerprint": "sha256_fingerprint_value",
-                    }
-                ],
-            }
-        ],
-        "etag": "etag_value",
-        "key_management_mode": 1,
-        "crypto_space_path": "crypto_space_path_value",
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = ekm_service.UpdateEkmConnectionRequest.meta.fields["ekm_connection"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["ekm_connection"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["ekm_connection"][field])):
-                    del request_init["ekm_connection"][field][i][subfield]
-            else:
-                del request_init["ekm_connection"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConnection(
-            name="name_value",
-            etag="etag_value",
-            key_management_mode=ekm_service.EkmConnection.KeyManagementMode.MANUAL,
-            crypto_space_path="crypto_space_path_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConnection.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.update_ekm_connection(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConnection)
-    assert response.name == "name_value"
-    assert response.etag == "etag_value"
-    assert (
-        response.key_management_mode
-        == ekm_service.EkmConnection.KeyManagementMode.MANUAL
-    )
-    assert response.crypto_space_path == "crypto_space_path_value"
-
-
-def test_update_ekm_connection_rest_required_fields(
-    request_type=ekm_service.UpdateEkmConnectionRequest,
-):
-    transport_class = transports.EkmServiceRestTransport
-
-    request_init = {}
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_ekm_connection._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_ekm_connection._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(("update_mask",))
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = ekm_service.EkmConnection()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "patch",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = ekm_service.EkmConnection.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.update_ekm_connection(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_update_ekm_connection_rest_unset_required_fields():
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.update_ekm_connection._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(("updateMask",))
-        & set(
-            (
-                "ekmConnection",
-                "updateMask",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_update_ekm_connection_rest_interceptors(null_interceptor):
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.EkmServiceRestInterceptor(),
-    )
-    client = EkmServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "post_update_ekm_connection"
-    ) as post, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "pre_update_ekm_connection"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = ekm_service.UpdateEkmConnectionRequest.pb(
-            ekm_service.UpdateEkmConnectionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = ekm_service.EkmConnection.to_json(
-            ekm_service.EkmConnection()
-        )
-
-        request = ekm_service.UpdateEkmConnectionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = ekm_service.EkmConnection()
-
-        client.update_ekm_connection(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_update_ekm_connection_rest_bad_request(
-    transport: str = "rest", request_type=ekm_service.UpdateEkmConnectionRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "ekm_connection": {
-            "name": "projects/sample1/locations/sample2/ekmConnections/sample3"
-        }
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.update_ekm_connection(request)
-
-
-def test_update_ekm_connection_rest_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConnection()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "ekm_connection": {
-                "name": "projects/sample1/locations/sample2/ekmConnections/sample3"
-            }
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConnection.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.update_ekm_connection(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{ekm_connection.name=projects/*/locations/*/ekmConnections/*}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_update_ekm_connection_rest_flattened_error(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_ekm_connection(
-            ekm_service.UpdateEkmConnectionRequest(),
-            ekm_connection=ekm_service.EkmConnection(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-def test_update_ekm_connection_rest_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.GetEkmConfigRequest,
-        dict,
-    ],
-)
-def test_get_ekm_config_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/ekmConfig"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConfig(
-            name="name_value",
-            default_ekm_connection="default_ekm_connection_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConfig.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.get_ekm_config(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConfig)
-    assert response.name == "name_value"
-    assert response.default_ekm_connection == "default_ekm_connection_value"
-
-
-def test_get_ekm_config_rest_required_fields(
-    request_type=ekm_service.GetEkmConfigRequest,
-):
-    transport_class = transports.EkmServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_ekm_config._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_ekm_config._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = ekm_service.EkmConfig()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = ekm_service.EkmConfig.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.get_ekm_config(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_get_ekm_config_rest_unset_required_fields():
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.get_ekm_config._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_get_ekm_config_rest_interceptors(null_interceptor):
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.EkmServiceRestInterceptor(),
-    )
-    client = EkmServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "post_get_ekm_config"
-    ) as post, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "pre_get_ekm_config"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = ekm_service.GetEkmConfigRequest.pb(
-            ekm_service.GetEkmConfigRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = ekm_service.EkmConfig.to_json(
-            ekm_service.EkmConfig()
-        )
-
-        request = ekm_service.GetEkmConfigRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = ekm_service.EkmConfig()
-
-        client.get_ekm_config(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_get_ekm_config_rest_bad_request(
-    transport: str = "rest", request_type=ekm_service.GetEkmConfigRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/ekmConfig"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_ekm_config(request)
-
-
-def test_get_ekm_config_rest_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConfig()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {"name": "projects/sample1/locations/sample2/ekmConfig"}
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConfig.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.get_ekm_config(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/ekmConfig}" % client.transport._host,
-            args[1],
-        )
-
-
-def test_get_ekm_config_rest_flattened_error(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_ekm_config(
-            ekm_service.GetEkmConfigRequest(),
-            name="name_value",
-        )
-
-
-def test_get_ekm_config_rest_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.UpdateEkmConfigRequest,
-        dict,
-    ],
-)
-def test_update_ekm_config_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "ekm_config": {"name": "projects/sample1/locations/sample2/ekmConfig"}
-    }
-    request_init["ekm_config"] = {
-        "name": "projects/sample1/locations/sample2/ekmConfig",
-        "default_ekm_connection": "default_ekm_connection_value",
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = ekm_service.UpdateEkmConfigRequest.meta.fields["ekm_config"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["ekm_config"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["ekm_config"][field])):
-                    del request_init["ekm_config"][field][i][subfield]
-            else:
-                del request_init["ekm_config"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConfig(
-            name="name_value",
-            default_ekm_connection="default_ekm_connection_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConfig.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.update_ekm_config(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.EkmConfig)
-    assert response.name == "name_value"
-    assert response.default_ekm_connection == "default_ekm_connection_value"
-
-
-def test_update_ekm_config_rest_required_fields(
-    request_type=ekm_service.UpdateEkmConfigRequest,
-):
-    transport_class = transports.EkmServiceRestTransport
-
-    request_init = {}
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_ekm_config._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_ekm_config._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(("update_mask",))
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = ekm_service.EkmConfig()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "patch",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = ekm_service.EkmConfig.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.update_ekm_config(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_update_ekm_config_rest_unset_required_fields():
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.update_ekm_config._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(("updateMask",))
-        & set(
-            (
-                "ekmConfig",
-                "updateMask",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_update_ekm_config_rest_interceptors(null_interceptor):
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.EkmServiceRestInterceptor(),
-    )
-    client = EkmServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "post_update_ekm_config"
-    ) as post, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "pre_update_ekm_config"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = ekm_service.UpdateEkmConfigRequest.pb(
-            ekm_service.UpdateEkmConfigRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = ekm_service.EkmConfig.to_json(
-            ekm_service.EkmConfig()
-        )
-
-        request = ekm_service.UpdateEkmConfigRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = ekm_service.EkmConfig()
-
-        client.update_ekm_config(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_update_ekm_config_rest_bad_request(
-    transport: str = "rest", request_type=ekm_service.UpdateEkmConfigRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "ekm_config": {"name": "projects/sample1/locations/sample2/ekmConfig"}
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.update_ekm_config(request)
-
-
-def test_update_ekm_config_rest_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.EkmConfig()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "ekm_config": {"name": "projects/sample1/locations/sample2/ekmConfig"}
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            ekm_config=ekm_service.EkmConfig(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.EkmConfig.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.update_ekm_config(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{ekm_config.name=projects/*/locations/*/ekmConfig}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_update_ekm_config_rest_flattened_error(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_ekm_config(
-            ekm_service.UpdateEkmConfigRequest(),
-            ekm_config=ekm_service.EkmConfig(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-def test_update_ekm_config_rest_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        ekm_service.VerifyConnectivityRequest,
-        dict,
-    ],
-)
-def test_verify_connectivity_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/ekmConnections/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.VerifyConnectivityResponse()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.VerifyConnectivityResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.verify_connectivity(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, ekm_service.VerifyConnectivityResponse)
-
-
-def test_verify_connectivity_rest_required_fields(
-    request_type=ekm_service.VerifyConnectivityRequest,
-):
-    transport_class = transports.EkmServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).verify_connectivity._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).verify_connectivity._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = ekm_service.VerifyConnectivityResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = ekm_service.VerifyConnectivityResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.verify_connectivity(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_verify_connectivity_rest_unset_required_fields():
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.verify_connectivity._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_verify_connectivity_rest_interceptors(null_interceptor):
-    transport = transports.EkmServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.EkmServiceRestInterceptor(),
-    )
-    client = EkmServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "post_verify_connectivity"
-    ) as post, mock.patch.object(
-        transports.EkmServiceRestInterceptor, "pre_verify_connectivity"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = ekm_service.VerifyConnectivityRequest.pb(
-            ekm_service.VerifyConnectivityRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = ekm_service.VerifyConnectivityResponse.to_json(
-            ekm_service.VerifyConnectivityResponse()
-        )
-
-        request = ekm_service.VerifyConnectivityRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = ekm_service.VerifyConnectivityResponse()
-
-        client.verify_connectivity(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_verify_connectivity_rest_bad_request(
-    transport: str = "rest", request_type=ekm_service.VerifyConnectivityRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/ekmConnections/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.verify_connectivity(request)
-
-
-def test_verify_connectivity_rest_flattened():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = ekm_service.VerifyConnectivityResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/ekmConnections/sample3"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = ekm_service.VerifyConnectivityResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.verify_connectivity(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/ekmConnections/*}:verifyConnectivity"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_verify_connectivity_rest_flattened_error(transport: str = "rest"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.verify_connectivity(
-            ekm_service.VerifyConnectivityRequest(),
-            name="name_value",
-        )
-
-
-def test_verify_connectivity_rest_error():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-def test_credentials_transport_error():
-    # It is an error to provide credentials and a transport instance.
-    transport = transports.EkmServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    with pytest.raises(ValueError):
-        client = EkmServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(),
-            transport=transport,
-        )
-
-    # It is an error to provide a credentials file and a transport instance.
-    transport = transports.EkmServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    with pytest.raises(ValueError):
-        client = EkmServiceClient(
-            client_options={"credentials_file": "credentials.json"},
-            transport=transport,
-        )
-
-    # It is an error to provide an api_key and a transport instance.
-    transport = transports.EkmServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    options = client_options.ClientOptions()
-    options.api_key = "api_key"
-    with pytest.raises(ValueError):
-        client = EkmServiceClient(
-            client_options=options,
-            transport=transport,
-        )
-
-    # It is an error to provide an api_key and a credential.
-    options = mock.Mock()
-    options.api_key = "api_key"
-    with pytest.raises(ValueError):
-        client = EkmServiceClient(
-            client_options=options, credentials=ga_credentials.AnonymousCredentials()
-        )
-
-    # It is an error to provide scopes and a transport instance.
-    transport = transports.EkmServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    with pytest.raises(ValueError):
-        client = EkmServiceClient(
-            client_options={"scopes": ["1", "2"]},
-            transport=transport,
-        )
-
-
-def test_transport_instance():
-    # A client may be instantiated with a custom transport instance.
-    transport = transports.EkmServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    client = EkmServiceClient(transport=transport)
-    assert client.transport is transport
-
-
-def test_transport_get_channel():
-    # A client may be instantiated with a custom transport instance.
-    transport = transports.EkmServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    channel = transport.grpc_channel
-    assert channel
-
-    transport = transports.EkmServiceGrpcAsyncIOTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    channel = transport.grpc_channel
-    assert channel
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.EkmServiceGrpcTransport,
-        transports.EkmServiceGrpcAsyncIOTransport,
-        transports.EkmServiceRestTransport,
-    ],
-)
-def test_transport_adc(transport_class):
-    # Test default credentials are used if not provided.
-    with mock.patch.object(google.auth, "default") as adc:
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport_class()
-        adc.assert_called_once()
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "grpc",
-        "rest",
-    ],
-)
-def test_transport_kind(transport_name):
-    transport = EkmServiceClient.get_transport_class(transport_name)(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    assert transport.kind == transport_name
-
-
-def test_transport_grpc_default():
-    # A client should use the gRPC transport by default.
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    assert isinstance(
-        client.transport,
-        transports.EkmServiceGrpcTransport,
-    )
-
-
-def test_ekm_service_base_transport_error():
-    # Passing both a credentials object and credentials_file should raise an error
-    with pytest.raises(core_exceptions.DuplicateCredentialArgs):
-        transport = transports.EkmServiceTransport(
-            credentials=ga_credentials.AnonymousCredentials(),
-            credentials_file="credentials.json",
-        )
-
-
-def test_ekm_service_base_transport():
-    # Instantiate the base transport.
-    with mock.patch(
-        "google.cloud.kms_v1.services.ekm_service.transports.EkmServiceTransport.__init__"
-    ) as Transport:
-        Transport.return_value = None
-        transport = transports.EkmServiceTransport(
-            credentials=ga_credentials.AnonymousCredentials(),
-        )
-
-    # Every method on the transport should just blindly
-    # raise NotImplementedError.
-    methods = (
-        "list_ekm_connections",
-        "get_ekm_connection",
-        "create_ekm_connection",
-        "update_ekm_connection",
-        "get_ekm_config",
-        "update_ekm_config",
-        "verify_connectivity",
-        "set_iam_policy",
-        "get_iam_policy",
-        "test_iam_permissions",
-        "get_location",
-        "list_locations",
-    )
-    for method in methods:
-        with pytest.raises(NotImplementedError):
-            getattr(transport, method)(request=object())
-
-    with pytest.raises(NotImplementedError):
-        transport.close()
-
-    # Catch all for all remaining methods and properties
-    remainder = [
-        "kind",
-    ]
-    for r in remainder:
-        with pytest.raises(NotImplementedError):
-            getattr(transport, r)()
-
-
-def test_ekm_service_base_transport_with_credentials_file():
-    # Instantiate the base transport with a credentials file
-    with mock.patch.object(
-        google.auth, "load_credentials_from_file", autospec=True
-    ) as load_creds, mock.patch(
-        "google.cloud.kms_v1.services.ekm_service.transports.EkmServiceTransport._prep_wrapped_messages"
-    ) as Transport:
-        Transport.return_value = None
-        load_creds.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport = transports.EkmServiceTransport(
-            credentials_file="credentials.json",
-            quota_project_id="octopus",
-        )
-        load_creds.assert_called_once_with(
-            "credentials.json",
-            scopes=None,
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            quota_project_id="octopus",
-        )
-
-
-def test_ekm_service_base_transport_with_adc():
-    # Test the default credentials are used if credentials and credentials_file are None.
-    with mock.patch.object(google.auth, "default", autospec=True) as adc, mock.patch(
-        "google.cloud.kms_v1.services.ekm_service.transports.EkmServiceTransport._prep_wrapped_messages"
-    ) as Transport:
-        Transport.return_value = None
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport = transports.EkmServiceTransport()
-        adc.assert_called_once()
-
-
-def test_ekm_service_auth_adc():
-    # If no credentials are provided, we should use ADC credentials.
-    with mock.patch.object(google.auth, "default", autospec=True) as adc:
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        EkmServiceClient()
-        adc.assert_called_once_with(
-            scopes=None,
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            quota_project_id=None,
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.EkmServiceGrpcTransport,
-        transports.EkmServiceGrpcAsyncIOTransport,
-    ],
-)
-def test_ekm_service_transport_auth_adc(transport_class):
-    # If credentials and host are not provided, the transport class should use
-    # ADC credentials.
-    with mock.patch.object(google.auth, "default", autospec=True) as adc:
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport_class(quota_project_id="octopus", scopes=["1", "2"])
-        adc.assert_called_once_with(
-            scopes=["1", "2"],
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            quota_project_id="octopus",
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.EkmServiceGrpcTransport,
-        transports.EkmServiceGrpcAsyncIOTransport,
-        transports.EkmServiceRestTransport,
-    ],
-)
-def test_ekm_service_transport_auth_gdch_credentials(transport_class):
-    host = "https://language.com"
-    api_audience_tests = [None, "https://language2.com"]
-    api_audience_expect = [host, "https://language2.com"]
-    for t, e in zip(api_audience_tests, api_audience_expect):
-        with mock.patch.object(google.auth, "default", autospec=True) as adc:
-            gdch_mock = mock.MagicMock()
-            type(gdch_mock).with_gdch_audience = mock.PropertyMock(
-                return_value=gdch_mock
-            )
-            adc.return_value = (gdch_mock, None)
-            transport_class(host=host, api_audience=t)
-            gdch_mock.with_gdch_audience.assert_called_once_with(e)
-
-
-@pytest.mark.parametrize(
-    "transport_class,grpc_helpers",
-    [
-        (transports.EkmServiceGrpcTransport, grpc_helpers),
-        (transports.EkmServiceGrpcAsyncIOTransport, grpc_helpers_async),
-    ],
-)
-def test_ekm_service_transport_create_channel(transport_class, grpc_helpers):
-    # If credentials and host are not provided, the transport class should use
-    # ADC credentials.
-    with mock.patch.object(
-        google.auth, "default", autospec=True
-    ) as adc, mock.patch.object(
-        grpc_helpers, "create_channel", autospec=True
-    ) as create_channel:
-        creds = ga_credentials.AnonymousCredentials()
-        adc.return_value = (creds, None)
-        transport_class(quota_project_id="octopus", scopes=["1", "2"])
-
-        create_channel.assert_called_with(
-            "cloudkms.googleapis.com:443",
-            credentials=creds,
-            credentials_file=None,
-            quota_project_id="octopus",
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            scopes=["1", "2"],
-            default_host="cloudkms.googleapis.com",
-            ssl_credentials=None,
-            options=[
-                ("grpc.max_send_message_length", -1),
-                ("grpc.max_receive_message_length", -1),
-            ],
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [transports.EkmServiceGrpcTransport, transports.EkmServiceGrpcAsyncIOTransport],
-)
-def test_ekm_service_grpc_transport_client_cert_source_for_mtls(transport_class):
-    cred = ga_credentials.AnonymousCredentials()
-
-    # Check ssl_channel_credentials is used if provided.
-    with mock.patch.object(transport_class, "create_channel") as mock_create_channel:
-        mock_ssl_channel_creds = mock.Mock()
-        transport_class(
-            host="squid.clam.whelk",
-            credentials=cred,
-            ssl_channel_credentials=mock_ssl_channel_creds,
-        )
-        mock_create_channel.assert_called_once_with(
-            "squid.clam.whelk:443",
-            credentials=cred,
-            credentials_file=None,
-            scopes=None,
-            ssl_credentials=mock_ssl_channel_creds,
-            quota_project_id=None,
-            options=[
-                ("grpc.max_send_message_length", -1),
-                ("grpc.max_receive_message_length", -1),
-            ],
-        )
-
-    # Check if ssl_channel_credentials is not provided, then client_cert_source_for_mtls
-    # is used.
-    with mock.patch.object(transport_class, "create_channel", return_value=mock.Mock()):
-        with mock.patch("grpc.ssl_channel_credentials") as mock_ssl_cred:
-            transport_class(
-                credentials=cred,
-                client_cert_source_for_mtls=client_cert_source_callback,
-            )
-            expected_cert, expected_key = client_cert_source_callback()
-            mock_ssl_cred.assert_called_once_with(
-                certificate_chain=expected_cert, private_key=expected_key
-            )
-
-
-def test_ekm_service_http_transport_client_cert_source_for_mtls():
-    cred = ga_credentials.AnonymousCredentials()
-    with mock.patch(
-        "google.auth.transport.requests.AuthorizedSession.configure_mtls_channel"
-    ) as mock_configure_mtls_channel:
-        transports.EkmServiceRestTransport(
-            credentials=cred, client_cert_source_for_mtls=client_cert_source_callback
-        )
-        mock_configure_mtls_channel.assert_called_once_with(client_cert_source_callback)
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "grpc",
-        "grpc_asyncio",
-        "rest",
-    ],
-)
-def test_ekm_service_host_no_port(transport_name):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        client_options=client_options.ClientOptions(
-            api_endpoint="cloudkms.googleapis.com"
-        ),
-        transport=transport_name,
-    )
-    assert client.transport._host == (
-        "cloudkms.googleapis.com:443"
-        if transport_name in ["grpc", "grpc_asyncio"]
-        else "https://cloudkms.googleapis.com"
-    )
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "grpc",
-        "grpc_asyncio",
-        "rest",
-    ],
-)
-def test_ekm_service_host_with_port(transport_name):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        client_options=client_options.ClientOptions(
-            api_endpoint="cloudkms.googleapis.com:8000"
-        ),
-        transport=transport_name,
-    )
-    assert client.transport._host == (
-        "cloudkms.googleapis.com:8000"
-        if transport_name in ["grpc", "grpc_asyncio"]
-        else "https://cloudkms.googleapis.com:8000"
-    )
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "rest",
-    ],
-)
-def test_ekm_service_client_transport_session_collision(transport_name):
-    creds1 = ga_credentials.AnonymousCredentials()
-    creds2 = ga_credentials.AnonymousCredentials()
-    client1 = EkmServiceClient(
-        credentials=creds1,
-        transport=transport_name,
-    )
-    client2 = EkmServiceClient(
-        credentials=creds2,
-        transport=transport_name,
-    )
-    session1 = client1.transport.list_ekm_connections._session
-    session2 = client2.transport.list_ekm_connections._session
-    assert session1 != session2
-    session1 = client1.transport.get_ekm_connection._session
-    session2 = client2.transport.get_ekm_connection._session
-    assert session1 != session2
-    session1 = client1.transport.create_ekm_connection._session
-    session2 = client2.transport.create_ekm_connection._session
-    assert session1 != session2
-    session1 = client1.transport.update_ekm_connection._session
-    session2 = client2.transport.update_ekm_connection._session
-    assert session1 != session2
-    session1 = client1.transport.get_ekm_config._session
-    session2 = client2.transport.get_ekm_config._session
-    assert session1 != session2
-    session1 = client1.transport.update_ekm_config._session
-    session2 = client2.transport.update_ekm_config._session
-    assert session1 != session2
-    session1 = client1.transport.verify_connectivity._session
-    session2 = client2.transport.verify_connectivity._session
-    assert session1 != session2
-
-
-def test_ekm_service_grpc_transport_channel():
-    channel = grpc.secure_channel("http://localhost/", grpc.local_channel_credentials())
-
-    # Check that channel is used if provided.
-    transport = transports.EkmServiceGrpcTransport(
-        host="squid.clam.whelk",
-        channel=channel,
-    )
-    assert transport.grpc_channel == channel
-    assert transport._host == "squid.clam.whelk:443"
-    assert transport._ssl_channel_credentials == None
-
-
-def test_ekm_service_grpc_asyncio_transport_channel():
-    channel = aio.secure_channel("http://localhost/", grpc.local_channel_credentials())
-
-    # Check that channel is used if provided.
-    transport = transports.EkmServiceGrpcAsyncIOTransport(
-        host="squid.clam.whelk",
-        channel=channel,
-    )
-    assert transport.grpc_channel == channel
-    assert transport._host == "squid.clam.whelk:443"
-    assert transport._ssl_channel_credentials == None
-
-
-# Remove this test when deprecated arguments (api_mtls_endpoint, client_cert_source) are
-# removed from grpc/grpc_asyncio transport constructor.
-@pytest.mark.parametrize(
-    "transport_class",
-    [transports.EkmServiceGrpcTransport, transports.EkmServiceGrpcAsyncIOTransport],
-)
-def test_ekm_service_transport_channel_mtls_with_client_cert_source(transport_class):
-    with mock.patch(
-        "grpc.ssl_channel_credentials", autospec=True
-    ) as grpc_ssl_channel_cred:
-        with mock.patch.object(
-            transport_class, "create_channel"
-        ) as grpc_create_channel:
-            mock_ssl_cred = mock.Mock()
-            grpc_ssl_channel_cred.return_value = mock_ssl_cred
-
-            mock_grpc_channel = mock.Mock()
-            grpc_create_channel.return_value = mock_grpc_channel
-
-            cred = ga_credentials.AnonymousCredentials()
-            with pytest.warns(DeprecationWarning):
-                with mock.patch.object(google.auth, "default") as adc:
-                    adc.return_value = (cred, None)
-                    transport = transport_class(
-                        host="squid.clam.whelk",
-                        api_mtls_endpoint="mtls.squid.clam.whelk",
-                        client_cert_source=client_cert_source_callback,
-                    )
-                    adc.assert_called_once()
-
-            grpc_ssl_channel_cred.assert_called_once_with(
-                certificate_chain=b"cert bytes", private_key=b"key bytes"
-            )
-            grpc_create_channel.assert_called_once_with(
-                "mtls.squid.clam.whelk:443",
-                credentials=cred,
-                credentials_file=None,
-                scopes=None,
-                ssl_credentials=mock_ssl_cred,
-                quota_project_id=None,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-            assert transport.grpc_channel == mock_grpc_channel
-            assert transport._ssl_channel_credentials == mock_ssl_cred
-
-
-# Remove this test when deprecated arguments (api_mtls_endpoint, client_cert_source) are
-# removed from grpc/grpc_asyncio transport constructor.
-@pytest.mark.parametrize(
-    "transport_class",
-    [transports.EkmServiceGrpcTransport, transports.EkmServiceGrpcAsyncIOTransport],
-)
-def test_ekm_service_transport_channel_mtls_with_adc(transport_class):
-    mock_ssl_cred = mock.Mock()
-    with mock.patch.multiple(
-        "google.auth.transport.grpc.SslCredentials",
-        __init__=mock.Mock(return_value=None),
-        ssl_credentials=mock.PropertyMock(return_value=mock_ssl_cred),
-    ):
-        with mock.patch.object(
-            transport_class, "create_channel"
-        ) as grpc_create_channel:
-            mock_grpc_channel = mock.Mock()
-            grpc_create_channel.return_value = mock_grpc_channel
-            mock_cred = mock.Mock()
-
-            with pytest.warns(DeprecationWarning):
-                transport = transport_class(
-                    host="squid.clam.whelk",
-                    credentials=mock_cred,
-                    api_mtls_endpoint="mtls.squid.clam.whelk",
-                    client_cert_source=None,
-                )
-
-            grpc_create_channel.assert_called_once_with(
-                "mtls.squid.clam.whelk:443",
-                credentials=mock_cred,
-                credentials_file=None,
-                scopes=None,
-                ssl_credentials=mock_ssl_cred,
-                quota_project_id=None,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-            assert transport.grpc_channel == mock_grpc_channel
-
-
-def test_ekm_config_path():
-    project = "squid"
-    location = "clam"
-    expected = "projects/{project}/locations/{location}/ekmConfig".format(
-        project=project,
-        location=location,
-    )
-    actual = EkmServiceClient.ekm_config_path(project, location)
-    assert expected == actual
-
-
-def test_parse_ekm_config_path():
-    expected = {
-        "project": "whelk",
-        "location": "octopus",
-    }
-    path = EkmServiceClient.ekm_config_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_ekm_config_path(path)
-    assert expected == actual
-
-
-def test_ekm_connection_path():
-    project = "oyster"
-    location = "nudibranch"
-    ekm_connection = "cuttlefish"
-    expected = "projects/{project}/locations/{location}/ekmConnections/{ekm_connection}".format(
-        project=project,
-        location=location,
-        ekm_connection=ekm_connection,
-    )
-    actual = EkmServiceClient.ekm_connection_path(project, location, ekm_connection)
-    assert expected == actual
-
-
-def test_parse_ekm_connection_path():
-    expected = {
-        "project": "mussel",
-        "location": "winkle",
-        "ekm_connection": "nautilus",
-    }
-    path = EkmServiceClient.ekm_connection_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_ekm_connection_path(path)
-    assert expected == actual
-
-
-def test_service_path():
-    project = "scallop"
-    location = "abalone"
-    namespace = "squid"
-    service = "clam"
-    expected = "projects/{project}/locations/{location}/namespaces/{namespace}/services/{service}".format(
-        project=project,
-        location=location,
-        namespace=namespace,
-        service=service,
-    )
-    actual = EkmServiceClient.service_path(project, location, namespace, service)
-    assert expected == actual
-
-
-def test_parse_service_path():
-    expected = {
-        "project": "whelk",
-        "location": "octopus",
-        "namespace": "oyster",
-        "service": "nudibranch",
-    }
-    path = EkmServiceClient.service_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_service_path(path)
-    assert expected == actual
-
-
-def test_common_billing_account_path():
-    billing_account = "cuttlefish"
-    expected = "billingAccounts/{billing_account}".format(
-        billing_account=billing_account,
-    )
-    actual = EkmServiceClient.common_billing_account_path(billing_account)
-    assert expected == actual
-
-
-def test_parse_common_billing_account_path():
-    expected = {
-        "billing_account": "mussel",
-    }
-    path = EkmServiceClient.common_billing_account_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_common_billing_account_path(path)
-    assert expected == actual
-
-
-def test_common_folder_path():
-    folder = "winkle"
-    expected = "folders/{folder}".format(
-        folder=folder,
-    )
-    actual = EkmServiceClient.common_folder_path(folder)
-    assert expected == actual
-
-
-def test_parse_common_folder_path():
-    expected = {
-        "folder": "nautilus",
-    }
-    path = EkmServiceClient.common_folder_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_common_folder_path(path)
-    assert expected == actual
-
-
-def test_common_organization_path():
-    organization = "scallop"
-    expected = "organizations/{organization}".format(
-        organization=organization,
-    )
-    actual = EkmServiceClient.common_organization_path(organization)
-    assert expected == actual
-
-
-def test_parse_common_organization_path():
-    expected = {
-        "organization": "abalone",
-    }
-    path = EkmServiceClient.common_organization_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_common_organization_path(path)
-    assert expected == actual
-
-
-def test_common_project_path():
-    project = "squid"
-    expected = "projects/{project}".format(
-        project=project,
-    )
-    actual = EkmServiceClient.common_project_path(project)
-    assert expected == actual
-
-
-def test_parse_common_project_path():
-    expected = {
-        "project": "clam",
-    }
-    path = EkmServiceClient.common_project_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_common_project_path(path)
-    assert expected == actual
-
-
-def test_common_location_path():
-    project = "whelk"
-    location = "octopus"
-    expected = "projects/{project}/locations/{location}".format(
-        project=project,
-        location=location,
-    )
-    actual = EkmServiceClient.common_location_path(project, location)
-    assert expected == actual
-
-
-def test_parse_common_location_path():
-    expected = {
-        "project": "oyster",
-        "location": "nudibranch",
-    }
-    path = EkmServiceClient.common_location_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = EkmServiceClient.parse_common_location_path(path)
-    assert expected == actual
-
-
-def test_client_with_default_client_info():
-    client_info = gapic_v1.client_info.ClientInfo()
-
-    with mock.patch.object(
-        transports.EkmServiceTransport, "_prep_wrapped_messages"
-    ) as prep:
-        client = EkmServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(),
-            client_info=client_info,
-        )
-        prep.assert_called_once_with(client_info)
-
-    with mock.patch.object(
-        transports.EkmServiceTransport, "_prep_wrapped_messages"
-    ) as prep:
-        transport_class = EkmServiceClient.get_transport_class()
-        transport = transport_class(
-            credentials=ga_credentials.AnonymousCredentials(),
-            client_info=client_info,
-        )
-        prep.assert_called_once_with(client_info)
-
-
-@pytest.mark.asyncio
-async def test_transport_close_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc_asyncio",
-    )
-    with mock.patch.object(
-        type(getattr(client.transport, "grpc_channel")), "close"
-    ) as close:
-        async with client:
-            close.assert_not_called()
-        close.assert_called_once()
-
-
-def test_get_location_rest_bad_request(
-    transport: str = "rest", request_type=locations_pb2.GetLocationRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"name": "projects/sample1/locations/sample2"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_location(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        locations_pb2.GetLocationRequest,
-        dict,
-    ],
-)
-def test_get_location_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"name": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = locations_pb2.Location()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.get_location(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.Location)
-
-
-def test_list_locations_rest_bad_request(
-    transport: str = "rest", request_type=locations_pb2.ListLocationsRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict({"name": "projects/sample1"}, request)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.list_locations(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        locations_pb2.ListLocationsRequest,
-        dict,
-    ],
-)
-def test_list_locations_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"name": "projects/sample1"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = locations_pb2.ListLocationsResponse()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.list_locations(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.ListLocationsResponse)
-
-
-def test_get_iam_policy_rest_bad_request(
-    transport: str = "rest", request_type=iam_policy_pb2.GetIamPolicyRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_iam_policy(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        iam_policy_pb2.GetIamPolicyRequest,
-        dict,
-    ],
-)
-def test_get_iam_policy_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = policy_pb2.Policy()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.get_iam_policy(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-
-def test_set_iam_policy_rest_bad_request(
-    transport: str = "rest", request_type=iam_policy_pb2.SetIamPolicyRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.set_iam_policy(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        iam_policy_pb2.SetIamPolicyRequest,
-        dict,
-    ],
-)
-def test_set_iam_policy_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = policy_pb2.Policy()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.set_iam_policy(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-
-def test_test_iam_permissions_rest_bad_request(
-    transport: str = "rest", request_type=iam_policy_pb2.TestIamPermissionsRequest
-):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.test_iam_permissions(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        iam_policy_pb2.TestIamPermissionsRequest,
-        dict,
-    ],
-)
-def test_test_iam_permissions_rest(request_type):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = iam_policy_pb2.TestIamPermissionsResponse()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.test_iam_permissions(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, iam_policy_pb2.TestIamPermissionsResponse)
-
-
-def test_list_locations(transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.ListLocationsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.ListLocationsResponse()
-        response = client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.ListLocationsResponse)
-
-
-@pytest.mark.asyncio
-async def test_list_locations_async(transport: str = "grpc"):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.ListLocationsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.ListLocationsResponse()
-        )
-        response = await client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.ListLocationsResponse)
-
-
-def test_list_locations_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.ListLocationsRequest()
-    request.name = "locations"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        call.return_value = locations_pb2.ListLocationsResponse()
-
-        client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_list_locations_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.ListLocationsRequest()
-    request.name = "locations"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.ListLocationsResponse()
-        )
-        await client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations",
-    ) in kw["metadata"]
-
-
-def test_list_locations_from_dict():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.ListLocationsResponse()
-
-        response = client.list_locations(
-            request={
-                "name": "locations",
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_list_locations_from_dict_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.ListLocationsResponse()
-        )
-        response = await client.list_locations(
-            request={
-                "name": "locations",
-            }
-        )
-        call.assert_called()
-
-
-def test_get_location(transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.GetLocationRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.Location()
-        response = client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.Location)
-
-
-@pytest.mark.asyncio
-async def test_get_location_async(transport: str = "grpc_asyncio"):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.GetLocationRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.Location()
-        )
-        response = await client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.Location)
-
-
-def test_get_location_field_headers():
-    client = EkmServiceClient(credentials=ga_credentials.AnonymousCredentials())
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.GetLocationRequest()
-    request.name = "locations/abc"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        call.return_value = locations_pb2.Location()
-
-        client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations/abc",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_location_field_headers_async():
-    client = EkmServiceAsyncClient(credentials=ga_credentials.AnonymousCredentials())
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.GetLocationRequest()
-    request.name = "locations/abc"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.Location()
-        )
-        await client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations/abc",
-    ) in kw["metadata"]
-
-
-def test_get_location_from_dict():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.Location()
-
-        response = client.get_location(
-            request={
-                "name": "locations/abc",
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_get_location_from_dict_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.Location()
-        )
-        response = await client.get_location(
-            request={
-                "name": "locations",
-            }
-        )
-        call.assert_called()
-
-
-def test_set_iam_policy(transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy(
-            version=774,
-            etag=b"etag_blob",
-        )
-        response = client.set_iam_policy(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-@pytest.mark.asyncio
-async def test_set_iam_policy_async(transport: str = "grpc_asyncio"):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            policy_pb2.Policy(
-                version=774,
-                etag=b"etag_blob",
-            )
-        )
-        response = await client.set_iam_policy(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-def test_set_iam_policy_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        call.return_value = policy_pb2.Policy()
-
-        client.set_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_set_iam_policy_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        await client.set_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-def test_set_iam_policy_from_dict():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy()
-
-        response = client.set_iam_policy(
-            request={
-                "resource": "resource_value",
-                "policy": policy_pb2.Policy(version=774),
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_set_iam_policy_from_dict_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        response = await client.set_iam_policy(
-            request={
-                "resource": "resource_value",
-                "policy": policy_pb2.Policy(version=774),
-            }
-        )
-        call.assert_called()
-
-
-def test_get_iam_policy(transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy(
-            version=774,
-            etag=b"etag_blob",
-        )
-
-        response = client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-@pytest.mark.asyncio
-async def test_get_iam_policy_async(transport: str = "grpc_asyncio"):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            policy_pb2.Policy(
-                version=774,
-                etag=b"etag_blob",
-            )
-        )
-
-        response = await client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-def test_get_iam_policy_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        call.return_value = policy_pb2.Policy()
-
-        client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_iam_policy_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        await client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-def test_get_iam_policy_from_dict():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy()
-
-        response = client.get_iam_policy(
-            request={
-                "resource": "resource_value",
-                "options": options_pb2.GetPolicyOptions(requested_policy_version=2598),
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_get_iam_policy_from_dict_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        response = await client.get_iam_policy(
-            request={
-                "resource": "resource_value",
-                "options": options_pb2.GetPolicyOptions(requested_policy_version=2598),
-            }
-        )
-        call.assert_called()
-
-
-def test_test_iam_permissions(transport: str = "grpc"):
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = iam_policy_pb2.TestIamPermissionsResponse(
-            permissions=["permissions_value"],
-        )
-
-        response = client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, iam_policy_pb2.TestIamPermissionsResponse)
-
-    assert response.permissions == ["permissions_value"]
-
-
-@pytest.mark.asyncio
-async def test_test_iam_permissions_async(transport: str = "grpc_asyncio"):
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            iam_policy_pb2.TestIamPermissionsResponse(
-                permissions=["permissions_value"],
-            )
-        )
-
-        response = await client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, iam_policy_pb2.TestIamPermissionsResponse)
-
-    assert response.permissions == ["permissions_value"]
-
-
-def test_test_iam_permissions_field_headers():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        call.return_value = iam_policy_pb2.TestIamPermissionsResponse()
-
-        client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_test_iam_permissions_field_headers_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            iam_policy_pb2.TestIamPermissionsResponse()
-        )
-
-        await client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-def test_test_iam_permissions_from_dict():
-    client = EkmServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = iam_policy_pb2.TestIamPermissionsResponse()
-
-        response = client.test_iam_permissions(
-            request={
-                "resource": "resource_value",
-                "permissions": ["permissions_value"],
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_test_iam_permissions_from_dict_async():
-    client = EkmServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            iam_policy_pb2.TestIamPermissionsResponse()
-        )
-
-        response = await client.test_iam_permissions(
-            request={
-                "resource": "resource_value",
-                "permissions": ["permissions_value"],
-            }
-        )
-        call.assert_called()
-
-
-def test_transport_close():
-    transports = {
-        "rest": "_session",
-        "grpc": "_grpc_channel",
-    }
-
-    for transport, close_name in transports.items():
-        client = EkmServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(), transport=transport
-        )
-        with mock.patch.object(
-            type(getattr(client.transport, close_name)), "close"
-        ) as close:
-            with client:
-                close.assert_not_called()
-            close.assert_called_once()
-
-
-def test_client_ctx():
-    transports = [
-        "rest",
-        "grpc",
-    ]
-    for transport in transports:
-        client = EkmServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(), transport=transport
-        )
-        # Test client calls underlying transport.
-        with mock.patch.object(type(client.transport), "close") as close:
-            close.assert_not_called()
-            with client:
-                pass
-            close.assert_called()
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class",
-    [
-        (EkmServiceClient, transports.EkmServiceGrpcTransport),
-        (EkmServiceAsyncClient, transports.EkmServiceGrpcAsyncIOTransport),
-    ],
-)
-def test_api_key_credentials(client_class, transport_class):
-    with mock.patch.object(
-        google.auth._default, "get_api_key_credentials", create=True
-    ) as get_api_key_credentials:
-        mock_cred = mock.Mock()
-        get_api_key_credentials.return_value = mock_cred
-        options = client_options.ClientOptions()
-        options.api_key = "api_key"
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(client_options=options)
-            patched.assert_called_once_with(
-                credentials=mock_cred,
-                credentials_file=None,
-                host=client.DEFAULT_ENDPOINT,
-                scopes=None,
-                client_cert_source_for_mtls=None,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )
diff --git a/tests/unit/gapic/kms_v1/test_key_management_service.py b/tests/unit/gapic/kms_v1/test_key_management_service.py
deleted file mode 100644
index 06fe60ef..00000000
--- a/tests/unit/gapic/kms_v1/test_key_management_service.py
+++ /dev/null
@@ -1,19602 +0,0 @@
-# -*- coding: utf-8 -*-
-# Copyright 2023 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-import os
-
-# try/except added for compatibility with python < 3.8
-try:
-    from unittest import mock
-    from unittest.mock import AsyncMock  # pragma: NO COVER
-except ImportError:  # pragma: NO COVER
-    import mock
-
-from collections.abc import Iterable
-import json
-import math
-
-from google.api_core import gapic_v1, grpc_helpers, grpc_helpers_async, path_template
-from google.api_core import client_options
-from google.api_core import exceptions as core_exceptions
-import google.auth
-from google.auth import credentials as ga_credentials
-from google.auth.exceptions import MutualTLSChannelError
-from google.cloud.location import locations_pb2
-from google.iam.v1 import iam_policy_pb2  # type: ignore
-from google.iam.v1 import options_pb2  # type: ignore
-from google.iam.v1 import policy_pb2  # type: ignore
-from google.oauth2 import service_account
-from google.protobuf import duration_pb2  # type: ignore
-from google.protobuf import field_mask_pb2  # type: ignore
-from google.protobuf import json_format
-from google.protobuf import timestamp_pb2  # type: ignore
-from google.protobuf import wrappers_pb2  # type: ignore
-import grpc
-from grpc.experimental import aio
-from proto.marshal.rules import wrappers
-from proto.marshal.rules.dates import DurationRule, TimestampRule
-import pytest
-from requests import PreparedRequest, Request, Response
-from requests.sessions import Session
-
-from google.cloud.kms_v1.services.key_management_service import (
-    KeyManagementServiceAsyncClient,
-    KeyManagementServiceClient,
-    pagers,
-    transports,
-)
-from google.cloud.kms_v1.types import resources, service
-
-
-def client_cert_source_callback():
-    return b"cert bytes", b"key bytes"
-
-
-# If default endpoint is localhost, then default mtls endpoint will be the same.
-# This method modifies the default endpoint so the client can produce a different
-# mtls endpoint for endpoint testing purposes.
-def modify_default_endpoint(client):
-    return (
-        "foo.googleapis.com"
-        if ("localhost" in client.DEFAULT_ENDPOINT)
-        else client.DEFAULT_ENDPOINT
-    )
-
-
-def test__get_default_mtls_endpoint():
-    api_endpoint = "example.googleapis.com"
-    api_mtls_endpoint = "example.mtls.googleapis.com"
-    sandbox_endpoint = "example.sandbox.googleapis.com"
-    sandbox_mtls_endpoint = "example.mtls.sandbox.googleapis.com"
-    non_googleapi = "api.example.com"
-
-    assert KeyManagementServiceClient._get_default_mtls_endpoint(None) is None
-    assert (
-        KeyManagementServiceClient._get_default_mtls_endpoint(api_endpoint)
-        == api_mtls_endpoint
-    )
-    assert (
-        KeyManagementServiceClient._get_default_mtls_endpoint(api_mtls_endpoint)
-        == api_mtls_endpoint
-    )
-    assert (
-        KeyManagementServiceClient._get_default_mtls_endpoint(sandbox_endpoint)
-        == sandbox_mtls_endpoint
-    )
-    assert (
-        KeyManagementServiceClient._get_default_mtls_endpoint(sandbox_mtls_endpoint)
-        == sandbox_mtls_endpoint
-    )
-    assert (
-        KeyManagementServiceClient._get_default_mtls_endpoint(non_googleapi)
-        == non_googleapi
-    )
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_name",
-    [
-        (KeyManagementServiceClient, "grpc"),
-        (KeyManagementServiceAsyncClient, "grpc_asyncio"),
-        (KeyManagementServiceClient, "rest"),
-    ],
-)
-def test_key_management_service_client_from_service_account_info(
-    client_class, transport_name
-):
-    creds = ga_credentials.AnonymousCredentials()
-    with mock.patch.object(
-        service_account.Credentials, "from_service_account_info"
-    ) as factory:
-        factory.return_value = creds
-        info = {"valid": True}
-        client = client_class.from_service_account_info(info, transport=transport_name)
-        assert client.transport._credentials == creds
-        assert isinstance(client, client_class)
-
-        assert client.transport._host == (
-            "cloudkms.googleapis.com:443"
-            if transport_name in ["grpc", "grpc_asyncio"]
-            else "https://cloudkms.googleapis.com"
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class,transport_name",
-    [
-        (transports.KeyManagementServiceGrpcTransport, "grpc"),
-        (transports.KeyManagementServiceGrpcAsyncIOTransport, "grpc_asyncio"),
-        (transports.KeyManagementServiceRestTransport, "rest"),
-    ],
-)
-def test_key_management_service_client_service_account_always_use_jwt(
-    transport_class, transport_name
-):
-    with mock.patch.object(
-        service_account.Credentials, "with_always_use_jwt_access", create=True
-    ) as use_jwt:
-        creds = service_account.Credentials(None, None, None)
-        transport = transport_class(credentials=creds, always_use_jwt_access=True)
-        use_jwt.assert_called_once_with(True)
-
-    with mock.patch.object(
-        service_account.Credentials, "with_always_use_jwt_access", create=True
-    ) as use_jwt:
-        creds = service_account.Credentials(None, None, None)
-        transport = transport_class(credentials=creds, always_use_jwt_access=False)
-        use_jwt.assert_not_called()
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_name",
-    [
-        (KeyManagementServiceClient, "grpc"),
-        (KeyManagementServiceAsyncClient, "grpc_asyncio"),
-        (KeyManagementServiceClient, "rest"),
-    ],
-)
-def test_key_management_service_client_from_service_account_file(
-    client_class, transport_name
-):
-    creds = ga_credentials.AnonymousCredentials()
-    with mock.patch.object(
-        service_account.Credentials, "from_service_account_file"
-    ) as factory:
-        factory.return_value = creds
-        client = client_class.from_service_account_file(
-            "dummy/file/path.json", transport=transport_name
-        )
-        assert client.transport._credentials == creds
-        assert isinstance(client, client_class)
-
-        client = client_class.from_service_account_json(
-            "dummy/file/path.json", transport=transport_name
-        )
-        assert client.transport._credentials == creds
-        assert isinstance(client, client_class)
-
-        assert client.transport._host == (
-            "cloudkms.googleapis.com:443"
-            if transport_name in ["grpc", "grpc_asyncio"]
-            else "https://cloudkms.googleapis.com"
-        )
-
-
-def test_key_management_service_client_get_transport_class():
-    transport = KeyManagementServiceClient.get_transport_class()
-    available_transports = [
-        transports.KeyManagementServiceGrpcTransport,
-        transports.KeyManagementServiceRestTransport,
-    ]
-    assert transport in available_transports
-
-    transport = KeyManagementServiceClient.get_transport_class("grpc")
-    assert transport == transports.KeyManagementServiceGrpcTransport
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name",
-    [
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceGrpcTransport,
-            "grpc",
-        ),
-        (
-            KeyManagementServiceAsyncClient,
-            transports.KeyManagementServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-        ),
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceRestTransport,
-            "rest",
-        ),
-    ],
-)
-@mock.patch.object(
-    KeyManagementServiceClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(KeyManagementServiceClient),
-)
-@mock.patch.object(
-    KeyManagementServiceAsyncClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(KeyManagementServiceAsyncClient),
-)
-def test_key_management_service_client_client_options(
-    client_class, transport_class, transport_name
-):
-    # Check that if channel is provided we won't create a new one.
-    with mock.patch.object(KeyManagementServiceClient, "get_transport_class") as gtc:
-        transport = transport_class(credentials=ga_credentials.AnonymousCredentials())
-        client = client_class(transport=transport)
-        gtc.assert_not_called()
-
-    # Check that if channel is provided via str we will create a new one.
-    with mock.patch.object(KeyManagementServiceClient, "get_transport_class") as gtc:
-        client = client_class(transport=transport_name)
-        gtc.assert_called()
-
-    # Check the case api_endpoint is provided.
-    options = client_options.ClientOptions(api_endpoint="squid.clam.whelk")
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(transport=transport_name, client_options=options)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host="squid.clam.whelk",
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
-    # "never".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "never"}):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(transport=transport_name)
-            patched.assert_called_once_with(
-                credentials=None,
-                credentials_file=None,
-                host=client.DEFAULT_ENDPOINT,
-                scopes=None,
-                client_cert_source_for_mtls=None,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )
-
-    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT is
-    # "always".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "always"}):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(transport=transport_name)
-            patched.assert_called_once_with(
-                credentials=None,
-                credentials_file=None,
-                host=client.DEFAULT_MTLS_ENDPOINT,
-                scopes=None,
-                client_cert_source_for_mtls=None,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )
-
-    # Check the case api_endpoint is not provided and GOOGLE_API_USE_MTLS_ENDPOINT has
-    # unsupported value.
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "Unsupported"}):
-        with pytest.raises(MutualTLSChannelError):
-            client = client_class(transport=transport_name)
-
-    # Check the case GOOGLE_API_USE_CLIENT_CERTIFICATE has unsupported value.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "Unsupported"}
-    ):
-        with pytest.raises(ValueError):
-            client = client_class(transport=transport_name)
-
-    # Check the case quota_project_id is provided
-    options = client_options.ClientOptions(quota_project_id="octopus")
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id="octopus",
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-    # Check the case api_endpoint is provided
-    options = client_options.ClientOptions(
-        api_audience="https://language.googleapis.com"
-    )
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience="https://language.googleapis.com",
-        )
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name,use_client_cert_env",
-    [
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceGrpcTransport,
-            "grpc",
-            "true",
-        ),
-        (
-            KeyManagementServiceAsyncClient,
-            transports.KeyManagementServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            "true",
-        ),
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceGrpcTransport,
-            "grpc",
-            "false",
-        ),
-        (
-            KeyManagementServiceAsyncClient,
-            transports.KeyManagementServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            "false",
-        ),
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceRestTransport,
-            "rest",
-            "true",
-        ),
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceRestTransport,
-            "rest",
-            "false",
-        ),
-    ],
-)
-@mock.patch.object(
-    KeyManagementServiceClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(KeyManagementServiceClient),
-)
-@mock.patch.object(
-    KeyManagementServiceAsyncClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(KeyManagementServiceAsyncClient),
-)
-@mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "auto"})
-def test_key_management_service_client_mtls_env_auto(
-    client_class, transport_class, transport_name, use_client_cert_env
-):
-    # This tests the endpoint autoswitch behavior. Endpoint is autoswitched to the default
-    # mtls endpoint, if GOOGLE_API_USE_CLIENT_CERTIFICATE is "true" and client cert exists.
-
-    # Check the case client_cert_source is provided. Whether client cert is used depends on
-    # GOOGLE_API_USE_CLIENT_CERTIFICATE value.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": use_client_cert_env}
-    ):
-        options = client_options.ClientOptions(
-            client_cert_source=client_cert_source_callback
-        )
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(client_options=options, transport=transport_name)
-
-            if use_client_cert_env == "false":
-                expected_client_cert_source = None
-                expected_host = client.DEFAULT_ENDPOINT
-            else:
-                expected_client_cert_source = client_cert_source_callback
-                expected_host = client.DEFAULT_MTLS_ENDPOINT
-
-            patched.assert_called_once_with(
-                credentials=None,
-                credentials_file=None,
-                host=expected_host,
-                scopes=None,
-                client_cert_source_for_mtls=expected_client_cert_source,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )
-
-    # Check the case ADC client cert is provided. Whether client cert is used depends on
-    # GOOGLE_API_USE_CLIENT_CERTIFICATE value.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": use_client_cert_env}
-    ):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            with mock.patch(
-                "google.auth.transport.mtls.has_default_client_cert_source",
-                return_value=True,
-            ):
-                with mock.patch(
-                    "google.auth.transport.mtls.default_client_cert_source",
-                    return_value=client_cert_source_callback,
-                ):
-                    if use_client_cert_env == "false":
-                        expected_host = client.DEFAULT_ENDPOINT
-                        expected_client_cert_source = None
-                    else:
-                        expected_host = client.DEFAULT_MTLS_ENDPOINT
-                        expected_client_cert_source = client_cert_source_callback
-
-                    patched.return_value = None
-                    client = client_class(transport=transport_name)
-                    patched.assert_called_once_with(
-                        credentials=None,
-                        credentials_file=None,
-                        host=expected_host,
-                        scopes=None,
-                        client_cert_source_for_mtls=expected_client_cert_source,
-                        quota_project_id=None,
-                        client_info=transports.base.DEFAULT_CLIENT_INFO,
-                        always_use_jwt_access=True,
-                        api_audience=None,
-                    )
-
-    # Check the case client_cert_source and ADC client cert are not provided.
-    with mock.patch.dict(
-        os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": use_client_cert_env}
-    ):
-        with mock.patch.object(transport_class, "__init__") as patched:
-            with mock.patch(
-                "google.auth.transport.mtls.has_default_client_cert_source",
-                return_value=False,
-            ):
-                patched.return_value = None
-                client = client_class(transport=transport_name)
-                patched.assert_called_once_with(
-                    credentials=None,
-                    credentials_file=None,
-                    host=client.DEFAULT_ENDPOINT,
-                    scopes=None,
-                    client_cert_source_for_mtls=None,
-                    quota_project_id=None,
-                    client_info=transports.base.DEFAULT_CLIENT_INFO,
-                    always_use_jwt_access=True,
-                    api_audience=None,
-                )
-
-
-@pytest.mark.parametrize(
-    "client_class", [KeyManagementServiceClient, KeyManagementServiceAsyncClient]
-)
-@mock.patch.object(
-    KeyManagementServiceClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(KeyManagementServiceClient),
-)
-@mock.patch.object(
-    KeyManagementServiceAsyncClient,
-    "DEFAULT_ENDPOINT",
-    modify_default_endpoint(KeyManagementServiceAsyncClient),
-)
-def test_key_management_service_client_get_mtls_endpoint_and_cert_source(client_class):
-    mock_client_cert_source = mock.Mock()
-
-    # Test the case GOOGLE_API_USE_CLIENT_CERTIFICATE is "true".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "true"}):
-        mock_api_endpoint = "foo"
-        options = client_options.ClientOptions(
-            client_cert_source=mock_client_cert_source, api_endpoint=mock_api_endpoint
-        )
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source(
-            options
-        )
-        assert api_endpoint == mock_api_endpoint
-        assert cert_source == mock_client_cert_source
-
-    # Test the case GOOGLE_API_USE_CLIENT_CERTIFICATE is "false".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "false"}):
-        mock_client_cert_source = mock.Mock()
-        mock_api_endpoint = "foo"
-        options = client_options.ClientOptions(
-            client_cert_source=mock_client_cert_source, api_endpoint=mock_api_endpoint
-        )
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source(
-            options
-        )
-        assert api_endpoint == mock_api_endpoint
-        assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "never".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "never"}):
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source()
-        assert api_endpoint == client_class.DEFAULT_ENDPOINT
-        assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "always".
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_MTLS_ENDPOINT": "always"}):
-        api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source()
-        assert api_endpoint == client_class.DEFAULT_MTLS_ENDPOINT
-        assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "auto" and default cert doesn't exist.
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "true"}):
-        with mock.patch(
-            "google.auth.transport.mtls.has_default_client_cert_source",
-            return_value=False,
-        ):
-            api_endpoint, cert_source = client_class.get_mtls_endpoint_and_cert_source()
-            assert api_endpoint == client_class.DEFAULT_ENDPOINT
-            assert cert_source is None
-
-    # Test the case GOOGLE_API_USE_MTLS_ENDPOINT is "auto" and default cert exists.
-    with mock.patch.dict(os.environ, {"GOOGLE_API_USE_CLIENT_CERTIFICATE": "true"}):
-        with mock.patch(
-            "google.auth.transport.mtls.has_default_client_cert_source",
-            return_value=True,
-        ):
-            with mock.patch(
-                "google.auth.transport.mtls.default_client_cert_source",
-                return_value=mock_client_cert_source,
-            ):
-                (
-                    api_endpoint,
-                    cert_source,
-                ) = client_class.get_mtls_endpoint_and_cert_source()
-                assert api_endpoint == client_class.DEFAULT_MTLS_ENDPOINT
-                assert cert_source == mock_client_cert_source
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name",
-    [
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceGrpcTransport,
-            "grpc",
-        ),
-        (
-            KeyManagementServiceAsyncClient,
-            transports.KeyManagementServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-        ),
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceRestTransport,
-            "rest",
-        ),
-    ],
-)
-def test_key_management_service_client_client_options_scopes(
-    client_class, transport_class, transport_name
-):
-    # Check the case scopes are provided.
-    options = client_options.ClientOptions(
-        scopes=["1", "2"],
-    )
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host=client.DEFAULT_ENDPOINT,
-            scopes=["1", "2"],
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name,grpc_helpers",
-    [
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceGrpcTransport,
-            "grpc",
-            grpc_helpers,
-        ),
-        (
-            KeyManagementServiceAsyncClient,
-            transports.KeyManagementServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            grpc_helpers_async,
-        ),
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceRestTransport,
-            "rest",
-            None,
-        ),
-    ],
-)
-def test_key_management_service_client_client_options_credentials_file(
-    client_class, transport_class, transport_name, grpc_helpers
-):
-    # Check the case credentials file is provided.
-    options = client_options.ClientOptions(credentials_file="credentials.json")
-
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file="credentials.json",
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-
-def test_key_management_service_client_client_options_from_dict():
-    with mock.patch(
-        "google.cloud.kms_v1.services.key_management_service.transports.KeyManagementServiceGrpcTransport.__init__"
-    ) as grpc_transport:
-        grpc_transport.return_value = None
-        client = KeyManagementServiceClient(
-            client_options={"api_endpoint": "squid.clam.whelk"}
-        )
-        grpc_transport.assert_called_once_with(
-            credentials=None,
-            credentials_file=None,
-            host="squid.clam.whelk",
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class,transport_name,grpc_helpers",
-    [
-        (
-            KeyManagementServiceClient,
-            transports.KeyManagementServiceGrpcTransport,
-            "grpc",
-            grpc_helpers,
-        ),
-        (
-            KeyManagementServiceAsyncClient,
-            transports.KeyManagementServiceGrpcAsyncIOTransport,
-            "grpc_asyncio",
-            grpc_helpers_async,
-        ),
-    ],
-)
-def test_key_management_service_client_create_channel_credentials_file(
-    client_class, transport_class, transport_name, grpc_helpers
-):
-    # Check the case credentials file is provided.
-    options = client_options.ClientOptions(credentials_file="credentials.json")
-
-    with mock.patch.object(transport_class, "__init__") as patched:
-        patched.return_value = None
-        client = client_class(client_options=options, transport=transport_name)
-        patched.assert_called_once_with(
-            credentials=None,
-            credentials_file="credentials.json",
-            host=client.DEFAULT_ENDPOINT,
-            scopes=None,
-            client_cert_source_for_mtls=None,
-            quota_project_id=None,
-            client_info=transports.base.DEFAULT_CLIENT_INFO,
-            always_use_jwt_access=True,
-            api_audience=None,
-        )
-
-    # test that the credentials from file are saved and used as the credentials.
-    with mock.patch.object(
-        google.auth, "load_credentials_from_file", autospec=True
-    ) as load_creds, mock.patch.object(
-        google.auth, "default", autospec=True
-    ) as adc, mock.patch.object(
-        grpc_helpers, "create_channel"
-    ) as create_channel:
-        creds = ga_credentials.AnonymousCredentials()
-        file_creds = ga_credentials.AnonymousCredentials()
-        load_creds.return_value = (file_creds, None)
-        adc.return_value = (creds, None)
-        client = client_class(client_options=options, transport=transport_name)
-        create_channel.assert_called_with(
-            "cloudkms.googleapis.com:443",
-            credentials=file_creds,
-            credentials_file=None,
-            quota_project_id=None,
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            scopes=None,
-            default_host="cloudkms.googleapis.com",
-            ssl_credentials=None,
-            options=[
-                ("grpc.max_send_message_length", -1),
-                ("grpc.max_receive_message_length", -1),
-            ],
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListKeyRingsRequest,
-        dict,
-    ],
-)
-def test_list_key_rings(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListKeyRingsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-        response = client.list_key_rings(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListKeyRingsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListKeyRingsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_key_rings_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        client.list_key_rings()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListKeyRingsRequest()
-
-
-@pytest.mark.asyncio
-async def test_list_key_rings_async(
-    transport: str = "grpc_asyncio", request_type=service.ListKeyRingsRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListKeyRingsResponse(
-                next_page_token="next_page_token_value",
-                total_size=1086,
-            )
-        )
-        response = await client.list_key_rings(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListKeyRingsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListKeyRingsAsyncPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-@pytest.mark.asyncio
-async def test_list_key_rings_async_from_dict():
-    await test_list_key_rings_async(request_type=dict)
-
-
-def test_list_key_rings_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListKeyRingsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        call.return_value = service.ListKeyRingsResponse()
-        client.list_key_rings(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_list_key_rings_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListKeyRingsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListKeyRingsResponse()
-        )
-        await client.list_key_rings(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_list_key_rings_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListKeyRingsResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.list_key_rings(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-def test_list_key_rings_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_key_rings(
-            service.ListKeyRingsRequest(),
-            parent="parent_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_list_key_rings_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListKeyRingsResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListKeyRingsResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.list_key_rings(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_list_key_rings_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.list_key_rings(
-            service.ListKeyRingsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_key_rings_pager(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[],
-                next_page_token="def",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-            ),
-            RuntimeError,
-        )
-
-        metadata = ()
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", ""),)),
-        )
-        pager = client.list_key_rings(request={})
-
-        assert pager._metadata == metadata
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.KeyRing) for i in results)
-
-
-def test_list_key_rings_pages(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_key_rings), "__call__") as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[],
-                next_page_token="def",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = list(client.list_key_rings(request={}).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.asyncio
-async def test_list_key_rings_async_pager():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_key_rings), "__call__", new_callable=mock.AsyncMock
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[],
-                next_page_token="def",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-            ),
-            RuntimeError,
-        )
-        async_pager = await client.list_key_rings(
-            request={},
-        )
-        assert async_pager.next_page_token == "abc"
-        responses = []
-        async for response in async_pager:  # pragma: no branch
-            responses.append(response)
-
-        assert len(responses) == 6
-        assert all(isinstance(i, resources.KeyRing) for i in responses)
-
-
-@pytest.mark.asyncio
-async def test_list_key_rings_async_pages():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_key_rings), "__call__", new_callable=mock.AsyncMock
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[],
-                next_page_token="def",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = []
-        # Workaround issue in python 3.9 related to code coverage by adding `# pragma: no branch`
-        # See https://github.com/googleapis/gapic-generator-python/pull/1174#issuecomment-1025132372
-        async for page_ in (  # pragma: no branch
-            await client.list_key_rings(request={})
-        ).pages:
-            pages.append(page_)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListCryptoKeysRequest,
-        dict,
-    ],
-)
-def test_list_crypto_keys(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListCryptoKeysResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-        response = client.list_crypto_keys(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListCryptoKeysRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListCryptoKeysPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_crypto_keys_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        client.list_crypto_keys()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListCryptoKeysRequest()
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_keys_async(
-    transport: str = "grpc_asyncio", request_type=service.ListCryptoKeysRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListCryptoKeysResponse(
-                next_page_token="next_page_token_value",
-                total_size=1086,
-            )
-        )
-        response = await client.list_crypto_keys(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListCryptoKeysRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListCryptoKeysAsyncPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_keys_async_from_dict():
-    await test_list_crypto_keys_async(request_type=dict)
-
-
-def test_list_crypto_keys_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListCryptoKeysRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        call.return_value = service.ListCryptoKeysResponse()
-        client.list_crypto_keys(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_keys_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListCryptoKeysRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListCryptoKeysResponse()
-        )
-        await client.list_crypto_keys(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_list_crypto_keys_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListCryptoKeysResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.list_crypto_keys(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-def test_list_crypto_keys_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_crypto_keys(
-            service.ListCryptoKeysRequest(),
-            parent="parent_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_keys_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListCryptoKeysResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListCryptoKeysResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.list_crypto_keys(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_keys_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.list_crypto_keys(
-            service.ListCryptoKeysRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_crypto_keys_pager(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-            ),
-            RuntimeError,
-        )
-
-        metadata = ()
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", ""),)),
-        )
-        pager = client.list_crypto_keys(request={})
-
-        assert pager._metadata == metadata
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.CryptoKey) for i in results)
-
-
-def test_list_crypto_keys_pages(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_crypto_keys), "__call__") as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = list(client.list_crypto_keys(request={}).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_keys_async_pager():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_keys), "__call__", new_callable=mock.AsyncMock
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-            ),
-            RuntimeError,
-        )
-        async_pager = await client.list_crypto_keys(
-            request={},
-        )
-        assert async_pager.next_page_token == "abc"
-        responses = []
-        async for response in async_pager:  # pragma: no branch
-            responses.append(response)
-
-        assert len(responses) == 6
-        assert all(isinstance(i, resources.CryptoKey) for i in responses)
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_keys_async_pages():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_keys), "__call__", new_callable=mock.AsyncMock
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = []
-        # Workaround issue in python 3.9 related to code coverage by adding `# pragma: no branch`
-        # See https://github.com/googleapis/gapic-generator-python/pull/1174#issuecomment-1025132372
-        async for page_ in (  # pragma: no branch
-            await client.list_crypto_keys(request={})
-        ).pages:
-            pages.append(page_)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListCryptoKeyVersionsRequest,
-        dict,
-    ],
-)
-def test_list_crypto_key_versions(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListCryptoKeyVersionsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-        response = client.list_crypto_key_versions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListCryptoKeyVersionsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListCryptoKeyVersionsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_crypto_key_versions_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        client.list_crypto_key_versions()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListCryptoKeyVersionsRequest()
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_key_versions_async(
-    transport: str = "grpc_asyncio", request_type=service.ListCryptoKeyVersionsRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListCryptoKeyVersionsResponse(
-                next_page_token="next_page_token_value",
-                total_size=1086,
-            )
-        )
-        response = await client.list_crypto_key_versions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListCryptoKeyVersionsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListCryptoKeyVersionsAsyncPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_key_versions_async_from_dict():
-    await test_list_crypto_key_versions_async(request_type=dict)
-
-
-def test_list_crypto_key_versions_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListCryptoKeyVersionsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        call.return_value = service.ListCryptoKeyVersionsResponse()
-        client.list_crypto_key_versions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_key_versions_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListCryptoKeyVersionsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListCryptoKeyVersionsResponse()
-        )
-        await client.list_crypto_key_versions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_list_crypto_key_versions_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListCryptoKeyVersionsResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.list_crypto_key_versions(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-def test_list_crypto_key_versions_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_crypto_key_versions(
-            service.ListCryptoKeyVersionsRequest(),
-            parent="parent_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_key_versions_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListCryptoKeyVersionsResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListCryptoKeyVersionsResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.list_crypto_key_versions(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_key_versions_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.list_crypto_key_versions(
-            service.ListCryptoKeyVersionsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_crypto_key_versions_pager(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-            ),
-            RuntimeError,
-        )
-
-        metadata = ()
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", ""),)),
-        )
-        pager = client.list_crypto_key_versions(request={})
-
-        assert pager._metadata == metadata
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.CryptoKeyVersion) for i in results)
-
-
-def test_list_crypto_key_versions_pages(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions), "__call__"
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = list(client.list_crypto_key_versions(request={}).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_key_versions_async_pager():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions),
-        "__call__",
-        new_callable=mock.AsyncMock,
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-            ),
-            RuntimeError,
-        )
-        async_pager = await client.list_crypto_key_versions(
-            request={},
-        )
-        assert async_pager.next_page_token == "abc"
-        responses = []
-        async for response in async_pager:  # pragma: no branch
-            responses.append(response)
-
-        assert len(responses) == 6
-        assert all(isinstance(i, resources.CryptoKeyVersion) for i in responses)
-
-
-@pytest.mark.asyncio
-async def test_list_crypto_key_versions_async_pages():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_crypto_key_versions),
-        "__call__",
-        new_callable=mock.AsyncMock,
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = []
-        # Workaround issue in python 3.9 related to code coverage by adding `# pragma: no branch`
-        # See https://github.com/googleapis/gapic-generator-python/pull/1174#issuecomment-1025132372
-        async for page_ in (  # pragma: no branch
-            await client.list_crypto_key_versions(request={})
-        ).pages:
-            pages.append(page_)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListImportJobsRequest,
-        dict,
-    ],
-)
-def test_list_import_jobs(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListImportJobsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-        response = client.list_import_jobs(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListImportJobsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListImportJobsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_import_jobs_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        client.list_import_jobs()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListImportJobsRequest()
-
-
-@pytest.mark.asyncio
-async def test_list_import_jobs_async(
-    transport: str = "grpc_asyncio", request_type=service.ListImportJobsRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListImportJobsResponse(
-                next_page_token="next_page_token_value",
-                total_size=1086,
-            )
-        )
-        response = await client.list_import_jobs(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ListImportJobsRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListImportJobsAsyncPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-@pytest.mark.asyncio
-async def test_list_import_jobs_async_from_dict():
-    await test_list_import_jobs_async(request_type=dict)
-
-
-def test_list_import_jobs_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListImportJobsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        call.return_value = service.ListImportJobsResponse()
-        client.list_import_jobs(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_list_import_jobs_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ListImportJobsRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListImportJobsResponse()
-        )
-        await client.list_import_jobs(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_list_import_jobs_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListImportJobsResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.list_import_jobs(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-def test_list_import_jobs_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_import_jobs(
-            service.ListImportJobsRequest(),
-            parent="parent_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_list_import_jobs_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.ListImportJobsResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.ListImportJobsResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.list_import_jobs(
-            parent="parent_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_list_import_jobs_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.list_import_jobs(
-            service.ListImportJobsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_import_jobs_pager(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[],
-                next_page_token="def",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-            ),
-            RuntimeError,
-        )
-
-        metadata = ()
-        metadata = tuple(metadata) + (
-            gapic_v1.routing_header.to_grpc_metadata((("parent", ""),)),
-        )
-        pager = client.list_import_jobs(request={})
-
-        assert pager._metadata == metadata
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.ImportJob) for i in results)
-
-
-def test_list_import_jobs_pages(transport_name: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials,
-        transport=transport_name,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_import_jobs), "__call__") as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[],
-                next_page_token="def",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = list(client.list_import_jobs(request={}).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.asyncio
-async def test_list_import_jobs_async_pager():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_import_jobs), "__call__", new_callable=mock.AsyncMock
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[],
-                next_page_token="def",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-            ),
-            RuntimeError,
-        )
-        async_pager = await client.list_import_jobs(
-            request={},
-        )
-        assert async_pager.next_page_token == "abc"
-        responses = []
-        async for response in async_pager:  # pragma: no branch
-            responses.append(response)
-
-        assert len(responses) == 6
-        assert all(isinstance(i, resources.ImportJob) for i in responses)
-
-
-@pytest.mark.asyncio
-async def test_list_import_jobs_async_pages():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials,
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.list_import_jobs), "__call__", new_callable=mock.AsyncMock
-    ) as call:
-        # Set the response to a series of pages.
-        call.side_effect = (
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[],
-                next_page_token="def",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-            ),
-            RuntimeError,
-        )
-        pages = []
-        # Workaround issue in python 3.9 related to code coverage by adding `# pragma: no branch`
-        # See https://github.com/googleapis/gapic-generator-python/pull/1174#issuecomment-1025132372
-        async for page_ in (  # pragma: no branch
-            await client.list_import_jobs(request={})
-        ).pages:
-            pages.append(page_)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetKeyRingRequest,
-        dict,
-    ],
-)
-def test_get_key_ring(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.KeyRing(
-            name="name_value",
-        )
-        response = client.get_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetKeyRingRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.KeyRing)
-    assert response.name == "name_value"
-
-
-def test_get_key_ring_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_key_ring), "__call__") as call:
-        client.get_key_ring()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetKeyRingRequest()
-
-
-@pytest.mark.asyncio
-async def test_get_key_ring_async(
-    transport: str = "grpc_asyncio", request_type=service.GetKeyRingRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.KeyRing(
-                name="name_value",
-            )
-        )
-        response = await client.get_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetKeyRingRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.KeyRing)
-    assert response.name == "name_value"
-
-
-@pytest.mark.asyncio
-async def test_get_key_ring_async_from_dict():
-    await test_get_key_ring_async(request_type=dict)
-
-
-def test_get_key_ring_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetKeyRingRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_key_ring), "__call__") as call:
-        call.return_value = resources.KeyRing()
-        client.get_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_key_ring_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetKeyRingRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_key_ring), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.KeyRing())
-        await client.get_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_get_key_ring_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.KeyRing()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.get_key_ring(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_get_key_ring_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_key_ring(
-            service.GetKeyRingRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_get_key_ring_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.KeyRing()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.KeyRing())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.get_key_ring(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_get_key_ring_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.get_key_ring(
-            service.GetKeyRingRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetCryptoKeyRequest,
-        dict,
-    ],
-)
-def test_get_crypto_key(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_crypto_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-        response = client.get_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetCryptoKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_get_crypto_key_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_crypto_key), "__call__") as call:
-        client.get_crypto_key()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetCryptoKeyRequest()
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_async(
-    transport: str = "grpc_asyncio", request_type=service.GetCryptoKeyRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_crypto_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKey(
-                name="name_value",
-                purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-                import_only=True,
-                crypto_key_backend="crypto_key_backend_value",
-            )
-        )
-        response = await client.get_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetCryptoKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_async_from_dict():
-    await test_get_crypto_key_async(request_type=dict)
-
-
-def test_get_crypto_key_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetCryptoKeyRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_crypto_key), "__call__") as call:
-        call.return_value = resources.CryptoKey()
-        client.get_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetCryptoKeyRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_crypto_key), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        await client.get_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_get_crypto_key_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_crypto_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.get_crypto_key(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_get_crypto_key_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_crypto_key(
-            service.GetCryptoKeyRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_crypto_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.get_crypto_key(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.get_crypto_key(
-            service.GetCryptoKeyRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_get_crypto_key_version(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-        response = client.get_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_get_crypto_key_version_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_crypto_key_version), "__call__"
-    ) as call:
-        client.get_crypto_key_version()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetCryptoKeyVersionRequest()
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_version_async(
-    transport: str = "grpc_asyncio", request_type=service.GetCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion(
-                name="name_value",
-                state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-                import_job="import_job_value",
-                import_failure_reason="import_failure_reason_value",
-                generation_failure_reason="generation_failure_reason_value",
-                external_destruction_failure_reason="external_destruction_failure_reason_value",
-                reimport_eligible=True,
-            )
-        )
-        response = await client.get_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_version_async_from_dict():
-    await test_get_crypto_key_version_async(request_type=dict)
-
-
-def test_get_crypto_key_version_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetCryptoKeyVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKeyVersion()
-        client.get_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_version_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetCryptoKeyVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        await client.get_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_get_crypto_key_version_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.get_crypto_key_version(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_get_crypto_key_version_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_crypto_key_version(
-            service.GetCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_version_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.get_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.get_crypto_key_version(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_get_crypto_key_version_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.get_crypto_key_version(
-            service.GetCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetPublicKeyRequest,
-        dict,
-    ],
-)
-def test_get_public_key(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_public_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.PublicKey(
-            pem="pem_value",
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            name="name_value",
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.get_public_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetPublicKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.PublicKey)
-    assert response.pem == "pem_value"
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.name == "name_value"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_get_public_key_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_public_key), "__call__") as call:
-        client.get_public_key()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetPublicKeyRequest()
-
-
-@pytest.mark.asyncio
-async def test_get_public_key_async(
-    transport: str = "grpc_asyncio", request_type=service.GetPublicKeyRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_public_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.PublicKey(
-                pem="pem_value",
-                algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-                name="name_value",
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.get_public_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetPublicKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.PublicKey)
-    assert response.pem == "pem_value"
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.name == "name_value"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_get_public_key_async_from_dict():
-    await test_get_public_key_async(request_type=dict)
-
-
-def test_get_public_key_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetPublicKeyRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_public_key), "__call__") as call:
-        call.return_value = resources.PublicKey()
-        client.get_public_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_public_key_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetPublicKeyRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_public_key), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.PublicKey())
-        await client.get_public_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_get_public_key_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_public_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.PublicKey()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.get_public_key(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_get_public_key_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_public_key(
-            service.GetPublicKeyRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_get_public_key_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_public_key), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.PublicKey()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.PublicKey())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.get_public_key(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_get_public_key_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.get_public_key(
-            service.GetPublicKeyRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetImportJobRequest,
-        dict,
-    ],
-)
-def test_get_import_job(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_import_job), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.ImportJob(
-            name="name_value",
-            import_method=resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            state=resources.ImportJob.ImportJobState.PENDING_GENERATION,
-        )
-        response = client.get_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetImportJobRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.ImportJob)
-    assert response.name == "name_value"
-    assert (
-        response.import_method
-        == resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.state == resources.ImportJob.ImportJobState.PENDING_GENERATION
-
-
-def test_get_import_job_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_import_job), "__call__") as call:
-        client.get_import_job()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetImportJobRequest()
-
-
-@pytest.mark.asyncio
-async def test_get_import_job_async(
-    transport: str = "grpc_asyncio", request_type=service.GetImportJobRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_import_job), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.ImportJob(
-                name="name_value",
-                import_method=resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                state=resources.ImportJob.ImportJobState.PENDING_GENERATION,
-            )
-        )
-        response = await client.get_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GetImportJobRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.ImportJob)
-    assert response.name == "name_value"
-    assert (
-        response.import_method
-        == resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.state == resources.ImportJob.ImportJobState.PENDING_GENERATION
-
-
-@pytest.mark.asyncio
-async def test_get_import_job_async_from_dict():
-    await test_get_import_job_async(request_type=dict)
-
-
-def test_get_import_job_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetImportJobRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_import_job), "__call__") as call:
-        call.return_value = resources.ImportJob()
-        client.get_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_import_job_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GetImportJobRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_import_job), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.ImportJob())
-        await client.get_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_get_import_job_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_import_job), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.ImportJob()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.get_import_job(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_get_import_job_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_import_job(
-            service.GetImportJobRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_get_import_job_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_import_job), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.ImportJob()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.ImportJob())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.get_import_job(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_get_import_job_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.get_import_job(
-            service.GetImportJobRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateKeyRingRequest,
-        dict,
-    ],
-)
-def test_create_key_ring(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.create_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.KeyRing(
-            name="name_value",
-        )
-        response = client.create_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateKeyRingRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.KeyRing)
-    assert response.name == "name_value"
-
-
-def test_create_key_ring_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.create_key_ring), "__call__") as call:
-        client.create_key_ring()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateKeyRingRequest()
-
-
-@pytest.mark.asyncio
-async def test_create_key_ring_async(
-    transport: str = "grpc_asyncio", request_type=service.CreateKeyRingRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.create_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.KeyRing(
-                name="name_value",
-            )
-        )
-        response = await client.create_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateKeyRingRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.KeyRing)
-    assert response.name == "name_value"
-
-
-@pytest.mark.asyncio
-async def test_create_key_ring_async_from_dict():
-    await test_create_key_ring_async(request_type=dict)
-
-
-def test_create_key_ring_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateKeyRingRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.create_key_ring), "__call__") as call:
-        call.return_value = resources.KeyRing()
-        client.create_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_create_key_ring_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateKeyRingRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.create_key_ring), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.KeyRing())
-        await client.create_key_ring(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_create_key_ring_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.create_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.KeyRing()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.create_key_ring(
-            parent="parent_value",
-            key_ring_id="key_ring_id_value",
-            key_ring=resources.KeyRing(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].key_ring_id
-        mock_val = "key_ring_id_value"
-        assert arg == mock_val
-        arg = args[0].key_ring
-        mock_val = resources.KeyRing(name="name_value")
-        assert arg == mock_val
-
-
-def test_create_key_ring_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_key_ring(
-            service.CreateKeyRingRequest(),
-            parent="parent_value",
-            key_ring_id="key_ring_id_value",
-            key_ring=resources.KeyRing(name="name_value"),
-        )
-
-
-@pytest.mark.asyncio
-async def test_create_key_ring_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.create_key_ring), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.KeyRing()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.KeyRing())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.create_key_ring(
-            parent="parent_value",
-            key_ring_id="key_ring_id_value",
-            key_ring=resources.KeyRing(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].key_ring_id
-        mock_val = "key_ring_id_value"
-        assert arg == mock_val
-        arg = args[0].key_ring
-        mock_val = resources.KeyRing(name="name_value")
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_create_key_ring_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.create_key_ring(
-            service.CreateKeyRingRequest(),
-            parent="parent_value",
-            key_ring_id="key_ring_id_value",
-            key_ring=resources.KeyRing(name="name_value"),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateCryptoKeyRequest,
-        dict,
-    ],
-)
-def test_create_crypto_key(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-        response = client.create_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateCryptoKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_create_crypto_key_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key), "__call__"
-    ) as call:
-        client.create_crypto_key()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateCryptoKeyRequest()
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_async(
-    transport: str = "grpc_asyncio", request_type=service.CreateCryptoKeyRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKey(
-                name="name_value",
-                purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-                import_only=True,
-                crypto_key_backend="crypto_key_backend_value",
-            )
-        )
-        response = await client.create_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateCryptoKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_async_from_dict():
-    await test_create_crypto_key_async(request_type=dict)
-
-
-def test_create_crypto_key_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateCryptoKeyRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKey()
-        client.create_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateCryptoKeyRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        await client.create_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_create_crypto_key_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.create_crypto_key(
-            parent="parent_value",
-            crypto_key_id="crypto_key_id_value",
-            crypto_key=resources.CryptoKey(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key_id
-        mock_val = "crypto_key_id_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key
-        mock_val = resources.CryptoKey(name="name_value")
-        assert arg == mock_val
-
-
-def test_create_crypto_key_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_crypto_key(
-            service.CreateCryptoKeyRequest(),
-            parent="parent_value",
-            crypto_key_id="crypto_key_id_value",
-            crypto_key=resources.CryptoKey(name="name_value"),
-        )
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.create_crypto_key(
-            parent="parent_value",
-            crypto_key_id="crypto_key_id_value",
-            crypto_key=resources.CryptoKey(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key_id
-        mock_val = "crypto_key_id_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key
-        mock_val = resources.CryptoKey(name="name_value")
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.create_crypto_key(
-            service.CreateCryptoKeyRequest(),
-            parent="parent_value",
-            crypto_key_id="crypto_key_id_value",
-            crypto_key=resources.CryptoKey(name="name_value"),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_create_crypto_key_version(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-        response = client.create_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_create_crypto_key_version_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key_version), "__call__"
-    ) as call:
-        client.create_crypto_key_version()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateCryptoKeyVersionRequest()
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_version_async(
-    transport: str = "grpc_asyncio", request_type=service.CreateCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion(
-                name="name_value",
-                state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-                import_job="import_job_value",
-                import_failure_reason="import_failure_reason_value",
-                generation_failure_reason="generation_failure_reason_value",
-                external_destruction_failure_reason="external_destruction_failure_reason_value",
-                reimport_eligible=True,
-            )
-        )
-        response = await client.create_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_version_async_from_dict():
-    await test_create_crypto_key_version_async(request_type=dict)
-
-
-def test_create_crypto_key_version_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateCryptoKeyVersionRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKeyVersion()
-        client.create_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_version_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateCryptoKeyVersionRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        await client.create_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_create_crypto_key_version_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.create_crypto_key_version(
-            parent="parent_value",
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key_version
-        mock_val = resources.CryptoKeyVersion(name="name_value")
-        assert arg == mock_val
-
-
-def test_create_crypto_key_version_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_crypto_key_version(
-            service.CreateCryptoKeyVersionRequest(),
-            parent="parent_value",
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-        )
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_version_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.create_crypto_key_version(
-            parent="parent_value",
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key_version
-        mock_val = resources.CryptoKeyVersion(name="name_value")
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_create_crypto_key_version_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.create_crypto_key_version(
-            service.CreateCryptoKeyVersionRequest(),
-            parent="parent_value",
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ImportCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_import_crypto_key_version(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.import_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-        response = client.import_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ImportCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_import_crypto_key_version_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.import_crypto_key_version), "__call__"
-    ) as call:
-        client.import_crypto_key_version()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ImportCryptoKeyVersionRequest()
-
-
-@pytest.mark.asyncio
-async def test_import_crypto_key_version_async(
-    transport: str = "grpc_asyncio", request_type=service.ImportCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.import_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion(
-                name="name_value",
-                state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-                import_job="import_job_value",
-                import_failure_reason="import_failure_reason_value",
-                generation_failure_reason="generation_failure_reason_value",
-                external_destruction_failure_reason="external_destruction_failure_reason_value",
-                reimport_eligible=True,
-            )
-        )
-        response = await client.import_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.ImportCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-@pytest.mark.asyncio
-async def test_import_crypto_key_version_async_from_dict():
-    await test_import_crypto_key_version_async(request_type=dict)
-
-
-def test_import_crypto_key_version_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ImportCryptoKeyVersionRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.import_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKeyVersion()
-        client.import_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_import_crypto_key_version_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.ImportCryptoKeyVersionRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.import_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        await client.import_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateImportJobRequest,
-        dict,
-    ],
-)
-def test_create_import_job(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_import_job), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.ImportJob(
-            name="name_value",
-            import_method=resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            state=resources.ImportJob.ImportJobState.PENDING_GENERATION,
-        )
-        response = client.create_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateImportJobRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.ImportJob)
-    assert response.name == "name_value"
-    assert (
-        response.import_method
-        == resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.state == resources.ImportJob.ImportJobState.PENDING_GENERATION
-
-
-def test_create_import_job_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_import_job), "__call__"
-    ) as call:
-        client.create_import_job()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateImportJobRequest()
-
-
-@pytest.mark.asyncio
-async def test_create_import_job_async(
-    transport: str = "grpc_asyncio", request_type=service.CreateImportJobRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_import_job), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.ImportJob(
-                name="name_value",
-                import_method=resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                state=resources.ImportJob.ImportJobState.PENDING_GENERATION,
-            )
-        )
-        response = await client.create_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.CreateImportJobRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.ImportJob)
-    assert response.name == "name_value"
-    assert (
-        response.import_method
-        == resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.state == resources.ImportJob.ImportJobState.PENDING_GENERATION
-
-
-@pytest.mark.asyncio
-async def test_create_import_job_async_from_dict():
-    await test_create_import_job_async(request_type=dict)
-
-
-def test_create_import_job_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateImportJobRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_import_job), "__call__"
-    ) as call:
-        call.return_value = resources.ImportJob()
-        client.create_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_create_import_job_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.CreateImportJobRequest()
-
-    request.parent = "parent_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_import_job), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.ImportJob())
-        await client.create_import_job(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "parent=parent_value",
-    ) in kw["metadata"]
-
-
-def test_create_import_job_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_import_job), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.ImportJob()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.create_import_job(
-            parent="parent_value",
-            import_job_id="import_job_id_value",
-            import_job=resources.ImportJob(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].import_job_id
-        mock_val = "import_job_id_value"
-        assert arg == mock_val
-        arg = args[0].import_job
-        mock_val = resources.ImportJob(name="name_value")
-        assert arg == mock_val
-
-
-def test_create_import_job_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_import_job(
-            service.CreateImportJobRequest(),
-            parent="parent_value",
-            import_job_id="import_job_id_value",
-            import_job=resources.ImportJob(name="name_value"),
-        )
-
-
-@pytest.mark.asyncio
-async def test_create_import_job_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.create_import_job), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.ImportJob()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.ImportJob())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.create_import_job(
-            parent="parent_value",
-            import_job_id="import_job_id_value",
-            import_job=resources.ImportJob(name="name_value"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].parent
-        mock_val = "parent_value"
-        assert arg == mock_val
-        arg = args[0].import_job_id
-        mock_val = "import_job_id_value"
-        assert arg == mock_val
-        arg = args[0].import_job
-        mock_val = resources.ImportJob(name="name_value")
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_create_import_job_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.create_import_job(
-            service.CreateImportJobRequest(),
-            parent="parent_value",
-            import_job_id="import_job_id_value",
-            import_job=resources.ImportJob(name="name_value"),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.UpdateCryptoKeyRequest,
-        dict,
-    ],
-)
-def test_update_crypto_key(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-        response = client.update_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_update_crypto_key_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key), "__call__"
-    ) as call:
-        client.update_crypto_key()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyRequest()
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_async(
-    transport: str = "grpc_asyncio", request_type=service.UpdateCryptoKeyRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKey(
-                name="name_value",
-                purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-                import_only=True,
-                crypto_key_backend="crypto_key_backend_value",
-            )
-        )
-        response = await client.update_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_async_from_dict():
-    await test_update_crypto_key_async(request_type=dict)
-
-
-def test_update_crypto_key_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.UpdateCryptoKeyRequest()
-
-    request.crypto_key.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKey()
-        client.update_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "crypto_key.name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.UpdateCryptoKeyRequest()
-
-    request.crypto_key.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        await client.update_crypto_key(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "crypto_key.name=name_value",
-    ) in kw["metadata"]
-
-
-def test_update_crypto_key_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.update_crypto_key(
-            crypto_key=resources.CryptoKey(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].crypto_key
-        mock_val = resources.CryptoKey(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-def test_update_crypto_key_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_crypto_key(
-            service.UpdateCryptoKeyRequest(),
-            crypto_key=resources.CryptoKey(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.update_crypto_key(
-            crypto_key=resources.CryptoKey(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].crypto_key
-        mock_val = resources.CryptoKey(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.update_crypto_key(
-            service.UpdateCryptoKeyRequest(),
-            crypto_key=resources.CryptoKey(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.UpdateCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_update_crypto_key_version(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-        response = client.update_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_update_crypto_key_version_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_version), "__call__"
-    ) as call:
-        client.update_crypto_key_version()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyVersionRequest()
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_version_async(
-    transport: str = "grpc_asyncio", request_type=service.UpdateCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion(
-                name="name_value",
-                state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-                import_job="import_job_value",
-                import_failure_reason="import_failure_reason_value",
-                generation_failure_reason="generation_failure_reason_value",
-                external_destruction_failure_reason="external_destruction_failure_reason_value",
-                reimport_eligible=True,
-            )
-        )
-        response = await client.update_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_version_async_from_dict():
-    await test_update_crypto_key_version_async(request_type=dict)
-
-
-def test_update_crypto_key_version_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.UpdateCryptoKeyVersionRequest()
-
-    request.crypto_key_version.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKeyVersion()
-        client.update_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "crypto_key_version.name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_version_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.UpdateCryptoKeyVersionRequest()
-
-    request.crypto_key_version.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        await client.update_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "crypto_key_version.name=name_value",
-    ) in kw["metadata"]
-
-
-def test_update_crypto_key_version_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.update_crypto_key_version(
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].crypto_key_version
-        mock_val = resources.CryptoKeyVersion(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-def test_update_crypto_key_version_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_crypto_key_version(
-            service.UpdateCryptoKeyVersionRequest(),
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_version_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.update_crypto_key_version(
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].crypto_key_version
-        mock_val = resources.CryptoKeyVersion(name="name_value")
-        assert arg == mock_val
-        arg = args[0].update_mask
-        mock_val = field_mask_pb2.FieldMask(paths=["paths_value"])
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_version_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.update_crypto_key_version(
-            service.UpdateCryptoKeyVersionRequest(),
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.UpdateCryptoKeyPrimaryVersionRequest,
-        dict,
-    ],
-)
-def test_update_crypto_key_primary_version(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_primary_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-        response = client.update_crypto_key_primary_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyPrimaryVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_update_crypto_key_primary_version_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_primary_version), "__call__"
-    ) as call:
-        client.update_crypto_key_primary_version()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyPrimaryVersionRequest()
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_primary_version_async(
-    transport: str = "grpc_asyncio",
-    request_type=service.UpdateCryptoKeyPrimaryVersionRequest,
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_primary_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKey(
-                name="name_value",
-                purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-                import_only=True,
-                crypto_key_backend="crypto_key_backend_value",
-            )
-        )
-        response = await client.update_crypto_key_primary_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.UpdateCryptoKeyPrimaryVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_primary_version_async_from_dict():
-    await test_update_crypto_key_primary_version_async(request_type=dict)
-
-
-def test_update_crypto_key_primary_version_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.UpdateCryptoKeyPrimaryVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_primary_version), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKey()
-        client.update_crypto_key_primary_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_primary_version_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.UpdateCryptoKeyPrimaryVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_primary_version), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        await client.update_crypto_key_primary_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_update_crypto_key_primary_version_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_primary_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.update_crypto_key_primary_version(
-            name="name_value",
-            crypto_key_version_id="crypto_key_version_id_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key_version_id
-        mock_val = "crypto_key_version_id_value"
-        assert arg == mock_val
-
-
-def test_update_crypto_key_primary_version_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_crypto_key_primary_version(
-            service.UpdateCryptoKeyPrimaryVersionRequest(),
-            name="name_value",
-            crypto_key_version_id="crypto_key_version_id_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_primary_version_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.update_crypto_key_primary_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKey()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(resources.CryptoKey())
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.update_crypto_key_primary_version(
-            name="name_value",
-            crypto_key_version_id="crypto_key_version_id_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].crypto_key_version_id
-        mock_val = "crypto_key_version_id_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_update_crypto_key_primary_version_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.update_crypto_key_primary_version(
-            service.UpdateCryptoKeyPrimaryVersionRequest(),
-            name="name_value",
-            crypto_key_version_id="crypto_key_version_id_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.DestroyCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_destroy_crypto_key_version(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.destroy_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-        response = client.destroy_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.DestroyCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_destroy_crypto_key_version_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.destroy_crypto_key_version), "__call__"
-    ) as call:
-        client.destroy_crypto_key_version()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.DestroyCryptoKeyVersionRequest()
-
-
-@pytest.mark.asyncio
-async def test_destroy_crypto_key_version_async(
-    transport: str = "grpc_asyncio", request_type=service.DestroyCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.destroy_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion(
-                name="name_value",
-                state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-                import_job="import_job_value",
-                import_failure_reason="import_failure_reason_value",
-                generation_failure_reason="generation_failure_reason_value",
-                external_destruction_failure_reason="external_destruction_failure_reason_value",
-                reimport_eligible=True,
-            )
-        )
-        response = await client.destroy_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.DestroyCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-@pytest.mark.asyncio
-async def test_destroy_crypto_key_version_async_from_dict():
-    await test_destroy_crypto_key_version_async(request_type=dict)
-
-
-def test_destroy_crypto_key_version_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.DestroyCryptoKeyVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.destroy_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKeyVersion()
-        client.destroy_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_destroy_crypto_key_version_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.DestroyCryptoKeyVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.destroy_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        await client.destroy_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_destroy_crypto_key_version_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.destroy_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.destroy_crypto_key_version(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_destroy_crypto_key_version_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.destroy_crypto_key_version(
-            service.DestroyCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_destroy_crypto_key_version_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.destroy_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.destroy_crypto_key_version(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_destroy_crypto_key_version_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.destroy_crypto_key_version(
-            service.DestroyCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.RestoreCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_restore_crypto_key_version(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.restore_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-        response = client.restore_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RestoreCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_restore_crypto_key_version_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.restore_crypto_key_version), "__call__"
-    ) as call:
-        client.restore_crypto_key_version()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RestoreCryptoKeyVersionRequest()
-
-
-@pytest.mark.asyncio
-async def test_restore_crypto_key_version_async(
-    transport: str = "grpc_asyncio", request_type=service.RestoreCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.restore_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion(
-                name="name_value",
-                state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-                import_job="import_job_value",
-                import_failure_reason="import_failure_reason_value",
-                generation_failure_reason="generation_failure_reason_value",
-                external_destruction_failure_reason="external_destruction_failure_reason_value",
-                reimport_eligible=True,
-            )
-        )
-        response = await client.restore_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RestoreCryptoKeyVersionRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-@pytest.mark.asyncio
-async def test_restore_crypto_key_version_async_from_dict():
-    await test_restore_crypto_key_version_async(request_type=dict)
-
-
-def test_restore_crypto_key_version_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.RestoreCryptoKeyVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.restore_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = resources.CryptoKeyVersion()
-        client.restore_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_restore_crypto_key_version_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.RestoreCryptoKeyVersionRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.restore_crypto_key_version), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        await client.restore_crypto_key_version(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_restore_crypto_key_version_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.restore_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.restore_crypto_key_version(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-def test_restore_crypto_key_version_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.restore_crypto_key_version(
-            service.RestoreCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.asyncio
-async def test_restore_crypto_key_version_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.restore_crypto_key_version), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = resources.CryptoKeyVersion()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            resources.CryptoKeyVersion()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.restore_crypto_key_version(
-            name="name_value",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_restore_crypto_key_version_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.restore_crypto_key_version(
-            service.RestoreCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.EncryptRequest,
-        dict,
-    ],
-)
-def test_encrypt(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.encrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.EncryptResponse(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-            verified_plaintext_crc32c=True,
-            verified_additional_authenticated_data_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.EncryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.EncryptResponse)
-    assert response.name == "name_value"
-    assert response.ciphertext == b"ciphertext_blob"
-    assert response.verified_plaintext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_encrypt_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.encrypt), "__call__") as call:
-        client.encrypt()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.EncryptRequest()
-
-
-@pytest.mark.asyncio
-async def test_encrypt_async(
-    transport: str = "grpc_asyncio", request_type=service.EncryptRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.encrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.EncryptResponse(
-                name="name_value",
-                ciphertext=b"ciphertext_blob",
-                verified_plaintext_crc32c=True,
-                verified_additional_authenticated_data_crc32c=True,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.EncryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.EncryptResponse)
-    assert response.name == "name_value"
-    assert response.ciphertext == b"ciphertext_blob"
-    assert response.verified_plaintext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_encrypt_async_from_dict():
-    await test_encrypt_async(request_type=dict)
-
-
-def test_encrypt_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.EncryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.encrypt), "__call__") as call:
-        call.return_value = service.EncryptResponse()
-        client.encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_encrypt_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.EncryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.encrypt), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.EncryptResponse()
-        )
-        await client.encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_encrypt_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.encrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.EncryptResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.encrypt(
-            name="name_value",
-            plaintext=b"plaintext_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].plaintext
-        mock_val = b"plaintext_blob"
-        assert arg == mock_val
-
-
-def test_encrypt_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.encrypt(
-            service.EncryptRequest(),
-            name="name_value",
-            plaintext=b"plaintext_blob",
-        )
-
-
-@pytest.mark.asyncio
-async def test_encrypt_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.encrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.EncryptResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.EncryptResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.encrypt(
-            name="name_value",
-            plaintext=b"plaintext_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].plaintext
-        mock_val = b"plaintext_blob"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_encrypt_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.encrypt(
-            service.EncryptRequest(),
-            name="name_value",
-            plaintext=b"plaintext_blob",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.DecryptRequest,
-        dict,
-    ],
-)
-def test_decrypt(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.decrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.DecryptResponse(
-            plaintext=b"plaintext_blob",
-            used_primary=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.DecryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.DecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.used_primary is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_decrypt_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.decrypt), "__call__") as call:
-        client.decrypt()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.DecryptRequest()
-
-
-@pytest.mark.asyncio
-async def test_decrypt_async(
-    transport: str = "grpc_asyncio", request_type=service.DecryptRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.decrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.DecryptResponse(
-                plaintext=b"plaintext_blob",
-                used_primary=True,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.DecryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.DecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.used_primary is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_decrypt_async_from_dict():
-    await test_decrypt_async(request_type=dict)
-
-
-def test_decrypt_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.DecryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.decrypt), "__call__") as call:
-        call.return_value = service.DecryptResponse()
-        client.decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_decrypt_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.DecryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.decrypt), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.DecryptResponse()
-        )
-        await client.decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_decrypt_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.decrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.DecryptResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.decrypt(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].ciphertext
-        mock_val = b"ciphertext_blob"
-        assert arg == mock_val
-
-
-def test_decrypt_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.decrypt(
-            service.DecryptRequest(),
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-
-@pytest.mark.asyncio
-async def test_decrypt_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.decrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.DecryptResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.DecryptResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.decrypt(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].ciphertext
-        mock_val = b"ciphertext_blob"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_decrypt_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.decrypt(
-            service.DecryptRequest(),
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.RawEncryptRequest,
-        dict,
-    ],
-)
-def test_raw_encrypt(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_encrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.RawEncryptResponse(
-            ciphertext=b"ciphertext_blob",
-            initialization_vector=b"initialization_vector_blob",
-            tag_length=1053,
-            verified_plaintext_crc32c=True,
-            verified_additional_authenticated_data_crc32c=True,
-            verified_initialization_vector_crc32c=True,
-            name="name_value",
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.raw_encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RawEncryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.RawEncryptResponse)
-    assert response.ciphertext == b"ciphertext_blob"
-    assert response.initialization_vector == b"initialization_vector_blob"
-    assert response.tag_length == 1053
-    assert response.verified_plaintext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.verified_initialization_vector_crc32c is True
-    assert response.name == "name_value"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_raw_encrypt_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_encrypt), "__call__") as call:
-        client.raw_encrypt()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RawEncryptRequest()
-
-
-@pytest.mark.asyncio
-async def test_raw_encrypt_async(
-    transport: str = "grpc_asyncio", request_type=service.RawEncryptRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_encrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.RawEncryptResponse(
-                ciphertext=b"ciphertext_blob",
-                initialization_vector=b"initialization_vector_blob",
-                tag_length=1053,
-                verified_plaintext_crc32c=True,
-                verified_additional_authenticated_data_crc32c=True,
-                verified_initialization_vector_crc32c=True,
-                name="name_value",
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.raw_encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RawEncryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.RawEncryptResponse)
-    assert response.ciphertext == b"ciphertext_blob"
-    assert response.initialization_vector == b"initialization_vector_blob"
-    assert response.tag_length == 1053
-    assert response.verified_plaintext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.verified_initialization_vector_crc32c is True
-    assert response.name == "name_value"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_raw_encrypt_async_from_dict():
-    await test_raw_encrypt_async(request_type=dict)
-
-
-def test_raw_encrypt_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.RawEncryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_encrypt), "__call__") as call:
-        call.return_value = service.RawEncryptResponse()
-        client.raw_encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_raw_encrypt_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.RawEncryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_encrypt), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.RawEncryptResponse()
-        )
-        await client.raw_encrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.RawDecryptRequest,
-        dict,
-    ],
-)
-def test_raw_decrypt(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_decrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.RawDecryptResponse(
-            plaintext=b"plaintext_blob",
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            verified_ciphertext_crc32c=True,
-            verified_additional_authenticated_data_crc32c=True,
-            verified_initialization_vector_crc32c=True,
-        )
-        response = client.raw_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RawDecryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.RawDecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.verified_ciphertext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.verified_initialization_vector_crc32c is True
-
-
-def test_raw_decrypt_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_decrypt), "__call__") as call:
-        client.raw_decrypt()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RawDecryptRequest()
-
-
-@pytest.mark.asyncio
-async def test_raw_decrypt_async(
-    transport: str = "grpc_asyncio", request_type=service.RawDecryptRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_decrypt), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.RawDecryptResponse(
-                plaintext=b"plaintext_blob",
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-                verified_ciphertext_crc32c=True,
-                verified_additional_authenticated_data_crc32c=True,
-                verified_initialization_vector_crc32c=True,
-            )
-        )
-        response = await client.raw_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.RawDecryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.RawDecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.verified_ciphertext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.verified_initialization_vector_crc32c is True
-
-
-@pytest.mark.asyncio
-async def test_raw_decrypt_async_from_dict():
-    await test_raw_decrypt_async(request_type=dict)
-
-
-def test_raw_decrypt_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.RawDecryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_decrypt), "__call__") as call:
-        call.return_value = service.RawDecryptResponse()
-        client.raw_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_raw_decrypt_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.RawDecryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.raw_decrypt), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.RawDecryptResponse()
-        )
-        await client.raw_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.AsymmetricSignRequest,
-        dict,
-    ],
-)
-def test_asymmetric_sign(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.asymmetric_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.AsymmetricSignResponse(
-            signature=b"signature_blob",
-            verified_digest_crc32c=True,
-            name="name_value",
-            verified_data_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.asymmetric_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.AsymmetricSignRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.AsymmetricSignResponse)
-    assert response.signature == b"signature_blob"
-    assert response.verified_digest_crc32c is True
-    assert response.name == "name_value"
-    assert response.verified_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_asymmetric_sign_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.asymmetric_sign), "__call__") as call:
-        client.asymmetric_sign()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.AsymmetricSignRequest()
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_sign_async(
-    transport: str = "grpc_asyncio", request_type=service.AsymmetricSignRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.asymmetric_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.AsymmetricSignResponse(
-                signature=b"signature_blob",
-                verified_digest_crc32c=True,
-                name="name_value",
-                verified_data_crc32c=True,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.asymmetric_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.AsymmetricSignRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.AsymmetricSignResponse)
-    assert response.signature == b"signature_blob"
-    assert response.verified_digest_crc32c is True
-    assert response.name == "name_value"
-    assert response.verified_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_sign_async_from_dict():
-    await test_asymmetric_sign_async(request_type=dict)
-
-
-def test_asymmetric_sign_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.AsymmetricSignRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.asymmetric_sign), "__call__") as call:
-        call.return_value = service.AsymmetricSignResponse()
-        client.asymmetric_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_sign_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.AsymmetricSignRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.asymmetric_sign), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.AsymmetricSignResponse()
-        )
-        await client.asymmetric_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_asymmetric_sign_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.asymmetric_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.AsymmetricSignResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.asymmetric_sign(
-            name="name_value",
-            digest=service.Digest(sha256=b"sha256_blob"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].digest
-        mock_val = service.Digest(sha256=b"sha256_blob")
-        assert arg == mock_val
-
-
-def test_asymmetric_sign_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.asymmetric_sign(
-            service.AsymmetricSignRequest(),
-            name="name_value",
-            digest=service.Digest(sha256=b"sha256_blob"),
-        )
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_sign_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.asymmetric_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.AsymmetricSignResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.AsymmetricSignResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.asymmetric_sign(
-            name="name_value",
-            digest=service.Digest(sha256=b"sha256_blob"),
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].digest
-        mock_val = service.Digest(sha256=b"sha256_blob")
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_sign_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.asymmetric_sign(
-            service.AsymmetricSignRequest(),
-            name="name_value",
-            digest=service.Digest(sha256=b"sha256_blob"),
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.AsymmetricDecryptRequest,
-        dict,
-    ],
-)
-def test_asymmetric_decrypt(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.asymmetric_decrypt), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.AsymmetricDecryptResponse(
-            plaintext=b"plaintext_blob",
-            verified_ciphertext_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.asymmetric_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.AsymmetricDecryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.AsymmetricDecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.verified_ciphertext_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_asymmetric_decrypt_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.asymmetric_decrypt), "__call__"
-    ) as call:
-        client.asymmetric_decrypt()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.AsymmetricDecryptRequest()
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_decrypt_async(
-    transport: str = "grpc_asyncio", request_type=service.AsymmetricDecryptRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.asymmetric_decrypt), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.AsymmetricDecryptResponse(
-                plaintext=b"plaintext_blob",
-                verified_ciphertext_crc32c=True,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.asymmetric_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.AsymmetricDecryptRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.AsymmetricDecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.verified_ciphertext_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_decrypt_async_from_dict():
-    await test_asymmetric_decrypt_async(request_type=dict)
-
-
-def test_asymmetric_decrypt_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.AsymmetricDecryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.asymmetric_decrypt), "__call__"
-    ) as call:
-        call.return_value = service.AsymmetricDecryptResponse()
-        client.asymmetric_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_decrypt_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.AsymmetricDecryptRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.asymmetric_decrypt), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.AsymmetricDecryptResponse()
-        )
-        await client.asymmetric_decrypt(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_asymmetric_decrypt_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.asymmetric_decrypt), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.AsymmetricDecryptResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.asymmetric_decrypt(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].ciphertext
-        mock_val = b"ciphertext_blob"
-        assert arg == mock_val
-
-
-def test_asymmetric_decrypt_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.asymmetric_decrypt(
-            service.AsymmetricDecryptRequest(),
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_decrypt_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.asymmetric_decrypt), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.AsymmetricDecryptResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.AsymmetricDecryptResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.asymmetric_decrypt(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].ciphertext
-        mock_val = b"ciphertext_blob"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_asymmetric_decrypt_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.asymmetric_decrypt(
-            service.AsymmetricDecryptRequest(),
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.MacSignRequest,
-        dict,
-    ],
-)
-def test_mac_sign(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.MacSignResponse(
-            name="name_value",
-            mac=b"mac_blob",
-            verified_data_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.mac_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.MacSignRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.MacSignResponse)
-    assert response.name == "name_value"
-    assert response.mac == b"mac_blob"
-    assert response.verified_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_mac_sign_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_sign), "__call__") as call:
-        client.mac_sign()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.MacSignRequest()
-
-
-@pytest.mark.asyncio
-async def test_mac_sign_async(
-    transport: str = "grpc_asyncio", request_type=service.MacSignRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.MacSignResponse(
-                name="name_value",
-                mac=b"mac_blob",
-                verified_data_crc32c=True,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.mac_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.MacSignRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.MacSignResponse)
-    assert response.name == "name_value"
-    assert response.mac == b"mac_blob"
-    assert response.verified_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_mac_sign_async_from_dict():
-    await test_mac_sign_async(request_type=dict)
-
-
-def test_mac_sign_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.MacSignRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_sign), "__call__") as call:
-        call.return_value = service.MacSignResponse()
-        client.mac_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_mac_sign_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.MacSignRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_sign), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.MacSignResponse()
-        )
-        await client.mac_sign(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_mac_sign_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.MacSignResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.mac_sign(
-            name="name_value",
-            data=b"data_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].data
-        mock_val = b"data_blob"
-        assert arg == mock_val
-
-
-def test_mac_sign_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.mac_sign(
-            service.MacSignRequest(),
-            name="name_value",
-            data=b"data_blob",
-        )
-
-
-@pytest.mark.asyncio
-async def test_mac_sign_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_sign), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.MacSignResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.MacSignResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.mac_sign(
-            name="name_value",
-            data=b"data_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].data
-        mock_val = b"data_blob"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_mac_sign_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.mac_sign(
-            service.MacSignRequest(),
-            name="name_value",
-            data=b"data_blob",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.MacVerifyRequest,
-        dict,
-    ],
-)
-def test_mac_verify(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_verify), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.MacVerifyResponse(
-            name="name_value",
-            success=True,
-            verified_data_crc32c=True,
-            verified_mac_crc32c=True,
-            verified_success_integrity=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        response = client.mac_verify(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.MacVerifyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.MacVerifyResponse)
-    assert response.name == "name_value"
-    assert response.success is True
-    assert response.verified_data_crc32c is True
-    assert response.verified_mac_crc32c is True
-    assert response.verified_success_integrity is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_mac_verify_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_verify), "__call__") as call:
-        client.mac_verify()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.MacVerifyRequest()
-
-
-@pytest.mark.asyncio
-async def test_mac_verify_async(
-    transport: str = "grpc_asyncio", request_type=service.MacVerifyRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_verify), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.MacVerifyResponse(
-                name="name_value",
-                success=True,
-                verified_data_crc32c=True,
-                verified_mac_crc32c=True,
-                verified_success_integrity=True,
-                protection_level=resources.ProtectionLevel.SOFTWARE,
-            )
-        )
-        response = await client.mac_verify(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.MacVerifyRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.MacVerifyResponse)
-    assert response.name == "name_value"
-    assert response.success is True
-    assert response.verified_data_crc32c is True
-    assert response.verified_mac_crc32c is True
-    assert response.verified_success_integrity is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-@pytest.mark.asyncio
-async def test_mac_verify_async_from_dict():
-    await test_mac_verify_async(request_type=dict)
-
-
-def test_mac_verify_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.MacVerifyRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_verify), "__call__") as call:
-        call.return_value = service.MacVerifyResponse()
-        client.mac_verify(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_mac_verify_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.MacVerifyRequest()
-
-    request.name = "name_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_verify), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.MacVerifyResponse()
-        )
-        await client.mac_verify(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=name_value",
-    ) in kw["metadata"]
-
-
-def test_mac_verify_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_verify), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.MacVerifyResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.mac_verify(
-            name="name_value",
-            data=b"data_blob",
-            mac=b"mac_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].data
-        mock_val = b"data_blob"
-        assert arg == mock_val
-        arg = args[0].mac
-        mock_val = b"mac_blob"
-        assert arg == mock_val
-
-
-def test_mac_verify_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.mac_verify(
-            service.MacVerifyRequest(),
-            name="name_value",
-            data=b"data_blob",
-            mac=b"mac_blob",
-        )
-
-
-@pytest.mark.asyncio
-async def test_mac_verify_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.mac_verify), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.MacVerifyResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.MacVerifyResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.mac_verify(
-            name="name_value",
-            data=b"data_blob",
-            mac=b"mac_blob",
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].name
-        mock_val = "name_value"
-        assert arg == mock_val
-        arg = args[0].data
-        mock_val = b"data_blob"
-        assert arg == mock_val
-        arg = args[0].mac
-        mock_val = b"mac_blob"
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_mac_verify_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.mac_verify(
-            service.MacVerifyRequest(),
-            name="name_value",
-            data=b"data_blob",
-            mac=b"mac_blob",
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GenerateRandomBytesRequest,
-        dict,
-    ],
-)
-def test_generate_random_bytes(request_type, transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.generate_random_bytes), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.GenerateRandomBytesResponse(
-            data=b"data_blob",
-        )
-        response = client.generate_random_bytes(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GenerateRandomBytesRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.GenerateRandomBytesResponse)
-    assert response.data == b"data_blob"
-
-
-def test_generate_random_bytes_empty_call():
-    # This test is a coverage failsafe to make sure that totally empty calls,
-    # i.e. request == None and no flattened fields passed, work.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc",
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.generate_random_bytes), "__call__"
-    ) as call:
-        client.generate_random_bytes()
-        call.assert_called()
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GenerateRandomBytesRequest()
-
-
-@pytest.mark.asyncio
-async def test_generate_random_bytes_async(
-    transport: str = "grpc_asyncio", request_type=service.GenerateRandomBytesRequest
-):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = request_type()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.generate_random_bytes), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.GenerateRandomBytesResponse(
-                data=b"data_blob",
-            )
-        )
-        response = await client.generate_random_bytes(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == service.GenerateRandomBytesRequest()
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.GenerateRandomBytesResponse)
-    assert response.data == b"data_blob"
-
-
-@pytest.mark.asyncio
-async def test_generate_random_bytes_async_from_dict():
-    await test_generate_random_bytes_async(request_type=dict)
-
-
-def test_generate_random_bytes_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GenerateRandomBytesRequest()
-
-    request.location = "location_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.generate_random_bytes), "__call__"
-    ) as call:
-        call.return_value = service.GenerateRandomBytesResponse()
-        client.generate_random_bytes(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "location=location_value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_generate_random_bytes_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = service.GenerateRandomBytesRequest()
-
-    request.location = "location_value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.generate_random_bytes), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.GenerateRandomBytesResponse()
-        )
-        await client.generate_random_bytes(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "location=location_value",
-    ) in kw["metadata"]
-
-
-def test_generate_random_bytes_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.generate_random_bytes), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.GenerateRandomBytesResponse()
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        client.generate_random_bytes(
-            location="location_value",
-            length_bytes=1288,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].location
-        mock_val = "location_value"
-        assert arg == mock_val
-        arg = args[0].length_bytes
-        mock_val = 1288
-        assert arg == mock_val
-        arg = args[0].protection_level
-        mock_val = resources.ProtectionLevel.SOFTWARE
-        assert arg == mock_val
-
-
-def test_generate_random_bytes_flattened_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.generate_random_bytes(
-            service.GenerateRandomBytesRequest(),
-            location="location_value",
-            length_bytes=1288,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-
-@pytest.mark.asyncio
-async def test_generate_random_bytes_flattened_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.generate_random_bytes), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = service.GenerateRandomBytesResponse()
-
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            service.GenerateRandomBytesResponse()
-        )
-        # Call the method with a truthy value for each flattened field,
-        # using the keyword arguments to the method.
-        response = await client.generate_random_bytes(
-            location="location_value",
-            length_bytes=1288,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        arg = args[0].location
-        mock_val = "location_value"
-        assert arg == mock_val
-        arg = args[0].length_bytes
-        mock_val = 1288
-        assert arg == mock_val
-        arg = args[0].protection_level
-        mock_val = resources.ProtectionLevel.SOFTWARE
-        assert arg == mock_val
-
-
-@pytest.mark.asyncio
-async def test_generate_random_bytes_flattened_error_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        await client.generate_random_bytes(
-            service.GenerateRandomBytesRequest(),
-            location="location_value",
-            length_bytes=1288,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListKeyRingsRequest,
-        dict,
-    ],
-)
-def test_list_key_rings_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListKeyRingsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListKeyRingsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.list_key_rings(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListKeyRingsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_key_rings_rest_required_fields(request_type=service.ListKeyRingsRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_key_rings._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["parent"] = "parent_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_key_rings._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(
-        (
-            "filter",
-            "order_by",
-            "page_size",
-            "page_token",
-        )
-    )
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.ListKeyRingsResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.ListKeyRingsResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.list_key_rings(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_list_key_rings_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.list_key_rings._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(
-            (
-                "filter",
-                "orderBy",
-                "pageSize",
-                "pageToken",
-            )
-        )
-        & set(("parent",))
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_list_key_rings_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_list_key_rings"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_list_key_rings"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.ListKeyRingsRequest.pb(service.ListKeyRingsRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.ListKeyRingsResponse.to_json(
-            service.ListKeyRingsResponse()
-        )
-
-        request = service.ListKeyRingsRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.ListKeyRingsResponse()
-
-        client.list_key_rings(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_list_key_rings_rest_bad_request(
-    transport: str = "rest", request_type=service.ListKeyRingsRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.list_key_rings(request)
-
-
-def test_list_key_rings_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListKeyRingsResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {"parent": "projects/sample1/locations/sample2"}
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListKeyRingsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.list_key_rings(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*}/keyRings" % client.transport._host,
-            args[1],
-        )
-
-
-def test_list_key_rings_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_key_rings(
-            service.ListKeyRingsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_key_rings_rest_pager(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # TODO(kbandes): remove this mock unless there's a good reason for it.
-        # with mock.patch.object(path_template, 'transcode') as transcode:
-        # Set the response as a series of pages
-        response = (
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[],
-                next_page_token="def",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListKeyRingsResponse(
-                key_rings=[
-                    resources.KeyRing(),
-                    resources.KeyRing(),
-                ],
-            ),
-        )
-        # Two responses for two calls
-        response = response + response
-
-        # Wrap the values into proper Response objs
-        response = tuple(service.ListKeyRingsResponse.to_json(x) for x in response)
-        return_values = tuple(Response() for i in response)
-        for return_val, response_val in zip(return_values, response):
-            return_val._content = response_val.encode("UTF-8")
-            return_val.status_code = 200
-        req.side_effect = return_values
-
-        sample_request = {"parent": "projects/sample1/locations/sample2"}
-
-        pager = client.list_key_rings(request=sample_request)
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.KeyRing) for i in results)
-
-        pages = list(client.list_key_rings(request=sample_request).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListCryptoKeysRequest,
-        dict,
-    ],
-)
-def test_list_crypto_keys_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListCryptoKeysResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListCryptoKeysResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.list_crypto_keys(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListCryptoKeysPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_crypto_keys_rest_required_fields(
-    request_type=service.ListCryptoKeysRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_crypto_keys._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["parent"] = "parent_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_crypto_keys._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(
-        (
-            "filter",
-            "order_by",
-            "page_size",
-            "page_token",
-            "version_view",
-        )
-    )
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.ListCryptoKeysResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.ListCryptoKeysResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.list_crypto_keys(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_list_crypto_keys_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.list_crypto_keys._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(
-            (
-                "filter",
-                "orderBy",
-                "pageSize",
-                "pageToken",
-                "versionView",
-            )
-        )
-        & set(("parent",))
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_list_crypto_keys_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_list_crypto_keys"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_list_crypto_keys"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.ListCryptoKeysRequest.pb(service.ListCryptoKeysRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.ListCryptoKeysResponse.to_json(
-            service.ListCryptoKeysResponse()
-        )
-
-        request = service.ListCryptoKeysRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.ListCryptoKeysResponse()
-
-        client.list_crypto_keys(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_list_crypto_keys_rest_bad_request(
-    transport: str = "rest", request_type=service.ListCryptoKeysRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.list_crypto_keys(request)
-
-
-def test_list_crypto_keys_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListCryptoKeysResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListCryptoKeysResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.list_crypto_keys(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*/keyRings/*}/cryptoKeys"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_list_crypto_keys_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_crypto_keys(
-            service.ListCryptoKeysRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_crypto_keys_rest_pager(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # TODO(kbandes): remove this mock unless there's a good reason for it.
-        # with mock.patch.object(path_template, 'transcode') as transcode:
-        # Set the response as a series of pages
-        response = (
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeysResponse(
-                crypto_keys=[
-                    resources.CryptoKey(),
-                    resources.CryptoKey(),
-                ],
-            ),
-        )
-        # Two responses for two calls
-        response = response + response
-
-        # Wrap the values into proper Response objs
-        response = tuple(service.ListCryptoKeysResponse.to_json(x) for x in response)
-        return_values = tuple(Response() for i in response)
-        for return_val, response_val in zip(return_values, response):
-            return_val._content = response_val.encode("UTF-8")
-            return_val.status_code = 200
-        req.side_effect = return_values
-
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3"
-        }
-
-        pager = client.list_crypto_keys(request=sample_request)
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.CryptoKey) for i in results)
-
-        pages = list(client.list_crypto_keys(request=sample_request).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListCryptoKeyVersionsRequest,
-        dict,
-    ],
-)
-def test_list_crypto_key_versions_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListCryptoKeyVersionsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListCryptoKeyVersionsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.list_crypto_key_versions(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListCryptoKeyVersionsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_crypto_key_versions_rest_required_fields(
-    request_type=service.ListCryptoKeyVersionsRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_crypto_key_versions._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["parent"] = "parent_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_crypto_key_versions._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(
-        (
-            "filter",
-            "order_by",
-            "page_size",
-            "page_token",
-            "view",
-        )
-    )
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.ListCryptoKeyVersionsResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.ListCryptoKeyVersionsResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.list_crypto_key_versions(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_list_crypto_key_versions_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.list_crypto_key_versions._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(
-            (
-                "filter",
-                "orderBy",
-                "pageSize",
-                "pageToken",
-                "view",
-            )
-        )
-        & set(("parent",))
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_list_crypto_key_versions_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_list_crypto_key_versions"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_list_crypto_key_versions"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.ListCryptoKeyVersionsRequest.pb(
-            service.ListCryptoKeyVersionsRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.ListCryptoKeyVersionsResponse.to_json(
-            service.ListCryptoKeyVersionsResponse()
-        )
-
-        request = service.ListCryptoKeyVersionsRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.ListCryptoKeyVersionsResponse()
-
-        client.list_crypto_key_versions(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_list_crypto_key_versions_rest_bad_request(
-    transport: str = "rest", request_type=service.ListCryptoKeyVersionsRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.list_crypto_key_versions(request)
-
-
-def test_list_crypto_key_versions_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListCryptoKeyVersionsResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListCryptoKeyVersionsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.list_crypto_key_versions(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*/keyRings/*/cryptoKeys/*}/cryptoKeyVersions"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_list_crypto_key_versions_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_crypto_key_versions(
-            service.ListCryptoKeyVersionsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_crypto_key_versions_rest_pager(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # TODO(kbandes): remove this mock unless there's a good reason for it.
-        # with mock.patch.object(path_template, 'transcode') as transcode:
-        # Set the response as a series of pages
-        response = (
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[],
-                next_page_token="def",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListCryptoKeyVersionsResponse(
-                crypto_key_versions=[
-                    resources.CryptoKeyVersion(),
-                    resources.CryptoKeyVersion(),
-                ],
-            ),
-        )
-        # Two responses for two calls
-        response = response + response
-
-        # Wrap the values into proper Response objs
-        response = tuple(
-            service.ListCryptoKeyVersionsResponse.to_json(x) for x in response
-        )
-        return_values = tuple(Response() for i in response)
-        for return_val, response_val in zip(return_values, response):
-            return_val._content = response_val.encode("UTF-8")
-            return_val.status_code = 200
-        req.side_effect = return_values
-
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-
-        pager = client.list_crypto_key_versions(request=sample_request)
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.CryptoKeyVersion) for i in results)
-
-        pages = list(client.list_crypto_key_versions(request=sample_request).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ListImportJobsRequest,
-        dict,
-    ],
-)
-def test_list_import_jobs_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListImportJobsResponse(
-            next_page_token="next_page_token_value",
-            total_size=1086,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListImportJobsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.list_import_jobs(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, pagers.ListImportJobsPager)
-    assert response.next_page_token == "next_page_token_value"
-    assert response.total_size == 1086
-
-
-def test_list_import_jobs_rest_required_fields(
-    request_type=service.ListImportJobsRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_import_jobs._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["parent"] = "parent_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).list_import_jobs._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(
-        (
-            "filter",
-            "order_by",
-            "page_size",
-            "page_token",
-        )
-    )
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.ListImportJobsResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.ListImportJobsResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.list_import_jobs(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_list_import_jobs_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.list_import_jobs._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(
-            (
-                "filter",
-                "orderBy",
-                "pageSize",
-                "pageToken",
-            )
-        )
-        & set(("parent",))
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_list_import_jobs_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_list_import_jobs"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_list_import_jobs"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.ListImportJobsRequest.pb(service.ListImportJobsRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.ListImportJobsResponse.to_json(
-            service.ListImportJobsResponse()
-        )
-
-        request = service.ListImportJobsRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.ListImportJobsResponse()
-
-        client.list_import_jobs(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_list_import_jobs_rest_bad_request(
-    transport: str = "rest", request_type=service.ListImportJobsRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.list_import_jobs(request)
-
-
-def test_list_import_jobs_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.ListImportJobsResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.ListImportJobsResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.list_import_jobs(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*/keyRings/*}/importJobs"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_list_import_jobs_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.list_import_jobs(
-            service.ListImportJobsRequest(),
-            parent="parent_value",
-        )
-
-
-def test_list_import_jobs_rest_pager(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # TODO(kbandes): remove this mock unless there's a good reason for it.
-        # with mock.patch.object(path_template, 'transcode') as transcode:
-        # Set the response as a series of pages
-        response = (
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-                next_page_token="abc",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[],
-                next_page_token="def",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                ],
-                next_page_token="ghi",
-            ),
-            service.ListImportJobsResponse(
-                import_jobs=[
-                    resources.ImportJob(),
-                    resources.ImportJob(),
-                ],
-            ),
-        )
-        # Two responses for two calls
-        response = response + response
-
-        # Wrap the values into proper Response objs
-        response = tuple(service.ListImportJobsResponse.to_json(x) for x in response)
-        return_values = tuple(Response() for i in response)
-        for return_val, response_val in zip(return_values, response):
-            return_val._content = response_val.encode("UTF-8")
-            return_val.status_code = 200
-        req.side_effect = return_values
-
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3"
-        }
-
-        pager = client.list_import_jobs(request=sample_request)
-
-        results = list(pager)
-        assert len(results) == 6
-        assert all(isinstance(i, resources.ImportJob) for i in results)
-
-        pages = list(client.list_import_jobs(request=sample_request).pages)
-        for page_, token in zip(pages, ["abc", "def", "ghi", ""]):
-            assert page_.raw_page.next_page_token == token
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetKeyRingRequest,
-        dict,
-    ],
-)
-def test_get_key_ring_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.KeyRing(
-            name="name_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.KeyRing.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.get_key_ring(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.KeyRing)
-    assert response.name == "name_value"
-
-
-def test_get_key_ring_rest_required_fields(request_type=service.GetKeyRingRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_key_ring._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_key_ring._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.KeyRing()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.KeyRing.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.get_key_ring(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_get_key_ring_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.get_key_ring._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_get_key_ring_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_get_key_ring"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_get_key_ring"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.GetKeyRingRequest.pb(service.GetKeyRingRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.KeyRing.to_json(resources.KeyRing())
-
-        request = service.GetKeyRingRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.KeyRing()
-
-        client.get_key_ring(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_get_key_ring_rest_bad_request(
-    transport: str = "rest", request_type=service.GetKeyRingRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"name": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_key_ring(request)
-
-
-def test_get_key_ring_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.KeyRing()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {"name": "projects/sample1/locations/sample2/keyRings/sample3"}
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.KeyRing.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.get_key_ring(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*}" % client.transport._host,
-            args[1],
-        )
-
-
-def test_get_key_ring_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_key_ring(
-            service.GetKeyRingRequest(),
-            name="name_value",
-        )
-
-
-def test_get_key_ring_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetCryptoKeyRequest,
-        dict,
-    ],
-)
-def test_get_crypto_key_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.get_crypto_key(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_get_crypto_key_rest_required_fields(request_type=service.GetCryptoKeyRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_crypto_key._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_crypto_key._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKey()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKey.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.get_crypto_key(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_get_crypto_key_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.get_crypto_key._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_get_crypto_key_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_get_crypto_key"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_get_crypto_key"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.GetCryptoKeyRequest.pb(service.GetCryptoKeyRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKey.to_json(resources.CryptoKey())
-
-        request = service.GetCryptoKeyRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKey()
-
-        client.get_crypto_key(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_get_crypto_key_rest_bad_request(
-    transport: str = "rest", request_type=service.GetCryptoKeyRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_crypto_key(request)
-
-
-def test_get_crypto_key_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.get_crypto_key(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_get_crypto_key_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_crypto_key(
-            service.GetCryptoKeyRequest(),
-            name="name_value",
-        )
-
-
-def test_get_crypto_key_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_get_crypto_key_version_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.get_crypto_key_version(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_get_crypto_key_version_rest_required_fields(
-    request_type=service.GetCryptoKeyVersionRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKeyVersion()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKeyVersion.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.get_crypto_key_version(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_get_crypto_key_version_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.get_crypto_key_version._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_get_crypto_key_version_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_get_crypto_key_version"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_get_crypto_key_version"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.GetCryptoKeyVersionRequest.pb(
-            service.GetCryptoKeyVersionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKeyVersion.to_json(
-            resources.CryptoKeyVersion()
-        )
-
-        request = service.GetCryptoKeyVersionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKeyVersion()
-
-        client.get_crypto_key_version(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_get_crypto_key_version_rest_bad_request(
-    transport: str = "rest", request_type=service.GetCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_crypto_key_version(request)
-
-
-def test_get_crypto_key_version_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.get_crypto_key_version(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_get_crypto_key_version_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_crypto_key_version(
-            service.GetCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-def test_get_crypto_key_version_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetPublicKeyRequest,
-        dict,
-    ],
-)
-def test_get_public_key_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.PublicKey(
-            pem="pem_value",
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            name="name_value",
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.PublicKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.get_public_key(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.PublicKey)
-    assert response.pem == "pem_value"
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.name == "name_value"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_get_public_key_rest_required_fields(request_type=service.GetPublicKeyRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_public_key._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_public_key._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.PublicKey()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.PublicKey.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.get_public_key(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_get_public_key_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.get_public_key._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_get_public_key_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_get_public_key"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_get_public_key"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.GetPublicKeyRequest.pb(service.GetPublicKeyRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.PublicKey.to_json(resources.PublicKey())
-
-        request = service.GetPublicKeyRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.PublicKey()
-
-        client.get_public_key(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_get_public_key_rest_bad_request(
-    transport: str = "rest", request_type=service.GetPublicKeyRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_public_key(request)
-
-
-def test_get_public_key_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.PublicKey()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.PublicKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.get_public_key(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}/publicKey"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_get_public_key_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_public_key(
-            service.GetPublicKeyRequest(),
-            name="name_value",
-        )
-
-
-def test_get_public_key_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GetImportJobRequest,
-        dict,
-    ],
-)
-def test_get_import_job_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/importJobs/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.ImportJob(
-            name="name_value",
-            import_method=resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            state=resources.ImportJob.ImportJobState.PENDING_GENERATION,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.ImportJob.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.get_import_job(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.ImportJob)
-    assert response.name == "name_value"
-    assert (
-        response.import_method
-        == resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.state == resources.ImportJob.ImportJobState.PENDING_GENERATION
-
-
-def test_get_import_job_rest_required_fields(request_type=service.GetImportJobRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_import_job._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).get_import_job._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.ImportJob()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "get",
-                "query_params": pb_request,
-            }
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.ImportJob.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.get_import_job(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_get_import_job_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.get_import_job._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_get_import_job_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_get_import_job"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_get_import_job"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.GetImportJobRequest.pb(service.GetImportJobRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.ImportJob.to_json(resources.ImportJob())
-
-        request = service.GetImportJobRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.ImportJob()
-
-        client.get_import_job(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_get_import_job_rest_bad_request(
-    transport: str = "rest", request_type=service.GetImportJobRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/importJobs/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_import_job(request)
-
-
-def test_get_import_job_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.ImportJob()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/importJobs/sample4"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.ImportJob.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.get_import_job(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/importJobs/*}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_get_import_job_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.get_import_job(
-            service.GetImportJobRequest(),
-            name="name_value",
-        )
-
-
-def test_get_import_job_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateKeyRingRequest,
-        dict,
-    ],
-)
-def test_create_key_ring_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request_init["key_ring"] = {
-        "name": "name_value",
-        "create_time": {"seconds": 751, "nanos": 543},
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = service.CreateKeyRingRequest.meta.fields["key_ring"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["key_ring"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["key_ring"][field])):
-                    del request_init["key_ring"][field][i][subfield]
-            else:
-                del request_init["key_ring"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.KeyRing(
-            name="name_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.KeyRing.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.create_key_ring(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.KeyRing)
-    assert response.name == "name_value"
-
-
-def test_create_key_ring_rest_required_fields(
-    request_type=service.CreateKeyRingRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request_init["key_ring_id"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-    assert "keyRingId" not in jsonified_request
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_key_ring._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-    assert "keyRingId" in jsonified_request
-    assert jsonified_request["keyRingId"] == request_init["key_ring_id"]
-
-    jsonified_request["parent"] = "parent_value"
-    jsonified_request["keyRingId"] = "key_ring_id_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_key_ring._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(("key_ring_id",))
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-    assert "keyRingId" in jsonified_request
-    assert jsonified_request["keyRingId"] == "key_ring_id_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.KeyRing()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.KeyRing.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.create_key_ring(request)
-
-            expected_params = [
-                (
-                    "keyRingId",
-                    "",
-                ),
-                ("$alt", "json;enum-encoding=int"),
-            ]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_create_key_ring_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.create_key_ring._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(("keyRingId",))
-        & set(
-            (
-                "parent",
-                "keyRingId",
-                "keyRing",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_create_key_ring_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_create_key_ring"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_create_key_ring"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.CreateKeyRingRequest.pb(service.CreateKeyRingRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.KeyRing.to_json(resources.KeyRing())
-
-        request = service.CreateKeyRingRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.KeyRing()
-
-        client.create_key_ring(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_create_key_ring_rest_bad_request(
-    transport: str = "rest", request_type=service.CreateKeyRingRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.create_key_ring(request)
-
-
-def test_create_key_ring_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.KeyRing()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {"parent": "projects/sample1/locations/sample2"}
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-            key_ring_id="key_ring_id_value",
-            key_ring=resources.KeyRing(name="name_value"),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.KeyRing.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.create_key_ring(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*}/keyRings" % client.transport._host,
-            args[1],
-        )
-
-
-def test_create_key_ring_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_key_ring(
-            service.CreateKeyRingRequest(),
-            parent="parent_value",
-            key_ring_id="key_ring_id_value",
-            key_ring=resources.KeyRing(name="name_value"),
-        )
-
-
-def test_create_key_ring_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateCryptoKeyRequest,
-        dict,
-    ],
-)
-def test_create_crypto_key_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request_init["crypto_key"] = {
-        "name": "name_value",
-        "primary": {
-            "name": "name_value",
-            "state": 5,
-            "protection_level": 1,
-            "algorithm": 1,
-            "attestation": {
-                "format": 3,
-                "content": b"content_blob",
-                "cert_chains": {
-                    "cavium_certs": ["cavium_certs_value1", "cavium_certs_value2"],
-                    "google_card_certs": [
-                        "google_card_certs_value1",
-                        "google_card_certs_value2",
-                    ],
-                    "google_partition_certs": [
-                        "google_partition_certs_value1",
-                        "google_partition_certs_value2",
-                    ],
-                },
-            },
-            "create_time": {"seconds": 751, "nanos": 543},
-            "generate_time": {},
-            "destroy_time": {},
-            "destroy_event_time": {},
-            "import_job": "import_job_value",
-            "import_time": {},
-            "import_failure_reason": "import_failure_reason_value",
-            "generation_failure_reason": "generation_failure_reason_value",
-            "external_destruction_failure_reason": "external_destruction_failure_reason_value",
-            "external_protection_level_options": {
-                "external_key_uri": "external_key_uri_value",
-                "ekm_connection_key_path": "ekm_connection_key_path_value",
-            },
-            "reimport_eligible": True,
-        },
-        "purpose": 1,
-        "create_time": {},
-        "next_rotation_time": {},
-        "rotation_period": {"seconds": 751, "nanos": 543},
-        "version_template": {"protection_level": 1, "algorithm": 1},
-        "labels": {},
-        "import_only": True,
-        "destroy_scheduled_duration": {},
-        "crypto_key_backend": "crypto_key_backend_value",
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = service.CreateCryptoKeyRequest.meta.fields["crypto_key"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["crypto_key"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["crypto_key"][field])):
-                    del request_init["crypto_key"][field][i][subfield]
-            else:
-                del request_init["crypto_key"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.create_crypto_key(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_create_crypto_key_rest_required_fields(
-    request_type=service.CreateCryptoKeyRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request_init["crypto_key_id"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-    assert "cryptoKeyId" not in jsonified_request
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_crypto_key._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-    assert "cryptoKeyId" in jsonified_request
-    assert jsonified_request["cryptoKeyId"] == request_init["crypto_key_id"]
-
-    jsonified_request["parent"] = "parent_value"
-    jsonified_request["cryptoKeyId"] = "crypto_key_id_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_crypto_key._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(
-        (
-            "crypto_key_id",
-            "skip_initial_version_creation",
-        )
-    )
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-    assert "cryptoKeyId" in jsonified_request
-    assert jsonified_request["cryptoKeyId"] == "crypto_key_id_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKey()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKey.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.create_crypto_key(request)
-
-            expected_params = [
-                (
-                    "cryptoKeyId",
-                    "",
-                ),
-                ("$alt", "json;enum-encoding=int"),
-            ]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_create_crypto_key_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.create_crypto_key._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(
-            (
-                "cryptoKeyId",
-                "skipInitialVersionCreation",
-            )
-        )
-        & set(
-            (
-                "parent",
-                "cryptoKeyId",
-                "cryptoKey",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_create_crypto_key_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_create_crypto_key"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_create_crypto_key"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.CreateCryptoKeyRequest.pb(service.CreateCryptoKeyRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKey.to_json(resources.CryptoKey())
-
-        request = service.CreateCryptoKeyRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKey()
-
-        client.create_crypto_key(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_create_crypto_key_rest_bad_request(
-    transport: str = "rest", request_type=service.CreateCryptoKeyRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.create_crypto_key(request)
-
-
-def test_create_crypto_key_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-            crypto_key_id="crypto_key_id_value",
-            crypto_key=resources.CryptoKey(name="name_value"),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.create_crypto_key(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*/keyRings/*}/cryptoKeys"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_create_crypto_key_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_crypto_key(
-            service.CreateCryptoKeyRequest(),
-            parent="parent_value",
-            crypto_key_id="crypto_key_id_value",
-            crypto_key=resources.CryptoKey(name="name_value"),
-        )
-
-
-def test_create_crypto_key_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_create_crypto_key_version_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request_init["crypto_key_version"] = {
-        "name": "name_value",
-        "state": 5,
-        "protection_level": 1,
-        "algorithm": 1,
-        "attestation": {
-            "format": 3,
-            "content": b"content_blob",
-            "cert_chains": {
-                "cavium_certs": ["cavium_certs_value1", "cavium_certs_value2"],
-                "google_card_certs": [
-                    "google_card_certs_value1",
-                    "google_card_certs_value2",
-                ],
-                "google_partition_certs": [
-                    "google_partition_certs_value1",
-                    "google_partition_certs_value2",
-                ],
-            },
-        },
-        "create_time": {"seconds": 751, "nanos": 543},
-        "generate_time": {},
-        "destroy_time": {},
-        "destroy_event_time": {},
-        "import_job": "import_job_value",
-        "import_time": {},
-        "import_failure_reason": "import_failure_reason_value",
-        "generation_failure_reason": "generation_failure_reason_value",
-        "external_destruction_failure_reason": "external_destruction_failure_reason_value",
-        "external_protection_level_options": {
-            "external_key_uri": "external_key_uri_value",
-            "ekm_connection_key_path": "ekm_connection_key_path_value",
-        },
-        "reimport_eligible": True,
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = service.CreateCryptoKeyVersionRequest.meta.fields["crypto_key_version"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["crypto_key_version"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["crypto_key_version"][field])):
-                    del request_init["crypto_key_version"][field][i][subfield]
-            else:
-                del request_init["crypto_key_version"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.create_crypto_key_version(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_create_crypto_key_version_rest_required_fields(
-    request_type=service.CreateCryptoKeyVersionRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["parent"] = "parent_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKeyVersion()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKeyVersion.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.create_crypto_key_version(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_create_crypto_key_version_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.create_crypto_key_version._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "parent",
-                "cryptoKeyVersion",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_create_crypto_key_version_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_create_crypto_key_version"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_create_crypto_key_version"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.CreateCryptoKeyVersionRequest.pb(
-            service.CreateCryptoKeyVersionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKeyVersion.to_json(
-            resources.CryptoKeyVersion()
-        )
-
-        request = service.CreateCryptoKeyVersionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKeyVersion()
-
-        client.create_crypto_key_version(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_create_crypto_key_version_rest_bad_request(
-    transport: str = "rest", request_type=service.CreateCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.create_crypto_key_version(request)
-
-
-def test_create_crypto_key_version_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.create_crypto_key_version(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*/keyRings/*/cryptoKeys/*}/cryptoKeyVersions"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_create_crypto_key_version_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_crypto_key_version(
-            service.CreateCryptoKeyVersionRequest(),
-            parent="parent_value",
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-        )
-
-
-def test_create_crypto_key_version_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.ImportCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_import_crypto_key_version_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.import_crypto_key_version(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_import_crypto_key_version_rest_required_fields(
-    request_type=service.ImportCryptoKeyVersionRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request_init["import_job"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).import_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["parent"] = "parent_value"
-    jsonified_request["importJob"] = "import_job_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).import_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-    assert "importJob" in jsonified_request
-    assert jsonified_request["importJob"] == "import_job_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKeyVersion()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKeyVersion.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.import_crypto_key_version(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_import_crypto_key_version_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.import_crypto_key_version._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "parent",
-                "algorithm",
-                "importJob",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_import_crypto_key_version_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_import_crypto_key_version"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_import_crypto_key_version"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.ImportCryptoKeyVersionRequest.pb(
-            service.ImportCryptoKeyVersionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKeyVersion.to_json(
-            resources.CryptoKeyVersion()
-        )
-
-        request = service.ImportCryptoKeyVersionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKeyVersion()
-
-        client.import_crypto_key_version(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_import_crypto_key_version_rest_bad_request(
-    transport: str = "rest", request_type=service.ImportCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "parent": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.import_crypto_key_version(request)
-
-
-def test_import_crypto_key_version_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.CreateImportJobRequest,
-        dict,
-    ],
-)
-def test_create_import_job_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request_init["import_job"] = {
-        "name": "name_value",
-        "import_method": 1,
-        "protection_level": 1,
-        "create_time": {"seconds": 751, "nanos": 543},
-        "generate_time": {},
-        "expire_time": {},
-        "expire_event_time": {},
-        "state": 1,
-        "public_key": {"pem": "pem_value"},
-        "attestation": {
-            "format": 3,
-            "content": b"content_blob",
-            "cert_chains": {
-                "cavium_certs": ["cavium_certs_value1", "cavium_certs_value2"],
-                "google_card_certs": [
-                    "google_card_certs_value1",
-                    "google_card_certs_value2",
-                ],
-                "google_partition_certs": [
-                    "google_partition_certs_value1",
-                    "google_partition_certs_value2",
-                ],
-            },
-        },
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = service.CreateImportJobRequest.meta.fields["import_job"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["import_job"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["import_job"][field])):
-                    del request_init["import_job"][field][i][subfield]
-            else:
-                del request_init["import_job"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.ImportJob(
-            name="name_value",
-            import_method=resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            state=resources.ImportJob.ImportJobState.PENDING_GENERATION,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.ImportJob.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.create_import_job(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.ImportJob)
-    assert response.name == "name_value"
-    assert (
-        response.import_method
-        == resources.ImportJob.ImportMethod.RSA_OAEP_3072_SHA1_AES_256
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.state == resources.ImportJob.ImportJobState.PENDING_GENERATION
-
-
-def test_create_import_job_rest_required_fields(
-    request_type=service.CreateImportJobRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["parent"] = ""
-    request_init["import_job_id"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-    assert "importJobId" not in jsonified_request
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_import_job._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-    assert "importJobId" in jsonified_request
-    assert jsonified_request["importJobId"] == request_init["import_job_id"]
-
-    jsonified_request["parent"] = "parent_value"
-    jsonified_request["importJobId"] = "import_job_id_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).create_import_job._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(("import_job_id",))
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "parent" in jsonified_request
-    assert jsonified_request["parent"] == "parent_value"
-    assert "importJobId" in jsonified_request
-    assert jsonified_request["importJobId"] == "import_job_id_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.ImportJob()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.ImportJob.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.create_import_job(request)
-
-            expected_params = [
-                (
-                    "importJobId",
-                    "",
-                ),
-                ("$alt", "json;enum-encoding=int"),
-            ]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_create_import_job_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.create_import_job._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(("importJobId",))
-        & set(
-            (
-                "parent",
-                "importJobId",
-                "importJob",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_create_import_job_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_create_import_job"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_create_import_job"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.CreateImportJobRequest.pb(service.CreateImportJobRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.ImportJob.to_json(resources.ImportJob())
-
-        request = service.CreateImportJobRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.ImportJob()
-
-        client.create_import_job(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_create_import_job_rest_bad_request(
-    transport: str = "rest", request_type=service.CreateImportJobRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"parent": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.create_import_job(request)
-
-
-def test_create_import_job_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.ImportJob()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "parent": "projects/sample1/locations/sample2/keyRings/sample3"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            parent="parent_value",
-            import_job_id="import_job_id_value",
-            import_job=resources.ImportJob(name="name_value"),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.ImportJob.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.create_import_job(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{parent=projects/*/locations/*/keyRings/*}/importJobs"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_create_import_job_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.create_import_job(
-            service.CreateImportJobRequest(),
-            parent="parent_value",
-            import_job_id="import_job_id_value",
-            import_job=resources.ImportJob(name="name_value"),
-        )
-
-
-def test_create_import_job_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.UpdateCryptoKeyRequest,
-        dict,
-    ],
-)
-def test_update_crypto_key_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "crypto_key": {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-    }
-    request_init["crypto_key"] = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4",
-        "primary": {
-            "name": "name_value",
-            "state": 5,
-            "protection_level": 1,
-            "algorithm": 1,
-            "attestation": {
-                "format": 3,
-                "content": b"content_blob",
-                "cert_chains": {
-                    "cavium_certs": ["cavium_certs_value1", "cavium_certs_value2"],
-                    "google_card_certs": [
-                        "google_card_certs_value1",
-                        "google_card_certs_value2",
-                    ],
-                    "google_partition_certs": [
-                        "google_partition_certs_value1",
-                        "google_partition_certs_value2",
-                    ],
-                },
-            },
-            "create_time": {"seconds": 751, "nanos": 543},
-            "generate_time": {},
-            "destroy_time": {},
-            "destroy_event_time": {},
-            "import_job": "import_job_value",
-            "import_time": {},
-            "import_failure_reason": "import_failure_reason_value",
-            "generation_failure_reason": "generation_failure_reason_value",
-            "external_destruction_failure_reason": "external_destruction_failure_reason_value",
-            "external_protection_level_options": {
-                "external_key_uri": "external_key_uri_value",
-                "ekm_connection_key_path": "ekm_connection_key_path_value",
-            },
-            "reimport_eligible": True,
-        },
-        "purpose": 1,
-        "create_time": {},
-        "next_rotation_time": {},
-        "rotation_period": {"seconds": 751, "nanos": 543},
-        "version_template": {"protection_level": 1, "algorithm": 1},
-        "labels": {},
-        "import_only": True,
-        "destroy_scheduled_duration": {},
-        "crypto_key_backend": "crypto_key_backend_value",
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = service.UpdateCryptoKeyRequest.meta.fields["crypto_key"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["crypto_key"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["crypto_key"][field])):
-                    del request_init["crypto_key"][field][i][subfield]
-            else:
-                del request_init["crypto_key"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.update_crypto_key(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_update_crypto_key_rest_required_fields(
-    request_type=service.UpdateCryptoKeyRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_crypto_key._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_crypto_key._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(("update_mask",))
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKey()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "patch",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKey.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.update_crypto_key(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_update_crypto_key_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.update_crypto_key._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(("updateMask",))
-        & set(
-            (
-                "cryptoKey",
-                "updateMask",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_update_crypto_key_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_update_crypto_key"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_update_crypto_key"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.UpdateCryptoKeyRequest.pb(service.UpdateCryptoKeyRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKey.to_json(resources.CryptoKey())
-
-        request = service.UpdateCryptoKeyRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKey()
-
-        client.update_crypto_key(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_update_crypto_key_rest_bad_request(
-    transport: str = "rest", request_type=service.UpdateCryptoKeyRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "crypto_key": {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.update_crypto_key(request)
-
-
-def test_update_crypto_key_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "crypto_key": {
-                "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-            }
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            crypto_key=resources.CryptoKey(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.update_crypto_key(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{crypto_key.name=projects/*/locations/*/keyRings/*/cryptoKeys/*}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_update_crypto_key_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_crypto_key(
-            service.UpdateCryptoKeyRequest(),
-            crypto_key=resources.CryptoKey(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-def test_update_crypto_key_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.UpdateCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_update_crypto_key_version_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "crypto_key_version": {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-    }
-    request_init["crypto_key_version"] = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5",
-        "state": 5,
-        "protection_level": 1,
-        "algorithm": 1,
-        "attestation": {
-            "format": 3,
-            "content": b"content_blob",
-            "cert_chains": {
-                "cavium_certs": ["cavium_certs_value1", "cavium_certs_value2"],
-                "google_card_certs": [
-                    "google_card_certs_value1",
-                    "google_card_certs_value2",
-                ],
-                "google_partition_certs": [
-                    "google_partition_certs_value1",
-                    "google_partition_certs_value2",
-                ],
-            },
-        },
-        "create_time": {"seconds": 751, "nanos": 543},
-        "generate_time": {},
-        "destroy_time": {},
-        "destroy_event_time": {},
-        "import_job": "import_job_value",
-        "import_time": {},
-        "import_failure_reason": "import_failure_reason_value",
-        "generation_failure_reason": "generation_failure_reason_value",
-        "external_destruction_failure_reason": "external_destruction_failure_reason_value",
-        "external_protection_level_options": {
-            "external_key_uri": "external_key_uri_value",
-            "ekm_connection_key_path": "ekm_connection_key_path_value",
-        },
-        "reimport_eligible": True,
-    }
-    # The version of a generated dependency at test runtime may differ from the version used during generation.
-    # Delete any fields which are not present in the current runtime dependency
-    # See https://github.com/googleapis/gapic-generator-python/issues/1748
-
-    # Determine if the message type is proto-plus or protobuf
-    test_field = service.UpdateCryptoKeyVersionRequest.meta.fields["crypto_key_version"]
-
-    def get_message_fields(field):
-        # Given a field which is a message (composite type), return a list with
-        # all the fields of the message.
-        # If the field is not a composite type, return an empty list.
-        message_fields = []
-
-        if hasattr(field, "message") and field.message:
-            is_field_type_proto_plus_type = not hasattr(field.message, "DESCRIPTOR")
-
-            if is_field_type_proto_plus_type:
-                message_fields = field.message.meta.fields.values()
-            # Add `# pragma: NO COVER` because there may not be any `*_pb2` field types
-            else:  # pragma: NO COVER
-                message_fields = field.message.DESCRIPTOR.fields
-        return message_fields
-
-    runtime_nested_fields = [
-        (field.name, nested_field.name)
-        for field in get_message_fields(test_field)
-        for nested_field in get_message_fields(field)
-    ]
-
-    subfields_not_in_runtime = []
-
-    # For each item in the sample request, create a list of sub fields which are not present at runtime
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for field, value in request_init["crypto_key_version"].items():  # pragma: NO COVER
-        result = None
-        is_repeated = False
-        # For repeated fields
-        if isinstance(value, list) and len(value):
-            is_repeated = True
-            result = value[0]
-        # For fields where the type is another message
-        if isinstance(value, dict):
-            result = value
-
-        if result and hasattr(result, "keys"):
-            for subfield in result.keys():
-                if (field, subfield) not in runtime_nested_fields:
-                    subfields_not_in_runtime.append(
-                        {
-                            "field": field,
-                            "subfield": subfield,
-                            "is_repeated": is_repeated,
-                        }
-                    )
-
-    # Remove fields from the sample request which are not present in the runtime version of the dependency
-    # Add `# pragma: NO COVER` because this test code will not run if all subfields are present at runtime
-    for subfield_to_delete in subfields_not_in_runtime:  # pragma: NO COVER
-        field = subfield_to_delete.get("field")
-        field_repeated = subfield_to_delete.get("is_repeated")
-        subfield = subfield_to_delete.get("subfield")
-        if subfield:
-            if field_repeated:
-                for i in range(0, len(request_init["crypto_key_version"][field])):
-                    del request_init["crypto_key_version"][field][i][subfield]
-            else:
-                del request_init["crypto_key_version"][field][subfield]
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.update_crypto_key_version(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_update_crypto_key_version_rest_required_fields(
-    request_type=service.UpdateCryptoKeyVersionRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_crypto_key_version._get_unset_required_fields(jsonified_request)
-    # Check that path parameters and body parameters are not mixing in.
-    assert not set(unset_fields) - set(("update_mask",))
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKeyVersion()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "patch",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKeyVersion.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.update_crypto_key_version(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_update_crypto_key_version_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.update_crypto_key_version._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(("updateMask",))
-        & set(
-            (
-                "cryptoKeyVersion",
-                "updateMask",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_update_crypto_key_version_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_update_crypto_key_version"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_update_crypto_key_version"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.UpdateCryptoKeyVersionRequest.pb(
-            service.UpdateCryptoKeyVersionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKeyVersion.to_json(
-            resources.CryptoKeyVersion()
-        )
-
-        request = service.UpdateCryptoKeyVersionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKeyVersion()
-
-        client.update_crypto_key_version(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_update_crypto_key_version_rest_bad_request(
-    transport: str = "rest", request_type=service.UpdateCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "crypto_key_version": {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.update_crypto_key_version(request)
-
-
-def test_update_crypto_key_version_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "crypto_key_version": {
-                "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-            }
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.update_crypto_key_version(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{crypto_key_version.name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_update_crypto_key_version_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_crypto_key_version(
-            service.UpdateCryptoKeyVersionRequest(),
-            crypto_key_version=resources.CryptoKeyVersion(name="name_value"),
-            update_mask=field_mask_pb2.FieldMask(paths=["paths_value"]),
-        )
-
-
-def test_update_crypto_key_version_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.UpdateCryptoKeyPrimaryVersionRequest,
-        dict,
-    ],
-)
-def test_update_crypto_key_primary_version_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey(
-            name="name_value",
-            purpose=resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT,
-            import_only=True,
-            crypto_key_backend="crypto_key_backend_value",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.update_crypto_key_primary_version(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKey)
-    assert response.name == "name_value"
-    assert response.purpose == resources.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT
-    assert response.import_only is True
-    assert response.crypto_key_backend == "crypto_key_backend_value"
-
-
-def test_update_crypto_key_primary_version_rest_required_fields(
-    request_type=service.UpdateCryptoKeyPrimaryVersionRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["crypto_key_version_id"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_crypto_key_primary_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["cryptoKeyVersionId"] = "crypto_key_version_id_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).update_crypto_key_primary_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "cryptoKeyVersionId" in jsonified_request
-    assert jsonified_request["cryptoKeyVersionId"] == "crypto_key_version_id_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKey()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKey.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.update_crypto_key_primary_version(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_update_crypto_key_primary_version_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = (
-        transport.update_crypto_key_primary_version._get_unset_required_fields({})
-    )
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "cryptoKeyVersionId",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_update_crypto_key_primary_version_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor,
-        "post_update_crypto_key_primary_version",
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor,
-        "pre_update_crypto_key_primary_version",
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.UpdateCryptoKeyPrimaryVersionRequest.pb(
-            service.UpdateCryptoKeyPrimaryVersionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKey.to_json(resources.CryptoKey())
-
-        request = service.UpdateCryptoKeyPrimaryVersionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKey()
-
-        client.update_crypto_key_primary_version(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_update_crypto_key_primary_version_rest_bad_request(
-    transport: str = "rest", request_type=service.UpdateCryptoKeyPrimaryVersionRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.update_crypto_key_primary_version(request)
-
-
-def test_update_crypto_key_primary_version_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKey()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-            crypto_key_version_id="crypto_key_version_id_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKey.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.update_crypto_key_primary_version(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*}:updatePrimaryVersion"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_update_crypto_key_primary_version_rest_flattened_error(
-    transport: str = "rest",
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.update_crypto_key_primary_version(
-            service.UpdateCryptoKeyPrimaryVersionRequest(),
-            name="name_value",
-            crypto_key_version_id="crypto_key_version_id_value",
-        )
-
-
-def test_update_crypto_key_primary_version_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.DestroyCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_destroy_crypto_key_version_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.destroy_crypto_key_version(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_destroy_crypto_key_version_rest_required_fields(
-    request_type=service.DestroyCryptoKeyVersionRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).destroy_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).destroy_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKeyVersion()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKeyVersion.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.destroy_crypto_key_version(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_destroy_crypto_key_version_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.destroy_crypto_key_version._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_destroy_crypto_key_version_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor,
-        "post_destroy_crypto_key_version",
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_destroy_crypto_key_version"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.DestroyCryptoKeyVersionRequest.pb(
-            service.DestroyCryptoKeyVersionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKeyVersion.to_json(
-            resources.CryptoKeyVersion()
-        )
-
-        request = service.DestroyCryptoKeyVersionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKeyVersion()
-
-        client.destroy_crypto_key_version(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_destroy_crypto_key_version_rest_bad_request(
-    transport: str = "rest", request_type=service.DestroyCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.destroy_crypto_key_version(request)
-
-
-def test_destroy_crypto_key_version_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.destroy_crypto_key_version(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:destroy"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_destroy_crypto_key_version_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.destroy_crypto_key_version(
-            service.DestroyCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-def test_destroy_crypto_key_version_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.RestoreCryptoKeyVersionRequest,
-        dict,
-    ],
-)
-def test_restore_crypto_key_version_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion(
-            name="name_value",
-            state=resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            algorithm=resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION,
-            import_job="import_job_value",
-            import_failure_reason="import_failure_reason_value",
-            generation_failure_reason="generation_failure_reason_value",
-            external_destruction_failure_reason="external_destruction_failure_reason_value",
-            reimport_eligible=True,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.restore_crypto_key_version(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, resources.CryptoKeyVersion)
-    assert response.name == "name_value"
-    assert (
-        response.state
-        == resources.CryptoKeyVersion.CryptoKeyVersionState.PENDING_GENERATION
-    )
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert (
-        response.algorithm
-        == resources.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION
-    )
-    assert response.import_job == "import_job_value"
-    assert response.import_failure_reason == "import_failure_reason_value"
-    assert response.generation_failure_reason == "generation_failure_reason_value"
-    assert (
-        response.external_destruction_failure_reason
-        == "external_destruction_failure_reason_value"
-    )
-    assert response.reimport_eligible is True
-
-
-def test_restore_crypto_key_version_rest_required_fields(
-    request_type=service.RestoreCryptoKeyVersionRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).restore_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).restore_crypto_key_version._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = resources.CryptoKeyVersion()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = resources.CryptoKeyVersion.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.restore_crypto_key_version(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_restore_crypto_key_version_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.restore_crypto_key_version._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_restore_crypto_key_version_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor,
-        "post_restore_crypto_key_version",
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_restore_crypto_key_version"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.RestoreCryptoKeyVersionRequest.pb(
-            service.RestoreCryptoKeyVersionRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = resources.CryptoKeyVersion.to_json(
-            resources.CryptoKeyVersion()
-        )
-
-        request = service.RestoreCryptoKeyVersionRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = resources.CryptoKeyVersion()
-
-        client.restore_crypto_key_version(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_restore_crypto_key_version_rest_bad_request(
-    transport: str = "rest", request_type=service.RestoreCryptoKeyVersionRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.restore_crypto_key_version(request)
-
-
-def test_restore_crypto_key_version_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = resources.CryptoKeyVersion()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = resources.CryptoKeyVersion.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.restore_crypto_key_version(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:restore"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_restore_crypto_key_version_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.restore_crypto_key_version(
-            service.RestoreCryptoKeyVersionRequest(),
-            name="name_value",
-        )
-
-
-def test_restore_crypto_key_version_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.EncryptRequest,
-        dict,
-    ],
-)
-def test_encrypt_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.EncryptResponse(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-            verified_plaintext_crc32c=True,
-            verified_additional_authenticated_data_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.EncryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.encrypt(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.EncryptResponse)
-    assert response.name == "name_value"
-    assert response.ciphertext == b"ciphertext_blob"
-    assert response.verified_plaintext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_encrypt_rest_required_fields(request_type=service.EncryptRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["plaintext"] = b""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).encrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["plaintext"] = b"plaintext_blob"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).encrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "plaintext" in jsonified_request
-    assert jsonified_request["plaintext"] == b"plaintext_blob"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.EncryptResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.EncryptResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.encrypt(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_encrypt_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.encrypt._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "plaintext",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_encrypt_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_encrypt"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_encrypt"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.EncryptRequest.pb(service.EncryptRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.EncryptResponse.to_json(
-            service.EncryptResponse()
-        )
-
-        request = service.EncryptRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.EncryptResponse()
-
-        client.encrypt(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_encrypt_rest_bad_request(
-    transport: str = "rest", request_type=service.EncryptRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.encrypt(request)
-
-
-def test_encrypt_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.EncryptResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-            plaintext=b"plaintext_blob",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.EncryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.encrypt(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/**}:encrypt"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_encrypt_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.encrypt(
-            service.EncryptRequest(),
-            name="name_value",
-            plaintext=b"plaintext_blob",
-        )
-
-
-def test_encrypt_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.DecryptRequest,
-        dict,
-    ],
-)
-def test_decrypt_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.DecryptResponse(
-            plaintext=b"plaintext_blob",
-            used_primary=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.DecryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.decrypt(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.DecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.used_primary is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_decrypt_rest_required_fields(request_type=service.DecryptRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["ciphertext"] = b""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).decrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["ciphertext"] = b"ciphertext_blob"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).decrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "ciphertext" in jsonified_request
-    assert jsonified_request["ciphertext"] == b"ciphertext_blob"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.DecryptResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.DecryptResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.decrypt(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_decrypt_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.decrypt._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "ciphertext",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_decrypt_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_decrypt"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_decrypt"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.DecryptRequest.pb(service.DecryptRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.DecryptResponse.to_json(
-            service.DecryptResponse()
-        )
-
-        request = service.DecryptRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.DecryptResponse()
-
-        client.decrypt(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_decrypt_rest_bad_request(
-    transport: str = "rest", request_type=service.DecryptRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.decrypt(request)
-
-
-def test_decrypt_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.DecryptResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.DecryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.decrypt(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*}:decrypt"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_decrypt_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.decrypt(
-            service.DecryptRequest(),
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-
-def test_decrypt_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.RawEncryptRequest,
-        dict,
-    ],
-)
-def test_raw_encrypt_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.RawEncryptResponse(
-            ciphertext=b"ciphertext_blob",
-            initialization_vector=b"initialization_vector_blob",
-            tag_length=1053,
-            verified_plaintext_crc32c=True,
-            verified_additional_authenticated_data_crc32c=True,
-            verified_initialization_vector_crc32c=True,
-            name="name_value",
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.RawEncryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.raw_encrypt(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.RawEncryptResponse)
-    assert response.ciphertext == b"ciphertext_blob"
-    assert response.initialization_vector == b"initialization_vector_blob"
-    assert response.tag_length == 1053
-    assert response.verified_plaintext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.verified_initialization_vector_crc32c is True
-    assert response.name == "name_value"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_raw_encrypt_rest_required_fields(request_type=service.RawEncryptRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["plaintext"] = b""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).raw_encrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["plaintext"] = b"plaintext_blob"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).raw_encrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "plaintext" in jsonified_request
-    assert jsonified_request["plaintext"] == b"plaintext_blob"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.RawEncryptResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.RawEncryptResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.raw_encrypt(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_raw_encrypt_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.raw_encrypt._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "plaintext",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_raw_encrypt_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_raw_encrypt"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_raw_encrypt"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.RawEncryptRequest.pb(service.RawEncryptRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.RawEncryptResponse.to_json(
-            service.RawEncryptResponse()
-        )
-
-        request = service.RawEncryptRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.RawEncryptResponse()
-
-        client.raw_encrypt(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_raw_encrypt_rest_bad_request(
-    transport: str = "rest", request_type=service.RawEncryptRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.raw_encrypt(request)
-
-
-def test_raw_encrypt_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.RawDecryptRequest,
-        dict,
-    ],
-)
-def test_raw_decrypt_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.RawDecryptResponse(
-            plaintext=b"plaintext_blob",
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-            verified_ciphertext_crc32c=True,
-            verified_additional_authenticated_data_crc32c=True,
-            verified_initialization_vector_crc32c=True,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.RawDecryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.raw_decrypt(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.RawDecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-    assert response.verified_ciphertext_crc32c is True
-    assert response.verified_additional_authenticated_data_crc32c is True
-    assert response.verified_initialization_vector_crc32c is True
-
-
-def test_raw_decrypt_rest_required_fields(request_type=service.RawDecryptRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["ciphertext"] = b""
-    request_init["initialization_vector"] = b""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).raw_decrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["ciphertext"] = b"ciphertext_blob"
-    jsonified_request["initializationVector"] = b"initialization_vector_blob"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).raw_decrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "ciphertext" in jsonified_request
-    assert jsonified_request["ciphertext"] == b"ciphertext_blob"
-    assert "initializationVector" in jsonified_request
-    assert jsonified_request["initializationVector"] == b"initialization_vector_blob"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.RawDecryptResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.RawDecryptResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.raw_decrypt(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_raw_decrypt_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.raw_decrypt._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "ciphertext",
-                "initializationVector",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_raw_decrypt_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_raw_decrypt"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_raw_decrypt"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.RawDecryptRequest.pb(service.RawDecryptRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.RawDecryptResponse.to_json(
-            service.RawDecryptResponse()
-        )
-
-        request = service.RawDecryptRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.RawDecryptResponse()
-
-        client.raw_decrypt(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_raw_decrypt_rest_bad_request(
-    transport: str = "rest", request_type=service.RawDecryptRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.raw_decrypt(request)
-
-
-def test_raw_decrypt_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.AsymmetricSignRequest,
-        dict,
-    ],
-)
-def test_asymmetric_sign_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.AsymmetricSignResponse(
-            signature=b"signature_blob",
-            verified_digest_crc32c=True,
-            name="name_value",
-            verified_data_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.AsymmetricSignResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.asymmetric_sign(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.AsymmetricSignResponse)
-    assert response.signature == b"signature_blob"
-    assert response.verified_digest_crc32c is True
-    assert response.name == "name_value"
-    assert response.verified_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_asymmetric_sign_rest_required_fields(
-    request_type=service.AsymmetricSignRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).asymmetric_sign._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).asymmetric_sign._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.AsymmetricSignResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.AsymmetricSignResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.asymmetric_sign(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_asymmetric_sign_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.asymmetric_sign._get_unset_required_fields({})
-    assert set(unset_fields) == (set(()) & set(("name",)))
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_asymmetric_sign_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_asymmetric_sign"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_asymmetric_sign"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.AsymmetricSignRequest.pb(service.AsymmetricSignRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.AsymmetricSignResponse.to_json(
-            service.AsymmetricSignResponse()
-        )
-
-        request = service.AsymmetricSignRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.AsymmetricSignResponse()
-
-        client.asymmetric_sign(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_asymmetric_sign_rest_bad_request(
-    transport: str = "rest", request_type=service.AsymmetricSignRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.asymmetric_sign(request)
-
-
-def test_asymmetric_sign_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.AsymmetricSignResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-            digest=service.Digest(sha256=b"sha256_blob"),
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.AsymmetricSignResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.asymmetric_sign(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:asymmetricSign"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_asymmetric_sign_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.asymmetric_sign(
-            service.AsymmetricSignRequest(),
-            name="name_value",
-            digest=service.Digest(sha256=b"sha256_blob"),
-        )
-
-
-def test_asymmetric_sign_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.AsymmetricDecryptRequest,
-        dict,
-    ],
-)
-def test_asymmetric_decrypt_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.AsymmetricDecryptResponse(
-            plaintext=b"plaintext_blob",
-            verified_ciphertext_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.AsymmetricDecryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.asymmetric_decrypt(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.AsymmetricDecryptResponse)
-    assert response.plaintext == b"plaintext_blob"
-    assert response.verified_ciphertext_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_asymmetric_decrypt_rest_required_fields(
-    request_type=service.AsymmetricDecryptRequest,
-):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["ciphertext"] = b""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).asymmetric_decrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["ciphertext"] = b"ciphertext_blob"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).asymmetric_decrypt._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "ciphertext" in jsonified_request
-    assert jsonified_request["ciphertext"] == b"ciphertext_blob"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.AsymmetricDecryptResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.AsymmetricDecryptResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.asymmetric_decrypt(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_asymmetric_decrypt_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.asymmetric_decrypt._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "ciphertext",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_asymmetric_decrypt_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_asymmetric_decrypt"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_asymmetric_decrypt"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.AsymmetricDecryptRequest.pb(
-            service.AsymmetricDecryptRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.AsymmetricDecryptResponse.to_json(
-            service.AsymmetricDecryptResponse()
-        )
-
-        request = service.AsymmetricDecryptRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.AsymmetricDecryptResponse()
-
-        client.asymmetric_decrypt(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_asymmetric_decrypt_rest_bad_request(
-    transport: str = "rest", request_type=service.AsymmetricDecryptRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.asymmetric_decrypt(request)
-
-
-def test_asymmetric_decrypt_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.AsymmetricDecryptResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.AsymmetricDecryptResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.asymmetric_decrypt(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:asymmetricDecrypt"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_asymmetric_decrypt_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.asymmetric_decrypt(
-            service.AsymmetricDecryptRequest(),
-            name="name_value",
-            ciphertext=b"ciphertext_blob",
-        )
-
-
-def test_asymmetric_decrypt_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.MacSignRequest,
-        dict,
-    ],
-)
-def test_mac_sign_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.MacSignResponse(
-            name="name_value",
-            mac=b"mac_blob",
-            verified_data_crc32c=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.MacSignResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.mac_sign(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.MacSignResponse)
-    assert response.name == "name_value"
-    assert response.mac == b"mac_blob"
-    assert response.verified_data_crc32c is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_mac_sign_rest_required_fields(request_type=service.MacSignRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["data"] = b""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).mac_sign._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["data"] = b"data_blob"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).mac_sign._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "data" in jsonified_request
-    assert jsonified_request["data"] == b"data_blob"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.MacSignResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.MacSignResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.mac_sign(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_mac_sign_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.mac_sign._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "data",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_mac_sign_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_mac_sign"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_mac_sign"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.MacSignRequest.pb(service.MacSignRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.MacSignResponse.to_json(
-            service.MacSignResponse()
-        )
-
-        request = service.MacSignRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.MacSignResponse()
-
-        client.mac_sign(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_mac_sign_rest_bad_request(
-    transport: str = "rest", request_type=service.MacSignRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.mac_sign(request)
-
-
-def test_mac_sign_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.MacSignResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-            data=b"data_blob",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.MacSignResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.mac_sign(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:macSign"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_mac_sign_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.mac_sign(
-            service.MacSignRequest(),
-            name="name_value",
-            data=b"data_blob",
-        )
-
-
-def test_mac_sign_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.MacVerifyRequest,
-        dict,
-    ],
-)
-def test_mac_verify_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.MacVerifyResponse(
-            name="name_value",
-            success=True,
-            verified_data_crc32c=True,
-            verified_mac_crc32c=True,
-            verified_success_integrity=True,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.MacVerifyResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.mac_verify(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.MacVerifyResponse)
-    assert response.name == "name_value"
-    assert response.success is True
-    assert response.verified_data_crc32c is True
-    assert response.verified_mac_crc32c is True
-    assert response.verified_success_integrity is True
-    assert response.protection_level == resources.ProtectionLevel.SOFTWARE
-
-
-def test_mac_verify_rest_required_fields(request_type=service.MacVerifyRequest):
-    transport_class = transports.KeyManagementServiceRestTransport
-
-    request_init = {}
-    request_init["name"] = ""
-    request_init["data"] = b""
-    request_init["mac"] = b""
-    request = request_type(**request_init)
-    pb_request = request_type.pb(request)
-    jsonified_request = json.loads(
-        json_format.MessageToJson(
-            pb_request,
-            including_default_value_fields=False,
-            use_integers_for_enums=False,
-        )
-    )
-
-    # verify fields with default values are dropped
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).mac_verify._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with default values are now present
-
-    jsonified_request["name"] = "name_value"
-    jsonified_request["data"] = b"data_blob"
-    jsonified_request["mac"] = b"mac_blob"
-
-    unset_fields = transport_class(
-        credentials=ga_credentials.AnonymousCredentials()
-    ).mac_verify._get_unset_required_fields(jsonified_request)
-    jsonified_request.update(unset_fields)
-
-    # verify required fields with non-default values are left alone
-    assert "name" in jsonified_request
-    assert jsonified_request["name"] == "name_value"
-    assert "data" in jsonified_request
-    assert jsonified_request["data"] == b"data_blob"
-    assert "mac" in jsonified_request
-    assert jsonified_request["mac"] == b"mac_blob"
-
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request = request_type(**request_init)
-
-    # Designate an appropriate value for the returned response.
-    return_value = service.MacVerifyResponse()
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(Session, "request") as req:
-        # We need to mock transcode() because providing default values
-        # for required fields will fail the real version if the http_options
-        # expect actual values for those fields.
-        with mock.patch.object(path_template, "transcode") as transcode:
-            # A uri without fields and an empty body will force all the
-            # request fields to show up in the query_params.
-            pb_request = request_type.pb(request)
-            transcode_result = {
-                "uri": "v1/sample_method",
-                "method": "post",
-                "query_params": pb_request,
-            }
-            transcode_result["body"] = pb_request
-            transcode.return_value = transcode_result
-
-            response_value = Response()
-            response_value.status_code = 200
-
-            # Convert return value to protobuf type
-            return_value = service.MacVerifyResponse.pb(return_value)
-            json_return_value = json_format.MessageToJson(return_value)
-
-            response_value._content = json_return_value.encode("UTF-8")
-            req.return_value = response_value
-
-            response = client.mac_verify(request)
-
-            expected_params = [("$alt", "json;enum-encoding=int")]
-            actual_params = req.call_args.kwargs["params"]
-            assert expected_params == actual_params
-
-
-def test_mac_verify_rest_unset_required_fields():
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials
-    )
-
-    unset_fields = transport.mac_verify._get_unset_required_fields({})
-    assert set(unset_fields) == (
-        set(())
-        & set(
-            (
-                "name",
-                "data",
-                "mac",
-            )
-        )
-    )
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_mac_verify_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_mac_verify"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_mac_verify"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.MacVerifyRequest.pb(service.MacVerifyRequest())
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.MacVerifyResponse.to_json(
-            service.MacVerifyResponse()
-        )
-
-        request = service.MacVerifyRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.MacVerifyResponse()
-
-        client.mac_verify(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_mac_verify_rest_bad_request(
-    transport: str = "rest", request_type=service.MacVerifyRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {
-        "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-    }
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.mac_verify(request)
-
-
-def test_mac_verify_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.MacVerifyResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {
-            "name": "projects/sample1/locations/sample2/keyRings/sample3/cryptoKeys/sample4/cryptoKeyVersions/sample5"
-        }
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            name="name_value",
-            data=b"data_blob",
-            mac=b"mac_blob",
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.MacVerifyResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.mac_verify(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{name=projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*}:macVerify"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_mac_verify_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.mac_verify(
-            service.MacVerifyRequest(),
-            name="name_value",
-            data=b"data_blob",
-            mac=b"mac_blob",
-        )
-
-
-def test_mac_verify_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        service.GenerateRandomBytesRequest,
-        dict,
-    ],
-)
-def test_generate_random_bytes_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"location": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.GenerateRandomBytesResponse(
-            data=b"data_blob",
-        )
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.GenerateRandomBytesResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-        response = client.generate_random_bytes(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, service.GenerateRandomBytesResponse)
-    assert response.data == b"data_blob"
-
-
-@pytest.mark.parametrize("null_interceptor", [True, False])
-def test_generate_random_bytes_rest_interceptors(null_interceptor):
-    transport = transports.KeyManagementServiceRestTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-        interceptor=None
-        if null_interceptor
-        else transports.KeyManagementServiceRestInterceptor(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    with mock.patch.object(
-        type(client.transport._session), "request"
-    ) as req, mock.patch.object(
-        path_template, "transcode"
-    ) as transcode, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "post_generate_random_bytes"
-    ) as post, mock.patch.object(
-        transports.KeyManagementServiceRestInterceptor, "pre_generate_random_bytes"
-    ) as pre:
-        pre.assert_not_called()
-        post.assert_not_called()
-        pb_message = service.GenerateRandomBytesRequest.pb(
-            service.GenerateRandomBytesRequest()
-        )
-        transcode.return_value = {
-            "method": "post",
-            "uri": "my_uri",
-            "body": pb_message,
-            "query_params": pb_message,
-        }
-
-        req.return_value = Response()
-        req.return_value.status_code = 200
-        req.return_value.request = PreparedRequest()
-        req.return_value._content = service.GenerateRandomBytesResponse.to_json(
-            service.GenerateRandomBytesResponse()
-        )
-
-        request = service.GenerateRandomBytesRequest()
-        metadata = [
-            ("key", "val"),
-            ("cephalopod", "squid"),
-        ]
-        pre.return_value = request, metadata
-        post.return_value = service.GenerateRandomBytesResponse()
-
-        client.generate_random_bytes(
-            request,
-            metadata=[
-                ("key", "val"),
-                ("cephalopod", "squid"),
-            ],
-        )
-
-        pre.assert_called_once()
-        post.assert_called_once()
-
-
-def test_generate_random_bytes_rest_bad_request(
-    transport: str = "rest", request_type=service.GenerateRandomBytesRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # send a request that will satisfy transcoding
-    request_init = {"location": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.generate_random_bytes(request)
-
-
-def test_generate_random_bytes_rest_flattened():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = service.GenerateRandomBytesResponse()
-
-        # get arguments that satisfy an http rule for this method
-        sample_request = {"location": "projects/sample1/locations/sample2"}
-
-        # get truthy value for each flattened field
-        mock_args = dict(
-            location="location_value",
-            length_bytes=1288,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-        mock_args.update(sample_request)
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        # Convert return value to protobuf type
-        return_value = service.GenerateRandomBytesResponse.pb(return_value)
-        json_return_value = json_format.MessageToJson(return_value)
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        client.generate_random_bytes(**mock_args)
-
-        # Establish that the underlying call was made with the expected
-        # request object values.
-        assert len(req.mock_calls) == 1
-        _, args, _ = req.mock_calls[0]
-        assert path_template.validate(
-            "%s/v1/{location=projects/*/locations/*}:generateRandomBytes"
-            % client.transport._host,
-            args[1],
-        )
-
-
-def test_generate_random_bytes_rest_flattened_error(transport: str = "rest"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Attempting to call a method with both a request object and flattened
-    # fields is an error.
-    with pytest.raises(ValueError):
-        client.generate_random_bytes(
-            service.GenerateRandomBytesRequest(),
-            location="location_value",
-            length_bytes=1288,
-            protection_level=resources.ProtectionLevel.SOFTWARE,
-        )
-
-
-def test_generate_random_bytes_rest_error():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(), transport="rest"
-    )
-
-
-def test_credentials_transport_error():
-    # It is an error to provide credentials and a transport instance.
-    transport = transports.KeyManagementServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    with pytest.raises(ValueError):
-        client = KeyManagementServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(),
-            transport=transport,
-        )
-
-    # It is an error to provide a credentials file and a transport instance.
-    transport = transports.KeyManagementServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    with pytest.raises(ValueError):
-        client = KeyManagementServiceClient(
-            client_options={"credentials_file": "credentials.json"},
-            transport=transport,
-        )
-
-    # It is an error to provide an api_key and a transport instance.
-    transport = transports.KeyManagementServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    options = client_options.ClientOptions()
-    options.api_key = "api_key"
-    with pytest.raises(ValueError):
-        client = KeyManagementServiceClient(
-            client_options=options,
-            transport=transport,
-        )
-
-    # It is an error to provide an api_key and a credential.
-    options = mock.Mock()
-    options.api_key = "api_key"
-    with pytest.raises(ValueError):
-        client = KeyManagementServiceClient(
-            client_options=options, credentials=ga_credentials.AnonymousCredentials()
-        )
-
-    # It is an error to provide scopes and a transport instance.
-    transport = transports.KeyManagementServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    with pytest.raises(ValueError):
-        client = KeyManagementServiceClient(
-            client_options={"scopes": ["1", "2"]},
-            transport=transport,
-        )
-
-
-def test_transport_instance():
-    # A client may be instantiated with a custom transport instance.
-    transport = transports.KeyManagementServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    client = KeyManagementServiceClient(transport=transport)
-    assert client.transport is transport
-
-
-def test_transport_get_channel():
-    # A client may be instantiated with a custom transport instance.
-    transport = transports.KeyManagementServiceGrpcTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    channel = transport.grpc_channel
-    assert channel
-
-    transport = transports.KeyManagementServiceGrpcAsyncIOTransport(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    channel = transport.grpc_channel
-    assert channel
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.KeyManagementServiceGrpcTransport,
-        transports.KeyManagementServiceGrpcAsyncIOTransport,
-        transports.KeyManagementServiceRestTransport,
-    ],
-)
-def test_transport_adc(transport_class):
-    # Test default credentials are used if not provided.
-    with mock.patch.object(google.auth, "default") as adc:
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport_class()
-        adc.assert_called_once()
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "grpc",
-        "rest",
-    ],
-)
-def test_transport_kind(transport_name):
-    transport = KeyManagementServiceClient.get_transport_class(transport_name)(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    assert transport.kind == transport_name
-
-
-def test_transport_grpc_default():
-    # A client should use the gRPC transport by default.
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    assert isinstance(
-        client.transport,
-        transports.KeyManagementServiceGrpcTransport,
-    )
-
-
-def test_key_management_service_base_transport_error():
-    # Passing both a credentials object and credentials_file should raise an error
-    with pytest.raises(core_exceptions.DuplicateCredentialArgs):
-        transport = transports.KeyManagementServiceTransport(
-            credentials=ga_credentials.AnonymousCredentials(),
-            credentials_file="credentials.json",
-        )
-
-
-def test_key_management_service_base_transport():
-    # Instantiate the base transport.
-    with mock.patch(
-        "google.cloud.kms_v1.services.key_management_service.transports.KeyManagementServiceTransport.__init__"
-    ) as Transport:
-        Transport.return_value = None
-        transport = transports.KeyManagementServiceTransport(
-            credentials=ga_credentials.AnonymousCredentials(),
-        )
-
-    # Every method on the transport should just blindly
-    # raise NotImplementedError.
-    methods = (
-        "list_key_rings",
-        "list_crypto_keys",
-        "list_crypto_key_versions",
-        "list_import_jobs",
-        "get_key_ring",
-        "get_crypto_key",
-        "get_crypto_key_version",
-        "get_public_key",
-        "get_import_job",
-        "create_key_ring",
-        "create_crypto_key",
-        "create_crypto_key_version",
-        "import_crypto_key_version",
-        "create_import_job",
-        "update_crypto_key",
-        "update_crypto_key_version",
-        "update_crypto_key_primary_version",
-        "destroy_crypto_key_version",
-        "restore_crypto_key_version",
-        "encrypt",
-        "decrypt",
-        "raw_encrypt",
-        "raw_decrypt",
-        "asymmetric_sign",
-        "asymmetric_decrypt",
-        "mac_sign",
-        "mac_verify",
-        "generate_random_bytes",
-        "set_iam_policy",
-        "get_iam_policy",
-        "test_iam_permissions",
-        "get_location",
-        "list_locations",
-    )
-    for method in methods:
-        with pytest.raises(NotImplementedError):
-            getattr(transport, method)(request=object())
-
-    with pytest.raises(NotImplementedError):
-        transport.close()
-
-    # Catch all for all remaining methods and properties
-    remainder = [
-        "kind",
-    ]
-    for r in remainder:
-        with pytest.raises(NotImplementedError):
-            getattr(transport, r)()
-
-
-def test_key_management_service_base_transport_with_credentials_file():
-    # Instantiate the base transport with a credentials file
-    with mock.patch.object(
-        google.auth, "load_credentials_from_file", autospec=True
-    ) as load_creds, mock.patch(
-        "google.cloud.kms_v1.services.key_management_service.transports.KeyManagementServiceTransport._prep_wrapped_messages"
-    ) as Transport:
-        Transport.return_value = None
-        load_creds.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport = transports.KeyManagementServiceTransport(
-            credentials_file="credentials.json",
-            quota_project_id="octopus",
-        )
-        load_creds.assert_called_once_with(
-            "credentials.json",
-            scopes=None,
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            quota_project_id="octopus",
-        )
-
-
-def test_key_management_service_base_transport_with_adc():
-    # Test the default credentials are used if credentials and credentials_file are None.
-    with mock.patch.object(google.auth, "default", autospec=True) as adc, mock.patch(
-        "google.cloud.kms_v1.services.key_management_service.transports.KeyManagementServiceTransport._prep_wrapped_messages"
-    ) as Transport:
-        Transport.return_value = None
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport = transports.KeyManagementServiceTransport()
-        adc.assert_called_once()
-
-
-def test_key_management_service_auth_adc():
-    # If no credentials are provided, we should use ADC credentials.
-    with mock.patch.object(google.auth, "default", autospec=True) as adc:
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        KeyManagementServiceClient()
-        adc.assert_called_once_with(
-            scopes=None,
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            quota_project_id=None,
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.KeyManagementServiceGrpcTransport,
-        transports.KeyManagementServiceGrpcAsyncIOTransport,
-    ],
-)
-def test_key_management_service_transport_auth_adc(transport_class):
-    # If credentials and host are not provided, the transport class should use
-    # ADC credentials.
-    with mock.patch.object(google.auth, "default", autospec=True) as adc:
-        adc.return_value = (ga_credentials.AnonymousCredentials(), None)
-        transport_class(quota_project_id="octopus", scopes=["1", "2"])
-        adc.assert_called_once_with(
-            scopes=["1", "2"],
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            quota_project_id="octopus",
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.KeyManagementServiceGrpcTransport,
-        transports.KeyManagementServiceGrpcAsyncIOTransport,
-        transports.KeyManagementServiceRestTransport,
-    ],
-)
-def test_key_management_service_transport_auth_gdch_credentials(transport_class):
-    host = "https://language.com"
-    api_audience_tests = [None, "https://language2.com"]
-    api_audience_expect = [host, "https://language2.com"]
-    for t, e in zip(api_audience_tests, api_audience_expect):
-        with mock.patch.object(google.auth, "default", autospec=True) as adc:
-            gdch_mock = mock.MagicMock()
-            type(gdch_mock).with_gdch_audience = mock.PropertyMock(
-                return_value=gdch_mock
-            )
-            adc.return_value = (gdch_mock, None)
-            transport_class(host=host, api_audience=t)
-            gdch_mock.with_gdch_audience.assert_called_once_with(e)
-
-
-@pytest.mark.parametrize(
-    "transport_class,grpc_helpers",
-    [
-        (transports.KeyManagementServiceGrpcTransport, grpc_helpers),
-        (transports.KeyManagementServiceGrpcAsyncIOTransport, grpc_helpers_async),
-    ],
-)
-def test_key_management_service_transport_create_channel(transport_class, grpc_helpers):
-    # If credentials and host are not provided, the transport class should use
-    # ADC credentials.
-    with mock.patch.object(
-        google.auth, "default", autospec=True
-    ) as adc, mock.patch.object(
-        grpc_helpers, "create_channel", autospec=True
-    ) as create_channel:
-        creds = ga_credentials.AnonymousCredentials()
-        adc.return_value = (creds, None)
-        transport_class(quota_project_id="octopus", scopes=["1", "2"])
-
-        create_channel.assert_called_with(
-            "cloudkms.googleapis.com:443",
-            credentials=creds,
-            credentials_file=None,
-            quota_project_id="octopus",
-            default_scopes=(
-                "https://www.googleapis.com/auth/cloud-platform",
-                "https://www.googleapis.com/auth/cloudkms",
-            ),
-            scopes=["1", "2"],
-            default_host="cloudkms.googleapis.com",
-            ssl_credentials=None,
-            options=[
-                ("grpc.max_send_message_length", -1),
-                ("grpc.max_receive_message_length", -1),
-            ],
-        )
-
-
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.KeyManagementServiceGrpcTransport,
-        transports.KeyManagementServiceGrpcAsyncIOTransport,
-    ],
-)
-def test_key_management_service_grpc_transport_client_cert_source_for_mtls(
-    transport_class,
-):
-    cred = ga_credentials.AnonymousCredentials()
-
-    # Check ssl_channel_credentials is used if provided.
-    with mock.patch.object(transport_class, "create_channel") as mock_create_channel:
-        mock_ssl_channel_creds = mock.Mock()
-        transport_class(
-            host="squid.clam.whelk",
-            credentials=cred,
-            ssl_channel_credentials=mock_ssl_channel_creds,
-        )
-        mock_create_channel.assert_called_once_with(
-            "squid.clam.whelk:443",
-            credentials=cred,
-            credentials_file=None,
-            scopes=None,
-            ssl_credentials=mock_ssl_channel_creds,
-            quota_project_id=None,
-            options=[
-                ("grpc.max_send_message_length", -1),
-                ("grpc.max_receive_message_length", -1),
-            ],
-        )
-
-    # Check if ssl_channel_credentials is not provided, then client_cert_source_for_mtls
-    # is used.
-    with mock.patch.object(transport_class, "create_channel", return_value=mock.Mock()):
-        with mock.patch("grpc.ssl_channel_credentials") as mock_ssl_cred:
-            transport_class(
-                credentials=cred,
-                client_cert_source_for_mtls=client_cert_source_callback,
-            )
-            expected_cert, expected_key = client_cert_source_callback()
-            mock_ssl_cred.assert_called_once_with(
-                certificate_chain=expected_cert, private_key=expected_key
-            )
-
-
-def test_key_management_service_http_transport_client_cert_source_for_mtls():
-    cred = ga_credentials.AnonymousCredentials()
-    with mock.patch(
-        "google.auth.transport.requests.AuthorizedSession.configure_mtls_channel"
-    ) as mock_configure_mtls_channel:
-        transports.KeyManagementServiceRestTransport(
-            credentials=cred, client_cert_source_for_mtls=client_cert_source_callback
-        )
-        mock_configure_mtls_channel.assert_called_once_with(client_cert_source_callback)
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "grpc",
-        "grpc_asyncio",
-        "rest",
-    ],
-)
-def test_key_management_service_host_no_port(transport_name):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        client_options=client_options.ClientOptions(
-            api_endpoint="cloudkms.googleapis.com"
-        ),
-        transport=transport_name,
-    )
-    assert client.transport._host == (
-        "cloudkms.googleapis.com:443"
-        if transport_name in ["grpc", "grpc_asyncio"]
-        else "https://cloudkms.googleapis.com"
-    )
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "grpc",
-        "grpc_asyncio",
-        "rest",
-    ],
-)
-def test_key_management_service_host_with_port(transport_name):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        client_options=client_options.ClientOptions(
-            api_endpoint="cloudkms.googleapis.com:8000"
-        ),
-        transport=transport_name,
-    )
-    assert client.transport._host == (
-        "cloudkms.googleapis.com:8000"
-        if transport_name in ["grpc", "grpc_asyncio"]
-        else "https://cloudkms.googleapis.com:8000"
-    )
-
-
-@pytest.mark.parametrize(
-    "transport_name",
-    [
-        "rest",
-    ],
-)
-def test_key_management_service_client_transport_session_collision(transport_name):
-    creds1 = ga_credentials.AnonymousCredentials()
-    creds2 = ga_credentials.AnonymousCredentials()
-    client1 = KeyManagementServiceClient(
-        credentials=creds1,
-        transport=transport_name,
-    )
-    client2 = KeyManagementServiceClient(
-        credentials=creds2,
-        transport=transport_name,
-    )
-    session1 = client1.transport.list_key_rings._session
-    session2 = client2.transport.list_key_rings._session
-    assert session1 != session2
-    session1 = client1.transport.list_crypto_keys._session
-    session2 = client2.transport.list_crypto_keys._session
-    assert session1 != session2
-    session1 = client1.transport.list_crypto_key_versions._session
-    session2 = client2.transport.list_crypto_key_versions._session
-    assert session1 != session2
-    session1 = client1.transport.list_import_jobs._session
-    session2 = client2.transport.list_import_jobs._session
-    assert session1 != session2
-    session1 = client1.transport.get_key_ring._session
-    session2 = client2.transport.get_key_ring._session
-    assert session1 != session2
-    session1 = client1.transport.get_crypto_key._session
-    session2 = client2.transport.get_crypto_key._session
-    assert session1 != session2
-    session1 = client1.transport.get_crypto_key_version._session
-    session2 = client2.transport.get_crypto_key_version._session
-    assert session1 != session2
-    session1 = client1.transport.get_public_key._session
-    session2 = client2.transport.get_public_key._session
-    assert session1 != session2
-    session1 = client1.transport.get_import_job._session
-    session2 = client2.transport.get_import_job._session
-    assert session1 != session2
-    session1 = client1.transport.create_key_ring._session
-    session2 = client2.transport.create_key_ring._session
-    assert session1 != session2
-    session1 = client1.transport.create_crypto_key._session
-    session2 = client2.transport.create_crypto_key._session
-    assert session1 != session2
-    session1 = client1.transport.create_crypto_key_version._session
-    session2 = client2.transport.create_crypto_key_version._session
-    assert session1 != session2
-    session1 = client1.transport.import_crypto_key_version._session
-    session2 = client2.transport.import_crypto_key_version._session
-    assert session1 != session2
-    session1 = client1.transport.create_import_job._session
-    session2 = client2.transport.create_import_job._session
-    assert session1 != session2
-    session1 = client1.transport.update_crypto_key._session
-    session2 = client2.transport.update_crypto_key._session
-    assert session1 != session2
-    session1 = client1.transport.update_crypto_key_version._session
-    session2 = client2.transport.update_crypto_key_version._session
-    assert session1 != session2
-    session1 = client1.transport.update_crypto_key_primary_version._session
-    session2 = client2.transport.update_crypto_key_primary_version._session
-    assert session1 != session2
-    session1 = client1.transport.destroy_crypto_key_version._session
-    session2 = client2.transport.destroy_crypto_key_version._session
-    assert session1 != session2
-    session1 = client1.transport.restore_crypto_key_version._session
-    session2 = client2.transport.restore_crypto_key_version._session
-    assert session1 != session2
-    session1 = client1.transport.encrypt._session
-    session2 = client2.transport.encrypt._session
-    assert session1 != session2
-    session1 = client1.transport.decrypt._session
-    session2 = client2.transport.decrypt._session
-    assert session1 != session2
-    session1 = client1.transport.raw_encrypt._session
-    session2 = client2.transport.raw_encrypt._session
-    assert session1 != session2
-    session1 = client1.transport.raw_decrypt._session
-    session2 = client2.transport.raw_decrypt._session
-    assert session1 != session2
-    session1 = client1.transport.asymmetric_sign._session
-    session2 = client2.transport.asymmetric_sign._session
-    assert session1 != session2
-    session1 = client1.transport.asymmetric_decrypt._session
-    session2 = client2.transport.asymmetric_decrypt._session
-    assert session1 != session2
-    session1 = client1.transport.mac_sign._session
-    session2 = client2.transport.mac_sign._session
-    assert session1 != session2
-    session1 = client1.transport.mac_verify._session
-    session2 = client2.transport.mac_verify._session
-    assert session1 != session2
-    session1 = client1.transport.generate_random_bytes._session
-    session2 = client2.transport.generate_random_bytes._session
-    assert session1 != session2
-
-
-def test_key_management_service_grpc_transport_channel():
-    channel = grpc.secure_channel("http://localhost/", grpc.local_channel_credentials())
-
-    # Check that channel is used if provided.
-    transport = transports.KeyManagementServiceGrpcTransport(
-        host="squid.clam.whelk",
-        channel=channel,
-    )
-    assert transport.grpc_channel == channel
-    assert transport._host == "squid.clam.whelk:443"
-    assert transport._ssl_channel_credentials == None
-
-
-def test_key_management_service_grpc_asyncio_transport_channel():
-    channel = aio.secure_channel("http://localhost/", grpc.local_channel_credentials())
-
-    # Check that channel is used if provided.
-    transport = transports.KeyManagementServiceGrpcAsyncIOTransport(
-        host="squid.clam.whelk",
-        channel=channel,
-    )
-    assert transport.grpc_channel == channel
-    assert transport._host == "squid.clam.whelk:443"
-    assert transport._ssl_channel_credentials == None
-
-
-# Remove this test when deprecated arguments (api_mtls_endpoint, client_cert_source) are
-# removed from grpc/grpc_asyncio transport constructor.
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.KeyManagementServiceGrpcTransport,
-        transports.KeyManagementServiceGrpcAsyncIOTransport,
-    ],
-)
-def test_key_management_service_transport_channel_mtls_with_client_cert_source(
-    transport_class,
-):
-    with mock.patch(
-        "grpc.ssl_channel_credentials", autospec=True
-    ) as grpc_ssl_channel_cred:
-        with mock.patch.object(
-            transport_class, "create_channel"
-        ) as grpc_create_channel:
-            mock_ssl_cred = mock.Mock()
-            grpc_ssl_channel_cred.return_value = mock_ssl_cred
-
-            mock_grpc_channel = mock.Mock()
-            grpc_create_channel.return_value = mock_grpc_channel
-
-            cred = ga_credentials.AnonymousCredentials()
-            with pytest.warns(DeprecationWarning):
-                with mock.patch.object(google.auth, "default") as adc:
-                    adc.return_value = (cred, None)
-                    transport = transport_class(
-                        host="squid.clam.whelk",
-                        api_mtls_endpoint="mtls.squid.clam.whelk",
-                        client_cert_source=client_cert_source_callback,
-                    )
-                    adc.assert_called_once()
-
-            grpc_ssl_channel_cred.assert_called_once_with(
-                certificate_chain=b"cert bytes", private_key=b"key bytes"
-            )
-            grpc_create_channel.assert_called_once_with(
-                "mtls.squid.clam.whelk:443",
-                credentials=cred,
-                credentials_file=None,
-                scopes=None,
-                ssl_credentials=mock_ssl_cred,
-                quota_project_id=None,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-            assert transport.grpc_channel == mock_grpc_channel
-            assert transport._ssl_channel_credentials == mock_ssl_cred
-
-
-# Remove this test when deprecated arguments (api_mtls_endpoint, client_cert_source) are
-# removed from grpc/grpc_asyncio transport constructor.
-@pytest.mark.parametrize(
-    "transport_class",
-    [
-        transports.KeyManagementServiceGrpcTransport,
-        transports.KeyManagementServiceGrpcAsyncIOTransport,
-    ],
-)
-def test_key_management_service_transport_channel_mtls_with_adc(transport_class):
-    mock_ssl_cred = mock.Mock()
-    with mock.patch.multiple(
-        "google.auth.transport.grpc.SslCredentials",
-        __init__=mock.Mock(return_value=None),
-        ssl_credentials=mock.PropertyMock(return_value=mock_ssl_cred),
-    ):
-        with mock.patch.object(
-            transport_class, "create_channel"
-        ) as grpc_create_channel:
-            mock_grpc_channel = mock.Mock()
-            grpc_create_channel.return_value = mock_grpc_channel
-            mock_cred = mock.Mock()
-
-            with pytest.warns(DeprecationWarning):
-                transport = transport_class(
-                    host="squid.clam.whelk",
-                    credentials=mock_cred,
-                    api_mtls_endpoint="mtls.squid.clam.whelk",
-                    client_cert_source=None,
-                )
-
-            grpc_create_channel.assert_called_once_with(
-                "mtls.squid.clam.whelk:443",
-                credentials=mock_cred,
-                credentials_file=None,
-                scopes=None,
-                ssl_credentials=mock_ssl_cred,
-                quota_project_id=None,
-                options=[
-                    ("grpc.max_send_message_length", -1),
-                    ("grpc.max_receive_message_length", -1),
-                ],
-            )
-            assert transport.grpc_channel == mock_grpc_channel
-
-
-def test_crypto_key_path():
-    project = "squid"
-    location = "clam"
-    key_ring = "whelk"
-    crypto_key = "octopus"
-    expected = "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}".format(
-        project=project,
-        location=location,
-        key_ring=key_ring,
-        crypto_key=crypto_key,
-    )
-    actual = KeyManagementServiceClient.crypto_key_path(
-        project, location, key_ring, crypto_key
-    )
-    assert expected == actual
-
-
-def test_parse_crypto_key_path():
-    expected = {
-        "project": "oyster",
-        "location": "nudibranch",
-        "key_ring": "cuttlefish",
-        "crypto_key": "mussel",
-    }
-    path = KeyManagementServiceClient.crypto_key_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_crypto_key_path(path)
-    assert expected == actual
-
-
-def test_crypto_key_version_path():
-    project = "winkle"
-    location = "nautilus"
-    key_ring = "scallop"
-    crypto_key = "abalone"
-    crypto_key_version = "squid"
-    expected = "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}/cryptoKeyVersions/{crypto_key_version}".format(
-        project=project,
-        location=location,
-        key_ring=key_ring,
-        crypto_key=crypto_key,
-        crypto_key_version=crypto_key_version,
-    )
-    actual = KeyManagementServiceClient.crypto_key_version_path(
-        project, location, key_ring, crypto_key, crypto_key_version
-    )
-    assert expected == actual
-
-
-def test_parse_crypto_key_version_path():
-    expected = {
-        "project": "clam",
-        "location": "whelk",
-        "key_ring": "octopus",
-        "crypto_key": "oyster",
-        "crypto_key_version": "nudibranch",
-    }
-    path = KeyManagementServiceClient.crypto_key_version_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_crypto_key_version_path(path)
-    assert expected == actual
-
-
-def test_import_job_path():
-    project = "cuttlefish"
-    location = "mussel"
-    key_ring = "winkle"
-    import_job = "nautilus"
-    expected = "projects/{project}/locations/{location}/keyRings/{key_ring}/importJobs/{import_job}".format(
-        project=project,
-        location=location,
-        key_ring=key_ring,
-        import_job=import_job,
-    )
-    actual = KeyManagementServiceClient.import_job_path(
-        project, location, key_ring, import_job
-    )
-    assert expected == actual
-
-
-def test_parse_import_job_path():
-    expected = {
-        "project": "scallop",
-        "location": "abalone",
-        "key_ring": "squid",
-        "import_job": "clam",
-    }
-    path = KeyManagementServiceClient.import_job_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_import_job_path(path)
-    assert expected == actual
-
-
-def test_key_ring_path():
-    project = "whelk"
-    location = "octopus"
-    key_ring = "oyster"
-    expected = "projects/{project}/locations/{location}/keyRings/{key_ring}".format(
-        project=project,
-        location=location,
-        key_ring=key_ring,
-    )
-    actual = KeyManagementServiceClient.key_ring_path(project, location, key_ring)
-    assert expected == actual
-
-
-def test_parse_key_ring_path():
-    expected = {
-        "project": "nudibranch",
-        "location": "cuttlefish",
-        "key_ring": "mussel",
-    }
-    path = KeyManagementServiceClient.key_ring_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_key_ring_path(path)
-    assert expected == actual
-
-
-def test_public_key_path():
-    project = "winkle"
-    location = "nautilus"
-    key_ring = "scallop"
-    crypto_key = "abalone"
-    crypto_key_version = "squid"
-    expected = "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}/cryptoKeyVersions/{crypto_key_version}/publicKey".format(
-        project=project,
-        location=location,
-        key_ring=key_ring,
-        crypto_key=crypto_key,
-        crypto_key_version=crypto_key_version,
-    )
-    actual = KeyManagementServiceClient.public_key_path(
-        project, location, key_ring, crypto_key, crypto_key_version
-    )
-    assert expected == actual
-
-
-def test_parse_public_key_path():
-    expected = {
-        "project": "clam",
-        "location": "whelk",
-        "key_ring": "octopus",
-        "crypto_key": "oyster",
-        "crypto_key_version": "nudibranch",
-    }
-    path = KeyManagementServiceClient.public_key_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_public_key_path(path)
-    assert expected == actual
-
-
-def test_common_billing_account_path():
-    billing_account = "cuttlefish"
-    expected = "billingAccounts/{billing_account}".format(
-        billing_account=billing_account,
-    )
-    actual = KeyManagementServiceClient.common_billing_account_path(billing_account)
-    assert expected == actual
-
-
-def test_parse_common_billing_account_path():
-    expected = {
-        "billing_account": "mussel",
-    }
-    path = KeyManagementServiceClient.common_billing_account_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_common_billing_account_path(path)
-    assert expected == actual
-
-
-def test_common_folder_path():
-    folder = "winkle"
-    expected = "folders/{folder}".format(
-        folder=folder,
-    )
-    actual = KeyManagementServiceClient.common_folder_path(folder)
-    assert expected == actual
-
-
-def test_parse_common_folder_path():
-    expected = {
-        "folder": "nautilus",
-    }
-    path = KeyManagementServiceClient.common_folder_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_common_folder_path(path)
-    assert expected == actual
-
-
-def test_common_organization_path():
-    organization = "scallop"
-    expected = "organizations/{organization}".format(
-        organization=organization,
-    )
-    actual = KeyManagementServiceClient.common_organization_path(organization)
-    assert expected == actual
-
-
-def test_parse_common_organization_path():
-    expected = {
-        "organization": "abalone",
-    }
-    path = KeyManagementServiceClient.common_organization_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_common_organization_path(path)
-    assert expected == actual
-
-
-def test_common_project_path():
-    project = "squid"
-    expected = "projects/{project}".format(
-        project=project,
-    )
-    actual = KeyManagementServiceClient.common_project_path(project)
-    assert expected == actual
-
-
-def test_parse_common_project_path():
-    expected = {
-        "project": "clam",
-    }
-    path = KeyManagementServiceClient.common_project_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_common_project_path(path)
-    assert expected == actual
-
-
-def test_common_location_path():
-    project = "whelk"
-    location = "octopus"
-    expected = "projects/{project}/locations/{location}".format(
-        project=project,
-        location=location,
-    )
-    actual = KeyManagementServiceClient.common_location_path(project, location)
-    assert expected == actual
-
-
-def test_parse_common_location_path():
-    expected = {
-        "project": "oyster",
-        "location": "nudibranch",
-    }
-    path = KeyManagementServiceClient.common_location_path(**expected)
-
-    # Check that the path construction is reversible.
-    actual = KeyManagementServiceClient.parse_common_location_path(path)
-    assert expected == actual
-
-
-def test_client_with_default_client_info():
-    client_info = gapic_v1.client_info.ClientInfo()
-
-    with mock.patch.object(
-        transports.KeyManagementServiceTransport, "_prep_wrapped_messages"
-    ) as prep:
-        client = KeyManagementServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(),
-            client_info=client_info,
-        )
-        prep.assert_called_once_with(client_info)
-
-    with mock.patch.object(
-        transports.KeyManagementServiceTransport, "_prep_wrapped_messages"
-    ) as prep:
-        transport_class = KeyManagementServiceClient.get_transport_class()
-        transport = transport_class(
-            credentials=ga_credentials.AnonymousCredentials(),
-            client_info=client_info,
-        )
-        prep.assert_called_once_with(client_info)
-
-
-@pytest.mark.asyncio
-async def test_transport_close_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="grpc_asyncio",
-    )
-    with mock.patch.object(
-        type(getattr(client.transport, "grpc_channel")), "close"
-    ) as close:
-        async with client:
-            close.assert_not_called()
-        close.assert_called_once()
-
-
-def test_get_location_rest_bad_request(
-    transport: str = "rest", request_type=locations_pb2.GetLocationRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"name": "projects/sample1/locations/sample2"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_location(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        locations_pb2.GetLocationRequest,
-        dict,
-    ],
-)
-def test_get_location_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"name": "projects/sample1/locations/sample2"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = locations_pb2.Location()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.get_location(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.Location)
-
-
-def test_list_locations_rest_bad_request(
-    transport: str = "rest", request_type=locations_pb2.ListLocationsRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict({"name": "projects/sample1"}, request)
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.list_locations(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        locations_pb2.ListLocationsRequest,
-        dict,
-    ],
-)
-def test_list_locations_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"name": "projects/sample1"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = locations_pb2.ListLocationsResponse()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.list_locations(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.ListLocationsResponse)
-
-
-def test_get_iam_policy_rest_bad_request(
-    transport: str = "rest", request_type=iam_policy_pb2.GetIamPolicyRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.get_iam_policy(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        iam_policy_pb2.GetIamPolicyRequest,
-        dict,
-    ],
-)
-def test_get_iam_policy_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = policy_pb2.Policy()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.get_iam_policy(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-
-def test_set_iam_policy_rest_bad_request(
-    transport: str = "rest", request_type=iam_policy_pb2.SetIamPolicyRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.set_iam_policy(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        iam_policy_pb2.SetIamPolicyRequest,
-        dict,
-    ],
-)
-def test_set_iam_policy_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = policy_pb2.Policy()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.set_iam_policy(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-
-def test_test_iam_permissions_rest_bad_request(
-    transport: str = "rest", request_type=iam_policy_pb2.TestIamPermissionsRequest
-):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    request = request_type()
-    request = json_format.ParseDict(
-        {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}, request
-    )
-
-    # Mock the http request call within the method and fake a BadRequest error.
-    with mock.patch.object(Session, "request") as req, pytest.raises(
-        core_exceptions.BadRequest
-    ):
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 400
-        response_value.request = Request()
-        req.return_value = response_value
-        client.test_iam_permissions(request)
-
-
-@pytest.mark.parametrize(
-    "request_type",
-    [
-        iam_policy_pb2.TestIamPermissionsRequest,
-        dict,
-    ],
-)
-def test_test_iam_permissions_rest(request_type):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport="rest",
-    )
-    request_init = {"resource": "projects/sample1/locations/sample2/keyRings/sample3"}
-    request = request_type(**request_init)
-    # Mock the http request call within the method and fake a response.
-    with mock.patch.object(type(client.transport._session), "request") as req:
-        # Designate an appropriate value for the returned response.
-        return_value = iam_policy_pb2.TestIamPermissionsResponse()
-
-        # Wrap the value into a proper Response obj
-        response_value = Response()
-        response_value.status_code = 200
-        json_return_value = json_format.MessageToJson(return_value)
-
-        response_value._content = json_return_value.encode("UTF-8")
-        req.return_value = response_value
-
-        response = client.test_iam_permissions(request)
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, iam_policy_pb2.TestIamPermissionsResponse)
-
-
-def test_list_locations(transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.ListLocationsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.ListLocationsResponse()
-        response = client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.ListLocationsResponse)
-
-
-@pytest.mark.asyncio
-async def test_list_locations_async(transport: str = "grpc"):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.ListLocationsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.ListLocationsResponse()
-        )
-        response = await client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.ListLocationsResponse)
-
-
-def test_list_locations_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.ListLocationsRequest()
-    request.name = "locations"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        call.return_value = locations_pb2.ListLocationsResponse()
-
-        client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_list_locations_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.ListLocationsRequest()
-    request.name = "locations"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.ListLocationsResponse()
-        )
-        await client.list_locations(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations",
-    ) in kw["metadata"]
-
-
-def test_list_locations_from_dict():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.ListLocationsResponse()
-
-        response = client.list_locations(
-            request={
-                "name": "locations",
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_list_locations_from_dict_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.ListLocationsResponse()
-        )
-        response = await client.list_locations(
-            request={
-                "name": "locations",
-            }
-        )
-        call.assert_called()
-
-
-def test_get_location(transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.GetLocationRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.Location()
-        response = client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.Location)
-
-
-@pytest.mark.asyncio
-async def test_get_location_async(transport: str = "grpc_asyncio"):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = locations_pb2.GetLocationRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.Location()
-        )
-        response = await client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, locations_pb2.Location)
-
-
-def test_get_location_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials()
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.GetLocationRequest()
-    request.name = "locations/abc"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        call.return_value = locations_pb2.Location()
-
-        client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations/abc",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_location_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials()
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = locations_pb2.GetLocationRequest()
-    request.name = "locations/abc"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_location), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.Location()
-        )
-        await client.get_location(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "name=locations/abc",
-    ) in kw["metadata"]
-
-
-def test_get_location_from_dict():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = locations_pb2.Location()
-
-        response = client.get_location(
-            request={
-                "name": "locations/abc",
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_get_location_from_dict_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.list_locations), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            locations_pb2.Location()
-        )
-        response = await client.get_location(
-            request={
-                "name": "locations",
-            }
-        )
-        call.assert_called()
-
-
-def test_set_iam_policy(transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy(
-            version=774,
-            etag=b"etag_blob",
-        )
-        response = client.set_iam_policy(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-@pytest.mark.asyncio
-async def test_set_iam_policy_async(transport: str = "grpc_asyncio"):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            policy_pb2.Policy(
-                version=774,
-                etag=b"etag_blob",
-            )
-        )
-        response = await client.set_iam_policy(request)
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-def test_set_iam_policy_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        call.return_value = policy_pb2.Policy()
-
-        client.set_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_set_iam_policy_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.SetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        await client.set_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-def test_set_iam_policy_from_dict():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy()
-
-        response = client.set_iam_policy(
-            request={
-                "resource": "resource_value",
-                "policy": policy_pb2.Policy(version=774),
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_set_iam_policy_from_dict_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.set_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        response = await client.set_iam_policy(
-            request={
-                "resource": "resource_value",
-                "policy": policy_pb2.Policy(version=774),
-            }
-        )
-        call.assert_called()
-
-
-def test_get_iam_policy(transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy(
-            version=774,
-            etag=b"etag_blob",
-        )
-
-        response = client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-@pytest.mark.asyncio
-async def test_get_iam_policy_async(transport: str = "grpc_asyncio"):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            policy_pb2.Policy(
-                version=774,
-                etag=b"etag_blob",
-            )
-        )
-
-        response = await client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, policy_pb2.Policy)
-
-    assert response.version == 774
-
-    assert response.etag == b"etag_blob"
-
-
-def test_get_iam_policy_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        call.return_value = policy_pb2.Policy()
-
-        client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_get_iam_policy_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.GetIamPolicyRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        await client.get_iam_policy(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-def test_get_iam_policy_from_dict():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = policy_pb2.Policy()
-
-        response = client.get_iam_policy(
-            request={
-                "resource": "resource_value",
-                "options": options_pb2.GetPolicyOptions(requested_policy_version=2598),
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_get_iam_policy_from_dict_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(type(client.transport.get_iam_policy), "__call__") as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(policy_pb2.Policy())
-
-        response = await client.get_iam_policy(
-            request={
-                "resource": "resource_value",
-                "options": options_pb2.GetPolicyOptions(requested_policy_version=2598),
-            }
-        )
-        call.assert_called()
-
-
-def test_test_iam_permissions(transport: str = "grpc"):
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = iam_policy_pb2.TestIamPermissionsResponse(
-            permissions=["permissions_value"],
-        )
-
-        response = client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, iam_policy_pb2.TestIamPermissionsResponse)
-
-    assert response.permissions == ["permissions_value"]
-
-
-@pytest.mark.asyncio
-async def test_test_iam_permissions_async(transport: str = "grpc_asyncio"):
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-        transport=transport,
-    )
-
-    # Everything is optional in proto3 as far as the runtime is concerned,
-    # and we are mocking out the actual API, so just send an empty request.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            iam_policy_pb2.TestIamPermissionsResponse(
-                permissions=["permissions_value"],
-            )
-        )
-
-        response = await client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-
-        assert args[0] == request
-
-    # Establish that the response is the type that we expect.
-    assert isinstance(response, iam_policy_pb2.TestIamPermissionsResponse)
-
-    assert response.permissions == ["permissions_value"]
-
-
-def test_test_iam_permissions_field_headers():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        call.return_value = iam_policy_pb2.TestIamPermissionsResponse()
-
-        client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls) == 1
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-@pytest.mark.asyncio
-async def test_test_iam_permissions_field_headers_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-
-    # Any value that is part of the HTTP/1.1 URI should be sent as
-    # a field header. Set these to a non-empty value.
-    request = iam_policy_pb2.TestIamPermissionsRequest()
-    request.resource = "resource/value"
-
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            iam_policy_pb2.TestIamPermissionsResponse()
-        )
-
-        await client.test_iam_permissions(request)
-
-        # Establish that the underlying gRPC stub method was called.
-        assert len(call.mock_calls)
-        _, args, _ = call.mock_calls[0]
-        assert args[0] == request
-
-    # Establish that the field header was sent.
-    _, _, kw = call.mock_calls[0]
-    assert (
-        "x-goog-request-params",
-        "resource=resource/value",
-    ) in kw["metadata"]
-
-
-def test_test_iam_permissions_from_dict():
-    client = KeyManagementServiceClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = iam_policy_pb2.TestIamPermissionsResponse()
-
-        response = client.test_iam_permissions(
-            request={
-                "resource": "resource_value",
-                "permissions": ["permissions_value"],
-            }
-        )
-        call.assert_called()
-
-
-@pytest.mark.asyncio
-async def test_test_iam_permissions_from_dict_async():
-    client = KeyManagementServiceAsyncClient(
-        credentials=ga_credentials.AnonymousCredentials(),
-    )
-    # Mock the actual call within the gRPC stub, and fake the request.
-    with mock.patch.object(
-        type(client.transport.test_iam_permissions), "__call__"
-    ) as call:
-        # Designate an appropriate return value for the call.
-        call.return_value = grpc_helpers_async.FakeUnaryUnaryCall(
-            iam_policy_pb2.TestIamPermissionsResponse()
-        )
-
-        response = await client.test_iam_permissions(
-            request={
-                "resource": "resource_value",
-                "permissions": ["permissions_value"],
-            }
-        )
-        call.assert_called()
-
-
-def test_transport_close():
-    transports = {
-        "rest": "_session",
-        "grpc": "_grpc_channel",
-    }
-
-    for transport, close_name in transports.items():
-        client = KeyManagementServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(), transport=transport
-        )
-        with mock.patch.object(
-            type(getattr(client.transport, close_name)), "close"
-        ) as close:
-            with client:
-                close.assert_not_called()
-            close.assert_called_once()
-
-
-def test_client_ctx():
-    transports = [
-        "rest",
-        "grpc",
-    ]
-    for transport in transports:
-        client = KeyManagementServiceClient(
-            credentials=ga_credentials.AnonymousCredentials(), transport=transport
-        )
-        # Test client calls underlying transport.
-        with mock.patch.object(type(client.transport), "close") as close:
-            close.assert_not_called()
-            with client:
-                pass
-            close.assert_called()
-
-
-@pytest.mark.parametrize(
-    "client_class,transport_class",
-    [
-        (KeyManagementServiceClient, transports.KeyManagementServiceGrpcTransport),
-        (
-            KeyManagementServiceAsyncClient,
-            transports.KeyManagementServiceGrpcAsyncIOTransport,
-        ),
-    ],
-)
-def test_api_key_credentials(client_class, transport_class):
-    with mock.patch.object(
-        google.auth._default, "get_api_key_credentials", create=True
-    ) as get_api_key_credentials:
-        mock_cred = mock.Mock()
-        get_api_key_credentials.return_value = mock_cred
-        options = client_options.ClientOptions()
-        options.api_key = "api_key"
-        with mock.patch.object(transport_class, "__init__") as patched:
-            patched.return_value = None
-            client = client_class(client_options=options)
-            patched.assert_called_once_with(
-                credentials=mock_cred,
-                credentials_file=None,
-                host=client.DEFAULT_ENDPOINT,
-                scopes=None,
-                client_cert_source_for_mtls=None,
-                quota_project_id=None,
-                client_info=transports.base.DEFAULT_CLIENT_INFO,
-                always_use_jwt_access=True,
-                api_audience=None,
-            )