google-apis-securitycenter_v1 0.12.0 → 0.16.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +16 -0
- data/OVERVIEW.md +2 -2
- data/lib/google/apis/securitycenter_v1/classes.rb +319 -69
- data/lib/google/apis/securitycenter_v1/gem_version.rb +2 -2
- data/lib/google/apis/securitycenter_v1/representations.rb +86 -0
- data/lib/google/apis/securitycenter_v1/service.rb +935 -41
- metadata +5 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 9e244c14c7e418d1b0bc02795994e1b96f3f70ea30bb763cadbb50857e43c1ce
|
4
|
+
data.tar.gz: a683ea1c2bc8e55b6d8ea0f7001d5565f584b6a6dc4deada1eabdeffcb847b3d
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 15e284d06998a8aec1005d7c73c359a78bf4471bcd2f00b3c6c8ef4374701baad81b5d7b0ac90e40b8077d77a06054758c4e026c7932366c9ecba015cb4f7c1c
|
7
|
+
data.tar.gz: ee4cc74c1dd5d61b1aadeb9572a08f3c477ab3b423d6f9b706e536dbf74eab466c4aa28d841330d3030dfe1cfdcb364b1454c00948fcbf042c1291106da24543
|
data/CHANGELOG.md
CHANGED
@@ -1,5 +1,21 @@
|
|
1
1
|
# Release history for google-apis-securitycenter_v1
|
2
2
|
|
3
|
+
### v0.16.0 (2021-11-16)
|
4
|
+
|
5
|
+
* Regenerated from discovery document revision 20211112
|
6
|
+
|
7
|
+
### v0.15.0 (2021-11-09)
|
8
|
+
|
9
|
+
* Regenerated from discovery document revision 20211103
|
10
|
+
|
11
|
+
### v0.14.0 (2021-10-20)
|
12
|
+
|
13
|
+
* Regenerated from discovery document revision 20211015
|
14
|
+
|
15
|
+
### v0.13.0 (2021-10-12)
|
16
|
+
|
17
|
+
* Regenerated from discovery document revision 20211007
|
18
|
+
|
3
19
|
### v0.12.0 (2021-10-05)
|
4
20
|
|
5
21
|
* Regenerated from discovery document revision 20210930
|
data/OVERVIEW.md
CHANGED
@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
|
|
60
60
|
|
61
61
|
More detailed descriptions of the Google simple REST clients are available in two documents.
|
62
62
|
|
63
|
-
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
64
|
-
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
63
|
+
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
|
64
|
+
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
|
65
65
|
|
66
66
|
(Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Securitycenter service in particular.)
|
67
67
|
|
@@ -202,7 +202,7 @@ module Google
|
|
202
202
|
end
|
203
203
|
end
|
204
204
|
|
205
|
-
# Associates `members
|
205
|
+
# Associates `members`, or principals, with a `role`.
|
206
206
|
class Binding
|
207
207
|
include Google::Apis::Core::Hashable
|
208
208
|
|
@@ -225,7 +225,7 @@ module Google
|
|
225
225
|
# @return [Google::Apis::SecuritycenterV1::Expr]
|
226
226
|
attr_accessor :condition
|
227
227
|
|
228
|
-
# Specifies the
|
228
|
+
# Specifies the principals requesting access for a Cloud Platform resource. `
|
229
229
|
# members` can have the following values: * `allUsers`: A special identifier
|
230
230
|
# that represents anyone who is on the internet; with or without a Google
|
231
231
|
# account. * `allAuthenticatedUsers`: A special identifier that represents
|
@@ -255,8 +255,8 @@ module Google
|
|
255
255
|
# @return [Array<String>]
|
256
256
|
attr_accessor :members
|
257
257
|
|
258
|
-
# Role that is assigned to `members
|
259
|
-
#
|
258
|
+
# Role that is assigned to the list of `members`, or principals. For example, `
|
259
|
+
# roles/viewer`, `roles/editor`, or `roles/owner`.
|
260
260
|
# Corresponds to the JSON property `role`
|
261
261
|
# @return [String]
|
262
262
|
attr_accessor :role
|
@@ -273,6 +273,42 @@ module Google
|
|
273
273
|
end
|
274
274
|
end
|
275
275
|
|
276
|
+
# Request message for bulk findings update. Note: 1. If multiple bulk update
|
277
|
+
# requests match the same resource, the order in which they get executed is not
|
278
|
+
# defined. 2. Once a bulk operation is started, there is no way to stop it.
|
279
|
+
class BulkMuteFindingsRequest
|
280
|
+
include Google::Apis::Core::Hashable
|
281
|
+
|
282
|
+
# Expression that identifies findings that should be updated. The expression is
|
283
|
+
# a list of zero or more restrictions combined via logical operators `AND` and `
|
284
|
+
# OR`. Parentheses are supported, and `OR` has higher precedence than `AND`.
|
285
|
+
# Restrictions have the form ` ` and may have a `-` character in front of them
|
286
|
+
# to indicate negation. The fields map to those defined in the corresponding
|
287
|
+
# resource. The supported operators are: * `=` for all value types. * `>`, `<`, `
|
288
|
+
# >=`, `<=` for integer values. * `:`, meaning substring matching, for strings.
|
289
|
+
# The supported value types are: * string literals in quotes. * integer literals
|
290
|
+
# without quotes. * boolean literals `true` and `false` without quotes.
|
291
|
+
# Corresponds to the JSON property `filter`
|
292
|
+
# @return [String]
|
293
|
+
attr_accessor :filter
|
294
|
+
|
295
|
+
# This can be a mute configuration name or any identifier for mute/unmute of
|
296
|
+
# findings based on the filter.
|
297
|
+
# Corresponds to the JSON property `muteAnnotation`
|
298
|
+
# @return [String]
|
299
|
+
attr_accessor :mute_annotation
|
300
|
+
|
301
|
+
def initialize(**args)
|
302
|
+
update!(**args)
|
303
|
+
end
|
304
|
+
|
305
|
+
# Update properties of this object
|
306
|
+
def update!(**args)
|
307
|
+
@filter = args[:filter] if args.key?(:filter)
|
308
|
+
@mute_annotation = args[:mute_annotation] if args.key?(:mute_annotation)
|
309
|
+
end
|
310
|
+
end
|
311
|
+
|
276
312
|
# CVE stands for Common Vulnerabilities and Exposures. More information: https://
|
277
313
|
# cve.mitre.org
|
278
314
|
class Cve
|
@@ -492,6 +528,12 @@ module Google
|
|
492
528
|
# @return [String]
|
493
529
|
attr_accessor :event_time
|
494
530
|
|
531
|
+
# Output only. Third party SIEM/SOAR fields within SCC, contains external system
|
532
|
+
# information and external system finding fields.
|
533
|
+
# Corresponds to the JSON property `externalSystems`
|
534
|
+
# @return [Hash<String,Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1ExternalSystem>]
|
535
|
+
attr_accessor :external_systems
|
536
|
+
|
495
537
|
# The URI that, if available, points to a web page outside of Security Command
|
496
538
|
# Center where additional information about the finding can be found. This field
|
497
539
|
# is guaranteed to be either empty or a well formed URL.
|
@@ -512,6 +554,24 @@ module Google
|
|
512
554
|
# @return [Google::Apis::SecuritycenterV1::Indicator]
|
513
555
|
attr_accessor :indicator
|
514
556
|
|
557
|
+
# Indicates the mute state of a finding (either unspecified, muted, unmuted or
|
558
|
+
# undefined).
|
559
|
+
# Corresponds to the JSON property `mute`
|
560
|
+
# @return [String]
|
561
|
+
attr_accessor :mute
|
562
|
+
|
563
|
+
# First known as mute_annotation. Records additional information about the mute
|
564
|
+
# operation e.g. mute config that muted the finding, user who muted the finding,
|
565
|
+
# etc.
|
566
|
+
# Corresponds to the JSON property `muteInitiator`
|
567
|
+
# @return [String]
|
568
|
+
attr_accessor :mute_initiator
|
569
|
+
|
570
|
+
# Output only. The most recent time this finding was muted or unmuted.
|
571
|
+
# Corresponds to the JSON property `muteUpdateTime`
|
572
|
+
# @return [String]
|
573
|
+
attr_accessor :mute_update_time
|
574
|
+
|
515
575
|
# The relative resource name of this finding. See: https://cloud.google.com/apis/
|
516
576
|
# design/resource_names#relative_resource_name Example: "organizations/`
|
517
577
|
# organization_id`/sources/`source_id`/findings/`finding_id`"
|
@@ -578,9 +638,13 @@ module Google
|
|
578
638
|
@category = args[:category] if args.key?(:category)
|
579
639
|
@create_time = args[:create_time] if args.key?(:create_time)
|
580
640
|
@event_time = args[:event_time] if args.key?(:event_time)
|
641
|
+
@external_systems = args[:external_systems] if args.key?(:external_systems)
|
581
642
|
@external_uri = args[:external_uri] if args.key?(:external_uri)
|
582
643
|
@finding_class = args[:finding_class] if args.key?(:finding_class)
|
583
644
|
@indicator = args[:indicator] if args.key?(:indicator)
|
645
|
+
@mute = args[:mute] if args.key?(:mute)
|
646
|
+
@mute_initiator = args[:mute_initiator] if args.key?(:mute_initiator)
|
647
|
+
@mute_update_time = args[:mute_update_time] if args.key?(:mute_update_time)
|
584
648
|
@name = args[:name] if args.key?(:name)
|
585
649
|
@parent = args[:parent] if args.key?(:parent)
|
586
650
|
@resource_name = args[:resource_name] if args.key?(:resource_name)
|
@@ -641,13 +705,16 @@ module Google
|
|
641
705
|
class GetPolicyOptions
|
642
706
|
include Google::Apis::Core::Hashable
|
643
707
|
|
644
|
-
# Optional. The policy
|
645
|
-
# 3. Requests specifying an invalid value will be
|
646
|
-
# policies with any conditional bindings must
|
647
|
-
#
|
648
|
-
# field unset.
|
649
|
-
#
|
650
|
-
#
|
708
|
+
# Optional. The maximum policy version that will be used to format the policy.
|
709
|
+
# Valid values are 0, 1, and 3. Requests specifying an invalid value will be
|
710
|
+
# rejected. Requests for policies with any conditional role bindings must
|
711
|
+
# specify version 3. Policies with no conditional role bindings may specify any
|
712
|
+
# valid value or leave the field unset. The policy in the response might use the
|
713
|
+
# policy version that you specified, or it might use a lower policy version. For
|
714
|
+
# example, if you specify version 3, but the policy has no conditional role
|
715
|
+
# bindings, the response uses version 1. To learn which resources support
|
716
|
+
# conditions in their IAM policies, see the [IAM documentation](https://cloud.
|
717
|
+
# google.com/iam/help/conditions/resource-policies).
|
651
718
|
# Corresponds to the JSON property `requestedPolicyVersion`
|
652
719
|
# @return [Fixnum]
|
653
720
|
attr_accessor :requested_policy_version
|
@@ -662,6 +729,126 @@ module Google
|
|
662
729
|
end
|
663
730
|
end
|
664
731
|
|
732
|
+
# Representation of third party SIEM/SOAR fields within SCC.
|
733
|
+
class GoogleCloudSecuritycenterV1ExternalSystem
|
734
|
+
include Google::Apis::Core::Hashable
|
735
|
+
|
736
|
+
# References primary/secondary etc assignees in the external system.
|
737
|
+
# Corresponds to the JSON property `assignees`
|
738
|
+
# @return [Array<String>]
|
739
|
+
attr_accessor :assignees
|
740
|
+
|
741
|
+
# The most recent time when the corresponding finding's ticket/tracker was
|
742
|
+
# updated in the external system.
|
743
|
+
# Corresponds to the JSON property `externalSystemUpdateTime`
|
744
|
+
# @return [String]
|
745
|
+
attr_accessor :external_system_update_time
|
746
|
+
|
747
|
+
# Identifier that's used to track the given finding in the external system.
|
748
|
+
# Corresponds to the JSON property `externalUid`
|
749
|
+
# @return [String]
|
750
|
+
attr_accessor :external_uid
|
751
|
+
|
752
|
+
# External System Name e.g. jira, demisto, etc. e.g.: organizations/1234/sources/
|
753
|
+
# 5678/findings/123456/externalSystems/jira folders/1234/sources/5678/findings/
|
754
|
+
# 123456/externalSystems/jira projects/1234/sources/5678/findings/123456/
|
755
|
+
# externalSystems/jira
|
756
|
+
# Corresponds to the JSON property `name`
|
757
|
+
# @return [String]
|
758
|
+
attr_accessor :name
|
759
|
+
|
760
|
+
# Most recent status of the corresponding finding's ticket/tracker in the
|
761
|
+
# external system.
|
762
|
+
# Corresponds to the JSON property `status`
|
763
|
+
# @return [String]
|
764
|
+
attr_accessor :status
|
765
|
+
|
766
|
+
def initialize(**args)
|
767
|
+
update!(**args)
|
768
|
+
end
|
769
|
+
|
770
|
+
# Update properties of this object
|
771
|
+
def update!(**args)
|
772
|
+
@assignees = args[:assignees] if args.key?(:assignees)
|
773
|
+
@external_system_update_time = args[:external_system_update_time] if args.key?(:external_system_update_time)
|
774
|
+
@external_uid = args[:external_uid] if args.key?(:external_uid)
|
775
|
+
@name = args[:name] if args.key?(:name)
|
776
|
+
@status = args[:status] if args.key?(:status)
|
777
|
+
end
|
778
|
+
end
|
779
|
+
|
780
|
+
# A mute config is a Cloud SCC resource that contains the configuration to mute
|
781
|
+
# create/update events of findings.
|
782
|
+
class GoogleCloudSecuritycenterV1MuteConfig
|
783
|
+
include Google::Apis::Core::Hashable
|
784
|
+
|
785
|
+
# Output only. The time at which the mute config was created. This field is set
|
786
|
+
# by the server and will be ignored if provided on config creation.
|
787
|
+
# Corresponds to the JSON property `createTime`
|
788
|
+
# @return [String]
|
789
|
+
attr_accessor :create_time
|
790
|
+
|
791
|
+
# A description of the mute config.
|
792
|
+
# Corresponds to the JSON property `description`
|
793
|
+
# @return [String]
|
794
|
+
attr_accessor :description
|
795
|
+
|
796
|
+
# The human readable name to be displayed for the mute config.
|
797
|
+
# Corresponds to the JSON property `displayName`
|
798
|
+
# @return [String]
|
799
|
+
attr_accessor :display_name
|
800
|
+
|
801
|
+
# Required. An expression that defines the filter to apply across create/update
|
802
|
+
# events of findings. While creating a filter string, be mindful of the scope in
|
803
|
+
# which the mute configuration is being created. E.g., If a filter contains
|
804
|
+
# project = X but is created under the project = Y scope, it might not match any
|
805
|
+
# findings. The following field and operator combinations are supported: *
|
806
|
+
# severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.
|
807
|
+
# project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.
|
808
|
+
# folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.
|
809
|
+
# parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `
|
810
|
+
# :` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
|
811
|
+
# Corresponds to the JSON property `filter`
|
812
|
+
# @return [String]
|
813
|
+
attr_accessor :filter
|
814
|
+
|
815
|
+
# Output only. Email address of the user who last edited the mute config. This
|
816
|
+
# field is set by the server and will be ignored if provided on config creation
|
817
|
+
# or update.
|
818
|
+
# Corresponds to the JSON property `mostRecentEditor`
|
819
|
+
# @return [String]
|
820
|
+
attr_accessor :most_recent_editor
|
821
|
+
|
822
|
+
# This field will be ignored if provided on config creation. Format "
|
823
|
+
# organizations/`organization`/muteConfigs/`mute_config`" "folders/`folder`/
|
824
|
+
# muteConfigs/`mute_config`" "projects/`project`/muteConfigs/`mute_config`"
|
825
|
+
# Corresponds to the JSON property `name`
|
826
|
+
# @return [String]
|
827
|
+
attr_accessor :name
|
828
|
+
|
829
|
+
# Output only. The most recent time at which the mute config was updated. This
|
830
|
+
# field is set by the server and will be ignored if provided on config creation
|
831
|
+
# or update.
|
832
|
+
# Corresponds to the JSON property `updateTime`
|
833
|
+
# @return [String]
|
834
|
+
attr_accessor :update_time
|
835
|
+
|
836
|
+
def initialize(**args)
|
837
|
+
update!(**args)
|
838
|
+
end
|
839
|
+
|
840
|
+
# Update properties of this object
|
841
|
+
def update!(**args)
|
842
|
+
@create_time = args[:create_time] if args.key?(:create_time)
|
843
|
+
@description = args[:description] if args.key?(:description)
|
844
|
+
@display_name = args[:display_name] if args.key?(:display_name)
|
845
|
+
@filter = args[:filter] if args.key?(:filter)
|
846
|
+
@most_recent_editor = args[:most_recent_editor] if args.key?(:most_recent_editor)
|
847
|
+
@name = args[:name] if args.key?(:name)
|
848
|
+
@update_time = args[:update_time] if args.key?(:update_time)
|
849
|
+
end
|
850
|
+
end
|
851
|
+
|
665
852
|
# Cloud SCC's Notification
|
666
853
|
class GoogleCloudSecuritycenterV1NotificationMessage
|
667
854
|
include Google::Apis::Core::Hashable
|
@@ -701,6 +888,11 @@ module Google
|
|
701
888
|
class GoogleCloudSecuritycenterV1Resource
|
702
889
|
include Google::Apis::Core::Hashable
|
703
890
|
|
891
|
+
# The human readable name of the resource.
|
892
|
+
# Corresponds to the JSON property `displayName`
|
893
|
+
# @return [String]
|
894
|
+
attr_accessor :display_name
|
895
|
+
|
704
896
|
# Output only. Contains a Folder message for each folder in the assets ancestry.
|
705
897
|
# The first folder is the deepest nested folder, and the last folder is the
|
706
898
|
# folder directly under the Organization.
|
@@ -745,6 +937,7 @@ module Google
|
|
745
937
|
|
746
938
|
# Update properties of this object
|
747
939
|
def update!(**args)
|
940
|
+
@display_name = args[:display_name] if args.key?(:display_name)
|
748
941
|
@folders = args[:folders] if args.key?(:folders)
|
749
942
|
@name = args[:name] if args.key?(:name)
|
750
943
|
@parent = args[:parent] if args.key?(:parent)
|
@@ -1613,6 +1806,32 @@ module Google
|
|
1613
1806
|
end
|
1614
1807
|
end
|
1615
1808
|
|
1809
|
+
# Response message for listing mute configs.
|
1810
|
+
class ListMuteConfigsResponse
|
1811
|
+
include Google::Apis::Core::Hashable
|
1812
|
+
|
1813
|
+
# The mute configs from the specified parent.
|
1814
|
+
# Corresponds to the JSON property `muteConfigs`
|
1815
|
+
# @return [Array<Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig>]
|
1816
|
+
attr_accessor :mute_configs
|
1817
|
+
|
1818
|
+
# A token, which can be sent as `page_token` to retrieve the next page. If this
|
1819
|
+
# field is omitted, there are no subsequent pages.
|
1820
|
+
# Corresponds to the JSON property `nextPageToken`
|
1821
|
+
# @return [String]
|
1822
|
+
attr_accessor :next_page_token
|
1823
|
+
|
1824
|
+
def initialize(**args)
|
1825
|
+
update!(**args)
|
1826
|
+
end
|
1827
|
+
|
1828
|
+
# Update properties of this object
|
1829
|
+
def update!(**args)
|
1830
|
+
@mute_configs = args[:mute_configs] if args.key?(:mute_configs)
|
1831
|
+
@next_page_token = args[:next_page_token] if args.key?(:next_page_token)
|
1832
|
+
end
|
1833
|
+
end
|
1834
|
+
|
1616
1835
|
# Response message for listing notification configs.
|
1617
1836
|
class ListNotificationConfigsResponse
|
1618
1837
|
include Google::Apis::Core::Hashable
|
@@ -1841,31 +2060,31 @@ module Google
|
|
1841
2060
|
|
1842
2061
|
# An Identity and Access Management (IAM) policy, which specifies access
|
1843
2062
|
# controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
|
1844
|
-
# A `binding` binds one or more `members
|
1845
|
-
# user accounts, service accounts, Google groups, and domains (
|
1846
|
-
# A `role` is a named list of permissions; each `role` can be
|
1847
|
-
# role or a user-created custom role. For some types of Google
|
1848
|
-
# a `binding` can also specify a `condition`, which is a
|
1849
|
-
# allows access to a resource only if the expression
|
1850
|
-
# condition can add constraints based on attributes of
|
1851
|
-
# or both. To learn which resources support
|
1852
|
-
# see the [IAM documentation](https://cloud.
|
1853
|
-
# resource-policies). **JSON example:** ` "
|
1854
|
-
# resourcemanager.organizationAdmin", "members": [
|
1855
|
-
# group:admins@example.com", "domain:google.com", "
|
1856
|
-
# appspot.gserviceaccount.com" ] `, ` "role": "
|
1857
|
-
# organizationViewer", "members": [ "user:eve@example.com"
|
1858
|
-
# title": "expirable access", "description": "Does not grant
|
1859
|
-
# 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
1860
|
-
# ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
1861
|
-
# members: - user:mike@example.com - group:admins@example.com -
|
1862
|
-
# com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
1863
|
-
# resourcemanager.organizationAdmin - members: - user:eve@example.
|
1864
|
-
# roles/resourcemanager.organizationViewer condition: title: expirable
|
1865
|
-
# description: Does not grant access after Sep 2020 expression: request.
|
1866
|
-
# timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
|
1867
|
-
# description of IAM and its features, see the [IAM documentation](https://
|
1868
|
-
# google.com/iam/docs/).
|
2063
|
+
# A `binding` binds one or more `members`, or principals, to a single `role`.
|
2064
|
+
# Principals can be user accounts, service accounts, Google groups, and domains (
|
2065
|
+
# such as G Suite). A `role` is a named list of permissions; each `role` can be
|
2066
|
+
# an IAM predefined role or a user-created custom role. For some types of Google
|
2067
|
+
# Cloud resources, a `binding` can also specify a `condition`, which is a
|
2068
|
+
# logical expression that allows access to a resource only if the expression
|
2069
|
+
# evaluates to `true`. A condition can add constraints based on attributes of
|
2070
|
+
# the request, the resource, or both. To learn which resources support
|
2071
|
+
# conditions in their IAM policies, see the [IAM documentation](https://cloud.
|
2072
|
+
# google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
|
2073
|
+
# bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
|
2074
|
+
# "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
|
2075
|
+
# serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
|
2076
|
+
# roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
|
2077
|
+
# ], "condition": ` "title": "expirable access", "description": "Does not grant
|
2078
|
+
# access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
2079
|
+
# 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
2080
|
+
# bindings: - members: - user:mike@example.com - group:admins@example.com -
|
2081
|
+
# domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
2082
|
+
# role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
|
2083
|
+
# com role: roles/resourcemanager.organizationViewer condition: title: expirable
|
2084
|
+
# access description: Does not grant access after Sep 2020 expression: request.
|
2085
|
+
# time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
|
2086
|
+
# a description of IAM and its features, see the [IAM documentation](https://
|
2087
|
+
# cloud.google.com/iam/docs/).
|
1869
2088
|
class Policy
|
1870
2089
|
include Google::Apis::Core::Hashable
|
1871
2090
|
|
@@ -1874,14 +2093,14 @@ module Google
|
|
1874
2093
|
# @return [Array<Google::Apis::SecuritycenterV1::AuditConfig>]
|
1875
2094
|
attr_accessor :audit_configs
|
1876
2095
|
|
1877
|
-
# Associates a list of `members
|
1878
|
-
# condition` that determines how and when the `bindings` are applied.
|
1879
|
-
# the `bindings` must contain at least one
|
1880
|
-
# can refer to up to 1,500
|
1881
|
-
# groups. Each occurrence of a
|
1882
|
-
# if the `bindings` grant 50 different roles to `user:alice@
|
1883
|
-
# not to any other
|
1884
|
-
# bindings` in the `Policy`.
|
2096
|
+
# Associates a list of `members`, or principals, with a `role`. Optionally, may
|
2097
|
+
# specify a `condition` that determines how and when the `bindings` are applied.
|
2098
|
+
# Each of the `bindings` must contain at least one principal. The `bindings` in
|
2099
|
+
# a `Policy` can refer to up to 1,500 principals; up to 250 of these principals
|
2100
|
+
# can be Google groups. Each occurrence of a principal counts towards these
|
2101
|
+
# limits. For example, if the `bindings` grant 50 different roles to `user:alice@
|
2102
|
+
# example.com`, and not to any other principal, then you can add another 1,450
|
2103
|
+
# principals to the `bindings` in the `Policy`.
|
1885
2104
|
# Corresponds to the JSON property `bindings`
|
1886
2105
|
# @return [Array<Google::Apis::SecuritycenterV1::Binding>]
|
1887
2106
|
attr_accessor :bindings
|
@@ -1965,6 +2184,11 @@ module Google
|
|
1965
2184
|
class Resource
|
1966
2185
|
include Google::Apis::Core::Hashable
|
1967
2186
|
|
2187
|
+
# The human readable name of the resource.
|
2188
|
+
# Corresponds to the JSON property `displayName`
|
2189
|
+
# @return [String]
|
2190
|
+
attr_accessor :display_name
|
2191
|
+
|
1968
2192
|
# Contains a Folder message for each folder in the assets ancestry. The first
|
1969
2193
|
# folder is the deepest nested folder, and the last folder is the folder
|
1970
2194
|
# directly under the Organization.
|
@@ -1998,18 +2222,25 @@ module Google
|
|
1998
2222
|
# @return [String]
|
1999
2223
|
attr_accessor :project_name
|
2000
2224
|
|
2225
|
+
# The full resource type of the resource.
|
2226
|
+
# Corresponds to the JSON property `type`
|
2227
|
+
# @return [String]
|
2228
|
+
attr_accessor :type
|
2229
|
+
|
2001
2230
|
def initialize(**args)
|
2002
2231
|
update!(**args)
|
2003
2232
|
end
|
2004
2233
|
|
2005
2234
|
# Update properties of this object
|
2006
2235
|
def update!(**args)
|
2236
|
+
@display_name = args[:display_name] if args.key?(:display_name)
|
2007
2237
|
@folders = args[:folders] if args.key?(:folders)
|
2008
2238
|
@name = args[:name] if args.key?(:name)
|
2009
2239
|
@parent_display_name = args[:parent_display_name] if args.key?(:parent_display_name)
|
2010
2240
|
@parent_name = args[:parent_name] if args.key?(:parent_name)
|
2011
2241
|
@project_display_name = args[:project_display_name] if args.key?(:project_display_name)
|
2012
2242
|
@project_name = args[:project_name] if args.key?(:project_name)
|
2243
|
+
@type = args[:type] if args.key?(:type)
|
2013
2244
|
end
|
2014
2245
|
end
|
2015
2246
|
|
@@ -2180,31 +2411,31 @@ module Google
|
|
2180
2411
|
|
2181
2412
|
# An Identity and Access Management (IAM) policy, which specifies access
|
2182
2413
|
# controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
|
2183
|
-
# A `binding` binds one or more `members
|
2184
|
-
# user accounts, service accounts, Google groups, and domains (
|
2185
|
-
# A `role` is a named list of permissions; each `role` can be
|
2186
|
-
# role or a user-created custom role. For some types of Google
|
2187
|
-
# a `binding` can also specify a `condition`, which is a
|
2188
|
-
# allows access to a resource only if the expression
|
2189
|
-
# condition can add constraints based on attributes of
|
2190
|
-
# or both. To learn which resources support
|
2191
|
-
# see the [IAM documentation](https://cloud.
|
2192
|
-
# resource-policies). **JSON example:** ` "
|
2193
|
-
# resourcemanager.organizationAdmin", "members": [
|
2194
|
-
# group:admins@example.com", "domain:google.com", "
|
2195
|
-
# appspot.gserviceaccount.com" ] `, ` "role": "
|
2196
|
-
# organizationViewer", "members": [ "user:eve@example.com"
|
2197
|
-
# title": "expirable access", "description": "Does not grant
|
2198
|
-
# 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
2199
|
-
# ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
2200
|
-
# members: - user:mike@example.com - group:admins@example.com -
|
2201
|
-
# com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
2202
|
-
# resourcemanager.organizationAdmin - members: - user:eve@example.
|
2203
|
-
# roles/resourcemanager.organizationViewer condition: title: expirable
|
2204
|
-
# description: Does not grant access after Sep 2020 expression: request.
|
2205
|
-
# timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
|
2206
|
-
# description of IAM and its features, see the [IAM documentation](https://
|
2207
|
-
# google.com/iam/docs/).
|
2414
|
+
# A `binding` binds one or more `members`, or principals, to a single `role`.
|
2415
|
+
# Principals can be user accounts, service accounts, Google groups, and domains (
|
2416
|
+
# such as G Suite). A `role` is a named list of permissions; each `role` can be
|
2417
|
+
# an IAM predefined role or a user-created custom role. For some types of Google
|
2418
|
+
# Cloud resources, a `binding` can also specify a `condition`, which is a
|
2419
|
+
# logical expression that allows access to a resource only if the expression
|
2420
|
+
# evaluates to `true`. A condition can add constraints based on attributes of
|
2421
|
+
# the request, the resource, or both. To learn which resources support
|
2422
|
+
# conditions in their IAM policies, see the [IAM documentation](https://cloud.
|
2423
|
+
# google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
|
2424
|
+
# bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
|
2425
|
+
# "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
|
2426
|
+
# serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
|
2427
|
+
# roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
|
2428
|
+
# ], "condition": ` "title": "expirable access", "description": "Does not grant
|
2429
|
+
# access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
2430
|
+
# 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
2431
|
+
# bindings: - members: - user:mike@example.com - group:admins@example.com -
|
2432
|
+
# domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
2433
|
+
# role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
|
2434
|
+
# com role: roles/resourcemanager.organizationViewer condition: title: expirable
|
2435
|
+
# access description: Does not grant access after Sep 2020 expression: request.
|
2436
|
+
# time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
|
2437
|
+
# a description of IAM and its features, see the [IAM documentation](https://
|
2438
|
+
# cloud.google.com/iam/docs/).
|
2208
2439
|
# Corresponds to the JSON property `policy`
|
2209
2440
|
# @return [Google::Apis::SecuritycenterV1::Policy]
|
2210
2441
|
attr_accessor :policy
|
@@ -2227,6 +2458,25 @@ module Google
|
|
2227
2458
|
end
|
2228
2459
|
end
|
2229
2460
|
|
2461
|
+
# Request message for updating a finding's mute status.
|
2462
|
+
class SetMuteRequest
|
2463
|
+
include Google::Apis::Core::Hashable
|
2464
|
+
|
2465
|
+
# Required. The desired state of the Mute.
|
2466
|
+
# Corresponds to the JSON property `mute`
|
2467
|
+
# @return [String]
|
2468
|
+
attr_accessor :mute
|
2469
|
+
|
2470
|
+
def initialize(**args)
|
2471
|
+
update!(**args)
|
2472
|
+
end
|
2473
|
+
|
2474
|
+
# Update properties of this object
|
2475
|
+
def update!(**args)
|
2476
|
+
@mute = args[:mute] if args.key?(:mute)
|
2477
|
+
end
|
2478
|
+
end
|
2479
|
+
|
2230
2480
|
# Security Command Center finding source. A finding source is an entity or a
|
2231
2481
|
# mechanism that can produce a finding. A source is like a container of findings
|
2232
2482
|
# that come from the same scanner, logger, monitor, and other tools.
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module SecuritycenterV1
|
18
18
|
# Version of the google-apis-securitycenter_v1 gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.16.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
22
|
GENERATOR_VERSION = "0.4.0"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20211112"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|