[IAM] Add client initialization to each access.py sample (GoogleCloudPlatform#2297)

askmeegs · tswast · commit f25c5d22dd0a · 2019-07-24T14:22:22.000-07:00
* Initialize client in each IAM access sample

* lint

* lint
diff --git a/iam/api-client/access.py b/iam/api-client/access.py
@@ -27,18 +27,16 @@
 import googleapiclient.discovery
 
 
-credentials = service_account.Credentials.from_service_account_file(
-    filename=os.environ['GOOGLE_APPLICATION_CREDENTIALS'],
-    scopes=['https://www.googleapis.com/auth/cloud-platform'])
-service = googleapiclient.discovery.build(
-    'cloudresourcemanager', 'v1', credentials=credentials)
-
-
 # [START iam_get_policy]
 def get_policy(project_id):
     """Gets IAM policy for a project."""
 
     # pylint: disable=no-member
+    credentials = service_account.Credentials.from_service_account_file(
+        filename=os.environ['GOOGLE_APPLICATION_CREDENTIALS'],
+        scopes=['https://www.googleapis.com/auth/cloud-platform'])
+    service = googleapiclient.discovery.build(
+        'cloudresourcemanager', 'v1', credentials=credentials)
     policy = service.projects().getIamPolicy(
         resource=project_id, body={}).execute()
     print(policy)
@@ -49,6 +47,7 @@ def get_policy(project_id):
 # [START iam_modify_policy_add_member]
 def modify_policy_add_member(policy, role, member):
     """Adds a new member to a role binding."""
+
     binding = next(b for b in policy['bindings'] if b['role'] == role)
     binding['members'].append(member)
     print(binding)
@@ -59,6 +58,7 @@ def modify_policy_add_member(policy, role, member):
 # [START iam_modify_policy_add_role]
 def modify_policy_add_role(policy, role, member):
     """Adds a new role binding to a policy."""
+
     binding = {
         'role': role,
         'members': [member]
@@ -74,6 +74,12 @@ def set_policy(project_id, policy):
     """Sets IAM policy for a project."""
 
     # pylint: disable=no-member
+    credentials = service_account.Credentials.from_service_account_file(
+        filename=os.environ['GOOGLE_APPLICATION_CREDENTIALS'],
+        scopes=['https://www.googleapis.com/auth/cloud-platform'])
+    service = googleapiclient.discovery.build(
+        'cloudresourcemanager', 'v1', credentials=credentials)
+
     policy = service.projects().setIamPolicy(
         resource=project_id, body={
             'policy': policy
